$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/24a134b2-21c4-3715-b147-4f129455688a.roa File: 24a134b2-21c4-3715-b147-4f129455688a.roa (raw, json) Hash identifier: u2BhFbKSH0Jq4Fak7G5l6YSNNcdolaMpRdneQG1M9gM= Subject key identifier: 31:FA:AB:84:11:AD:61:A9:1D:D0:44:BF:79:F7:02:9C:DA:74:23:5E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B21CC39ADFAF25E39797B3700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/24a134b2-21c4-3715-b147-4f129455688a.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 396576 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:39:ad:fa:f2:5e:39:79:7b:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=826ab739-f8e0-4df4-9cd4-dac8a0662158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:83:22:47:65:49:0b:75:0c:c0:5c:bc:4a:1a: f4:20:d3:b4:b4:9e:5e:56:40:b2:9b:82:0d:ad:5a: ee:df:f4:0a:60:0f:09:0e:f6:e5:c7:75:72:20:b9: d1:ec:1f:52:a1:5d:1d:e9:71:34:d7:c6:ce:2d:0d: 74:82:6c:ba:8e:ec:a8:54:d0:d2:38:c6:81:64:d6: 80:6e:3a:c5:af:45:d1:3b:3b:1d:12:c6:66:4d:ce: 18:b4:57:94:8c:1b:40:cf:37:2e:a5:27:7d:80:0c: 5f:56:99:e6:2d:a0:49:71:a2:d4:6b:c5:8a:3a:e8: a7:b1:8b:e0:ac:f7:41:73:c1:af:11:60:58:bd:da: fd:ed:33:82:5d:b3:3e:85:17:21:26:2f:c1:33:e4: 92:63:0a:c9:c2:93:06:fa:5c:27:38:67:eb:ed:99: 99:56:4f:1d:d3:79:d9:a3:20:4d:e5:be:83:a2:1f: 85:d0:d7:e3:2c:cd:33:be:78:90:16:10:64:58:2c: 60:63:dd:b4:44:a3:a5:7c:ca:5c:e2:db:69:2e:54: 42:fa:d0:4d:b1:f1:b2:2d:26:98:9a:aa:ba:06:ae: 0b:21:49:d8:b5:0a:80:74:a1:05:78:f3:96:b1:43: 23:1d:cf:8e:f7:e0:94:3b:86:f7:79:6b:b4:59:3d: a4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:FA:AB:84:11:AD:61:A9:1D:D0:44:BF:79:F7:02:9C:DA:74:23:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/24a134b2-21c4-3715-b147-4f129455688a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:88:6a:9a:8e:80:10:6d:51:b9:4c:dd:81:48:42:f0:6f:d5: 7b:66:ac:bc:01:f8:15:c4:1f:05:a5:3c:9f:1e:8b:77:6a:fd: 60:fb:0e:a4:81:a3:67:3e:2f:d8:67:41:9d:7c:17:a5:e0:76: 5b:09:66:8c:05:89:f3:1a:b3:43:86:ef:2b:aa:75:11:52:9e: 75:a0:37:6d:20:1a:81:7d:5c:5a:f3:50:d5:d4:63:7c:6c:60: 15:64:72:e2:89:7f:ff:8b:fc:77:02:a4:fa:5e:2d:7f:67:10: 22:36:9f:dd:38:43:e2:a7:93:0d:de:31:4b:bc:15:a4:2f:3d: e9:99:ce:70:28:a2:d9:ff:09:72:e8:95:22:dc:78:63:de:78: e5:d5:c0:5d:97:9a:56:b1:ac:fc:02:3b:19:a9:c4:50:06:20: f9:77:ce:8d:44:a9:22:5b:74:ea:4f:d6:88:89:f3:f9:95:6c: d3:dc:d9:0d:d3:ee:11:82:80:c3:be:c9:ba:ce:cc:42:1a:c7: 5e:c0:c0:96:69:da:ee:47:f3:5c:e9:cf:b2:af:6a:52:81:d9: 19:fb:80:2a:c6:4a:a7:45:84:42:8d:d0:00:ba:10:bc:fe:ca: ed:ed:da:a3:b1:b9:6c:d7:9e:ce:7a:6f:a4:fb:58:01:aa:da: f7:34:71:57 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEshzDmt+vJeOXl7NwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk ODI2YWI3MzktZjhlMC00ZGY0LTljZDQtZGFjOGEwNjYyMTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4MiR2VJC3UMwFy8Shr0INO0tJ5eVkCym4IN rVru3/QKYA8JDvblx3VyILnR7B9SoV0d6XE018bOLQ10gmy6juyoVNDSOMaBZNaA bjrFr0XROzsdEsZmTc4YtFeUjBtAzzcupSd9gAxfVpnmLaBJcaLUa8WKOuinsYvg rPdBc8GvEWBYvdr97TOCXbM+hRchJi/BM+SSYwrJwpMG+lwnOGfr7ZmZVk8d03nZ oyBN5b6Doh+F0NfjLM0zvniQFhBkWCxgY920RKOlfMpc4ttpLlRC+tBNsfGyLSaY mqq6Bq4LIUnYtQqAdKEFePOWsUMjHc+O9+CUO4b3eWu0WT2kiwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDH6q4QRrWGpHdBEv3n3ApzadCNeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjRhMTM0YjItMjFjNC0z NzE1LWIxNDctNGYxMjk0NTU2ODhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBjiGqajoAQbVG5TN2BSELwb9V7Zqy8AfgVxB8F pTyfHot3av1g+w6kgaNnPi/YZ0GdfBel4HZbCWaMBYnzGrNDhu8rqnURUp51oDdt IBqBfVxa81DV1GN8bGAVZHLiiX//i/x3AqT6Xi1/ZxAiNp/dOEPip5MN3jFLvBWk Lz3pmc5wKKLZ/wly6JUi3Hhj3njl1cBdl5pWsaz8AjsZqcRQBiD5d86NRKkiW3Tq T9aIifP5lWzT3NkN0+4RgoDDvsm6zsxCGsdewMCWadruR/Nc6c+yr2pSgdkZ+4Aq xkqnRYRCjdAAuhC8/srt7dqjsbls157Oem+k+1gBqtr3NHFX -----END CERTIFICATE-----Generated at Wed Oct 29 20:44:58 2025 by rpki-client