$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/08476c72-3790-334e-8fc6-321bea573259.roa File: 08476c72-3790-334e-8fc6-321bea573259.roa (raw, json) Hash identifier: kKaRAOpmgr2u7TibPz3FLhFfPPZVVlAJlE+kz5fJbhU= Subject key identifier: 96:FB:96:16:29:33:38:02:16:A0:4F:95:CB:95:0F:DB:72:4E:7E:9A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B0CDC1852EFFEE2736DF8C8E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/08476c72-3790-334e-8fc6-321bea573259.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 0 IP address blocks: 2620:74:2e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 12 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:18:52:ef:fe:e2:73:6d:f8:c8:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=95cdba33-c4e9-45c1-983a-92ecde48b0d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:db:e5:74:18:b6:82:9b:ff:b6:9f:63:e0:bf: 5f:40:5c:4b:0a:b2:07:c5:0d:38:8e:40:4e:37:7c: a7:b3:23:a9:23:17:39:1c:fa:af:b9:51:92:62:fe: d9:cc:b5:95:36:c8:f8:ef:b1:8b:27:d3:49:66:c4: 7e:01:b6:0f:f6:79:5d:60:a4:ab:5e:5c:7c:c2:4b: bf:1a:04:55:36:0d:fe:db:42:a5:ef:22:4d:50:53: 87:5d:6a:2a:e2:0c:24:0c:0e:fa:f8:5a:36:4a:1c: 5a:03:c1:91:4a:5a:dc:0f:80:16:76:ef:a1:60:41: 3e:c6:99:35:02:0b:e6:53:47:03:f4:b7:26:94:39: d5:fa:0f:74:46:36:44:f5:09:97:40:a0:b1:1c:80: b7:08:96:e8:d7:92:d8:4d:6f:b4:87:eb:6c:4b:eb: 05:b5:66:65:86:9e:28:23:0c:06:b7:a6:57:77:fe: 8a:e6:a5:14:c6:31:c2:72:8a:0b:24:45:ea:a9:ca: df:51:e7:40:03:ed:92:b1:95:13:41:84:e6:8b:a4: 83:9d:3e:7b:71:a8:d3:37:49:01:79:e0:3d:00:a1: b4:e7:14:ea:9d:0f:3d:86:6a:df:d6:5e:a9:f8:8f: dd:19:72:4c:5c:cd:64:5b:95:cc:fd:93:c4:7d:27: c0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:FB:96:16:29:33:38:02:16:A0:4F:95:CB:95:0F:DB:72:4E:7E:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/08476c72-3790-334e-8fc6-321bea573259.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:66:88:56:3e:bf:1e:f5:24:c5:32:86:8f:fc:89:74:4f:53: 7b:33:a2:7e:09:f7:ff:76:fc:3c:13:56:f3:a5:60:6c:6b:ed: ce:11:b0:cf:69:af:ff:44:b9:99:37:f5:37:a3:48:6c:5d:52: 8e:f1:13:85:20:86:e0:e1:9c:01:4f:a6:a7:51:e1:a9:19:49: d5:83:40:5f:48:8a:cf:1b:81:94:b6:94:d7:09:32:b4:6c:b4: ee:06:7f:fb:d5:9c:49:6c:f6:10:5b:e0:92:2e:4f:bc:7c:58: 59:fc:ad:aa:73:89:8f:da:e1:3e:2f:bd:04:67:12:87:4c:b6: 88:7f:d0:41:0b:29:6c:42:0a:44:b1:cc:ae:22:cd:06:dd:d5: 74:9f:07:67:c8:ff:f8:9d:1f:ce:1a:40:55:de:4f:ae:93:39: 43:4d:74:91:fc:b9:29:96:d1:61:72:23:37:5b:13:35:9b:ff: d8:c7:f0:7a:cb:23:9d:df:62:80:d7:94:c7:df:4e:8e:b2:71: b3:64:df:9b:c1:99:4c:72:e5:a4:e1:54:a0:99:bb:0c:9c:51: c7:c7:ef:cf:4b:ed:e8:ea:5b:58:ad:c0:f4:6d:4d:4b:65:08: f6:59:c9:12:7e:ea:17:0e:0f:97:dc:f6:af:fc:c0:32:78:69: 00:d6:b4:f3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsM3BhS7/7ic234yOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk OTVjZGJhMzMtYzRlOS00NWMxLTk4M2EtOTJlY2RlNDhiMGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9vldBi2gpv/tp9j4L9fQFxLCrIHxQ04jkBO N3ynsyOpIxc5HPqvuVGSYv7ZzLWVNsj477GLJ9NJZsR+AbYP9nldYKSrXlx8wku/ GgRVNg3+20Kl7yJNUFOHXWoq4gwkDA76+Fo2ShxaA8GRSlrcD4AWdu+hYEE+xpk1 AgvmU0cD9LcmlDnV+g90RjZE9QmXQKCxHIC3CJbo15LYTW+0h+tsS+sFtWZlhp4o IwwGt6ZXd/6K5qUUxjHCcooLJEXqqcrfUedAA+2SsZUTQYTmi6SDnT57cajTN0kB eeA9AKG05xTqnQ89hmrf1l6p+I/dGXJMXM1kW5XM/ZPEfSfAyQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJb7lhYpMzgCFqBPlcuVD9tyTn6aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDg0NzZjNzItMzc5MC0z MzRlLThmYzYtMzIxYmVhNTczMjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAFmiFY+vx71JMUyho/8iXRPU3szon4J9/92/DwTVvOlYGxr7c4R sM9pr/9EuZk39TejSGxdUo7xE4UghuDhnAFPpqdR4akZSdWDQF9Iis8bgZS2lNcJ MrRstO4Gf/vVnEls9hBb4JIuT7x8WFn8rapziY/a4T4vvQRnEodMtoh/0EELKWxC CkSxzK4izQbd1XSfB2fI//idH84aQFXeT66TOUNNdJH8uSmW0WFyIzdbEzWb/9jH 8HrLI53fYoDXlMffTo6ycbNk35vBmUxy5aThVKCZuwycUcfH789L7ejqW1itwPRt TUtlCPZZyRJ+6hcOD5fc9q/8wDJ4aQDWtPM= -----END CERTIFICATE-----Generated at Thu Sep 11 02:54:24 2025 by rpki-client