$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/00f44ccb-b32f-33ba-8188-efb6deda08f8.roa File: 00f44ccb-b32f-33ba-8188-efb6deda08f8.roa (raw, json) Hash identifier: /kE2eJKOvRNOlWemh/Kjr5Dubyg7BpwwX1/WcIJUj2c= Subject key identifier: 62:C2:73:4C:C3:5F:3A:D5:DB:AF:25:76:1A:69:54:7E:36:5B:F2:7E Certificate issuer: /CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74 Certificate serial: 010D0C9F4328584B0B76A9256F6208B54DC5D000 Authority key identifier: 5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/00f44ccb-b32f-33ba-8188-efb6deda08f8.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 54004 IP address blocks: 144.168.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:a9:25:6f:62:08:b5:4d:c5:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=a72c6b00-7820-4e65-9d90-1d99d4ebda23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3b:e9:cd:6b:e7:4c:ac:0d:3b:bc:af:1a:fd: d3:72:81:bd:be:07:48:15:a0:55:15:b7:60:82:6a: 5d:b3:72:59:b5:af:27:5a:c3:e2:9d:cd:13:5b:f8: 07:e7:39:38:a4:8b:c5:88:50:08:04:04:39:71:c6: 94:b9:5e:b4:06:5c:d8:1b:43:b2:9a:0d:92:db:92: a0:3a:09:5e:1d:19:83:58:ad:41:a0:c6:ca:14:e3: aa:f1:b5:6e:a0:49:85:96:01:8f:69:a1:e3:33:24: 12:de:0a:ac:ad:65:d3:da:58:f0:a5:7d:94:0c:e0: 16:65:0e:ae:5d:1f:7c:c5:8f:ee:45:cf:32:8c:9c: 16:9b:15:6f:3d:aa:b3:7b:bf:5c:41:2b:e8:0b:78: c9:a3:f0:64:15:4f:b6:1a:f1:f8:a8:57:b2:da:0f: 7e:a1:ad:bd:51:42:41:9e:ec:a8:ce:57:c4:47:10: 23:7c:b8:b2:72:13:af:06:75:d7:5b:f3:90:61:50: 31:0c:b5:2d:23:e3:b8:dd:1f:f4:d4:02:5f:12:e0: 93:ec:41:71:ed:fc:4d:cf:cc:6e:fc:f2:c8:19:dc: 05:4e:57:b8:ca:04:9d:eb:62:06:9b:cd:ed:4c:69: 1f:f6:38:a1:a5:0e:0d:a0:bd:9f:f2:cf:5c:42:76: 8c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:C2:73:4C:C3:5F:3A:D5:DB:AF:25:76:1A:69:54:7E:36:5B:F2:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/00f44ccb-b32f-33ba-8188-efb6deda08f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl X509v3 Authority Key Identifier: keyid:5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer sbgp-ipAddrBlock: critical IPv4: 144.168.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:b5:ff:33:7b:1c:cf:7c:16:a7:e5:13:ca:7d:25:c9:26:48: 11:a0:89:62:f4:89:04:f2:f0:39:8a:33:17:37:b4:ac:55:3f: 21:85:a6:18:35:56:41:d8:bf:74:70:d0:53:92:47:9e:4a:bf: 3b:65:29:23:1c:d0:0e:ac:36:0b:00:c4:4c:8f:78:ce:f1:64: 25:80:f0:bb:99:3d:4a:a0:5e:e7:7a:01:a8:ee:28:16:81:5b: 09:e9:a3:fd:23:be:94:5a:22:94:94:d6:01:f1:74:e9:3f:fe: ef:7e:a1:76:54:54:1a:b6:71:e8:94:96:e2:b6:3d:69:a3:70: 6d:b6:5f:3c:08:4f:c1:94:e6:b5:57:e9:78:f9:6c:0c:fd:42: 35:40:06:3b:88:64:4c:9f:69:d6:5c:42:aa:cf:75:0a:06:17: 88:31:5b:64:d5:26:25:e7:05:b5:89:b0:3b:4a:50:21:53:1d: ed:8b:aa:da:82:29:0c:be:59:dd:20:22:0a:bc:dc:13:94:37: ff:72:da:28:76:12:55:10:79:66:6c:3c:53:a6:f1:de:ad:b0: 7b:bf:cf:f5:e3:15:e0:89:7b:b4:28:67:18:82:7d:87:ed:66: 83:e0:be:4f:3d:81:f5:1f:b2:33:f2:82:0a:61:18:7d:07:4f: 39:9f:3e:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdqklb2IItU3F0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE0OGM3NGUtZWQ5ZS00NGU3LWJiZjUtNzZmNDczYTIx ZDc0MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk YTcyYzZiMDAtNzgyMC00ZTY1LTlkOTAtMWQ5OWQ0ZWJkYTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjvpzWvnTKwNO7yvGv3TcoG9vgdIFaBVFbdg gmpds3JZta8nWsPinc0TW/gH5zk4pIvFiFAIBAQ5ccaUuV60BlzYG0Oymg2S25Kg OgleHRmDWK1BoMbKFOOq8bVuoEmFlgGPaaHjMyQS3gqsrWXT2ljwpX2UDOAWZQ6u XR98xY/uRc8yjJwWmxVvPaqze79cQSvoC3jJo/BkFU+2GvH4qFey2g9+oa29UUJB nuyozlfERxAjfLiychOvBnXXW/OQYVAxDLUtI+O43R/01AJfEuCT7EFx7fxNz8xu /PLIGdwFTle4ygSd62IGm83tTGkf9jihpQ4NoL2f8s9cQnaMHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGLCc0zDXzrV268ldhppVH42W/J+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yYTQ4 Yzc0ZS1lZDllLTQ0ZTctYmJmNS03NmY0NzNhMjFkNzQvMDBmNDRjY2ItYjMyZi0z M2JhLTgxODgtZWZiNmRlZGEwOGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMmE0OGM3NGUtZWQ5ZS00NGU3LWJi ZjUtNzZmNDczYTIxZDc0LzJhNDhjNzRlLWVkOWUtNDRlNy1iYmY1LTc2ZjQ3M2Ey MWQ3NC5jcmwwHwYDVR0jBBgwFoAUXFrsKTJFCAeytpiC7+CI1WXlPLcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yYTQ4Yzc0ZS1lZDllLTQ0ZTctYmJmNS03NmY0 NzNhMjFkNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkKgEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACe1/zN7HM98FqflE8p9JckmSBGgiWL0iQTy8DmKMxc3tKxVPyGFphg1 VkHYv3Rw0FOSR55KvztlKSMc0A6sNgsAxEyPeM7xZCWA8LuZPUqgXud6AajuKBaB Wwnpo/0jvpRaIpSU1gHxdOk//u9+oXZUVBq2ceiUluK2PWmjcG22XzwIT8GU5rVX 6Xj5bAz9QjVABjuIZEyfadZcQqrPdQoGF4gxW2TVJiXnBbWJsDtKUCFTHe2LqtqC KQy+Wd0gIgq83BOUN/9y2ih2ElUQeWZsPFOm8d6tsHu/z/XjFeCJe7QoZxiCfYft ZoPgvk89gfUfsjPyggphGH0HTzmfPkE= -----END CERTIFICATE-----Generated at Sat Sep 6 13:54:24 2025 by rpki-client