$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf0a4b17-afbd-3bb1-97ce-4edb22c30e6d.roa File: bf0a4b17-afbd-3bb1-97ce-4edb22c30e6d.roa (raw, json) Hash identifier: R/Wh0LCcUdTbgKlR/GALcsVbsyazLyV2fzoQxReYZJ0= Subject key identifier: 62:2E:0E:02:F0:B3:CD:2D:85:76:87:70:AC:9D:69:85:F3:F3:3D:35 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584C45A80F6E11D10AF2D760F780 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf0a4b17-afbd-3bb1-97ce-4edb22c30e6d.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 396982 IP address blocks: 146.148.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:0f:6e:11:d1:0a:f2:d7:60:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=97d2cac8-5cc0-4ac7-8b7f-bd36b7e44ffd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:38:8e:91:29:c6:5a:12:c8:37:f9:74:fd:a9: 36:f7:5d:f4:68:b2:2b:17:d3:23:9c:f7:94:cf:6b: 36:4a:9d:98:db:46:e1:76:07:d2:13:13:94:7f:c6: 8d:c8:a5:c1:51:fb:cd:a2:67:a9:da:17:c8:5d:4e: 09:da:ea:fd:8e:d1:d8:4a:9c:2b:d7:22:7d:64:25: b5:62:8d:b2:ad:c5:0f:d9:ba:3b:29:5b:e1:70:2a: 33:5d:7c:da:d3:32:ab:f1:1a:ce:2b:03:6f:c2:44: 6a:82:43:39:48:d5:60:40:9a:a3:d3:0d:83:2c:25: c7:aa:ca:15:6c:a7:65:7d:c9:a1:35:a6:a7:70:13: ae:a1:59:ec:2e:c9:9e:8d:dc:6e:2d:91:e7:66:ab: e8:45:13:fd:8e:8b:0c:6a:f2:32:ea:28:ba:a8:34: a1:ea:94:91:e4:d5:13:b1:5a:a2:6f:16:ad:f9:55: 16:c1:28:e0:51:10:c8:80:b5:05:df:d3:9f:b0:10: b8:b9:fd:ad:72:3b:ce:8b:d6:0d:85:9c:aa:37:42: aa:2a:89:90:2e:2e:de:8b:48:d6:ac:8b:80:ba:73: 15:0a:bd:0b:50:a1:98:3b:59:70:fb:96:b9:9e:fd: ee:08:68:68:dd:6b:db:70:d6:c9:f3:6a:dd:69:8a: 50:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:2E:0E:02:F0:B3:CD:2D:85:76:87:70:AC:9D:69:85:F3:F3:3D:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf0a4b17-afbd-3bb1-97ce-4edb22c30e6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 146.148.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:44:b0:ad:de:d9:84:55:31:5d:e2:14:99:5a:99:7d:ab:00: fb:ff:65:b8:d8:85:5f:fb:69:b9:25:d6:01:29:5c:c8:5d:0f: b1:48:d9:25:66:4e:ca:cb:cd:7d:72:0a:8e:15:ca:16:dd:9f: 32:65:b8:49:8d:a5:ac:6f:8c:ac:5b:b6:4f:21:3b:af:a8:66: 9b:1a:6b:49:96:46:93:7c:84:4a:e4:c8:87:9a:cd:b3:fc:2e: 62:72:30:d4:54:39:53:64:06:b8:5d:d1:cc:12:34:0c:2d:7f: bb:d7:fa:25:20:07:5c:3b:4e:48:d1:77:4c:21:ee:42:1f:6a: d7:f1:c4:75:01:a7:95:96:1a:37:e3:53:84:43:46:08:f4:25: 62:19:ea:3d:b4:84:87:12:b9:34:88:e4:06:42:c1:4e:d5:ad: a4:57:b6:99:11:64:0d:03:e0:2c:07:06:0d:d7:63:89:53:31: 34:68:82:e2:6b:ac:bb:9c:fd:d7:be:42:13:e4:df:c5:e3:83: 9d:eb:02:c6:2e:b5:2a:1f:20:24:3e:40:dd:d0:f6:6a:a4:30: b9:3f:9d:d7:84:da:ae:8e:6f:0a:24:dd:17:4c:3b:62:5e:4b: 37:bd:d7:e2:8d:f2:94:19:71:67:43:9d:50:cb:e8:4b:9c:7d: e3:38:6e:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFqA9uEdEK8tdg94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk OTdkMmNhYzgtNWNjMC00YWM3LThiN2YtYmQzNmI3ZTQ0ZmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTiOkSnGWhLIN/l0/ak29130aLIrF9MjnPeU z2s2Sp2Y20bhdgfSExOUf8aNyKXBUfvNomep2hfIXU4J2ur9jtHYSpwr1yJ9ZCW1 Yo2yrcUP2bo7KVvhcCozXXza0zKr8RrOKwNvwkRqgkM5SNVgQJqj0w2DLCXHqsoV bKdlfcmhNaancBOuoVnsLsmejdxuLZHnZqvoRRP9josMavIy6ii6qDSh6pSR5NUT sVqibxat+VUWwSjgURDIgLUF39OfsBC4uf2tcjvOi9YNhZyqN0KqKomQLi7ei0jW rIuAunMVCr0LUKGYO1lw+5a5nv3uCGho3WvbcNbJ82rdaYpQ6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGIuDgLws80thXaHcKydaYXz8z01MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmYwYTRiMTctYWZiZC0z YmIxLTk3Y2UtNGVkYjIyYzMwZTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDkpQIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJpEsK3e2YRVMV3iFJlamX2rAPv/ZbjYhV/7abkl1gEpXMhdD7FI2SVm TsrLzX1yCo4VyhbdnzJluEmNpaxvjKxbtk8hO6+oZpsaa0mWRpN8hErkyIeazbP8 LmJyMNRUOVNkBrhd0cwSNAwtf7vX+iUgB1w7TkjRd0wh7kIfatfxxHUBp5WWGjfj U4RDRgj0JWIZ6j20hIcSuTSI5AZCwU7VraRXtpkRZA0D4CwHBg3XY4lTMTRoguJr rLuc/de+QhPk38Xjg53rAsYutSofICQ+QN3Q9mqkMLk/ndeE2q6Obwok3RdMO2Je Sze91+KN8pQZcWdDnVDL6EucfeM4bgE= -----END CERTIFICATE-----Generated at Mon Mar 2 09:08:45 2026 by rpki-client