$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0d2c7069-f942-3dcf-83f5-f276a2be33a3.roa File: 0d2c7069-f942-3dcf-83f5-f276a2be33a3.roa (raw, json) Hash identifier: ZnRPT0acXIE7dn0ALLk4S33k2Ov2TW6fIV2NIKp3axg= Subject key identifier: F5:16:30:5F:10:CC:A5:89:85:E5:77:34:76:F1:A2:83:DD:21:AB:4A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B21CC35EBC313B5AD15A6E700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0d2c7069-f942-3dcf-83f5-f276a2be33a3.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 396611 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 12 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:35:eb:c3:13:b5:ad:15:a6:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=22a6186d-037b-4af1-8e4f-084031e7851e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2f:5a:5c:81:05:8d:da:d7:97:99:20:ff:33: 99:31:3a:2e:ec:77:03:89:2f:83:94:54:ae:12:c9: d2:98:2a:c3:5c:55:e6:64:73:a4:d5:b6:39:ee:79: 5c:d0:72:5b:ff:67:31:a7:8f:e5:18:f3:78:c8:19: e5:88:63:d0:d3:ba:76:53:fb:ba:05:5b:49:23:b6: 73:51:1e:a7:56:49:23:da:f8:29:13:8e:f8:09:63: 0f:80:f2:0b:d4:83:d6:3d:dc:ed:7b:f7:83:d2:52: 4a:88:af:c6:63:fc:ae:e7:bb:4c:28:54:1b:bb:db: 46:e6:1a:1d:0f:ee:41:6b:d8:71:e6:a9:ea:e8:3c: d5:c9:3e:de:09:c3:76:2c:2a:ed:3f:aa:d1:8a:5f: a0:e9:ff:c4:9f:48:14:a9:4a:b9:3a:97:31:81:25: a9:ba:dc:e6:8a:9a:eb:5f:d2:c0:e8:0b:a9:de:bd: 4f:58:dd:ee:4f:28:b0:77:97:10:6f:07:fb:11:e8: 31:ea:e3:56:1d:52:bd:0c:c0:2e:7c:78:eb:00:3c: e9:2a:8c:73:b2:cc:ed:2f:75:44:ec:e0:80:28:5a: a9:05:9d:e0:16:d6:47:9f:07:51:30:d9:92:1b:87: c2:b0:d1:5b:0a:db:12:b3:d1:dc:7d:69:3b:99:30: 90:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:16:30:5F:10:CC:A5:89:85:E5:77:34:76:F1:A2:83:DD:21:AB:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0d2c7069-f942-3dcf-83f5-f276a2be33a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:9d:fe:4d:38:32:14:88:7c:e4:d5:12:27:cf:26:99:e7:a2: 07:20:e4:f0:8c:5a:45:98:e3:83:33:0a:32:2a:27:87:0d:db: 4f:d1:3c:db:f1:52:27:2a:e2:e5:e8:bc:db:d8:ee:4e:05:e4: eb:13:26:3f:60:a3:a9:37:90:9b:b7:ed:10:c3:04:df:2b:b4: 40:65:46:84:c6:3b:2a:e1:84:e8:0e:b1:74:f9:25:2e:ca:c5: 5f:e8:1c:79:e8:2b:ab:b6:63:cb:26:20:26:fc:12:de:95:ef: 2d:3d:a7:0a:83:13:08:eb:b2:78:9c:01:04:e5:5d:eb:cd:95: 78:af:cf:8b:9c:24:0a:94:f6:17:7c:c9:44:f2:fc:7d:aa:7b: 01:1d:12:c8:04:bb:83:d2:b1:fa:e4:e8:f9:0a:07:8d:35:0e: 8e:8b:2b:67:30:e6:89:11:63:de:5a:40:4f:09:11:ea:88:ef: 37:26:8b:6f:d5:03:4b:29:50:11:af:a8:22:ef:70:84:e5:51: 05:35:b0:35:03:18:f8:04:7d:b1:f1:30:1d:b7:59:da:62:5f: 29:d4:9f:f1:8d:c7:da:03:6d:99:59:5d:d8:61:98:bd:ff:bb: 77:0d:55:7b:09:c2:51:f2:59:43:9b:9b:e2:1b:76:16:91:d3: d6:bb:d2:59 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEshzDXrwxO1rRWm5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk MjJhNjE4NmQtMDM3Yi00YWYxLThlNGYtMDg0MDMxZTc4NTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmi9aXIEFjdrXl5kg/zOZMTou7HcDiS+DlFSu EsnSmCrDXFXmZHOk1bY57nlc0HJb/2cxp4/lGPN4yBnliGPQ07p2U/u6BVtJI7Zz UR6nVkkj2vgpE474CWMPgPIL1IPWPdzte/eD0lJKiK/GY/yu57tMKFQbu9tG5hod D+5Ba9hx5qnq6DzVyT7eCcN2LCrtP6rRil+g6f/En0gUqUq5OpcxgSWputzmiprr X9LA6Aup3r1PWN3uTyiwd5cQbwf7Eegx6uNWHVK9DMAufHjrADzpKoxzssztL3VE 7OCAKFqpBZ3gFtZHnwdRMNmSG4fCsNFbCtsSs9HcfWk7mTCQmQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPUWMF8QzKWJheV3NHbxooPdIatKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGQyYzcwNjktZjk0Mi0z ZGNmLTgzZjUtZjI3NmEyYmUzM2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAPnf5NODIUiHzk1RInzyaZ56IHIOTwjFpFmOOD MwoyKieHDdtP0Tzb8VInKuLl6Lzb2O5OBeTrEyY/YKOpN5Cbt+0QwwTfK7RAZUaE xjsq4YToDrF0+SUuysVf6Bx56CurtmPLJiAm/BLele8tPacKgxMI67J4nAEE5V3r zZV4r8+LnCQKlPYXfMlE8vx9qnsBHRLIBLuD0rH65Oj5CgeNNQ6OiytnMOaJEWPe WkBPCRHqiO83Jotv1QNLKVARr6gi73CE5VEFNbA1Axj4BH2x8TAdt1naYl8p1J/x jcfaA22ZWV3YYZi9/7t3DVV7CcJR8llDm5viG3YWkdPWu9JZ -----END CERTIFICATE-----Generated at Wed Sep 10 22:54:33 2025 by rpki-client