$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/15822c82-903d-3cf2-8021-3962d4c5c11f.roa File: 15822c82-903d-3cf2-8021-3962d4c5c11f.roa (raw, json) Hash identifier: YGqrntdZiXQvWLO/csAqWPLHJfIeJ3ywZSlFWjsH1p0= Subject key identifier: 58:A7:8C:A3:51:82:8C:95:B9:2F:FB:61:A5:A9:37:3D:10:CD:77:08 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B21CC3A19D1F028C3D29C07C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/15822c82-903d-3cf2-8021-3962d4c5c11f.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 396599 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 12 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:3a:19:d1:f0:28:c3:d2:9c:07:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=dfa2ac3c-de38-481e-bdc6-258b8c8fccc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:45:6d:dc:8e:93:46:eb:6a:d5:d8:6a:11:d8: 52:15:d7:28:c7:4c:43:b6:27:5d:30:9e:76:11:f1: e0:3a:31:41:09:8b:8c:bb:15:cb:af:dd:8c:e5:ec: c5:a1:28:88:2a:c1:bf:3f:90:06:c4:d9:30:7d:8c: c9:0b:2a:e4:ff:5b:a9:3a:c9:f5:96:9b:f8:59:6b: 6e:c1:df:1a:dc:6a:97:8d:1c:43:27:f0:ec:c3:5f: b0:79:6d:ee:7a:b9:ff:28:34:3a:68:3d:0e:70:bb: a1:1b:70:c7:e3:5f:f2:10:9b:c3:eb:b4:cf:ed:79: 33:87:6b:89:46:2d:86:c9:66:e6:cd:93:5d:1f:b3: c0:5c:7d:c8:7b:bd:0d:6c:f8:57:31:2e:5d:02:92: c8:dd:49:2a:a6:fd:f3:38:0c:45:18:de:7b:9b:5e: d8:ab:01:80:f1:25:2a:c3:39:b5:d4:3f:ea:ee:27: 20:81:e2:df:06:02:11:cb:8c:95:9d:80:75:cd:fa: d1:31:07:aa:c6:6d:94:94:34:43:b1:16:86:41:d2: cd:fa:20:08:d1:a2:be:b1:9c:77:2b:5c:9c:6c:b2: cb:4a:58:27:27:59:66:9d:30:36:a5:ec:d8:8e:69: 49:90:fb:65:46:4a:57:3e:7e:3d:c5:2a:ff:d3:c6: 3b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A7:8C:A3:51:82:8C:95:B9:2F:FB:61:A5:A9:37:3D:10:CD:77:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/15822c82-903d-3cf2-8021-3962d4c5c11f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:1b:84:f3:92:22:09:f2:1e:bb:fa:32:a6:9b:75:f3:3f:72: 3a:64:1e:c6:df:c1:80:54:53:54:26:1c:66:6c:5e:77:42:c6: c0:28:1e:47:88:6d:50:65:c6:66:93:1b:55:8c:8f:65:cc:1f: ae:fd:2e:c2:8f:5b:c2:b6:3f:94:35:0c:31:76:22:ff:e5:c0: 7d:34:4b:5d:15:d1:99:01:d8:9f:df:32:04:3b:63:09:8d:11: ef:1f:b0:2c:9b:7b:bf:b1:2a:30:7b:2e:cd:68:b2:62:d9:ea: 01:7b:62:a5:73:91:36:03:9f:18:49:44:ac:d0:f9:67:64:87: 4d:95:07:74:02:b6:06:b5:21:cd:dc:f7:85:3c:ad:da:e2:26: de:3c:ef:28:35:1f:bc:14:00:fc:e7:f8:47:a1:0d:20:62:68: 01:8a:a3:8f:67:6c:2d:e8:4c:28:ec:e4:39:f8:2e:59:b6:91: 95:4e:e7:4c:56:51:b3:c7:44:22:a4:1b:de:69:48:54:bd:f5: e0:f9:27:8d:7e:ae:1b:ab:c3:85:32:09:bb:cc:d4:53:20:52: 6a:2b:71:44:85:dc:61:d2:00:72:a8:9c:3d:8f:d6:db:25:95: 67:8a:2e:74:1b:9b:f0:34:45:5f:34:3a:38:aa:30:ce:b8:a3: f3:7d:9b:12 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEshzDoZ0fAow9KcB8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk ZGZhMmFjM2MtZGUzOC00ODFlLWJkYzYtMjU4YjhjOGZjY2MwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEVt3I6TRutq1dhqEdhSFdcox0xDtiddMJ52 EfHgOjFBCYuMuxXLr92M5ezFoSiIKsG/P5AGxNkwfYzJCyrk/1upOsn1lpv4WWtu wd8a3GqXjRxDJ/Dsw1+weW3uern/KDQ6aD0OcLuhG3DH41/yEJvD67TP7Xkzh2uJ Ri2GyWbmzZNdH7PAXH3Ie70NbPhXMS5dApLI3Ukqpv3zOAxFGN57m17YqwGA8SUq wzm11D/q7icggeLfBgIRy4yVnYB1zfrRMQeqxm2UlDRDsRaGQdLN+iAI0aK+sZx3 K1ycbLLLSlgnJ1lmnTA2pezYjmlJkPtlRkpXPn49xSr/08Y7CQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFinjKNRgoyVuS/7YaWpNz0QzXcIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTU4MjJjODItOTAzZC0z Y2YyLTgwMjEtMzk2MmQ0YzVjMTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBcG4TzkiIJ8h67+jKmm3XzP3I6ZB7G38GAVFNU JhxmbF53QsbAKB5HiG1QZcZmkxtVjI9lzB+u/S7Cj1vCtj+UNQwxdiL/5cB9NEtd FdGZAdif3zIEO2MJjRHvH7Asm3u/sSowey7NaLJi2eoBe2Klc5E2A58YSUSs0Pln ZIdNlQd0ArYGtSHN3PeFPK3a4ibePO8oNR+8FAD85/hHoQ0gYmgBiqOPZ2wt6Ewo 7OQ5+C5ZtpGVTudMVlGzx0QipBveaUhUvfXg+SeNfq4bq8OFMgm7zNRTIFJqK3FE hdxh0gByqJw9j9bbJZVnii50G5vwNEVfNDo4qjDOuKPzfZsS -----END CERTIFICATE-----Generated at Wed Sep 10 22:51:56 2025 by rpki-client