$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/8a110ca9-4317-37af-a1ec-02cabe42ead9.roa File: 8a110ca9-4317-37af-a1ec-02cabe42ead9.roa (raw, json) Hash identifier: veVFxnHvac/1m1DqLlwHtj6Km2EeemoLXyglMGwbv9E= Subject key identifier: E5:AE:82:DF:31:78:6E:61:52:38:20:43:99:19:DB:BD:0F:51:2E:A1 Certificate issuer: /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd Certificate serial: 010D0C9F4328584F8578730607427C1B80126620 Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/8a110ca9-4317-37af-a1ec-02cabe42ead9.roa Signing time: Fri 16 Oct 2026 13:00:12 +0000 ROA not before: Fri 16 Oct 2026 13:00:12 +0000 ROA not after: Thu 14 Jan 2027 14:00:12 +0000 asID: 7862 IP address blocks: 146.23.40.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:85:78:73:06:07:42:7c:1b:80:12:66:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd Validity Not Before: Oct 16 13:00:12 2026 GMT Not After : Jan 14 14:00:12 2027 GMT Subject: CN=57e5c81a-f4e0-44bb-af35-945f2603b03f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:16:2a:47:15:c2:99:d0:e2:64:8d:28:eb:f3: 16:4b:b5:dd:34:66:0d:27:c2:2e:09:fd:a5:99:66: f9:57:b9:05:27:f3:7e:3d:c2:b0:f4:d2:af:52:b0: b8:09:b2:fb:8c:f9:0c:64:14:0f:d3:31:4c:87:a6: e7:61:58:84:3f:45:14:9e:59:49:a5:86:23:ee:b9: a5:03:21:b4:b6:06:f1:b6:50:28:2a:dd:02:2d:3d: d1:d6:3d:cf:bd:ae:40:96:09:45:0a:7b:7f:ef:e4: 4b:5a:5f:0b:bd:13:42:21:32:a1:ad:64:1c:be:72: b7:b7:df:77:b6:5a:32:b7:5d:47:58:f1:0c:a3:28: 89:7b:21:ce:ff:62:dc:3a:6b:14:83:28:45:91:4d: f2:16:56:ca:23:83:36:f0:5a:da:a2:2c:5b:01:18: 09:71:c0:7b:af:57:f6:e5:7b:49:fe:da:20:21:69: 2d:f7:17:e1:4c:e8:56:f3:e8:a1:58:2c:16:06:d8: 29:07:3e:7c:e3:3a:09:96:67:79:08:31:b8:ab:8f: 2a:b1:98:57:df:36:73:a4:5d:ca:48:80:71:1f:34: 57:05:d7:54:1f:57:b5:3a:e7:ea:17:af:b0:33:91: 4a:b6:b8:8d:ed:18:d7:11:17:ca:88:b4:18:4b:89: 78:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:AE:82:DF:31:78:6E:61:52:38:20:43:99:19:DB:BD:0F:51:2E:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/8a110ca9-4317-37af-a1ec-02cabe42ead9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl X509v3 Authority Key Identifier: keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer sbgp-ipAddrBlock: critical IPv4: 146.23.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:f9:b8:3b:a7:dd:e9:df:40:47:e9:38:1f:8d:29:0f:8e:f9: a9:20:83:25:c5:3d:df:f5:52:4f:8c:cd:7d:55:62:e1:15:6c: 4c:d0:93:9a:89:52:e7:46:45:7a:dd:ef:0a:7b:51:a3:5c:69: 3b:5c:1b:45:2f:79:73:42:98:8e:d6:76:e4:51:85:88:ca:ac: 84:e8:d7:f9:38:b6:15:16:f1:97:fe:23:07:a6:d7:e6:c5:a7: e1:bf:2b:45:25:ad:b7:23:e6:c3:d2:63:27:48:3a:17:e8:af: 76:fc:88:fa:f0:e3:81:b2:d9:77:1b:d4:06:7e:c2:ce:ec:29: a8:1b:4f:09:10:23:5f:17:a1:22:c2:b1:bb:ae:ed:52:25:3b: 63:50:9a:e4:31:43:73:c0:dc:bb:cb:7d:a3:13:04:86:98:9c: b2:86:44:bf:62:83:e3:6e:b5:54:8c:6a:29:1e:dc:f2:47:e5: 3f:96:6b:63:ae:12:07:e5:c9:24:27:3f:5a:7f:3c:37:c2:1d: d0:46:09:46:51:5c:a6:7d:38:36:d0:b9:76:da:88:29:a5:f2: 2d:71:87:72:2b:47:45:bb:3d:7b:5b:75:b5:c2:f2:9d:81:c0: 57:96:14:26:53:fb:6f:82:9c:20:01:96:0f:a6:01:11:b1:97: 41:20:07:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+FeHMGB0J8G4ASZiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFlYTg5YjQtZWQ4NS00NjNmLTgzZDktODQ1MzMwMGJm MmJkMB4XDTI2MTAxNjEzMDAxMloXDTI3MDExNDE0MDAxMlowLzEtMCsGA1UEAxMk NTdlNWM4MWEtZjRlMC00NGJiLWFmMzUtOTQ1ZjI2MDNiMDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthYqRxXCmdDiZI0o6/MWS7XdNGYNJ8IuCf2l mWb5V7kFJ/N+PcKw9NKvUrC4CbL7jPkMZBQP0zFMh6bnYViEP0UUnllJpYYj7rml AyG0tgbxtlAoKt0CLT3R1j3Pva5AlglFCnt/7+RLWl8LvRNCITKhrWQcvnK3t993 tloyt11HWPEMoyiJeyHO/2LcOmsUgyhFkU3yFlbKI4M28FraoixbARgJccB7r1f2 5XtJ/togIWkt9xfhTOhW8+ihWCwWBtgpBz584zoJlmd5CDG4q48qsZhX3zZzpF3K SIBxHzRXBddUH1e1OufqF6+wM5FKtriN7RjXERfKiLQYS4l4EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOWugt8xeG5hUjggQ5kZ270PUS6hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83MWVh ODliNC1lZDg1LTQ2M2YtODNkOS04NDUzMzAwYmYyYmQvOGExMTBjYTktNDMxNy0z N2FmLWExZWMtMDJjYWJlNDJlYWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNzFlYTg5YjQtZWQ4NS00NjNmLTgz ZDktODQ1MzMwMGJmMmJkLzcxZWE4OWI0LWVkODUtNDYzZi04M2Q5LTg0NTMzMDBi ZjJiZC5jcmwwHwYDVR0jBBgwFoAUAPoosGNeNAxamY5KWp40aTpaVmIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83MWVhODliNC1lZDg1LTQ2M2YtODNkOS04NDUz MzAwYmYyYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkhcoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAP5uDun3enfQEfpOB+NKQ+O+akggyXFPd/1Uk+MzX1VYuEVbEzQk5qJ UudGRXrd7wp7UaNcaTtcG0UveXNCmI7WduRRhYjKrITo1/k4thUW8Zf+Iwem1+bF p+G/K0Ulrbcj5sPSYydIOhfor3b8iPrw44Gy2Xcb1AZ+ws7sKagbTwkQI18XoSLC sbuu7VIlO2NQmuQxQ3PA3LvLfaMTBIaYnLKGRL9ig+NutVSMaike3PJH5T+Wa2Ou EgflySQnP1p/PDfCHdBGCUZRXKZ9ODbQuXbaiCml8i1xh3IrR0W7PXtbdbXC8p2B wFeWFCZT+2+CnCABlg+mARGxl0EgB+Y= -----END CERTIFICATE-----Generated at Tue Oct 27 18:19:10 2026 by rpki-client