$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3/657752d5-7987-30fd-a6c9-761b35585226.roa File: 657752d5-7987-30fd-a6c9-761b35585226.roa (raw, json) Hash identifier: 1RGua3JT3vgsyVjx4hZwPhUbVA9Gsw9ZvASm3uFrMMQ= Subject key identifier: CC:0D:46:F4:28:F5:D9:C4:95:3D:A1:8F:69:57:43:B7:33:8D:F0:44 Certificate issuer: /CN=9cae117d-b11f-4787-b860-f4d311531af3 Certificate serial: 010D0C9F4328584B8EAD0ACC681B3478E7112F00 Authority key identifier: 8F:AA:F3:0C:EE:B1:82:F2:F0:D5:9F:35:B1:E4:9D:A7:90:BE:95:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3/657752d5-7987-30fd-a6c9-761b35585226.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 36352 IP address blocks: 146.71.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3/9cae117d-b11f-4787-b860-f4d311531af3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3/9cae117d-b11f-4787-b860-f4d311531af3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ad:0a:cc:68:1b:34:78:e7:11:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cae117d-b11f-4787-b860-f4d311531af3 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=882a57f2-ceee-4a99-8442-251d623ad50e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cf:c0:29:84:ff:2f:11:c3:43:9e:0b:35:12: f8:d9:37:d5:de:54:ec:25:3a:2f:80:f8:70:96:8c: 0c:7c:7c:8e:c3:95:4c:e0:14:e3:dd:37:1f:f9:f6: 6f:ab:61:ea:a4:7f:96:5b:e9:9d:d7:f3:8b:a6:07: 11:9c:71:50:60:0d:f8:77:de:3b:36:f3:50:38:6f: 0c:a4:3e:61:46:ce:2f:63:46:26:dd:ca:66:21:f0: e6:af:2e:be:36:8b:0b:62:cb:fd:be:59:c2:0e:2a: 58:d1:31:74:0a:d2:2a:42:f8:a7:94:8f:31:7f:cf: a9:a4:80:ba:e9:83:f1:46:26:1b:2e:af:31:e1:f3: 08:ba:ab:56:82:d5:b1:84:f4:6a:be:cb:46:7f:a7: f3:af:0c:a3:89:5a:34:5d:82:db:31:d1:bc:8c:4e: fc:d3:f0:2b:b2:1c:bd:5b:5c:c6:ba:c1:87:4f:60: b4:3b:68:91:78:2e:6e:16:f1:fb:01:b7:45:7f:b1: e3:95:bc:28:98:0a:93:76:b0:fe:5f:8c:99:54:02: d2:73:e3:78:96:b9:1f:bd:78:98:41:e0:3a:d3:2b: bf:3c:87:6f:27:32:82:53:c0:b8:93:da:5b:b6:8c: 8a:ec:f2:2a:3e:14:12:ce:5e:d4:cb:37:ee:43:22: 3f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:0D:46:F4:28:F5:D9:C4:95:3D:A1:8F:69:57:43:B7:33:8D:F0:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3/657752d5-7987-30fd-a6c9-761b35585226.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3/9cae117d-b11f-4787-b860-f4d311531af3.crl X509v3 Authority Key Identifier: keyid:8F:AA:F3:0C:EE:B1:82:F2:F0:D5:9F:35:B1:E4:9D:A7:90:BE:95:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3.cer sbgp-ipAddrBlock: critical IPv4: 146.71.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:c3:7f:f7:45:d7:b4:e3:c1:b3:e5:d7:9d:f7:4d:5c:42:a1: a1:56:3e:3b:e8:fd:74:b6:69:07:56:3f:83:1c:82:b5:56:b9: 39:46:9d:b6:a7:a2:93:b6:e8:66:25:b8:90:eb:fc:26:ec:3a: 81:4f:da:88:98:ff:19:ca:8d:73:94:62:0e:c9:d9:30:90:30: 81:1e:d5:6e:5c:27:03:78:5d:9f:cd:a2:b9:be:8c:39:21:74: 76:07:4c:e0:44:57:94:6b:d6:37:ca:9b:dd:b1:2a:21:e3:2d: be:c5:cb:16:8b:20:5d:86:0e:cf:c0:cd:45:30:fb:3b:21:8f: 75:fe:3a:39:46:8f:4a:4a:8a:cc:a3:64:ac:2d:3e:c3:5c:ac: e7:90:ec:2d:1d:ac:8b:9f:84:f2:a8:83:db:42:12:26:1d:12: 9c:c5:f0:45:4f:35:0e:3e:cd:df:a1:66:d6:85:67:20:e2:5b: c8:d0:b3:62:f0:4c:fb:a8:05:ee:9e:5b:92:33:95:1d:7b:a4: d3:f7:93:c5:63:6c:e9:20:09:01:d1:56:d1:68:b4:2d:ea:da: c9:01:f6:87:17:23:cc:b7:6b:56:67:f8:88:42:70:60:25:6e: 4c:28:b4:84:a5:23:15:1d:b8:93:ca:90:67:0e:a5:0b:7d:d0: f3:80:61:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrQrMaBs0eOcRLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWNhZTExN2QtYjExZi00Nzg3LWI4NjAtZjRkMzExNTMx YWYzMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk ODgyYTU3ZjItY2VlZS00YTk5LTg0NDItMjUxZDYyM2FkNTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAss/AKYT/LxHDQ54LNRL42TfV3lTsJTovgPhw lowMfHyOw5VM4BTj3Tcf+fZvq2HqpH+WW+md1/OLpgcRnHFQYA34d947NvNQOG8M pD5hRs4vY0Ym3cpmIfDmry6+NosLYsv9vlnCDipY0TF0CtIqQvinlI8xf8+ppIC6 6YPxRiYbLq8x4fMIuqtWgtWxhPRqvstGf6fzrwyjiVo0XYLbMdG8jE780/Arshy9 W1zGusGHT2C0O2iReC5uFvH7AbdFf7HjlbwomAqTdrD+X4yZVALSc+N4lrkfvXiY QeA60yu/PIdvJzKCU8C4k9pbtoyK7PIqPhQSzl7UyzfuQyI/UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMwNRvQo9dnElT2hj2lXQ7czjfBEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85Y2Fl MTE3ZC1iMTFmLTQ3ODctYjg2MC1mNGQzMTE1MzFhZjMvNjU3NzUyZDUtNzk4Ny0z MGZkLWE2YzktNzYxYjM1NTg1MjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWNhZTExN2QtYjExZi00Nzg3LWI4 NjAtZjRkMzExNTMxYWYzLzljYWUxMTdkLWIxMWYtNDc4Ny1iODYwLWY0ZDMxMTUz MWFmMy5jcmwwHwYDVR0jBBgwFoAUj6rzDO6xgvLw1Z81seSdp5C+lbowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85Y2FlMTE3ZC1iMTFmLTQ3ODctYjg2MC1mNGQz MTE1MzFhZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEkkcgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/Df/dF17TjwbPl1533TVxCoaFWPjvo/XS2aQdWP4McgrVWuTlGnban opO26GYluJDr/CbsOoFP2oiY/xnKjXOUYg7J2TCQMIEe1W5cJwN4XZ/Norm+jDkh dHYHTOBEV5Rr1jfKm92xKiHjLb7FyxaLIF2GDs/AzUUw+zshj3X+OjlGj0pKisyj ZKwtPsNcrOeQ7C0drIufhPKog9tCEiYdEpzF8EVPNQ4+zd+hZtaFZyDiW8jQs2Lw TPuoBe6eW5IzlR17pNP3k8VjbOkgCQHRVtFotC3q2skB9ocXI8y3a1Zn+IhCcGAl bkwotISlIxUduJPKkGcOpQt90POAYSA= -----END CERTIFICATE-----Generated at Wed Nov 5 10:27:04 2025 by rpki-client