$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/278d45cf-eab7-3a22-9d61-0e6212ee76d5.roa File: 278d45cf-eab7-3a22-9d61-0e6212ee76d5.roa (raw, json) Hash identifier: jlsDeYkda83udKjmZ1i3MtL/Jmgy1z3wL7eHg3G7Q8o= Subject key identifier: 36:71:72:F6:06:F9:A4:45:A0:76:D7:1E:13:AA:5B:F3:B1:D6:BD:D8 Certificate issuer: /CN=c43335db-c55b-443e-b20c-5c74e1c256c9 Certificate serial: 010D0C9F4328584BBA10595F1E661284DB78AC40 Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/278d45cf-eab7-3a22-9d61-0e6212ee76d5.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 54535 IP address blocks: 146.197.27.0/24 maxlen: 24 146.197.79.0/24 maxlen: 24 146.197.83.0/24 maxlen: 24 146.197.120.0/22 maxlen: 22 146.197.122.0/24 maxlen: 24 146.197.123.0/24 maxlen: 24 146.197.242.0/24 maxlen: 24 146.197.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:59:5f:1e:66:12:84:db:78:ac:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9 Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=3d961ad0-c1f6-4b77-86d0-59d1fb5353cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c1:61:e5:50:56:f4:4f:04:69:20:db:b1:89: c1:f3:4e:0a:a0:79:fc:96:a2:1c:68:ba:fc:69:80: 39:7f:53:69:11:f7:08:a6:24:0b:7e:31:0f:91:52: ef:8a:20:b0:57:7f:01:eb:33:b8:51:7d:38:c3:2d: 9d:8d:f1:58:8b:96:69:a9:c7:35:73:d5:04:71:78: 39:b3:74:6d:68:05:09:fa:83:e7:b6:89:9e:7a:24: 78:74:70:6e:f7:7a:8e:2c:e6:30:95:0c:3f:ba:8f: c5:bd:5e:12:00:d5:76:79:29:82:a8:c1:a6:82:88: 93:a1:9a:7d:32:62:23:a0:c7:7b:68:81:0c:ae:a7: 26:c7:2b:5d:03:fc:1c:e8:18:a0:73:31:b2:f9:27: d7:e0:a7:cf:7e:69:c8:f5:80:3d:e2:56:0a:66:62: 13:4e:c4:3e:e0:88:43:38:f4:1d:ed:62:1b:7e:0a: b0:de:04:b8:97:09:75:a6:e0:15:23:48:62:7e:45: 5e:c0:de:4f:22:c6:ec:69:8b:12:22:9a:58:9d:82: 5c:54:14:b7:32:38:72:d3:f9:74:9b:f7:d9:9b:c8: 09:fa:eb:9e:ee:03:8a:1d:98:37:aa:9c:86:f7:8a: 7a:2e:3b:e2:28:8b:e3:a8:88:5d:7e:f1:62:23:25: e5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:71:72:F6:06:F9:A4:45:A0:76:D7:1E:13:AA:5B:F3:B1:D6:BD:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/278d45cf-eab7-3a22-9d61-0e6212ee76d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl X509v3 Authority Key Identifier: keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer sbgp-ipAddrBlock: critical IPv4: 146.197.27.0/24 146.197.79.0/24 146.197.83.0/24 146.197.120.0/22 146.197.242.0/24 146.197.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:ae:90:43:ed:01:35:c5:ca:3c:9e:4a:76:42:39:6a:ba:d0: 86:4c:50:68:77:ba:c1:3a:59:b2:13:2a:69:bd:b3:f8:f7:c4: 26:a4:22:b2:9b:7c:5e:41:54:55:74:c8:05:ab:28:60:12:40: e8:3b:b2:b5:12:77:2b:c5:aa:24:b3:16:ca:78:5f:64:e3:c7: 40:d4:9f:cf:55:fc:c9:a6:76:fb:8c:ba:91:90:7e:a2:f5:d4: 86:90:35:47:de:77:c3:63:1b:e0:1f:00:ce:fe:f5:0c:3b:6e: 4a:10:d7:85:ea:c3:2d:0c:fa:89:39:cd:31:29:d7:45:a4:71: 43:26:95:63:39:8b:f4:47:b3:fe:df:c8:b5:df:3e:73:25:92: 8c:e5:f7:4f:2b:0a:7a:2f:7d:8d:74:3b:0f:4a:e3:09:bc:78: 4e:c3:64:ee:f5:d2:19:97:9b:5a:a8:ef:1f:16:b3:98:bf:1c: 2d:4e:4d:54:c4:ab:df:45:94:24:13:75:f1:9f:52:6f:88:1f: 88:65:fe:88:7f:0d:44:1c:75:32:81:45:2c:30:20:c9:6e:87: c6:57:27:32:27:d3:f5:fe:66:a4:e7:44:13:5e:e8:2d:44:95: 24:44:12:e9:17:9f:7f:a0:9e:be:1d:cb:2d:ea:fc:b7:e9:3e: 72:48:79:61 -----BEGIN CERTIFICATE----- MIIGYTCCBUmgAwIBAgIUAQ0Mn0MoWEu6EFlfHmYShNt4rEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQzMzM1ZGItYzU1Yi00NDNlLWIyMGMtNWM3NGUxYzI1 NmM5MB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk M2Q5NjFhZDAtYzFmNi00Yjc3LTg2ZDAtNTlkMWZiNTM1M2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8Fh5VBW9E8EaSDbsYnB804KoHn8lqIcaLr8 aYA5f1NpEfcIpiQLfjEPkVLviiCwV38B6zO4UX04wy2djfFYi5Zpqcc1c9UEcXg5 s3RtaAUJ+oPntomeeiR4dHBu93qOLOYwlQw/uo/FvV4SANV2eSmCqMGmgoiToZp9 MmIjoMd7aIEMrqcmxytdA/wc6BigczGy+SfX4KfPfmnI9YA94lYKZmITTsQ+4IhD OPQd7WIbfgqw3gS4lwl1puAVI0hifkVewN5PIsbsaYsSIppYnYJcVBS3Mjhy0/l0 m/fZm8gJ+uue7gOKHZg3qpyG94p6LjviKIvjqIhdfvFiIyXl0wIDAQABo4IDczCC A28wHQYDVR0OBBYEFDZxcvYG+aRFoHbXHhOqW/Ox1r3YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jNDMz MzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0ZTFjMjU2YzkvMjc4ZDQ1Y2YtZWFiNy0z YTIyLTlkNjEtMGU2MjEyZWU3NmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzQzMzM1ZGItYzU1Yi00NDNlLWIy MGMtNWM3NGUxYzI1NmM5L2M0MzMzNWRiLWM1NWItNDQzZS1iMjBjLTVjNzRlMWMy NTZjOS5jcmwwHwYDVR0jBBgwFoAUxAvagFtAIbjQ1K7dFqiSimKzZdkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jNDMzMzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0 ZTFjMjU2YzkuY2VyMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAksUbAwQA ksVPAwQAksVTAwQCksV4AwQAksXyAwQAksX2MFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABqukEPtATXFyjye SnZCOWq60IZMUGh3usE6WbITKmm9s/j3xCakIrKbfF5BVFV0yAWrKGASQOg7srUS dyvFqiSzFsp4X2Tjx0DUn89V/MmmdvuMupGQfqL11IaQNUfed8NjG+AfAM7+9Qw7 bkoQ14Xqwy0M+ok5zTEp10WkcUMmlWM5i/RHs/7fyLXfPnMlkozl908rCnovfY10 Ow9K4wm8eE7DZO710hmXm1qo7x8Ws5i/HC1OTVTEq99FlCQTdfGfUm+IH4hl/oh/ DUQcdTKBRSwwIMluh8ZXJzIn0/X+ZqTnRBNe6C1ElSREEukXn3+gnr4dyy3q/Lfp PnJIeWE= -----END CERTIFICATE-----Generated at Wed Nov 5 17:36:51 2025 by rpki-client