$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e/a8006d90-9db1-3770-bb6a-a49d4decae45.roa File: a8006d90-9db1-3770-bb6a-a49d4decae45.roa (raw, json) Hash identifier: seqgl74Ek+VFhGRT0hF4mvWkzN7F2HW6U93lxQzY2fM= Subject key identifier: E2:3E:AF:16:79:3A:D4:12:28:FD:8E:14:4D:B3:8D:EE:6B:EC:25:DB Certificate issuer: /CN=d92cf10a-b836-4dce-a8f5-f920d630995e Certificate serial: 010D0C9F4328584BA39D0D7E51E77A36070A6A00 Authority key identifier: 08:2A:2C:8C:F2:11:B3:A0:A4:59:C9:14:F5:8A:A8:BB:AF:DF:EF:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e/a8006d90-9db1-3770-bb6a-a49d4decae45.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 16509 IP address blocks: 146.71.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e/d92cf10a-b836-4dce-a8f5-f920d630995e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e/d92cf10a-b836-4dce-a8f5-f920d630995e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:0d:7e:51:e7:7a:36:07:0a:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d92cf10a-b836-4dce-a8f5-f920d630995e Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=bab8947b-486e-4470-bd38-1b56a763606d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:53:f2:35:a3:44:7b:77:ca:65:51:dc:9c:7b: c2:60:2d:e8:d2:cd:9f:9e:ab:99:cb:0a:ae:bd:f7: 45:77:da:89:f3:29:1b:89:b0:aa:47:f1:60:5c:38: 0d:8e:f4:01:ee:bc:1c:a0:aa:38:12:1e:59:74:56: 24:f2:91:ec:78:fc:ca:51:8b:4a:16:39:dc:a9:4b: 38:d0:a8:a4:9d:e8:8d:f2:93:5f:e6:1f:a8:5a:dc: 68:5b:14:54:34:b0:50:ac:fa:8a:4b:51:b0:41:24: 8c:ca:3b:d4:52:f0:33:40:60:f7:98:39:ce:11:63: 6b:97:74:f4:ac:6c:4b:88:53:27:66:ce:ec:65:63: f1:43:d2:13:55:56:a9:0d:cf:c2:d5:53:b7:f7:4a: 9f:86:c0:fc:48:00:6e:96:ce:f4:49:30:f7:0d:ef: f4:b1:9b:be:d2:5d:0d:4e:80:f8:97:a1:bb:ed:6f: 06:43:24:55:1f:ef:f8:e7:61:d2:3b:36:0d:45:cf: 72:32:42:8d:b8:65:10:dd:15:9b:30:ca:28:5a:4c: eb:43:23:69:48:5a:b2:37:a2:67:72:82:b3:b3:ce: 3c:35:b1:c1:f1:10:22:b5:5c:12:61:8f:4b:d4:c4: 3d:a4:0b:67:80:78:e2:67:6f:2f:cf:4e:d4:b1:67: 13:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:3E:AF:16:79:3A:D4:12:28:FD:8E:14:4D:B3:8D:EE:6B:EC:25:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e/a8006d90-9db1-3770-bb6a-a49d4decae45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e/d92cf10a-b836-4dce-a8f5-f920d630995e.crl X509v3 Authority Key Identifier: keyid:08:2A:2C:8C:F2:11:B3:A0:A4:59:C9:14:F5:8A:A8:BB:AF:DF:EF:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e.cer sbgp-ipAddrBlock: critical IPv4: 146.71.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:33:91:67:c9:d7:92:53:2a:58:bf:01:a5:02:38:d8:e2:e9: 6a:cd:e7:bd:c5:c0:d1:a1:01:2d:f4:bd:cb:e9:51:12:ba:ea: a5:78:df:81:72:ef:e2:80:71:a4:e6:ce:84:35:04:17:ce:67: 8a:ba:8a:9a:c8:f2:25:63:3c:bd:02:6a:e1:c8:2a:2e:fa:83: 30:49:d1:6f:2a:43:a0:42:c6:20:58:ec:5e:19:4b:31:03:ed: 2c:7f:ea:a7:c1:73:15:d4:d7:ba:af:49:f1:33:8b:f0:64:7c: 20:4a:65:aa:ab:af:53:f3:e7:8a:d6:d1:b7:09:dc:5b:5e:ab: 8c:f1:e2:33:2f:75:9b:77:9f:49:a2:de:d5:9d:5d:2d:1b:99: 0d:be:1e:d8:03:21:25:a4:af:7f:5f:13:07:2a:d6:0f:31:fc: e5:08:08:08:df:5c:f4:79:7f:f4:ca:4d:c5:d1:0b:bb:73:5d: 96:95:9d:81:aa:fc:af:6d:07:d5:e7:b1:ab:00:e8:71:79:e9: 87:4f:43:c4:b1:9f:d6:f2:75:eb:15:f9:36:34:a3:47:6b:b6: c8:c6:01:cc:7f:f3:dc:41:1d:17:78:d1:d6:19:46:7c:2b:5c: 14:29:37:c2:9a:49:ee:87:0e:82:54:6a:fb:c7:70:38:88:53: 9d:03:fa:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnQ1+Ued6NgcKagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDkyY2YxMGEtYjgzNi00ZGNlLWE4ZjUtZjkyMGQ2MzA5 OTVlMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk YmFiODk0N2ItNDg2ZS00NDcwLWJkMzgtMWI1NmE3NjM2MDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1PyNaNEe3fKZVHcnHvCYC3o0s2fnquZywqu vfdFd9qJ8ykbibCqR/FgXDgNjvQB7rwcoKo4Eh5ZdFYk8pHsePzKUYtKFjncqUs4 0KikneiN8pNf5h+oWtxoWxRUNLBQrPqKS1GwQSSMyjvUUvAzQGD3mDnOEWNrl3T0 rGxLiFMnZs7sZWPxQ9ITVVapDc/C1VO390qfhsD8SABuls70STD3De/0sZu+0l0N ToD4l6G77W8GQyRVH+/452HSOzYNRc9yMkKNuGUQ3RWbMMooWkzrQyNpSFqyN6Jn coKzs848NbHB8RAitVwSYY9L1MQ9pAtngHjiZ28vz07UsWcTyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOI+rxZ5OtQSKP2OFE2zje5r7CXbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kOTJj ZjEwYS1iODM2LTRkY2UtYThmNS1mOTIwZDYzMDk5NWUvYTgwMDZkOTAtOWRiMS0z NzcwLWJiNmEtYTQ5ZDRkZWNhZTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDkyY2YxMGEtYjgzNi00ZGNlLWE4 ZjUtZjkyMGQ2MzA5OTVlL2Q5MmNmMTBhLWI4MzYtNGRjZS1hOGY1LWY5MjBkNjMw OTk1ZS5jcmwwHwYDVR0jBBgwFoAUCCosjPIRs6CkWckU9Yqou6/f76QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kOTJjZjEwYS1iODM2LTRkY2UtYThmNS1mOTIw ZDYzMDk5NWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkkcDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0zkWfJ15JTKli/AaUCONji6WrN573FwNGhAS30vcvpURK66qV434Fy 7+KAcaTmzoQ1BBfOZ4q6iprI8iVjPL0CauHIKi76gzBJ0W8qQ6BCxiBY7F4ZSzED 7Sx/6qfBcxXU17qvSfEzi/BkfCBKZaqrr1Pz54rW0bcJ3Fteq4zx4jMvdZt3n0mi 3tWdXS0bmQ2+HtgDISWkr39fEwcq1g8x/OUICAjfXPR5f/TKTcXRC7tzXZaVnYGq /K9tB9XnsasA6HF56YdPQ8Sxn9bydesV+TY0o0drtsjGAcx/89xBHRd40dYZRnwr XBQpN8KaSe6HDoJUavvHcDiIU50D+mo= -----END CERTIFICATE-----Generated at Wed Nov 5 05:43:55 2025 by rpki-client