$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7482621e-c6dd-432b-9b07-f4defcbe44ca/2d4daaa5-1869-3597-b300-e5a36ea1666d.roa File: 2d4daaa5-1869-3597-b300-e5a36ea1666d.roa (raw, json) Hash identifier: dRqUTniX5UIBcRlpezv3gj8JMfV0g8AUm0Uh70d75rw= Subject key identifier: 6C:DD:1B:5A:5F:4B:14:3D:00:18:E3:45:52:9E:AD:8D:90:B7:3F:D4 Certificate issuer: /CN=7482621e-c6dd-432b-9b07-f4defcbe44ca Certificate serial: 010D0C9F4328584AEF0F235F88A0950CC3826500 Authority key identifier: DC:3B:FE:51:67:1D:13:2A:76:98:33:0E:BF:5A:10:32:7D:11:2B:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7482621e-c6dd-432b-9b07-f4defcbe44ca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7482621e-c6dd-432b-9b07-f4defcbe44ca/2d4daaa5-1869-3597-b300-e5a36ea1666d.roa Signing time: Fri 08 Aug 2025 23:37:37 +0000 ROA not before: Fri 08 Aug 2025 23:37:37 +0000 ROA not after: Fri 07 Nov 2025 00:37:37 +0000 asID: 20452 IP address blocks: 147.226.0.0/16 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7482621e-c6dd-432b-9b07-f4defcbe44ca/7482621e-c6dd-432b-9b07-f4defcbe44ca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7482621e-c6dd-432b-9b07-f4defcbe44ca/7482621e-c6dd-432b-9b07-f4defcbe44ca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7482621e-c6dd-432b-9b07-f4defcbe44ca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ef:0f:23:5f:88:a0:95:0c:c3:82:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7482621e-c6dd-432b-9b07-f4defcbe44ca Validity Not Before: Aug 8 23:37:37 2025 GMT Not After : Nov 7 00:37:37 2025 GMT Subject: CN=37c269f0-b356-4eee-bd22-269e4a0eb3ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:02:c0:4b:05:14:83:f0:c2:79:b0:17:8c:7e: 0a:d2:28:b5:3a:d2:2a:ee:b0:23:b2:07:55:2e:76: 9c:dd:cb:da:db:95:77:1d:2c:03:81:70:30:58:d7: d3:ce:65:a9:7a:49:30:d7:3e:49:31:a1:bf:e1:b2: 25:a6:7a:21:26:43:03:2b:e6:dc:87:ba:f3:29:cb: 82:ad:85:0c:cb:ea:36:3f:61:f0:34:27:f4:f2:a4: 51:7b:56:51:fd:cc:4b:82:e4:3f:69:8c:3a:3e:b3: d3:7d:53:06:db:4b:fa:25:12:bc:bf:12:ad:f9:5a: 34:31:6d:a1:27:3e:e5:ea:7e:38:d1:bf:65:da:9e: 2c:20:0e:76:35:20:fc:14:09:f7:74:15:25:69:03: 22:84:7a:15:bb:58:d1:6e:66:92:e6:a9:da:4f:74: 46:6f:8a:be:2e:0d:42:90:04:c8:d9:1e:04:0e:2a: d8:25:96:cd:07:bc:c2:3c:93:05:6b:c7:a6:ae:cc: 1e:94:b9:cb:2a:f0:51:82:95:a2:86:49:24:e7:9a: d6:b2:e5:92:b2:90:44:73:bf:e0:87:ec:03:d5:bd: d8:e1:62:38:e3:01:21:60:40:ca:6b:3e:e5:4f:da: c7:9a:69:e7:43:17:c1:af:38:d6:2b:14:5e:dc:2b: 23:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:DD:1B:5A:5F:4B:14:3D:00:18:E3:45:52:9E:AD:8D:90:B7:3F:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7482621e-c6dd-432b-9b07-f4defcbe44ca/2d4daaa5-1869-3597-b300-e5a36ea1666d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7482621e-c6dd-432b-9b07-f4defcbe44ca/7482621e-c6dd-432b-9b07-f4defcbe44ca.crl X509v3 Authority Key Identifier: keyid:DC:3B:FE:51:67:1D:13:2A:76:98:33:0E:BF:5A:10:32:7D:11:2B:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7482621e-c6dd-432b-9b07-f4defcbe44ca.cer sbgp-ipAddrBlock: critical IPv4: 147.226.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:c2:47:cc:0f:39:41:78:d3:dc:c2:8a:a3:e0:6a:93:0e:ca: 82:cc:d4:99:0e:47:e6:0b:55:73:11:b0:7b:97:62:45:4c:ad: 76:29:e9:89:5d:57:19:a5:53:73:0d:34:9b:2d:2c:9a:8a:a8: 71:81:d5:b5:cb:19:91:11:02:31:28:95:4d:b8:33:ea:47:dc: 1b:e8:fe:30:0b:f5:22:40:47:01:1e:f2:95:10:a6:d4:ed:7d: 64:4a:6e:bc:27:b8:40:62:82:8e:a7:7a:1b:3d:71:89:bc:31: 16:28:5b:70:da:0a:a2:9c:58:8e:b9:67:e1:86:a7:5e:c1:8a: 8b:4c:c8:1b:b9:a6:f4:1a:33:ef:b6:7b:c5:89:f6:a1:24:7e: 9c:de:0d:cb:a3:3e:b8:9c:40:de:06:38:02:d8:ed:bc:b5:f5: 2d:75:5d:99:b7:a1:a3:0b:c2:23:28:13:49:8b:d2:76:95:39: 38:d9:81:4c:cb:88:98:1d:b6:7e:51:a0:c3:fe:f1:0c:70:e9: 9b:8e:ca:b8:e7:eb:74:69:10:ec:9d:c3:20:2d:e9:10:0e:36: 4b:29:de:79:c7:b6:eb:0a:b3:fa:d5:ed:16:e8:27:15:a0:62: 88:bd:66:b6:33:36:29:7d:7d:1d:18:1a:0e:89:b7:27:51:ce: 24:c1:fe:6c -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWErvDyNfiKCVDMOCZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ4MjYyMWUtYzZkZC00MzJiLTliMDctZjRkZWZjYmU0 NGNhMB4XDTI1MDgwODIzMzczN1oXDTI1MTEwNzAwMzczN1owLzEtMCsGA1UEAxMk MzdjMjY5ZjAtYjM1Ni00ZWVlLWJkMjItMjY5ZTRhMGViM2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgLASwUUg/DCebAXjH4K0ii1OtIq7rAjsgdV Lnac3cva25V3HSwDgXAwWNfTzmWpekkw1z5JMaG/4bIlpnohJkMDK+bch7rzKcuC rYUMy+o2P2HwNCf08qRRe1ZR/cxLguQ/aYw6PrPTfVMG20v6JRK8vxKt+Vo0MW2h Jz7l6n440b9l2p4sIA52NSD8FAn3dBUlaQMihHoVu1jRbmaS5qnaT3RGb4q+Lg1C kATI2R4EDirYJZbNB7zCPJMFa8emrswelLnLKvBRgpWihkkk55rWsuWSspBEc7/g h+wD1b3Y4WI44wEhYEDKaz7lT9rHmmnnQxfBrzjWKxRe3Csj2QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFGzdG1pfSxQ9ABjjRVKerY2Qtz/UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC83NDgy NjIxZS1jNmRkLTQzMmItOWIwNy1mNGRlZmNiZTQ0Y2EvMmQ0ZGFhYTUtMTg2OS0z NTk3LWIzMDAtZTVhMzZlYTE2NjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNzQ4MjYyMWUtYzZkZC00MzJiLTli MDctZjRkZWZjYmU0NGNhLzc0ODI2MjFlLWM2ZGQtNDMyYi05YjA3LWY0ZGVmY2Jl NDRjYS5jcmwwHwYDVR0jBBgwFoAU3Dv+UWcdEyp2mDMOv1oQMn0RK3YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC83NDgyNjIxZS1jNmRkLTQzMmItOWIwNy1mNGRl ZmNiZTQ0Y2EuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAk+IwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEARsJHzA85QXjT3MKKo+Bqkw7KgszUmQ5H5gtVcxGwe5diRUytdinpiV1X GaVTcw00my0smoqocYHVtcsZkRECMSiVTbgz6kfcG+j+MAv1IkBHAR7ylRCm1O19 ZEpuvCe4QGKCjqd6Gz1xibwxFihbcNoKopxYjrln4YanXsGKi0zIG7mm9Boz77Z7 xYn2oSR+nN4Ny6M+uJxA3gY4AtjtvLX1LXVdmbehowvCIygTSYvSdpU5ONmBTMuI mB22flGgw/7xDHDpm47KuOfrdGkQ7J3DIC3pEA42Syneece26wqz+tXtFugnFaBi iL1mtjM2KX19HRgaDom3J1HOJMH+bA== -----END CERTIFICATE-----Generated at Sun Aug 24 07:39:53 2025 by rpki-client