$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/37af2310-315e-3e37-9b20-11ef24b51fb4.roa File: 37af2310-315e-3e37-9b20-11ef24b51fb4.roa (raw, json) Hash identifier: 5o4v1/nJZdNfkQZAvszYx3PbcjoaelUZPoJeAC0SXoU= Subject key identifier: B9:88:6D:FB:6D:F3:63:C5:4A:95:83:76:22:BF:73:E9:F3:5B:9C:88 Certificate issuer: /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Certificate serial: 010D0C9F4328584B4616FD1F7EECED281A92C340 Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/37af2310-315e-3e37-9b20-11ef24b51fb4.roa Signing time: Mon 22 Sep 2025 01:00:33 +0000 ROA not before: Mon 22 Sep 2025 01:00:33 +0000 ROA not after: Sun 21 Dec 2025 02:00:33 +0000 asID: 198949 IP address blocks: 2602:284::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:46:16:fd:1f:7e:ec:ed:28:1a:92:c3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Validity Not Before: Sep 22 01:00:33 2025 GMT Not After : Dec 21 02:00:33 2025 GMT Subject: CN=be83d70b-ddda-41bc-acc0-7d0a226a8a37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:33:48:6e:d0:10:b1:77:52:00:55:d2:0a:1c: ba:9c:86:50:db:fd:a0:6f:9d:7a:dd:6a:eb:9d:94: ff:b9:19:23:8d:90:b3:e1:8f:ee:c5:34:0a:5c:58: 95:e8:dd:98:b5:34:cc:25:e1:3e:33:55:f4:78:ad: ba:0b:75:cc:23:8e:7d:95:24:81:6c:17:a1:91:6f: ed:ab:a5:97:63:9f:d6:f2:62:bc:16:f0:de:99:c4: 93:ff:e2:52:c9:98:a8:27:d4:80:66:db:ed:b8:df: c2:1e:77:2d:76:12:a6:a6:34:ca:d1:5a:15:b0:18: 05:8c:3d:b4:00:9e:bd:30:26:3f:16:9c:e3:26:06: 1d:fc:e4:50:3f:8d:b1:1a:5f:d8:04:81:90:7b:50: 86:98:ae:3b:25:c6:0a:ab:78:ce:a2:76:31:f3:24: e3:b5:0b:2f:85:51:e3:de:31:32:70:50:c1:46:f3: 90:54:cb:48:dd:2a:c6:dc:7d:1b:cb:1f:55:aa:7c: af:0a:dc:7d:85:e9:74:a1:0c:61:71:f6:da:63:87: bf:85:e8:2f:0f:78:20:27:cb:0a:44:75:55:2e:7d: 31:a2:1b:d9:64:5f:92:16:50:25:27:94:b0:bf:10: 5c:42:83:ec:ae:4c:ec:49:5b:47:71:33:29:9b:2e: eb:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:88:6D:FB:6D:F3:63:C5:4A:95:83:76:22:BF:73:E9:F3:5B:9C:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/37af2310-315e-3e37-9b20-11ef24b51fb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl X509v3 Authority Key Identifier: keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer sbgp-ipAddrBlock: critical IPv6: 2602:284::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:55:3c:cf:16:7e:74:b2:12:1e:82:26:42:b7:7d:ba:09:ac: 08:e9:ad:00:40:e1:14:54:37:78:65:3b:eb:e7:09:7b:03:4b: 41:7e:01:c4:12:12:e3:7d:a9:bc:df:fc:6e:24:5e:78:ab:48: ea:d8:68:53:e5:60:be:8d:13:4c:39:f5:96:8c:e5:29:ff:1d: e4:36:4b:14:f8:5e:bc:bb:05:41:9a:d5:0a:d2:68:14:f0:13: ba:36:c3:54:16:47:5f:4a:b5:80:dd:43:ce:5b:1a:01:60:a1: 68:a3:ce:90:7f:95:0c:ad:05:08:7f:65:71:79:d4:7d:ac:22: d2:5c:81:d6:02:7d:67:65:d0:7d:ef:5f:63:97:c1:bc:fa:a3: ab:af:d3:e6:3c:dd:44:80:66:96:c1:fd:9d:9b:b7:a7:59:79: 19:a0:b4:32:29:96:13:29:e8:a9:73:66:34:73:2f:a8:97:14: 7c:fb:62:27:49:32:6b:e2:53:6a:17:1e:ab:bc:97:a9:78:60: 54:d1:1c:8c:6f:19:cb:39:ef:40:f0:36:3c:30:25:47:b5:2e: 53:48:dd:1f:26:bc:d0:06:60:3c:75:cd:8a:7b:ec:1c:ca:df: cd:5c:27:57:6d:15:25:4b:f1:95:33:83:49:c5:e1:f3:be:7a: 1a:14:06:5e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtGFv0ffuztKBqSw0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTkwNjc0OGQtNTgyMy00Y2QzLTlhMTEtZjNkYzY5YTNl NzUxMB4XDTI1MDkyMjAxMDAzM1oXDTI1MTIyMTAyMDAzM1owLzEtMCsGA1UEAxMk YmU4M2Q3MGItZGRkYS00MWJjLWFjYzAtN2QwYTIyNmE4YTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzNIbtAQsXdSAFXSChy6nIZQ2/2gb5163Wrr nZT/uRkjjZCz4Y/uxTQKXFiV6N2YtTTMJeE+M1X0eK26C3XMI459lSSBbBehkW/t q6WXY5/W8mK8FvDemcST/+JSyZioJ9SAZtvtuN/CHnctdhKmpjTK0VoVsBgFjD20 AJ69MCY/FpzjJgYd/ORQP42xGl/YBIGQe1CGmK47JcYKq3jOonYx8yTjtQsvhVHj 3jEycFDBRvOQVMtI3SrG3H0byx9VqnyvCtx9hel0oQxhcfbaY4e/hegvD3ggJ8sK RHVVLn0xohvZZF+SFlAlJ5SwvxBcQoPsrkzsSVtHcTMpmy7r4wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLmIbftt82PFSpWDdiK/c+nzW5yIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2 NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2RjNjlhM2U3NTEvMzdhZjIzMTAtMzE1ZS0z ZTM3LTliMjAtMTFlZjI0YjUxZmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTkwNjc0OGQtNTgyMy00Y2QzLTlh MTEtZjNkYzY5YTNlNzUxLzk5MDY3NDhkLTU4MjMtNGNkMy05YTExLWYzZGM2OWEz ZTc1MS5jcmwwHwYDVR0jBBgwFoAUpzET2qjCbdNAR7bDK7p4QzEvAYAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2Rj NjlhM2U3NTEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgIChDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAEVTzPFn50shIegiZCt326CawI6a0AQOEUVDd4ZTvr5wl7A0tBfgHE EhLjfam83/xuJF54q0jq2GhT5WC+jRNMOfWWjOUp/x3kNksU+F68uwVBmtUK0mgU 8BO6NsNUFkdfSrWA3UPOWxoBYKFoo86Qf5UMrQUIf2VxedR9rCLSXIHWAn1nZdB9 719jl8G8+qOrr9PmPN1EgGaWwf2dm7enWXkZoLQyKZYTKeipc2Y0cy+olxR8+2In STJr4lNqFx6rvJepeGBU0RyMbxnLOe9A8DY8MCVHtS5TSN0fJrzQBmA8dc2Ke+wc yt/NXCdXbRUlS/GVM4NJxeHzvnoaFAZe -----END CERTIFICATE-----Generated at Sat Oct 11 04:26:41 2025 by rpki-client