$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed2676f-2a52-4e10-9b06-0b423a5503c5/0695405f-cab2-3ced-b90a-839f4ae4640c.roa File: 0695405f-cab2-3ced-b90a-839f4ae4640c.roa (raw, json) Hash identifier: YFinIFyVufknepzIB0n/NmUUbJVcnORaIDMbBOzgLKs= Subject key identifier: 98:D8:85:70:FA:49:03:14:04:D9:2F:4D:12:F7:F9:B8:44:16:37:31 Certificate issuer: /CN=aed2676f-2a52-4e10-9b06-0b423a5503c5 Certificate serial: 010D0C9F4328584B636748942B8FB7D6B33B3980 Authority key identifier: C1:19:25:DA:B2:BB:05:C1:B7:75:96:C1:27:16:FC:6C:77:AF:76:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed2676f-2a52-4e10-9b06-0b423a5503c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed2676f-2a52-4e10-9b06-0b423a5503c5/0695405f-cab2-3ced-b90a-839f4ae4640c.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 11452 IP address blocks: 146.203.136.0/21 maxlen: 24 146.203.144.0/22 maxlen: 24 146.203.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed2676f-2a52-4e10-9b06-0b423a5503c5/aed2676f-2a52-4e10-9b06-0b423a5503c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed2676f-2a52-4e10-9b06-0b423a5503c5/aed2676f-2a52-4e10-9b06-0b423a5503c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed2676f-2a52-4e10-9b06-0b423a5503c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:48:94:2b:8f:b7:d6:b3:3b:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aed2676f-2a52-4e10-9b06-0b423a5503c5 Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=a3c484d9-b342-4de6-ba03-4b03784736cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:33:1a:3e:05:b1:ef:46:03:2f:cd:1a:da:c4: b3:b4:10:31:6d:9a:e1:80:1f:11:2b:85:1a:b1:b0: 93:fb:cc:55:eb:60:62:17:49:4a:d3:42:b7:e0:df: c2:8f:09:75:5b:5f:52:10:14:2d:81:e1:6a:63:b0: b3:b7:5a:66:96:78:ca:50:a3:52:47:98:cb:fe:41: 5e:f4:05:cc:23:6d:de:d9:45:8b:2c:ee:c1:d1:46: b9:bc:25:d7:d9:48:59:05:8c:e9:ae:ce:e7:2f:71: 92:18:3b:8b:b6:00:cc:3f:93:2e:f2:80:fb:be:d2: d2:5d:a8:6e:55:5c:8a:fd:f1:d9:8c:aa:0b:1c:4f: c8:92:ba:43:18:43:78:27:f6:ac:a0:58:33:25:83: 10:3e:be:1c:ef:28:bb:09:72:47:15:d9:65:bf:3f: eb:cf:22:8d:c2:86:25:aa:5e:4f:90:9a:9d:80:7f: be:d6:9b:4b:f5:27:01:7f:b6:2c:ce:c9:6e:22:a5: 81:b3:cc:db:dc:2e:6b:e6:1c:72:32:02:91:21:67: 1f:8b:6d:ef:31:cb:15:14:25:ac:0c:4d:26:1a:e1: 02:21:67:05:08:a9:e1:1e:3d:f8:3a:50:58:f9:36: 32:bb:26:ef:0a:d4:fe:71:2a:a0:45:20:76:20:4f: f8:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D8:85:70:FA:49:03:14:04:D9:2F:4D:12:F7:F9:B8:44:16:37:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed2676f-2a52-4e10-9b06-0b423a5503c5/0695405f-cab2-3ced-b90a-839f4ae4640c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed2676f-2a52-4e10-9b06-0b423a5503c5/aed2676f-2a52-4e10-9b06-0b423a5503c5.crl X509v3 Authority Key Identifier: keyid:C1:19:25:DA:B2:BB:05:C1:B7:75:96:C1:27:16:FC:6C:77:AF:76:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed2676f-2a52-4e10-9b06-0b423a5503c5.cer sbgp-ipAddrBlock: critical IPv4: 146.203.136.0-146.203.151.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:b7:0f:6c:43:02:54:fb:59:60:b7:54:1d:4f:0b:17:66:fa: bc:cf:a2:74:ee:88:56:a1:81:dc:a5:20:fb:57:17:96:0a:f7: b1:d2:b3:39:a0:13:e2:54:ab:9e:e8:a5:5d:27:80:7d:c3:86: 0a:39:1e:fc:f1:1c:82:85:07:9b:a5:3d:b0:0d:49:2d:01:96: da:bc:b0:17:69:4c:aa:63:0b:64:e9:03:7b:8c:a0:8a:40:ee: 5c:c6:ca:80:58:7a:fc:ec:0f:a2:d6:d2:e4:67:1f:41:6e:a3: 0a:d3:33:43:b6:03:4a:b4:29:25:8b:4c:58:e4:8d:d6:8b:15: f8:6b:ec:a8:71:d6:a4:85:96:ca:24:41:a5:d3:5e:9f:68:77: 71:1f:de:97:a8:9a:50:dd:4d:d9:f0:ba:90:63:2e:9f:94:af: 25:cd:80:e8:2b:3a:3d:9e:28:db:e9:0f:89:29:61:4a:40:4d: 0a:d4:6d:b0:fc:92:aa:25:c5:67:e1:dc:ad:94:ac:93:95:b2: 5f:00:23:b0:27:3f:34:7f:58:bc:47:2f:cd:89:42:8a:0f:ed: c2:6a:09:93:96:ba:7e:e1:ff:ec:34:9e:0d:ad:81:a4:26:27: ca:eb:9e:a5:6a:c7:fd:cc:d1:be:77:48:fe:c7:94:5e:f8:ef: 65:a2:1e:78 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEtjZ0iUK4+31rM7OYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWVkMjY3NmYtMmE1Mi00ZTEwLTliMDYtMGI0MjNhNTUw M2M1MB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk YTNjNDg0ZDktYjM0Mi00ZGU2LWJhMDMtNGIwMzc4NDczNmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzMaPgWx70YDL80a2sSztBAxbZrhgB8RK4Ua sbCT+8xV62BiF0lK00K34N/Cjwl1W19SEBQtgeFqY7Czt1pmlnjKUKNSR5jL/kFe 9AXMI23e2UWLLO7B0Ua5vCXX2UhZBYzprs7nL3GSGDuLtgDMP5Mu8oD7vtLSXahu VVyK/fHZjKoLHE/IkrpDGEN4J/asoFgzJYMQPr4c7yi7CXJHFdllvz/rzyKNwoYl ql5PkJqdgH++1ptL9ScBf7YszsluIqWBs8zb3C5r5hxyMgKRIWcfi23vMcsVFCWs DE0mGuECIWcFCKnhHj34OlBY+TYyuybvCtT+cSqgRSB2IE/4/wIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFJjYhXD6SQMUBNkvTRL3+bhEFjcxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hZWQy Njc2Zi0yYTUyLTRlMTAtOWIwNi0wYjQyM2E1NTAzYzUvMDY5NTQwNWYtY2FiMi0z Y2VkLWI5MGEtODM5ZjRhZTQ2NDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWVkMjY3NmYtMmE1Mi00ZTEwLTli MDYtMGI0MjNhNTUwM2M1L2FlZDI2NzZmLTJhNTItNGUxMC05YjA2LTBiNDIzYTU1 MDNjNS5jcmwwHwYDVR0jBBgwFoAUwRkl2rK7BcG3dZbBJxb8bHevdn4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hZWQyNjc2Zi0yYTUyLTRlMTAtOWIwNi0wYjQy M2E1NTAzYzUuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAOSy4gD BAOSy5AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAabcPbEMCVPtZYLdUHU8LF2b6vM+idO6IVqGB3KUg+1cX lgr3sdKzOaAT4lSrnuilXSeAfcOGCjke/PEcgoUHm6U9sA1JLQGW2rywF2lMqmML ZOkDe4ygikDuXMbKgFh6/OwPotbS5GcfQW6jCtMzQ7YDSrQpJYtMWOSN1osV+Gvs qHHWpIWWyiRBpdNen2h3cR/el6iaUN1N2fC6kGMun5SvJc2A6Cs6PZ4o2+kPiSlh SkBNCtRtsPySqiXFZ+HcrZSsk5WyXwAjsCc/NH9YvEcvzYlCig/twmoJk5a6fuH/ 7DSeDa2BpCYnyuuepWrH/czRvndI/seUXvjvZaIeeA== -----END CERTIFICATE-----Generated at Mon Nov 3 08:27:21 2025 by rpki-client