$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/01d2bf28-4ffa-3af2-81c5-3b74c1b027c9.roa File: 01d2bf28-4ffa-3af2-81c5-3b74c1b027c9.roa (raw, json) Hash identifier: UBDT0a+hIqE6ToP6xegelRkXqrX3QDk7CDHBLcQK8jc= Subject key identifier: 33:8B:71:B1:A1:85:DA:01:31:08:CE:07:73:8A:35:A7:DE:0C:64:B9 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B1806DCDC569325ED181C1080 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/01d2bf28-4ffa-3af2-81c5-3b74c1b027c9.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 35916 IP address blocks: 74.48.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:dc:dc:56:93:25:ed:18:1c:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=37b122db-c88f-4cc2-a735-7e87f5c0ac17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:bf:e1:67:6c:2a:8d:23:29:9d:85:be:c2:88: f4:af:56:19:14:2d:a9:1e:71:d8:48:1e:78:47:f1: 78:a4:ad:0b:e0:20:55:0f:69:fe:09:d0:f8:39:e2: 81:71:e1:94:72:eb:e8:04:5c:80:a4:bb:21:7c:97: 3a:fb:28:24:08:ab:c7:40:17:e2:ae:de:a8:8f:6c: a7:53:77:15:fe:bd:28:89:2e:be:bf:23:ab:26:cd: ff:ce:58:4a:88:4a:c3:5c:17:08:16:de:37:8f:91: 43:4f:d7:ce:a0:8c:05:cc:af:50:66:38:7b:44:59: c9:50:a6:21:81:b9:75:10:1c:7a:8b:14:75:34:c4: 29:12:01:d6:97:91:dc:f9:96:73:8b:fe:bd:5d:c8: 3e:c0:df:12:69:65:f1:34:e0:7c:d1:f9:6a:41:10: db:79:91:a8:be:c2:e3:3e:f1:5d:b6:0f:72:b1:6a: 41:37:20:a4:07:46:3d:98:6f:0a:d0:29:da:99:af: 97:b6:ff:4a:69:2e:78:c9:c4:8f:e1:51:4a:94:96: a9:a9:bb:98:67:f4:97:48:45:cd:9b:a1:b4:27:48: d4:18:43:d9:14:ad:45:77:a3:ab:f3:b6:09:3d:aa: 59:6d:86:90:22:fc:30:42:c7:ec:f7:1d:ff:84:a3: 21:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:8B:71:B1:A1:85:DA:01:31:08:CE:07:73:8A:35:A7:DE:0C:64:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/01d2bf28-4ffa-3af2-81c5-3b74c1b027c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 74.48.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d1:15:55:ac:61:26:6d:89:48:19:0a:9b:be:52:10:34:69:82: 9c:2f:18:03:7f:2d:27:4c:9a:19:eb:dd:a9:91:60:d1:f8:e7: e3:57:7c:bd:50:a6:37:a9:49:49:6f:2d:12:24:14:43:9e:73: 31:41:6b:29:5d:2a:57:05:5d:05:1f:77:2d:14:57:ad:6d:0a: a4:8c:30:40:ff:1c:fb:0e:b2:a9:4c:78:ec:9c:0c:bd:84:80: 7f:1e:33:ef:1a:73:4f:16:e0:38:08:19:55:e8:37:a8:1e:72: fe:21:8a:64:83:8e:05:a3:00:dc:33:f5:0c:dc:63:7a:2f:db: 4f:0d:68:25:c4:76:4a:1b:b4:63:6a:68:e3:3b:ee:76:e7:da: 60:36:73:99:30:f1:d4:a6:1c:fb:d0:fe:f5:77:f7:60:cd:5a: 7f:a2:35:ac:8e:55:e9:e0:9b:f3:77:93:e7:96:b7:d0:9b:46: f8:c6:a4:79:ec:14:83:ca:8b:88:76:35:41:75:88:3b:91:54: 58:d7:09:d6:a3:1e:c9:98:23:b3:c7:c9:d3:a5:56:fc:f4:72: 9f:c0:1c:8a:e1:34:0a:60:55:75:e8:d6:b3:22:a9:9d:59:18: ea:6a:28:78:f9:96:85:6f:1a:b5:75:22:9e:d2:d6:1f:ed:23: 6b:71:26:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBtzcVpMl7RgcEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk MzdiMTIyZGItYzg4Zi00Y2MyLWE3MzUtN2U4N2Y1YzBhYzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkb/hZ2wqjSMpnYW+woj0r1YZFC2pHnHYSB54 R/F4pK0L4CBVD2n+CdD4OeKBceGUcuvoBFyApLshfJc6+ygkCKvHQBfirt6oj2yn U3cV/r0oiS6+vyOrJs3/zlhKiErDXBcIFt43j5FDT9fOoIwFzK9QZjh7RFnJUKYh gbl1EBx6ixR1NMQpEgHWl5Hc+ZZzi/69Xcg+wN8SaWXxNOB80flqQRDbeZGovsLj PvFdtg9ysWpBNyCkB0Y9mG8K0Cnama+Xtv9KaS54ycSP4VFKlJapqbuYZ/SXSEXN m6G0J0jUGEPZFK1Fd6Or87YJPapZbYaQIvwwQsfs9x3/hKMhcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDOLcbGhhdoBMQjOB3OKNafeDGS5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMDFkMmJmMjgtNGZmYS0z YWYyLTgxYzUtM2I3NGMxYjAyN2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSjAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANEVVaxhJm2JSBkKm75SEDRpgpwvGAN/LSdMmhnr3amRYNH45+NXfL1Q pjepSUlvLRIkFEOeczFBayldKlcFXQUfdy0UV61tCqSMMED/HPsOsqlMeOycDL2E gH8eM+8ac08W4DgIGVXoN6gecv4himSDjgWjANwz9QzcY3ov208NaCXEdkobtGNq aOM77nbn2mA2c5kw8dSmHPvQ/vV392DNWn+iNayOVengm/N3k+eWt9CbRvjGpHns FIPKi4h2NUF1iDuRVFjXCdajHsmYI7PHydOlVvz0cp/AHIrhNApgVXXo1rMiqZ1Z GOpqKHj5loVvGrV1Ip7S1h/tI2txJks= -----END CERTIFICATE-----Generated at Mon Sep 8 22:23:42 2025 by rpki-client