$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b3745376-4e89-3ae3-a5ff-146551bf68e2.roa File: b3745376-4e89-3ae3-a5ff-146551bf68e2.roa (raw, json) Hash identifier: qDuR2gM4Su7HjfrsCNCQCZQkDiPBmyg1+nkPlM4kcMI= Subject key identifier: 3E:22:1E:DC:85:5A:4A:D1:11:24:8B:7E:A6:F5:55:F5:57:D2:E2:24 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D24E0FA16AB0CDAC9DA10B700 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b3745376-4e89-3ae3-a5ff-146551bf68e2.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 146.148.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:fa:16:ab:0c:da:c9:da:10:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=22a2bd3b-c83c-415d-86d6-4e16e6b9d1e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:dd:fd:30:9b:bd:4d:a0:29:8c:66:a8:d0:fb: 31:01:c1:80:06:d0:1b:30:62:ee:36:17:f4:53:6b: 24:72:79:d4:bd:6a:95:d7:72:00:fc:5c:68:5c:34: ea:eb:5d:d5:8c:3e:6e:2c:02:83:f9:c3:db:66:3b: b4:13:1a:c3:62:3a:81:f9:8b:b5:0c:b1:7b:3a:1a: 79:3e:3e:b1:07:9a:a3:eb:34:43:75:67:8c:98:8e: 8d:18:35:8f:d3:9b:ef:ef:1a:89:01:bc:3e:e2:6d: 9f:3b:01:1b:ac:8d:af:bb:02:3b:25:9a:f0:fb:7f: e4:ea:b5:f5:f4:4a:6a:30:7e:b0:09:ea:af:7a:bb: 41:52:38:62:bf:c1:fd:6c:bf:11:1a:48:52:7e:c3: 38:e5:32:36:d5:46:5a:cc:60:7e:0d:c7:59:d7:6c: 05:ce:39:91:69:0f:0f:e5:6a:95:af:7e:d1:64:c5: 15:86:0e:b4:8a:1e:cb:78:ac:80:f0:01:1f:85:d6: c5:8c:bc:4e:a9:bb:56:00:98:4b:32:11:32:63:ed: db:2b:ce:4e:f5:a3:40:ae:2f:47:51:e1:83:15:7c: 18:8b:bf:e6:8d:83:56:1e:cb:9d:ff:0d:eb:80:44: 4f:ad:84:98:4c:63:cc:6a:1a:5d:1a:e1:1b:59:bc: a2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:22:1E:DC:85:5A:4A:D1:11:24:8B:7E:A6:F5:55:F5:57:D2:E2:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b3745376-4e89-3ae3-a5ff-146551bf68e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 146.148.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:87:eb:f7:ee:50:93:d6:a8:2d:29:1e:d5:ef:9f:ef:18:fc: ea:c4:04:00:4c:a7:d0:ba:40:41:6f:47:ef:15:0a:a8:60:0b: c0:44:5e:a1:c7:78:28:a2:b0:0f:3a:a5:b5:cf:ce:6c:e1:b4: ea:77:3a:cc:26:e3:a8:1a:ba:b2:8e:25:c0:a3:89:68:ba:04: 2f:25:fb:98:02:a4:a0:a6:f1:8c:8b:49:df:12:04:9a:ea:af: 05:2b:67:b1:10:b6:dc:e3:8e:40:10:6e:8b:8f:9f:4f:cd:fa: 01:41:9f:1f:e1:32:e9:67:fe:32:ca:64:cf:18:f3:be:a6:85: 8c:de:3b:30:ea:12:bd:5d:f0:0a:41:bb:b2:0f:89:fe:05:f0: e7:29:ff:ca:06:57:70:fd:2d:6c:31:3f:56:ee:c5:32:ee:52: 6c:53:7e:84:c0:85:cd:6c:4e:04:11:c8:39:6d:17:84:d1:46: c7:b5:c4:9e:4d:a0:42:37:73:e6:bf:35:20:87:8e:06:00:db: e6:15:f1:09:88:1d:17:21:d6:7c:5e:c7:d2:01:a0:f1:25:7f: 44:c2:30:c1:55:d8:28:2a:f3:e6:ff:d5:b6:9a:28:c7:5c:ef: b1:eb:bd:6c:eb:30:6a:25:35:e4:59:a4:d2:be:fb:90:12:03: 5d:5b:d7:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4PoWqwzaydoQtwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MjJhMmJkM2ItYzgzYy00MTVkLTg2ZDYtNGUxNmU2YjlkMWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuN39MJu9TaApjGao0PsxAcGABtAbMGLuNhf0 U2skcnnUvWqV13IA/FxoXDTq613VjD5uLAKD+cPbZju0ExrDYjqB+Yu1DLF7Ohp5 Pj6xB5qj6zRDdWeMmI6NGDWP05vv7xqJAbw+4m2fOwEbrI2vuwI7JZrw+3/k6rX1 9EpqMH6wCeqvertBUjhiv8H9bL8RGkhSfsM45TI21UZazGB+DcdZ12wFzjmRaQ8P 5WqVr37RZMUVhg60ih7LeKyA8AEfhdbFjLxOqbtWAJhLMhEyY+3bK85O9aNAri9H UeGDFXwYi7/mjYNWHsud/w3rgERPrYSYTGPMahpdGuEbWbyi3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4iHtyFWkrRESSLfqb1VfVX0uIkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjM3NDUzNzYtNGU4OS0z YWUzLWE1ZmYtMTQ2NTUxYmY2OGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkpQCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyH6/fuUJPWqC0pHtXvn+8Y/OrEBABMp9C6QEFvR+8VCqhgC8BEXqHH eCiisA86pbXPzmzhtOp3Oswm46gaurKOJcCjiWi6BC8l+5gCpKCm8YyLSd8SBJrq rwUrZ7EQttzjjkAQbouPn0/N+gFBnx/hMuln/jLKZM8Y876mhYzeOzDqEr1d8ApB u7IPif4F8Ocp/8oGV3D9LWwxP1buxTLuUmxTfoTAhc1sTgQRyDltF4TRRse1xJ5N oEI3c+a/NSCHjgYA2+YV8QmIHRch1nxex9IBoPElf0TCMMFV2Cgq8+b/1baaKMdc 77HrvWzrMGolNeRZpNK++5ASA11b1zY= -----END CERTIFICATE-----Generated at Thu Mar 19 01:52:20 2026 by rpki-client