$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf0a4b17-afbd-3bb1-97ce-4edb22c30e6d.roa File: bf0a4b17-afbd-3bb1-97ce-4edb22c30e6d.roa (raw, json) Hash identifier: kvyeuiqXlvsvaBfmOKsCGk2BILJEee/3+0XgeD31X2w= Subject key identifier: CF:39:A3:FF:7B:E1:69:0D:2B:A6:26:AF:D6:A4:76:58:4C:FD:9D:80 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A8412393F14BEE56FD1D1D480 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf0a4b17-afbd-3bb1-97ce-4edb22c30e6d.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 146.148.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:39:3f:14:be:e5:6f:d1:d1:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=422c5c68-b9c8-4c65-ba22-7f99a670c8d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2a:eb:8a:89:7c:a2:5f:a7:ee:4d:9f:85:95: 3b:ff:d6:e4:5c:18:fe:11:bd:7e:cc:c7:5d:7f:eb: 0e:59:60:2a:db:98:ae:2d:76:c5:2c:a5:80:59:0f: 90:33:36:79:83:b1:ff:50:54:9d:8c:79:e2:d6:45: dd:05:df:bb:23:fd:79:1c:54:56:ef:30:77:66:15: c6:2e:9f:8a:ac:83:4a:72:a3:13:09:35:35:81:cf: 9a:95:66:ad:f0:36:a0:9b:3f:31:ec:ec:87:d8:76: ea:b4:de:3e:96:21:af:82:37:ad:5f:42:42:5a:80: 61:66:48:77:8d:88:a0:d2:70:42:f1:fc:9b:f4:03: 54:d9:60:55:f0:b6:a3:45:78:1e:b7:f5:c8:76:1c: 92:da:eb:9e:20:65:ca:89:4f:6d:e5:fd:75:3b:39: 15:e7:15:f0:8f:86:2a:06:48:81:ac:9a:31:82:cd: f0:cb:19:f6:21:5e:09:d4:14:4e:b4:08:fe:4e:9f: 67:3e:92:91:1c:99:9e:d6:ea:9f:3f:82:25:ca:a5: 87:23:60:ae:71:9a:52:db:ff:20:a8:db:12:36:17: b4:7a:ad:aa:2e:cb:cc:1d:8e:6b:f7:1b:bd:fa:44: f4:92:d5:b5:af:77:a4:cd:72:9c:96:13:e5:06:5b: ab:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:39:A3:FF:7B:E1:69:0D:2B:A6:26:AF:D6:A4:76:58:4C:FD:9D:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf0a4b17-afbd-3bb1-97ce-4edb22c30e6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 146.148.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:19:af:e6:f3:62:a8:ae:0b:81:7d:ba:a4:7a:33:11:8d:0c: db:64:30:4f:cc:38:5c:44:ab:c7:b7:63:17:33:50:9b:0d:00: e0:57:21:41:95:27:94:2d:31:89:61:49:10:e5:b1:79:a4:9e: 27:2e:0e:74:42:c3:a3:46:ee:80:4e:cb:b4:50:9e:ed:87:84: c7:d8:57:64:38:e7:ac:02:bd:3f:37:64:73:e9:04:83:13:6f: 2d:ff:e1:bf:55:ba:34:07:0f:eb:4a:bb:92:c6:1c:7e:95:a5: 74:d0:89:ba:e1:ea:2a:eb:b5:ca:b6:e8:83:10:5c:04:be:ab: 51:a4:f8:5a:02:58:73:09:df:cd:5b:58:8c:ba:cb:0e:82:4d: 55:00:61:30:f2:59:98:2e:6e:81:36:62:eb:33:80:b7:ed:06: 23:bf:8f:f6:32:6c:fa:7a:29:0b:f2:af:20:14:7e:87:a0:06: 98:60:14:9f:1d:49:47:29:de:cf:83:48:37:22:d0:86:14:51: 59:11:0d:09:bb:d6:b3:85:47:a9:a1:c9:8b:ff:d8:bd:db:a0: 7f:08:33:44:51:31:16:46:0c:7d:ed:ec:4b:d2:d6:d6:1a:da: 49:c8:30:2f:e7:03:8a:c0:50:96:be:e8:8c:d3:40:dc:a1:e1: 14:b0:8d:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEjk/FL7lb9HR1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NDIyYzVjNjgtYjljOC00YzY1LWJhMjItN2Y5OWE2NzBjOGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1irriol8ol+n7k2fhZU7/9bkXBj+Eb1+zMdd f+sOWWAq25iuLXbFLKWAWQ+QMzZ5g7H/UFSdjHni1kXdBd+7I/15HFRW7zB3ZhXG Lp+KrINKcqMTCTU1gc+alWat8Dagmz8x7OyH2HbqtN4+liGvgjetX0JCWoBhZkh3 jYig0nBC8fyb9ANU2WBV8LajRXget/XIdhyS2uueIGXKiU9t5f11OzkV5xXwj4Yq BkiBrJoxgs3wyxn2IV4J1BROtAj+Tp9nPpKRHJme1uqfP4IlyqWHI2CucZpS2/8g qNsSNhe0eq2qLsvMHY5r9xu9+kT0ktW1r3ekzXKclhPlBlurkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM85o/974WkNK6Ymr9akdlhM/Z2AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmYwYTRiMTctYWZiZC0z YmIxLTk3Y2UtNGVkYjIyYzMwZTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDkpQIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkZr+bzYqiuC4F9uqR6MxGNDNtkME/MOFxEq8e3YxczUJsNAOBXIUGV J5QtMYlhSRDlsXmknicuDnRCw6NG7oBOy7RQnu2HhMfYV2Q456wCvT83ZHPpBIMT by3/4b9VujQHD+tKu5LGHH6VpXTQibrh6irrtcq26IMQXAS+q1Gk+FoCWHMJ381b WIy6yw6CTVUAYTDyWZguboE2YuszgLftBiO/j/YybPp6KQvyryAUfoegBphgFJ8d SUcp3s+DSDci0IYUUVkRDQm71rOFR6mhyYv/2L3boH8IM0RRMRZGDH3t7EvS1tYa 2knIMC/nA4rAUJa+6IzTQNyh4RSwjbY= -----END CERTIFICATE-----Generated at Tue Jul 22 04:15:27 2025 by rpki-client