$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/428ad678-24bc-37e4-b693-03a9901a94b0.roa File: 428ad678-24bc-37e4-b693-03a9901a94b0.roa (raw, json) Hash identifier: Zyf9J5YrPNJw5NorURuMKmTbVyep/faEzNR9AKRSGsw= Subject key identifier: AB:C0:A8:D8:68:E1:56:6B:58:F9:B1:83:3B:9F:E7:75:72:18:73:4A Certificate issuer: /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd Certificate serial: 010D0C9F4328584A8C70C7B0444547153BF19EE0 Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/428ad678-24bc-37e4-b693-03a9901a94b0.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 7862 IP address blocks: 146.23.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:c7:b0:44:45:47:15:3b:f1:9e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=dedb1d6b-fb42-4ad4-9eca-a7e0e03da974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:45:4c:65:83:5d:60:b7:3f:8d:43:6e:50:66: 01:81:dd:18:41:af:2a:3c:79:01:bc:28:47:8b:7d: d6:41:6d:2c:97:aa:63:1f:97:89:6d:61:21:6f:65: 55:25:96:56:c0:84:1f:6f:fa:83:12:d0:78:ad:d8: 62:ed:e9:c5:5d:37:28:c4:e6:14:eb:7c:97:02:d0: d5:53:53:d0:2f:42:cd:81:6c:4c:41:23:4a:e3:27: 8e:2a:5a:30:68:6c:74:38:a2:9e:0e:37:34:2e:72: 40:1a:e8:1a:a8:c3:11:92:ea:76:85:5b:8a:0e:ce: c6:27:1e:ee:27:1e:1f:03:44:55:67:62:0b:cc:82: 6e:47:00:7c:e4:f9:07:a5:b0:d7:a7:ad:13:f9:2c: 76:7c:0d:41:19:97:18:3a:c0:eb:b0:c1:49:59:6d: 9c:96:02:14:3c:22:e7:95:50:eb:47:eb:0e:5d:05: c3:33:9b:4a:6f:22:72:35:cb:c9:8d:58:d4:82:48: 22:48:fe:74:7e:c4:c2:0b:57:49:a5:3a:63:50:61: 55:05:75:28:d5:bf:78:bf:cd:c6:b6:07:be:0b:d3: c2:38:2a:49:6b:4b:a4:20:84:17:ef:47:16:e4:59: d0:a2:0e:6c:ad:67:c6:aa:62:f8:cc:07:6c:11:fb: 6e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:C0:A8:D8:68:E1:56:6B:58:F9:B1:83:3B:9F:E7:75:72:18:73:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/428ad678-24bc-37e4-b693-03a9901a94b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl X509v3 Authority Key Identifier: keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer sbgp-ipAddrBlock: critical IPv4: 146.23.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:e8:1f:43:63:76:39:ff:fa:3e:23:1f:b9:de:d8:5d:76:fd: 15:c8:05:46:1b:d8:3f:bc:07:f2:0d:63:0f:e7:1c:76:41:c2: 10:49:db:23:cf:0e:fa:7e:22:cf:fc:97:e6:1f:2d:43:3e:fb: 8e:a6:12:fd:42:71:8d:83:9a:7b:f2:4e:2b:ba:48:25:e0:70: 7c:1c:09:12:8b:69:52:da:24:4d:1d:b1:d9:93:2e:5e:3b:39: 16:cc:19:52:7c:e9:f3:3b:19:e4:9c:11:41:9a:fc:0f:06:a3: b7:95:5b:d4:55:1b:4f:fe:86:c3:fc:63:38:2b:44:b5:2d:25: 20:a6:ac:1a:f5:4d:70:38:14:f3:56:0f:4b:98:2f:0d:ea:ba: c5:02:7f:fc:61:ee:0b:db:3f:3e:77:f2:11:10:63:57:53:68: ac:14:7e:4b:a2:28:4a:20:53:6f:15:67:7e:30:c5:1b:61:cf: a6:c6:44:73:ce:03:c8:30:57:48:ff:b0:63:3f:56:91:a7:4a: c0:a2:d4:e9:3a:68:9e:72:87:45:38:be:d5:5b:ad:ff:3f:23: fc:8b:35:46:6e:e9:e8:73:75:ea:f6:91:65:b9:a8:84:be:d8: fa:44:50:6e:25:ce:12:03:37:bd:c7:ef:6e:10:67:61:df:49: 91:b2:59:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMcMewREVHFTvxnuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFlYTg5YjQtZWQ4NS00NjNmLTgzZDktODQ1MzMwMGJm MmJkMB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk ZGVkYjFkNmItZmI0Mi00YWQ0LTllY2EtYTdlMGUwM2RhOTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkVMZYNdYLc/jUNuUGYBgd0YQa8qPHkBvChH i33WQW0sl6pjH5eJbWEhb2VVJZZWwIQfb/qDEtB4rdhi7enFXTcoxOYU63yXAtDV U1PQL0LNgWxMQSNK4yeOKlowaGx0OKKeDjc0LnJAGugaqMMRkup2hVuKDs7GJx7u Jx4fA0RVZ2ILzIJuRwB85PkHpbDXp60T+Sx2fA1BGZcYOsDrsMFJWW2clgIUPCLn lVDrR+sOXQXDM5tKbyJyNcvJjVjUgkgiSP50fsTCC1dJpTpjUGFVBXUo1b94v83G tge+C9PCOCpJa0ukIIQX70cW5FnQog5srWfGqmL4zAdsEftuowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKvAqNho4VZrWPmxgzuf53VyGHNKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83MWVh ODliNC1lZDg1LTQ2M2YtODNkOS04NDUzMzAwYmYyYmQvNDI4YWQ2NzgtMjRiYy0z N2U0LWI2OTMtMDNhOTkwMWE5NGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNzFlYTg5YjQtZWQ4NS00NjNmLTgz ZDktODQ1MzMwMGJmMmJkLzcxZWE4OWI0LWVkODUtNDYzZi04M2Q5LTg0NTMzMDBi ZjJiZC5jcmwwHwYDVR0jBBgwFoAUAPoosGNeNAxamY5KWp40aTpaVmIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83MWVhODliNC1lZDg1LTQ2M2YtODNkOS04NDUz MzAwYmYyYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkhfGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPoH0Njdjn/+j4jH7ne2F12/RXIBUYb2D+8B/INYw/nHHZBwhBJ2yPP Dvp+Is/8l+YfLUM++46mEv1CcY2DmnvyTiu6SCXgcHwcCRKLaVLaJE0dsdmTLl47 ORbMGVJ86fM7GeScEUGa/A8Go7eVW9RVG0/+hsP8YzgrRLUtJSCmrBr1TXA4FPNW D0uYLw3qusUCf/xh7gvbPz538hEQY1dTaKwUfkuiKEogU28VZ34wxRthz6bGRHPO A8gwV0j/sGM/VpGnSsCi1Ok6aJ5yh0U4vtVbrf8/I/yLNUZu6ehzder2kWW5qIS+ 2PpEUG4lzhIDN73H724QZ2HfSZGyWdM= -----END CERTIFICATE-----Generated at Mon Jul 21 12:39:56 2025 by rpki-client