$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0af4ce20-5659-32e6-899b-c37fef41d072.roa File: 0af4ce20-5659-32e6-899b-c37fef41d072.roa (raw, json) Hash identifier: qng3/ScgMcKuyyi69bFuLWoRI4CgsFri7Qk2LhjeM68= Subject key identifier: 9F:8C:4B:A0:FB:B6:1F:97:D4:70:B9:72:DD:4E:05:5B:79:F6:DB:2F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B21CC3D6BDF90A75311CECF00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0af4ce20-5659-32e6-899b-c37fef41d072.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 397210 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 12 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:3d:6b:df:90:a7:53:11:ce:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=ed1aeeb7-dd68-4bf2-b3f9-866e43a99b0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b8:4f:3c:4e:96:d9:af:d6:0e:f9:25:e3:5b: 2b:af:06:b6:08:8d:2b:c7:ec:6d:a3:5d:5f:14:a8: 88:e3:e0:76:10:07:ba:df:c1:cf:be:8e:5c:57:7c: 5f:62:ba:ed:82:db:0f:f8:87:a5:a9:35:0a:00:cc: 6f:3c:32:42:95:20:49:0c:b0:9c:de:da:a9:51:ab: 1c:6c:34:c5:57:5e:44:41:f5:5b:2b:e0:fe:4d:19: d8:03:0e:3e:e7:2e:52:0b:27:34:6a:87:0c:8b:67: 93:36:01:d9:65:3a:e6:10:c2:9c:f7:59:05:82:a3: de:14:40:29:45:ef:67:84:1f:a3:0d:46:cf:86:06: e5:b2:66:c3:c3:df:a8:11:80:8e:d6:c7:8f:13:73: ec:80:3c:0d:f1:dd:1a:2f:9d:6c:43:17:ba:00:fb: 95:e3:dc:cd:d1:4e:ee:37:6c:89:be:45:b4:e1:aa: cd:b1:b9:39:fb:91:8b:55:b1:54:62:7a:84:d0:5c: 64:4a:a4:7c:01:be:80:b9:7c:1d:ce:7d:84:ae:3c: fc:be:41:1e:52:ae:d2:99:6e:a0:20:50:a4:6d:aa: 44:35:b3:cf:c9:20:1e:77:dd:76:cf:07:4c:7d:de: 88:73:3f:b5:0e:c2:76:a9:a8:01:3d:b5:9b:13:d9: 8c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:8C:4B:A0:FB:B6:1F:97:D4:70:B9:72:DD:4E:05:5B:79:F6:DB:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0af4ce20-5659-32e6-899b-c37fef41d072.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:98:db:e9:f7:a7:de:73:02:85:a7:2d:62:20:d3:c8:5d:6e: d4:50:4f:ab:fa:4f:5b:ce:b6:f0:69:ab:5c:eb:cb:88:25:af: f8:86:3e:ee:96:63:44:ef:78:0f:29:a9:32:96:e9:ad:54:8b: c3:3c:77:fd:cb:20:eb:bb:f0:9b:e2:f9:35:3b:25:ea:b9:f9: 9f:31:1a:7b:7f:56:12:e5:07:9b:d4:5f:53:44:73:bc:87:b8: df:e1:c2:ce:43:d8:30:37:77:d1:b0:cc:26:31:24:8b:23:d2: 94:89:4b:13:34:41:9c:e7:e5:17:3a:f0:fd:0d:5c:8b:0e:44: 38:fc:cc:cc:3c:8a:7f:4c:12:99:07:3c:9f:96:19:d0:a6:77: a9:1f:f2:b2:85:a9:d8:9c:2d:2b:81:9f:70:f9:21:ad:1d:71: 3e:4c:43:25:17:bf:6d:a1:77:85:8b:df:c2:4c:8a:2c:11:09: a9:46:4f:c2:1e:18:e4:26:06:a8:96:41:75:b3:83:ff:42:56: 1e:bb:1b:4f:c4:59:a2:27:d5:17:da:3a:d0:50:fe:a1:1a:06: eb:fd:06:b2:32:ba:f9:5c:fd:65:0d:f6:2b:b3:1f:3b:48:8b: b7:10:17:42:d2:62:43:15:0a:d2:03:e7:ed:d0:cb:0d:bc:be: 77:db:4c:18 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEshzD1r35CnUxHOzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk ZWQxYWVlYjctZGQ2OC00YmYyLWIzZjktODY2ZTQzYTk5YjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7hPPE6W2a/WDvkl41srrwa2CI0rx+xto11f FKiI4+B2EAe638HPvo5cV3xfYrrtgtsP+IelqTUKAMxvPDJClSBJDLCc3tqpUasc bDTFV15EQfVbK+D+TRnYAw4+5y5SCyc0aocMi2eTNgHZZTrmEMKc91kFgqPeFEAp Re9nhB+jDUbPhgblsmbDw9+oEYCO1sePE3PsgDwN8d0aL51sQxe6APuV49zN0U7u N2yJvkW04arNsbk5+5GLVbFUYnqE0FxkSqR8Ab6AuXwdzn2Erjz8vkEeUq7SmW6g IFCkbapENbPPySAed912zwdMfd6Icz+1DsJ2qagBPbWbE9mMBwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJ+MS6D7th+X1HC5ct1OBVt59tsvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGFmNGNlMjAtNTY1OS0z MmU2LTg5OWItYzM3ZmVmNDFkMDcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBzmNvp96fecwKFpy1iINPIXW7UUE+r+k9bzrbw aatc68uIJa/4hj7ulmNE73gPKakylumtVIvDPHf9yyDru/Cb4vk1OyXqufmfMRp7 f1YS5Qeb1F9TRHO8h7jf4cLOQ9gwN3fRsMwmMSSLI9KUiUsTNEGc5+UXOvD9DVyL DkQ4/MzMPIp/TBKZBzyflhnQpnepH/KyhanYnC0rgZ9w+SGtHXE+TEMlF79toXeF i9/CTIosEQmpRk/CHhjkJgaolkF1s4P/QlYeuxtPxFmiJ9UX2jrQUP6hGgbr/Qay Mrr5XP1lDfYrsx87SIu3EBdC0mJDFQrSA+ft0MsNvL5320wY -----END CERTIFICATE-----Generated at Wed Sep 10 22:39:55 2025 by rpki-client