$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bfab1614-ca9b-48b0-baa4-45a61bd07983/3b94ce38-1210-31dc-85a6-3b4bd5558b9b.roa File: 3b94ce38-1210-31dc-85a6-3b4bd5558b9b.roa (raw, json) Hash identifier: tz9eqwZWiOEAPi7LuhPcAx/eOLCuvTzIZH3gHnDNCtU= Subject key identifier: F4:61:3F:92:6B:C3:D4:E8:E4:58:BF:A6:05:4E:1E:3B:ED:F7:9E:E2 Certificate issuer: /CN=bfab1614-ca9b-48b0-baa4-45a61bd07983 Certificate serial: 010D0C9F4328584BAA97BB462CA1A0BE96C6C600 Authority key identifier: 62:B0:C1:4B:1E:0A:D8:47:73:43:94:8F:C4:57:EF:60:68:40:6F:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bfab1614-ca9b-48b0-baa4-45a61bd07983.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bfab1614-ca9b-48b0-baa4-45a61bd07983/3b94ce38-1210-31dc-85a6-3b4bd5558b9b.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 397635 IP address blocks: 146.225.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bfab1614-ca9b-48b0-baa4-45a61bd07983/bfab1614-ca9b-48b0-baa4-45a61bd07983.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bfab1614-ca9b-48b0-baa4-45a61bd07983/bfab1614-ca9b-48b0-baa4-45a61bd07983.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bfab1614-ca9b-48b0-baa4-45a61bd07983.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:bb:46:2c:a1:a0:be:96:c6:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfab1614-ca9b-48b0-baa4-45a61bd07983 Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=93acf869-1ef3-412c-8952-476f21e52f91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:cb:e7:47:fd:7b:15:ec:5e:d5:50:f9:c9:8a: 74:19:32:f8:58:c2:5a:48:bd:1e:ee:4b:f1:01:d0: 4f:ab:62:d3:3a:48:df:5b:fa:83:69:1e:71:f8:ec: bd:18:09:e3:f0:68:1d:1f:bb:48:83:20:70:0b:86: 22:7a:d9:96:32:88:99:d5:ec:37:87:d2:2b:94:be: 15:9c:f8:ec:c7:e8:bc:7a:ef:bb:22:e1:10:6f:ac: 7c:04:47:fc:da:32:5a:e1:f6:6d:60:32:81:6c:f8: 92:f4:06:e6:92:35:58:6f:2e:d0:15:0e:db:4c:24: b3:e5:7e:e8:4a:5f:d6:34:27:86:a8:7f:77:a1:27: 7b:86:b8:a8:7f:c8:17:42:2e:dc:26:c6:73:9d:20: f8:dd:e9:56:9f:1e:7e:0f:73:5e:59:fe:86:9c:7d: 4c:ea:10:35:6d:f3:00:5c:19:88:28:69:86:1a:ac: 2e:44:f6:6f:5f:fc:77:57:3c:a7:c9:a9:5c:f2:08: 2e:89:ff:91:7e:22:5f:81:f3:9c:ce:7e:2c:52:cf: aa:fd:50:c5:1b:2c:1f:4d:1c:0a:b2:7d:8a:54:dd: aa:37:0a:32:e5:03:c1:aa:42:73:96:40:3a:60:39: 68:39:06:32:d2:a8:ca:7f:20:1d:5b:0e:71:ec:a2: 87:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:61:3F:92:6B:C3:D4:E8:E4:58:BF:A6:05:4E:1E:3B:ED:F7:9E:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bfab1614-ca9b-48b0-baa4-45a61bd07983/3b94ce38-1210-31dc-85a6-3b4bd5558b9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bfab1614-ca9b-48b0-baa4-45a61bd07983/bfab1614-ca9b-48b0-baa4-45a61bd07983.crl X509v3 Authority Key Identifier: keyid:62:B0:C1:4B:1E:0A:D8:47:73:43:94:8F:C4:57:EF:60:68:40:6F:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bfab1614-ca9b-48b0-baa4-45a61bd07983.cer sbgp-ipAddrBlock: critical IPv4: 146.225.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:99:35:99:1c:1f:43:49:be:ab:04:10:af:11:6a:f2:6c:01: 69:f8:81:08:9e:70:91:19:d6:dd:c2:67:f9:ac:de:8c:5a:81: 0b:af:47:d1:ea:2f:99:a8:6e:ea:bc:57:72:ee:8e:d7:ff:9b: 52:76:76:ee:4e:cf:3c:17:71:ff:fb:38:77:9e:70:35:91:7c: d4:46:2c:4f:a9:51:68:4b:d8:ab:1c:7e:7a:7a:76:09:c0:45: 5d:13:b9:52:e4:ce:79:34:4f:43:72:6c:8c:0a:aa:a5:29:89: a4:ca:cf:8d:a3:25:b3:4f:46:d3:de:a9:4c:47:93:94:e2:e3: c9:12:8e:88:18:14:1b:80:de:67:8c:f1:de:cd:63:0a:34:16: cf:20:69:8c:d6:86:8a:f7:3c:72:98:91:02:61:e3:58:fe:98: ce:f6:df:5c:78:ff:db:e6:57:c8:cd:d0:e2:c0:2a:9a:57:9a: f3:ab:f0:a1:f7:bb:b6:ba:db:f0:8e:00:02:b7:ac:33:ed:a4: f0:99:77:fd:02:c8:ce:df:25:79:c6:ad:54:40:d1:bd:16:48: e4:c9:0b:82:ea:8f:ad:93:49:9a:1d:73:27:7a:20:0a:a8:6d: d4:40:38:57:a0:0a:3d:e9:80:2f:86:87:9d:26:bd:4e:93:bf: e3:e4:f9:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql7tGLKGgvpbGxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmZhYjE2MTQtY2E5Yi00OGIwLWJhYTQtNDVhNjFiZDA3 OTgzMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk OTNhY2Y4NjktMWVmMy00MTJjLTg5NTItNDc2ZjIxZTUyZjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicvnR/17Fexe1VD5yYp0GTL4WMJaSL0e7kvx AdBPq2LTOkjfW/qDaR5x+Oy9GAnj8GgdH7tIgyBwC4YietmWMoiZ1ew3h9IrlL4V nPjsx+i8eu+7IuEQb6x8BEf82jJa4fZtYDKBbPiS9AbmkjVYby7QFQ7bTCSz5X7o Sl/WNCeGqH93oSd7hriof8gXQi7cJsZznSD43elWnx5+D3NeWf6GnH1M6hA1bfMA XBmIKGmGGqwuRPZvX/x3Vzynyalc8gguif+RfiJfgfOczn4sUs+q/VDFGywfTRwK sn2KVN2qNwoy5QPBqkJzlkA6YDloOQYy0qjKfyAdWw5x7KKHzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPRhP5Jrw9To5Fi/pgVOHjvt957iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iZmFi MTYxNC1jYTliLTQ4YjAtYmFhNC00NWE2MWJkMDc5ODMvM2I5NGNlMzgtMTIxMC0z MWRjLTg1YTYtM2I0YmQ1NTU4YjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmZhYjE2MTQtY2E5Yi00OGIwLWJh YTQtNDVhNjFiZDA3OTgzL2JmYWIxNjE0LWNhOWItNDhiMC1iYWE0LTQ1YTYxYmQw Nzk4My5jcmwwHwYDVR0jBBgwFoAUYrDBSx4K2EdzQ5SPxFfvYGhAb1swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iZmFiMTYxNC1jYTliLTQ4YjAtYmFhNC00NWE2 MWJkMDc5ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDkuEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAaZNZkcH0NJvqsEEK8RavJsAWn4gQiecJEZ1t3CZ/ms3oxagQuvR9Hq L5mobuq8V3Lujtf/m1J2du5OzzwXcf/7OHeecDWRfNRGLE+pUWhL2Kscfnp6dgnA RV0TuVLkznk0T0NybIwKqqUpiaTKz42jJbNPRtPeqUxHk5Ti48kSjogYFBuA3meM 8d7NYwo0Fs8gaYzWhor3PHKYkQJh41j+mM7231x4/9vmV8jN0OLAKppXmvOr8KH3 u7a62/COAAK3rDPtpPCZd/0CyM7fJXnGrVRA0b0WSOTJC4Lqj62TSZodcyd6IAqo bdRAOFegCj3pgC+Gh50mvU6Tv+Pk+fQ= -----END CERTIFICATE-----Generated at Wed Nov 5 17:52:11 2025 by rpki-client