$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e/af0f5bba-c2d7-39aa-aee6-c7b0e39be7c6.roa File: af0f5bba-c2d7-39aa-aee6-c7b0e39be7c6.roa (raw, json) Hash identifier: RrLEGjG5Nakf0JnchpIj/Ff/nLtap5LsPMGz/al61e4= Subject key identifier: 4F:6C:E1:6E:B9:18:09:4D:39:A9:0E:BA:8B:BF:D0:AB:38:2A:ED:10 Certificate issuer: /CN=d92cf10a-b836-4dce-a8f5-f920d630995e Certificate serial: 010D0C9F4328584BA39CFD4CE15547FD18F5C800 Authority key identifier: 08:2A:2C:8C:F2:11:B3:A0:A4:59:C9:14:F5:8A:A8:BB:AF:DF:EF:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e/af0f5bba-c2d7-39aa-aee6-c7b0e39be7c6.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 14618 IP address blocks: 146.71.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e/d92cf10a-b836-4dce-a8f5-f920d630995e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e/d92cf10a-b836-4dce-a8f5-f920d630995e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9c:fd:4c:e1:55:47:fd:18:f5:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d92cf10a-b836-4dce-a8f5-f920d630995e Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=78b0fe1c-078a-4dfc-840a-f00540d7aace Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:39:dc:f7:94:77:d3:dc:f3:ab:de:f9:92:15: 14:7f:71:bc:5b:bf:0a:52:16:f7:20:de:e7:80:64: c6:43:b3:80:3a:01:65:07:db:a4:5f:e4:bc:86:fb: 38:7b:a6:a8:54:45:27:e1:5e:e6:31:ac:ce:c6:2e: b6:2a:36:44:c9:23:ed:0c:59:5d:91:d4:ad:2b:12: 58:8a:1a:e9:76:a4:39:b6:95:1d:94:47:32:08:74: a7:b9:5a:fa:9e:0d:18:2e:10:68:b6:96:2f:67:31: 7d:dc:53:9b:15:9d:58:32:e8:9f:3e:58:00:a8:3d: 8f:78:4b:65:ce:4b:f9:be:0c:c3:27:75:38:8b:a9: 9d:9a:42:c7:5d:5a:cd:ec:2a:81:d8:db:b1:b5:ae: 11:96:0b:30:fe:ed:70:8d:35:36:29:c8:67:0e:20: 0e:a2:cf:28:f6:39:98:b6:7f:10:89:8c:4b:c2:07: 83:bc:23:60:e3:92:69:66:6c:97:7c:1e:8d:99:ef: d9:38:4d:96:f9:f8:cc:41:9d:a1:a3:af:51:9d:a0: a5:69:fd:5d:66:a1:2e:4c:8b:3f:4e:b1:9f:30:d4: 32:62:77:d0:85:0a:25:89:31:8b:8f:3c:68:87:7d: b2:88:c1:c7:46:95:d2:39:28:35:0d:7e:ba:25:9f: 34:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:6C:E1:6E:B9:18:09:4D:39:A9:0E:BA:8B:BF:D0:AB:38:2A:ED:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e/af0f5bba-c2d7-39aa-aee6-c7b0e39be7c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e/d92cf10a-b836-4dce-a8f5-f920d630995e.crl X509v3 Authority Key Identifier: keyid:08:2A:2C:8C:F2:11:B3:A0:A4:59:C9:14:F5:8A:A8:BB:AF:DF:EF:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e.cer sbgp-ipAddrBlock: critical IPv4: 146.71.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:53:b1:9b:85:cc:cb:45:da:8d:29:bb:38:15:a0:4c:3f:c5: d2:87:6c:4a:c1:0f:db:bf:ea:83:95:d4:6e:fa:cb:97:58:7e: 49:98:0b:6f:2f:dd:f0:c5:2c:f6:a9:6e:77:2b:81:7f:82:ae: 66:2d:05:82:1f:b8:0a:2d:d8:78:05:71:14:79:b8:bd:07:e6: a8:9b:eb:be:91:66:1b:58:20:ab:58:74:8a:52:f5:ab:09:cd: fd:18:a2:56:b3:67:74:f0:6e:f8:49:0e:58:ee:30:b0:eb:86: f7:9a:d4:4f:22:b7:4a:54:91:a4:00:72:6b:df:63:92:79:bc: 4a:72:9c:59:58:37:cf:8c:c1:72:de:4d:45:ca:bd:4f:15:9f: b7:8a:81:53:b3:aa:6f:46:45:6d:d2:f2:12:85:54:49:fe:fe: 59:15:0a:25:63:89:ba:91:35:e1:32:dc:fd:dc:62:23:2d:56: ab:45:15:d1:75:3f:71:b0:66:6c:1b:ca:d7:e4:09:2e:90:b4: b7:d3:c4:49:5b:bc:e3:1d:98:81:a1:30:41:c7:3f:84:38:e2: 7c:2e:df:02:d1:25:3b:87:41:06:17:76:be:3c:c9:c5:01:a1: e8:13:02:4e:59:f0:5e:a9:08:ef:97:64:03:9b:87:3e:16:12: fd:cc:00:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnP1M4VVH/Rj1yAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDkyY2YxMGEtYjgzNi00ZGNlLWE4ZjUtZjkyMGQ2MzA5 OTVlMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NzhiMGZlMWMtMDc4YS00ZGZjLTg0MGEtZjAwNTQwZDdhYWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTnc95R309zzq975khUUf3G8W78KUhb3IN7n gGTGQ7OAOgFlB9ukX+S8hvs4e6aoVEUn4V7mMazOxi62KjZEySPtDFldkdStKxJY ihrpdqQ5tpUdlEcyCHSnuVr6ng0YLhBotpYvZzF93FObFZ1YMuifPlgAqD2PeEtl zkv5vgzDJ3U4i6mdmkLHXVrN7CqB2Nuxta4Rlgsw/u1wjTU2KchnDiAOos8o9jmY tn8QiYxLwgeDvCNg45JpZmyXfB6Nme/ZOE2W+fjMQZ2ho69RnaClaf1dZqEuTIs/ TrGfMNQyYnfQhQoliTGLjzxoh32yiMHHRpXSOSg1DX66JZ80aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE9s4W65GAlNOakOuou/0Ks4Ku0QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kOTJj ZjEwYS1iODM2LTRkY2UtYThmNS1mOTIwZDYzMDk5NWUvYWYwZjViYmEtYzJkNy0z OWFhLWFlZTYtYzdiMGUzOWJlN2M2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDkyY2YxMGEtYjgzNi00ZGNlLWE4 ZjUtZjkyMGQ2MzA5OTVlL2Q5MmNmMTBhLWI4MzYtNGRjZS1hOGY1LWY5MjBkNjMw OTk1ZS5jcmwwHwYDVR0jBBgwFoAUCCosjPIRs6CkWckU9Yqou6/f76QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kOTJjZjEwYS1iODM2LTRkY2UtYThmNS1mOTIw ZDYzMDk5NWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkkcDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARTsZuFzMtF2o0puzgVoEw/xdKHbErBD9u/6oOV1G76y5dYfkmYC28v 3fDFLPapbncrgX+CrmYtBYIfuAot2HgFcRR5uL0H5qib676RZhtYIKtYdIpS9asJ zf0YolazZ3TwbvhJDljuMLDrhvea1E8it0pUkaQAcmvfY5J5vEpynFlYN8+MwXLe TUXKvU8Vn7eKgVOzqm9GRW3S8hKFVEn+/lkVCiVjibqRNeEy3P3cYiMtVqtFFdF1 P3GwZmwbytfkCS6QtLfTxElbvOMdmIGhMEHHP4Q44nwu3wLRJTuHQQYXdr48ycUB oegTAk5Z8F6pCO+XZAObhz4WEv3MAMw= -----END CERTIFICATE-----Generated at Wed Nov 5 11:10:06 2025 by rpki-client