$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/437dc54a-5df5-31db-a160-9f56a183b007.roa File: 437dc54a-5df5-31db-a160-9f56a183b007.roa (raw, json) Hash identifier: +GgvTRc8rmdmfdaaM9rGIZ2kYei6OzNozOcW5NW3/zY= Subject key identifier: D8:94:6B:43:D7:93:1E:5B:FB:69:6C:4B:50:55:35:F8:D2:90:1C:3A Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEDDA9B2763DD131CE37F4A80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/437dc54a-5df5-31db-a160-9f56a183b007.roa Signing time: Thu 21 Aug 2025 10:27:48 +0000 ROA not before: Thu 21 Aug 2025 10:27:48 +0000 ROA not after: Wed 19 Nov 2025 11:27:48 +0000 asID: 31898 IP address blocks: 146.235.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ed:da:9b:27:63:dd:13:1c:e3:7f:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 10:27:48 2025 GMT Not After : Nov 19 11:27:48 2025 GMT Subject: CN=f69bec30-3c6b-498d-a311-618437a47245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:22:3a:26:9b:d3:fa:bf:88:f4:4e:e6:cf:a2: 66:0e:63:50:0b:1b:ea:7c:2e:67:b0:44:4f:dd:68: f2:b5:ea:70:84:d3:40:6c:e7:2b:f5:9e:af:92:9f: fe:fe:28:fe:ea:f5:10:44:0e:38:25:cd:3f:e8:1f: 46:a4:fb:3c:82:40:96:fa:30:4d:8e:cf:a2:c7:0f: ea:a5:8d:88:04:39:1f:0f:13:9f:fe:e8:89:ed:89: 56:48:fa:56:bc:b9:3b:ad:13:53:a5:f0:e6:2f:65: 2f:d2:71:78:d7:8e:e1:3d:1b:56:74:e8:9a:33:88: 08:cc:27:be:d5:db:90:67:b0:b7:04:6d:7c:48:1b: 95:5f:d2:dc:72:db:e3:2a:89:90:d0:3f:18:d4:cf: 57:b7:62:e9:b2:8c:3f:37:f4:19:fa:07:1d:8e:9a: 3f:70:5b:e3:0c:c6:fe:ad:03:fa:6a:4f:86:2c:02: c2:4d:ef:3d:ef:9c:b2:dc:47:a6:94:0f:32:20:92: e0:43:85:28:a9:8e:ef:a1:4d:d8:77:52:62:08:ba: f0:f4:16:a6:ef:8d:73:fe:e9:7a:6c:92:33:38:b0: fd:c6:b7:10:19:b2:52:5d:4e:52:26:a3:9a:d9:1b: 85:8f:f2:a7:bf:d7:5d:41:cf:4e:62:40:3c:14:9e: a5:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:94:6B:43:D7:93:1E:5B:FB:69:6C:4B:50:55:35:F8:D2:90:1C:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/437dc54a-5df5-31db-a160-9f56a183b007.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 146.235.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:94:9e:e8:aa:77:b6:91:8b:f5:34:25:72:87:72:8c:b4:01: 22:0d:81:8a:9c:6b:58:fa:9e:e5:f6:62:5a:9b:54:44:11:4e: 9b:d6:2c:10:d5:64:02:0f:13:3f:40:cb:57:7a:7b:08:69:9c: e0:5e:dd:bb:6e:bc:0f:14:c1:81:99:61:8e:23:01:27:8d:76: 4f:1f:e1:6d:52:d4:eb:f5:77:05:59:ff:bf:c6:71:0f:94:24: aa:d8:d2:74:b8:3c:4d:ff:a2:e5:df:74:c3:e4:8b:5c:24:8f: 2c:1e:34:28:8d:13:62:a1:66:e2:03:f8:89:8a:b2:5f:17:96: d3:06:7a:98:ee:13:60:a3:68:a5:f7:d1:bc:7f:14:5d:66:01: 23:e3:fb:9a:13:64:e0:72:2c:43:c0:c6:74:01:7f:98:ab:1b: e1:47:d1:93:f5:b4:1f:7d:60:34:c0:04:dd:c8:63:f2:2b:48: 69:22:a0:2d:05:7c:af:63:ee:7f:d5:ce:9c:c7:39:59:39:c8: 5c:66:c6:60:75:81:a2:72:a4:84:9b:df:7b:ed:90:e4:a9:e4: 4d:3e:cf:00:a8:cd:4d:b9:1e:fe:83:da:7f:35:90:23:d2:70: 38:ad:a0:4d:b2:d0:48:d2:88:7c:55:ad:7e:9e:d4:75:9f:fb: c9:36:7c:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErt2psnY90THON/SoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTEwMjc0OFoXDTI1MTExOTExMjc0OFowLzEtMCsGA1UEAxMk ZjY5YmVjMzAtM2M2Yi00OThkLWEzMTEtNjE4NDM3YTQ3MjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiI6JpvT+r+I9E7mz6JmDmNQCxvqfC5nsERP 3WjytepwhNNAbOcr9Z6vkp/+/ij+6vUQRA44Jc0/6B9GpPs8gkCW+jBNjs+ixw/q pY2IBDkfDxOf/uiJ7YlWSPpWvLk7rRNTpfDmL2Uv0nF4147hPRtWdOiaM4gIzCe+ 1duQZ7C3BG18SBuVX9LcctvjKomQ0D8Y1M9Xt2Lpsow/N/QZ+gcdjpo/cFvjDMb+ rQP6ak+GLALCTe8975yy3EemlA8yIJLgQ4UoqY7voU3Yd1JiCLrw9Bam741z/ul6 bJIzOLD9xrcQGbJSXU5SJqOa2RuFj/Knv9ddQc9OYkA8FJ6l/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNiUa0PXkx5b+2lsS1BVNfjSkBw6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDM3ZGM1NGEtNWRmNS0z MWRiLWExNjAtOWY1NmExODNiMDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDkusYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyUnuiqd7aRi/U0JXKHcoy0ASINgYqca1j6nuX2YlqbVEQRTpvWLBDV ZAIPEz9Ay1d6ewhpnOBe3btuvA8UwYGZYY4jASeNdk8f4W1S1Ov1dwVZ/7/GcQ+U JKrY0nS4PE3/ouXfdMPki1wkjyweNCiNE2KhZuID+ImKsl8XltMGepjuE2CjaKX3 0bx/FF1mASPj+5oTZOByLEPAxnQBf5irG+FH0ZP1tB99YDTABN3IY/IrSGkioC0F fK9j7n/VzpzHOVk5yFxmxmB1gaJypISb33vtkOSp5E0+zwCozU25Hv6D2n81kCPS cDitoE2y0EjSiHxVrX6e1HWf+8k2fKg= -----END CERTIFICATE-----Generated at Wed Nov 5 07:05:45 2025 by rpki-client