$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/17f4ccf2-d68d-30b7-923e-9f94e6d91df0.roa File: 17f4ccf2-d68d-30b7-923e-9f94e6d91df0.roa (raw, json) Hash identifier: EFR86WEPyB32JjnohiFEYltgMwgKFt14kbRtW0NXc4w= Subject key identifier: 30:6C:2B:D8:F8:89:7A:FA:55:F6:1C:4E:A8:EA:3B:2B:07:80:E3:A7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B21CC36F815768630F4CDCB00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/17f4ccf2-d68d-30b7-923e-9f94e6d91df0.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 36630 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:36:f8:15:76:86:30:f4:cd:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=0be1057d-c76c-41ec-a62b-32c3f570e92e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d3:a5:a6:3d:e0:fd:89:9f:a1:13:86:6a:12: 36:15:ba:db:68:51:cb:11:5b:0c:33:8e:8d:20:ed: 98:8a:e9:d5:ad:86:d5:12:3e:f2:bd:16:3f:0e:53: a5:c9:d9:a4:ec:ef:39:d7:f8:d9:47:7c:5b:4c:9e: 38:86:24:21:31:48:50:45:b9:b3:a8:19:4a:23:4f: 74:b5:79:6b:65:98:09:e0:19:e8:b1:ea:9c:0f:5a: 93:7a:e6:1c:b6:b2:e2:f8:e8:92:fa:ff:2f:3d:ad: 8e:46:f3:2c:b4:66:55:62:3c:53:a4:39:6b:dd:19: 5c:a1:bb:06:82:b8:78:4d:17:ed:61:5a:3f:d8:ad: 6d:70:e9:97:0a:21:43:7a:0b:ac:b4:87:dd:47:99: 7c:ac:9c:87:1a:75:12:55:76:2c:c9:db:22:d7:21: a3:9e:16:1e:5f:8a:a3:cf:d5:13:8e:5e:8d:84:78: 07:a1:46:1f:62:dd:fb:c9:7c:87:73:12:73:8d:3c: c7:6a:f0:90:19:2b:78:da:a3:1d:e7:83:f0:6f:dd: a6:4d:35:27:8c:25:69:9c:39:02:e8:29:ac:79:a0: 35:50:1a:f0:f6:43:b1:7d:e1:4a:15:eb:09:e4:55: fb:66:6e:7a:86:75:63:de:97:af:ee:2c:24:c6:1a: 28:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:6C:2B:D8:F8:89:7A:FA:55:F6:1C:4E:A8:EA:3B:2B:07:80:E3:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/17f4ccf2-d68d-30b7-923e-9f94e6d91df0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:60:eb:02:d9:99:45:86:72:57:10:bb:42:a0:43:61:02:79: 54:0a:f7:8b:5a:44:08:82:c1:8b:35:21:29:34:d7:06:71:ae: 2d:eb:f2:ee:a4:75:de:1b:d4:a3:55:ee:e0:ca:0a:48:0a:8b: a9:87:09:1c:61:f1:d7:e6:f2:46:61:7a:58:07:5e:d6:25:2e: 2b:df:fd:39:85:8d:c4:26:82:d1:ca:2a:43:33:8e:1c:7c:6a: af:81:7f:eb:52:74:e0:0b:0c:95:fb:81:d2:90:95:b5:b5:0d: 79:ca:c7:f7:d5:89:55:5b:2b:f0:fe:7a:68:01:5e:c5:3e:16: 50:f7:2d:3d:5c:07:d8:09:18:75:bb:9a:80:30:fc:78:81:7e: 60:2b:eb:8d:e6:4c:2b:4c:30:0e:8b:fe:a4:5b:13:c3:08:45: de:41:b8:2a:98:d4:bc:2f:21:b1:d4:20:d2:bf:c7:f6:6f:5c: d8:9e:70:06:e2:f6:fc:33:a4:9e:bf:53:ea:98:b4:b8:86:db: 46:e4:41:1d:86:5a:98:70:d7:06:eb:d9:4e:1f:db:5f:b0:21: 16:cf:b6:23:90:cf:ea:ae:62:2b:61:1c:76:5c:19:bf:3c:a3: c4:48:b0:8c:cd:6f:f4:1d:83:d4:1a:13:cb:80:0f:9f:9d:e2: e6:d3:03:d7 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEshzDb4FXaGMPTNywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk MGJlMTA1N2QtYzc2Yy00MWVjLWE2MmItMzJjM2Y1NzBlOTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldOlpj3g/YmfoROGahI2FbrbaFHLEVsMM46N IO2YiunVrYbVEj7yvRY/DlOlydmk7O851/jZR3xbTJ44hiQhMUhQRbmzqBlKI090 tXlrZZgJ4BnoseqcD1qTeuYctrLi+OiS+v8vPa2ORvMstGZVYjxTpDlr3RlcobsG grh4TRftYVo/2K1tcOmXCiFDegustIfdR5l8rJyHGnUSVXYsydsi1yGjnhYeX4qj z9UTjl6NhHgHoUYfYt37yXyHcxJzjTzHavCQGSt42qMd54Pwb92mTTUnjCVpnDkC 6CmseaA1UBrw9kOxfeFKFesJ5FX7Zm56hnVj3pev7iwkxhoouwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDBsK9j4iXr6VfYcTqjqOysHgOOnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTdmNGNjZjItZDY4ZC0z MGI3LTkyM2UtOWY5NGU2ZDkxZGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQASYOsC2ZlFhnJXELtCoENhAnlUCveLWkQIgsGL NSEpNNcGca4t6/LupHXeG9SjVe7gygpICouphwkcYfHX5vJGYXpYB17WJS4r3/05 hY3EJoLRyipDM44cfGqvgX/rUnTgCwyV+4HSkJW1tQ15ysf31YlVWyvw/npoAV7F PhZQ9y09XAfYCRh1u5qAMPx4gX5gK+uN5kwrTDAOi/6kWxPDCEXeQbgqmNS8LyGx 1CDSv8f2b1zYnnAG4vb8M6Sev1PqmLS4httG5EEdhlqYcNcG69lOH9tfsCEWz7Yj kM/qrmIrYRx2XBm/PKPESLCMzW/0HYPUGhPLgA+fneLm0wPX -----END CERTIFICATE-----Generated at Wed Oct 29 20:22:33 2025 by rpki-client