$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e/a8006d90-9db1-3770-bb6a-a49d4decae45.roa File: a8006d90-9db1-3770-bb6a-a49d4decae45.roa (raw, json) Hash identifier: /66u/LXjhTpN8ybUdrrI0DhvhTGdr+KW8tlRDntDbgA= Subject key identifier: 80:7E:49:0E:A5:8A:FF:31:19:56:59:79:07:28:4E:03:DF:78:9A:E9 Certificate issuer: /CN=d92cf10a-b836-4dce-a8f5-f920d630995e Certificate serial: 010D0C9F4328584AC2E0F09A1532DE17D6795780 Authority key identifier: 08:2A:2C:8C:F2:11:B3:A0:A4:59:C9:14:F5:8A:A8:BB:AF:DF:EF:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e/a8006d90-9db1-3770-bb6a-a49d4decae45.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 16509 IP address blocks: 146.71.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e/d92cf10a-b836-4dce-a8f5-f920d630995e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e/d92cf10a-b836-4dce-a8f5-f920d630995e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:f0:9a:15:32:de:17:d6:79:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d92cf10a-b836-4dce-a8f5-f920d630995e Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=94eb6928-c46e-4118-a4fa-cd6547570791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:86:a7:6f:bb:cf:0c:34:42:e8:6a:63:36:cf: a9:25:bc:82:a3:e7:5f:ed:7d:a9:f9:b0:76:7f:5d: 80:f1:41:4a:96:3a:64:2c:3d:a7:91:15:71:78:79: fe:a5:97:d1:65:07:a8:27:08:57:3e:f5:df:89:f9: a1:2a:74:aa:7d:4a:49:ed:28:9b:6d:b2:33:9f:87: 38:51:08:e7:91:e9:90:7d:74:6d:fd:63:76:98:9d: b5:4c:8f:26:6f:5b:1f:57:f9:f1:cb:67:12:18:33: f9:7b:e0:92:5b:3c:62:90:2e:24:4e:de:8e:34:d2: 8b:b8:9e:fe:8a:bb:e3:a1:7a:d3:dc:7e:4f:a1:76: ea:11:68:2e:49:8b:2f:14:ee:44:c4:7c:ad:37:4f: 55:60:d2:8c:c2:c4:2c:9d:f6:09:d8:05:f3:bb:f9: 91:72:6c:80:b1:e0:87:16:7a:5a:37:79:e2:86:cb: 0a:64:fa:6c:04:22:06:cd:f2:ea:b9:13:a6:7f:38: 7c:7f:3d:e7:4e:63:46:88:aa:21:f2:6d:dc:c0:da: 01:a9:20:96:66:9d:81:10:b4:78:f5:7b:9b:ac:f5: 4f:36:15:f2:ba:ed:5f:6b:e1:a8:3a:ff:e7:45:fc: c0:b1:d0:8c:9f:34:7a:35:66:56:85:47:f7:e5:e9: 80:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:7E:49:0E:A5:8A:FF:31:19:56:59:79:07:28:4E:03:DF:78:9A:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e/a8006d90-9db1-3770-bb6a-a49d4decae45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e/d92cf10a-b836-4dce-a8f5-f920d630995e.crl X509v3 Authority Key Identifier: keyid:08:2A:2C:8C:F2:11:B3:A0:A4:59:C9:14:F5:8A:A8:BB:AF:DF:EF:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e.cer sbgp-ipAddrBlock: critical IPv4: 146.71.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:38:19:db:6e:22:c4:a5:5e:91:95:5d:f4:dc:6b:b3:25:b7: ce:fe:52:4a:fa:d7:99:12:e6:6d:eb:9c:e5:0c:1b:f5:8b:06: 64:60:97:66:78:93:42:5d:76:6b:f1:7a:c4:62:6e:c9:1a:46: 3d:39:e5:7f:5d:63:44:7e:40:65:04:ef:60:86:70:a6:75:ad: 54:26:20:7f:31:f5:99:2b:5f:47:71:ed:ab:2f:78:fc:51:03: 1c:e5:86:2e:0a:0a:8a:f2:0d:71:24:6c:1b:c8:87:fb:f9:71: 00:6d:06:fd:48:a0:a7:db:7a:ff:39:b0:c0:ca:55:e4:06:67: d7:a7:53:28:f9:06:b7:b1:98:64:95:82:15:1a:c6:16:c0:1c: 66:09:27:46:59:ed:76:b2:15:2e:9e:98:9d:52:44:14:67:de: f7:61:91:1d:46:78:c6:a4:10:0d:91:d3:d2:c5:e7:55:20:ad: 16:2d:c1:9b:82:8e:56:ec:90:a5:89:9f:7c:22:e5:b4:b6:58: 5b:83:16:2a:42:84:21:d2:33:f2:b8:65:67:a3:e5:9f:af:51: ce:a2:29:11:ed:9d:9d:14:d3:6f:9e:22:df:b2:26:57:7e:62: 48:3e:18:d2:3b:6e:24:ca:d1:a9:c7:d8:46:d4:a2:2f:aa:89: b2:1c:8e:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4PCaFTLeF9Z5V4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDkyY2YxMGEtYjgzNi00ZGNlLWE4ZjUtZjkyMGQ2MzA5 OTVlMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk OTRlYjY5MjgtYzQ2ZS00MTE4LWE0ZmEtY2Q2NTQ3NTcwNzkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Yanb7vPDDRC6GpjNs+pJbyCo+df7X2p+bB2 f12A8UFKljpkLD2nkRVxeHn+pZfRZQeoJwhXPvXfifmhKnSqfUpJ7SibbbIzn4c4 UQjnkemQfXRt/WN2mJ21TI8mb1sfV/nxy2cSGDP5e+CSWzxikC4kTt6ONNKLuJ7+ irvjoXrT3H5PoXbqEWguSYsvFO5ExHytN09VYNKMwsQsnfYJ2AXzu/mRcmyAseCH FnpaN3nihssKZPpsBCIGzfLquROmfzh8fz3nTmNGiKoh8m3cwNoBqSCWZp2BELR4 9XubrPVPNhXyuu1fa+GoOv/nRfzAsdCMnzR6NWZWhUf35emA5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIB+SQ6liv8xGVZZeQcoTgPfeJrpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kOTJj ZjEwYS1iODM2LTRkY2UtYThmNS1mOTIwZDYzMDk5NWUvYTgwMDZkOTAtOWRiMS0z NzcwLWJiNmEtYTQ5ZDRkZWNhZTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDkyY2YxMGEtYjgzNi00ZGNlLWE4 ZjUtZjkyMGQ2MzA5OTVlL2Q5MmNmMTBhLWI4MzYtNGRjZS1hOGY1LWY5MjBkNjMw OTk1ZS5jcmwwHwYDVR0jBBgwFoAUCCosjPIRs6CkWckU9Yqou6/f76QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kOTJjZjEwYS1iODM2LTRkY2UtYThmNS1mOTIw ZDYzMDk5NWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkkcDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJU4GdtuIsSlXpGVXfTca7Mlt87+Ukr615kS5m3rnOUMG/WLBmRgl2Z4 k0JddmvxesRibskaRj055X9dY0R+QGUE72CGcKZ1rVQmIH8x9ZkrX0dx7asvePxR Axzlhi4KCoryDXEkbBvIh/v5cQBtBv1IoKfbev85sMDKVeQGZ9enUyj5BrexmGSV ghUaxhbAHGYJJ0ZZ7XayFS6emJ1SRBRn3vdhkR1GeMakEA2R09LF51UgrRYtwZuC jlbskKWJn3wi5bS2WFuDFipChCHSM/K4ZWej5Z+vUc6iKRHtnZ0U02+eIt+yJld+ Ykg+GNI7biTK0anH2EbUoi+qibIcjo4= -----END CERTIFICATE-----Generated at Wed Aug 6 04:06:29 2025 by rpki-client