$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/0610398d-9c1f-3812-8722-c430863db284.roa File: 0610398d-9c1f-3812-8722-c430863db284.roa (raw, json) Hash identifier: PoUbtD2ID8E9z5ftjSMKPHeuF5/94IuGU6eLB+YPkHA= Subject key identifier: 9C:43:5D:94:A9:64:82:1C:47:8B:ED:41:76:19:90:D1:D4:8D:74:4D Certificate issuer: /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd Certificate serial: 010D0C9F4328584A8C70C77B27027D3C25F065C0 Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/0610398d-9c1f-3812-8722-c430863db284.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 7862 IP address blocks: 146.23.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:c7:7b:27:02:7d:3c:25:f0:65:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=b77222f1-8f3c-45b3-8098-8d5cfeab2f15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:eb:f8:b0:6f:68:97:5f:d7:90:a8:04:40:ba: 6b:d0:d1:1a:6c:0b:f4:1b:cf:a7:ac:9a:55:a6:c6: 66:1c:eb:bb:1d:55:e3:94:4a:04:ab:b7:de:22:45: 44:fb:91:dd:eb:93:92:f6:71:b5:23:11:32:56:9d: 93:25:01:2c:c5:7f:23:04:1d:ac:ec:0a:13:00:fe: a7:a5:a1:a1:a8:38:5c:43:72:23:a6:42:09:5f:9d: fa:82:b3:1c:b8:c5:bf:e3:9c:1e:18:3a:2d:c5:ad: b1:86:ab:e9:04:bc:3d:13:e1:57:7d:a2:76:13:3b: 4a:c8:bf:14:86:29:8d:3d:c9:6f:4d:f2:b8:f9:41: ef:a5:07:2e:73:f4:0a:93:ad:f6:54:3a:b0:86:c8: d6:e0:af:ae:2b:ad:76:ed:e1:c6:df:37:4e:77:37: 9b:86:e5:80:f0:35:9d:ce:fd:c7:b4:db:1b:fa:73: be:8a:77:d1:74:9e:81:a3:43:2f:93:f0:1b:71:fa: f6:f2:98:c7:34:77:85:52:27:bd:7c:d9:1d:86:13: 30:41:a1:18:b8:96:5b:96:53:63:e2:79:fd:16:8a: 4d:05:1c:52:3f:8c:27:9e:62:20:9e:20:83:11:8e: 78:97:16:c0:59:7b:2b:37:6c:0c:28:ce:8c:67:d5: 85:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:43:5D:94:A9:64:82:1C:47:8B:ED:41:76:19:90:D1:D4:8D:74:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/0610398d-9c1f-3812-8722-c430863db284.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl X509v3 Authority Key Identifier: keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer sbgp-ipAddrBlock: critical IPv4: 146.23.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:0f:df:83:63:3e:a8:f9:30:92:25:a6:6e:29:5c:6c:d6:5a: 97:3a:7b:a7:5f:b7:81:18:70:2b:91:2c:59:63:f2:65:d9:62: aa:34:fb:1f:b9:4f:6b:78:e9:42:d2:3a:41:e7:2f:93:fa:f7: a7:fe:0b:a9:81:c8:7e:e5:7c:2c:6b:89:2e:60:e3:aa:af:0c: 2b:ff:9c:3b:85:ce:ba:88:cf:15:f3:d0:3f:1a:8b:dd:ca:e5: 79:ab:5c:28:1c:2e:e0:fe:03:f4:29:43:4e:33:ec:a8:85:d1: 16:8c:72:18:e1:6a:ad:1b:b1:19:6b:44:70:57:0a:25:38:b7: 58:96:09:70:e5:40:92:f1:9c:00:a3:1f:6a:6f:75:69:26:bb: 0a:6e:81:d7:c6:81:d5:51:31:c1:d4:cb:1e:42:b0:5c:b0:84: 33:f7:ab:5a:91:69:5f:94:34:b2:3f:1a:c3:a9:0b:9b:77:3e: 51:ec:7e:36:39:f8:48:d9:30:27:da:3f:f2:88:c4:35:42:85: 70:e3:73:19:a5:90:e5:2a:e3:75:8a:fb:a3:c6:95:2a:97:18: dc:01:b4:40:04:9a:f0:4c:c5:36:2a:63:e6:b0:94:a5:27:67: 19:2f:f2:2b:56:35:40:a5:fd:d2:02:e6:9e:e7:8a:19:ce:bc: ab:24:d1:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMcMd7JwJ9PCXwZcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFlYTg5YjQtZWQ4NS00NjNmLTgzZDktODQ1MzMwMGJm MmJkMB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk Yjc3MjIyZjEtOGYzYy00NWIzLTgwOTgtOGQ1Y2ZlYWIyZjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOv4sG9ol1/XkKgEQLpr0NEabAv0G8+nrJpV psZmHOu7HVXjlEoEq7feIkVE+5Hd65OS9nG1IxEyVp2TJQEsxX8jBB2s7AoTAP6n paGhqDhcQ3IjpkIJX536grMcuMW/45weGDotxa2xhqvpBLw9E+FXfaJ2EztKyL8U himNPclvTfK4+UHvpQcuc/QKk632VDqwhsjW4K+uK6127eHG3zdOdzebhuWA8DWd zv3HtNsb+nO+infRdJ6Bo0Mvk/Abcfr28pjHNHeFUie9fNkdhhMwQaEYuJZbllNj 4nn9FopNBRxSP4wnnmIgniCDEY54lxbAWXsrN2wMKM6MZ9WFPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJxDXZSpZIIcR4vtQXYZkNHUjXRNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83MWVh ODliNC1lZDg1LTQ2M2YtODNkOS04NDUzMzAwYmYyYmQvMDYxMDM5OGQtOWMxZi0z ODEyLTg3MjItYzQzMDg2M2RiMjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNzFlYTg5YjQtZWQ4NS00NjNmLTgz ZDktODQ1MzMwMGJmMmJkLzcxZWE4OWI0LWVkODUtNDYzZi04M2Q5LTg0NTMzMDBi ZjJiZC5jcmwwHwYDVR0jBBgwFoAUAPoosGNeNAxamY5KWp40aTpaVmIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83MWVhODliNC1lZDg1LTQ2M2YtODNkOS04NDUz MzAwYmYyYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkhf4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKwP34NjPqj5MJIlpm4pXGzWWpc6e6dft4EYcCuRLFlj8mXZYqo0+x+5 T2t46ULSOkHnL5P696f+C6mByH7lfCxriS5g46qvDCv/nDuFzrqIzxXz0D8ai93K 5XmrXCgcLuD+A/QpQ04z7KiF0RaMchjhaq0bsRlrRHBXCiU4t1iWCXDlQJLxnACj H2pvdWkmuwpugdfGgdVRMcHUyx5CsFywhDP3q1qRaV+UNLI/GsOpC5t3PlHsfjY5 +EjZMCfaP/KIxDVChXDjcxmlkOUq43WK+6PGlSqXGNwBtEAEmvBMxTYqY+awlKUn Zxkv8itWNUCl/dIC5p7nihnOvKsk0Uo= -----END CERTIFICATE-----Generated at Mon Jul 21 12:36:22 2025 by rpki-client