$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/842ce387-8918-38c2-8a38-4d294a77d361.roa File: 842ce387-8918-38c2-8a38-4d294a77d361.roa (raw, json) Hash identifier: PsKIqyRgzHA9tryLpqeopen8FrsZVILrxJVPE6UI048= Subject key identifier: 42:A5:EA:A2:83:44:16:6B:3D:1A:51:8C:A5:5E:15:F1:FA:FE:66:0A Certificate issuer: /CN=a68ef886-c437-4b77-8d56-b917b6150d9a Certificate serial: 010D0C9F4328584BB88D25AE8CB78558F9E41380 Authority key identifier: 7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/842ce387-8918-38c2-8a38-4d294a77d361.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 91 IP address blocks: 146.8.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:25:ae:8c:b7:85:58:f9:e4:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a68ef886-c437-4b77-8d56-b917b6150d9a Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=4d90b016-4375-4205-8c93-d12f68df12b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:bb:5b:8a:8d:c3:49:3f:e8:67:3a:3d:8a:98: b2:6f:1d:92:86:44:ac:9f:74:55:21:c7:b7:4d:d2: e2:66:dc:e3:e9:3a:90:d4:12:f2:ef:cc:7a:37:79: 1f:b8:d7:1b:78:15:99:18:dd:bc:fe:d9:4d:45:0c: aa:98:10:03:e3:f3:b8:8c:c2:f0:7e:fb:32:d3:e8: de:17:68:d8:08:a7:72:e7:19:65:de:d2:b2:30:80: 11:59:94:da:25:87:ba:b9:5f:55:d3:25:2f:d6:32: 2b:86:30:a3:35:08:33:f0:c0:36:56:63:b8:49:1a: a3:f9:fe:c3:93:29:b1:e8:b5:7c:f1:90:af:1d:a4: fc:c1:4c:84:7d:2b:53:cd:9c:f1:1a:3c:df:f8:0a: ab:56:7c:a8:93:08:b5:cb:28:62:d8:a6:43:fc:05: 6a:e3:a7:ae:84:bb:62:8d:6c:b5:b3:80:02:d1:2c: 67:fc:81:5f:35:e5:48:44:15:f0:6c:22:e8:69:af: 54:31:ed:8a:30:1d:4f:c1:ba:e6:76:e8:fe:f0:5c: ad:3c:a3:43:ff:a5:fb:07:62:e7:d8:d8:3f:92:ee: b1:91:11:1a:4f:b6:c2:bd:1e:53:dd:b4:98:0e:17: 8c:f8:1c:9e:35:af:5d:3e:b6:65:8e:74:11:c7:b4: a2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A5:EA:A2:83:44:16:6B:3D:1A:51:8C:A5:5E:15:F1:FA:FE:66:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/842ce387-8918-38c2-8a38-4d294a77d361.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl X509v3 Authority Key Identifier: keyid:7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer sbgp-ipAddrBlock: critical IPv4: 146.8.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:89:98:ea:8b:33:ce:41:b8:4e:01:bf:8a:eb:e3:92:b7:f2: 61:b1:1b:ee:50:dd:f4:c6:00:5d:86:73:df:19:42:65:10:10: a2:2e:f9:44:33:a6:65:6c:f2:e5:aa:63:2b:90:51:4c:3d:6a: d4:c6:f3:43:29:ae:f1:b0:12:06:ff:50:3b:dd:43:31:38:77: 28:dc:3e:af:66:bb:bf:2c:2b:97:17:8c:7b:9e:1a:7a:8c:55: 9c:1e:de:3a:b2:6f:d5:e3:c3:2d:02:6b:24:06:c6:15:55:c5: 70:b0:ba:b0:b9:67:e1:67:b4:64:7a:c3:e6:c3:57:53:62:05: 86:36:71:db:7e:be:e5:b4:3c:ec:d2:4e:c1:45:65:12:16:a0: 48:bc:22:26:a8:3b:21:3f:22:66:4a:20:01:b8:51:d9:7a:29: 4a:ef:f0:8c:eb:22:9a:06:a6:65:4f:35:c6:47:da:d1:79:7a: 3d:30:bc:5c:8b:27:7f:6d:fd:9c:4f:fb:0d:00:52:18:f2:eb: 9e:46:3b:70:7e:30:8b:a6:5b:07:80:90:dd:f9:2e:b4:e8:ba: 2a:27:dd:47:e5:94:0d:2c:98:e0:7b:b2:cb:06:e6:f7:b6:e7: b1:f0:eb:c1:ea:29:1d:05:2d:9d:33:1e:21:35:9e:f5:9e:a9: 77:bf:6a:7b -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEu4jSWujLeFWPnkE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTY4ZWY4ODYtYzQzNy00Yjc3LThkNTYtYjkxN2I2MTUw ZDlhMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk NGQ5MGIwMTYtNDM3NS00MjA1LThjOTMtZDEyZjY4ZGYxMmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbtbio3DST/oZzo9ipiybx2ShkSsn3RVIce3 TdLiZtzj6TqQ1BLy78x6N3kfuNcbeBWZGN28/tlNRQyqmBAD4/O4jMLwfvsy0+je F2jYCKdy5xll3tKyMIARWZTaJYe6uV9V0yUv1jIrhjCjNQgz8MA2VmO4SRqj+f7D kymx6LV88ZCvHaT8wUyEfStTzZzxGjzf+AqrVnyokwi1yyhi2KZD/AVq46euhLti jWy1s4AC0Sxn/IFfNeVIRBXwbCLoaa9UMe2KMB1Pwbrmduj+8FytPKND/6X7B2Ln 2Ng/ku6xkREaT7bCvR5T3bSYDheM+ByeNa9dPrZljnQRx7SiRwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFEKl6qKDRBZrPRpRjKVeFfH6/mYKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNjhl Zjg4Ni1jNDM3LTRiNzctOGQ1Ni1iOTE3YjYxNTBkOWEvODQyY2UzODctODkxOC0z OGMyLThhMzgtNGQyOTRhNzdkMzYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTY4ZWY4ODYtYzQzNy00Yjc3LThk NTYtYjkxN2I2MTUwZDlhL2E2OGVmODg2LWM0MzctNGI3Ny04ZDU2LWI5MTdiNjE1 MGQ5YS5jcmwwHwYDVR0jBBgwFoAUfAnor+6RefUILLfICjw4Y9TiHA4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hNjhlZjg4Ni1jNDM3LTRiNzctOGQ1Ni1iOTE3 YjYxNTBkOWEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkggwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAlomY6oszzkG4TgG/iuvjkrfyYbEb7lDd9MYAXYZz3xlCZRAQoi75RDOm ZWzy5apjK5BRTD1q1MbzQymu8bASBv9QO91DMTh3KNw+r2a7vywrlxeMe54aeoxV nB7eOrJv1ePDLQJrJAbGFVXFcLC6sLln4We0ZHrD5sNXU2IFhjZx236+5bQ87NJO wUVlEhagSLwiJqg7IT8iZkogAbhR2XopSu/wjOsimgamZU81xkfa0Xl6PTC8XIsn f239nE/7DQBSGPLrnkY7cH4wi6ZbB4CQ3fkutOi6KifdR+WUDSyY4Huyywbm97bn sfDrweopHQUtnTMeITWe9Z6pd79qew== -----END CERTIFICATE-----Generated at Wed Nov 5 17:50:51 2025 by rpki-client