$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/238e4239-26e2-34b0-b9f4-5d67352e64dd.roa File: 238e4239-26e2-34b0-b9f4-5d67352e64dd.roa (raw, json) Hash identifier: biSTYgAI4hldl6aoEB/TrluY2YOq5/8SLFHFZr0ZWQA= Subject key identifier: 40:D8:89:E0:9C:63:6B:7C:89:E8:89:FD:7D:FA:8A:1D:43:FD:42:FD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B21CC383B2FC35BDF098A5580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/238e4239-26e2-34b0-b9f4-5d67352e64dd.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 396589 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:38:3b:2f:c3:5b:df:09:8a:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=b9ed0f81-71d1-49a9-a71c-4c166afca399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0a:eb:17:8e:22:54:45:ad:07:7e:4c:95:8a: f6:84:ad:0a:69:f8:c2:80:11:0f:7e:eb:bb:d1:bb: 6d:d8:8c:77:36:93:c4:59:dc:6c:fc:1f:00:b6:9c: 1a:79:0e:1a:ca:5f:1f:1b:d6:3a:32:df:ff:ba:09: f5:71:71:ca:ae:20:e0:21:38:62:f6:24:04:d5:86: b0:64:3f:e2:c5:3c:cb:2c:96:ea:ae:2e:3f:f3:82: 03:03:02:06:cf:2b:86:b3:e2:27:9f:11:ba:0a:e2: 89:1f:0f:ae:e2:49:ba:be:33:9a:54:97:22:2f:f1: 92:8a:a6:97:16:69:32:dc:a6:9a:7e:3b:0b:58:ac: 47:28:3f:e0:7f:eb:41:59:14:a1:59:da:8f:af:c7: c4:e6:6a:0c:49:27:53:d1:8d:90:16:36:35:ee:37: f4:3b:95:ef:4e:b5:ff:64:07:d4:3f:d6:c1:8f:c9: 74:30:23:b9:87:b4:9a:72:d5:a6:22:ff:34:8a:7f: 17:db:9e:de:65:2e:48:98:ec:59:ce:7b:5a:3f:c0: 06:e3:ab:3c:82:fa:4c:4c:9d:23:af:6a:9b:f3:03: 14:78:bd:2f:b6:4a:f4:0f:20:18:14:3a:3d:10:60: 72:a0:80:be:50:78:33:16:99:fe:49:a9:21:4b:bc: 8f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:D8:89:E0:9C:63:6B:7C:89:E8:89:FD:7D:FA:8A:1D:43:FD:42:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/238e4239-26e2-34b0-b9f4-5d67352e64dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:b1:c8:96:20:b7:d1:6d:15:c9:67:52:3b:95:f1:e9:d5:60: 94:42:e9:eb:38:23:88:fc:65:26:89:97:3d:a6:a7:8d:ed:89: 75:6b:46:b3:5d:e2:cd:6c:c0:4b:79:d5:50:b2:2d:7d:22:e6: c5:7c:b6:8f:ac:ab:5e:d5:95:ef:88:c7:71:a2:3a:57:57:f6: 0c:07:89:b3:b3:ba:16:0c:af:3b:40:e4:29:52:ff:a9:17:27: 10:85:a7:fc:f8:1b:c4:cc:b1:23:7d:45:5d:23:80:0b:62:a7: 82:9f:2a:53:93:78:ca:c8:8e:4a:80:09:1f:e4:c2:2f:f5:38: ad:90:48:9c:f3:6e:42:35:8a:91:d0:f0:1e:68:07:c5:4c:dc: 0e:1f:69:a4:c4:bc:fc:14:a1:9c:49:11:a5:d9:38:60:5a:25: 23:35:24:dd:7a:06:68:05:d1:6d:63:e8:ae:7d:92:b1:d7:de: 75:a9:96:d2:fa:0a:5a:34:8f:d2:2f:d3:15:c1:2a:07:83:21: e3:2c:d0:0d:df:7c:20:7b:b9:79:48:53:87:7b:bf:78:10:3e: 87:63:31:4a:4c:23:d2:3f:3b:dc:9c:68:00:68:5f:54:56:aa: 10:9b:11:12:62:a4:4a:17:93:1b:de:4e:01:f6:2b:6a:b6:d0: 89:60:95:65 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEshzDg7L8Nb3wmKVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk YjllZDBmODEtNzFkMS00OWE5LWE3MWMtNGMxNjZhZmNhMzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmArrF44iVEWtB35MlYr2hK0KafjCgBEPfuu7 0btt2Ix3NpPEWdxs/B8AtpwaeQ4ayl8fG9Y6Mt//ugn1cXHKriDgIThi9iQE1Yaw ZD/ixTzLLJbqri4/84IDAwIGzyuGs+InnxG6CuKJHw+u4km6vjOaVJciL/GSiqaX Fmky3KaafjsLWKxHKD/gf+tBWRShWdqPr8fE5moMSSdT0Y2QFjY17jf0O5XvTrX/ ZAfUP9bBj8l0MCO5h7SactWmIv80in8X257eZS5ImOxZzntaP8AG46s8gvpMTJ0j r2qb8wMUeL0vtkr0DyAYFDo9EGByoIC+UHgzFpn+SakhS7yP0QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEDYieCcY2t8ieiJ/X36ih1D/UL9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjM4ZTQyMzktMjZlMi0z NGIwLWI5ZjQtNWQ2NzM1MmU2NGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBHsciWILfRbRXJZ1I7lfHp1WCUQunrOCOI/GUm iZc9pqeN7Yl1a0azXeLNbMBLedVQsi19IubFfLaPrKte1ZXviMdxojpXV/YMB4mz s7oWDK87QOQpUv+pFycQhaf8+BvEzLEjfUVdI4ALYqeCnypTk3jKyI5KgAkf5MIv 9TitkEic825CNYqR0PAeaAfFTNwOH2mkxLz8FKGcSRGl2ThgWiUjNSTdegZoBdFt Y+iufZKx1951qZbS+gpaNI/SL9MVwSoHgyHjLNAN33wge7l5SFOHe794ED6HYzFK TCPSPzvcnGgAaF9UVqoQmxESYqRKF5Mb3k4B9itqttCJYJVl -----END CERTIFICATE-----Generated at Wed Oct 29 11:53:48 2025 by rpki-client