$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/46cff164-e5e3-3ec5-83d0-2751e8d546f3.roa File: 46cff164-e5e3-3ec5-83d0-2751e8d546f3.roa (raw, json) Hash identifier: vXQwp4cPySJPBOV/fc/50vYT1Y4iCp1rTRq2B0cP6nA= Subject key identifier: 8E:A8:3E:3A:D8:E9:D3:BB:C5:7D:B0:46:9F:4A:CC:C2:92:DB:68:4A Certificate issuer: /CN=146a096d-134a-4c52-9243-da3981810107 Certificate serial: 010D0C9F4328584B1806EED3830DA0351190F500 Authority key identifier: 8F:11:51:BB:3C:25:40:6A:C7:4F:EB:65:C9:D8:3C:34:D2:A3:A3:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/46cff164-e5e3-3ec5-83d0-2751e8d546f3.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 26658 IP address blocks: 104.243.138.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:ee:d3:83:0d:a0:35:11:90:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=146a096d-134a-4c52-9243-da3981810107 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=27cb9853-cb60-4445-b77c-a977fa96b3e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:24:11:d9:84:87:62:5c:4a:e0:0d:f1:59:d9: c2:cb:4e:65:8d:1d:21:ae:7f:fa:b5:d3:bc:dd:98: 15:69:f1:53:a6:82:c5:ae:67:16:5f:4e:0f:3e:29: 0a:49:8a:c7:d3:ed:6c:3e:17:38:7e:59:4f:d9:69: 40:75:2b:b3:76:fd:0a:f9:ef:5c:31:d5:37:dd:4e: 57:03:ac:04:33:d4:02:d0:66:99:86:03:cc:80:ea: 4d:4b:dc:6a:05:7c:3b:d0:2a:df:3a:5b:db:0c:1f: b3:0e:bd:51:0e:d2:60:cf:02:f9:26:f1:55:e9:9d: 8d:ce:72:38:06:8b:52:74:9c:96:86:cc:b6:65:e6: c9:b7:a7:8f:bd:94:03:fd:84:0b:30:ab:16:00:25: 33:72:c4:81:b0:2f:2e:08:ee:f1:8c:05:ec:1e:fb: 65:bd:21:5a:b3:a1:ed:49:3c:f0:6b:95:84:42:2a: 1f:46:15:60:c7:4f:b3:a2:e7:c4:7b:0b:6c:2f:a1: 31:62:2b:7e:06:10:6c:0b:48:5f:4b:d0:26:6e:87: 7b:fd:b9:92:f7:2f:15:71:e1:6a:fa:21:74:f4:b9: 3a:84:3f:eb:85:db:27:17:9d:d3:fe:76:69:f8:bd: 25:2d:87:64:56:02:12:af:59:f9:67:a8:1a:6e:62: ed:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A8:3E:3A:D8:E9:D3:BB:C5:7D:B0:46:9F:4A:CC:C2:92:DB:68:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/46cff164-e5e3-3ec5-83d0-2751e8d546f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.crl X509v3 Authority Key Identifier: keyid:8F:11:51:BB:3C:25:40:6A:C7:4F:EB:65:C9:D8:3C:34:D2:A3:A3:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer sbgp-ipAddrBlock: critical IPv4: 104.243.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:78:63:96:58:93:d0:1f:67:b0:d3:6f:1a:38:f7:f6:18:eb: c4:44:40:7a:df:a9:8c:4a:44:75:ff:b1:63:b9:f3:bf:b1:42: 72:4b:2c:3c:8e:d4:3c:05:35:72:82:38:f0:bd:c6:2f:1b:68: c2:34:cf:0d:c5:5d:23:7a:69:36:99:e9:eb:b7:4a:ea:62:02: cd:f3:7e:d7:65:61:cd:f7:25:54:f5:58:af:b7:77:6c:da:fd: ea:30:c6:ae:cb:ee:dc:86:09:cd:a5:3d:cf:8e:c4:2c:ee:b9: fc:a7:cb:ae:1d:ea:25:6b:0f:cd:59:da:33:42:49:20:1e:0d: 16:aa:4d:a8:70:21:a9:ad:94:65:9d:b4:f2:a9:5c:7f:83:9b: e1:9c:f5:a4:63:15:9b:ab:3e:43:3c:bf:aa:37:db:b3:c9:c8: 0e:39:3e:91:3d:db:88:1f:4c:83:f1:83:3c:fb:c2:35:f1:dd: 49:95:ff:be:78:e0:73:99:c7:9d:df:e0:23:66:e3:aa:45:e6: eb:e7:61:32:86:7b:07:47:67:ed:9e:f3:9b:a1:2e:d5:1d:39: ac:42:e4:0c:4f:a9:21:5d:62:4c:ca:e7:53:b4:7a:08:ca:0e: cf:98:d4:aa:b6:30:02:6a:67:9c:3b:98:4a:ea:44:59:41:f3: bb:5e:b7:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBu7Tgw2gNRGQ9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQ2YTA5NmQtMTM0YS00YzUyLTkyNDMtZGEzOTgxODEw MTA3MB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk MjdjYjk4NTMtY2I2MC00NDQ1LWI3N2MtYTk3N2ZhOTZiM2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiQR2YSHYlxK4A3xWdnCy05ljR0hrn/6tdO8 3ZgVafFTpoLFrmcWX04PPikKSYrH0+1sPhc4fllP2WlAdSuzdv0K+e9cMdU33U5X A6wEM9QC0GaZhgPMgOpNS9xqBXw70CrfOlvbDB+zDr1RDtJgzwL5JvFV6Z2NznI4 BotSdJyWhsy2ZebJt6ePvZQD/YQLMKsWACUzcsSBsC8uCO7xjAXsHvtlvSFas6Ht STzwa5WEQiofRhVgx0+zoufEewtsL6ExYit+BhBsC0hfS9Ambod7/bmS9y8VceFq +iF09Lk6hD/rhdsnF53T/nZp+L0lLYdkVgISr1n5Z6gabmLt1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6oPjrY6dO7xX2wRp9KzMKS22hKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNDZh MDk2ZC0xMzRhLTRjNTItOTI0My1kYTM5ODE4MTAxMDcvNDZjZmYxNjQtZTVlMy0z ZWM1LTgzZDAtMjc1MWU4ZDU0NmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTQ2YTA5NmQtMTM0YS00YzUyLTky NDMtZGEzOTgxODEwMTA3LzE0NmEwOTZkLTEzNGEtNGM1Mi05MjQzLWRhMzk4MTgx MDEwNy5jcmwwHwYDVR0jBBgwFoAUjxFRuzwlQGrHT+tlydg8NNKjo5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNDZhMDk2ZC0xMzRhLTRjNTItOTI0My1kYTM5 ODE4MTAxMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaPOKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGB4Y5ZYk9AfZ7DTbxo49/YY68REQHrfqYxKRHX/sWO587+xQnJLLDyO 1DwFNXKCOPC9xi8baMI0zw3FXSN6aTaZ6eu3SupiAs3zftdlYc33JVT1WK+3d2za /eowxq7L7tyGCc2lPc+OxCzuufyny64d6iVrD81Z2jNCSSAeDRaqTahwIamtlGWd tPKpXH+Dm+Gc9aRjFZurPkM8v6o327PJyA45PpE924gfTIPxgzz7wjXx3UmV/754 4HOZx53f4CNm46pF5uvnYTKGewdHZ+2e85uhLtUdOaxC5AxPqSFdYkzK51O0egjK Ds+Y1Kq2MAJqZ5w7mErqRFlB87tet+k= -----END CERTIFICATE-----Generated at Tue Sep 9 09:02:48 2025 by rpki-client