$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2af53097-4196-3969-b6f5-fca84330ddf4.roa File: 2af53097-4196-3969-b6f5-fca84330ddf4.roa (raw, json) Hash identifier: 44Vq2TEuDFkMn3NbzHUHf2YzyLr+jgwLz9u0R6viNqA= Subject key identifier: DB:E3:AD:66:20:C4:90:63:11:96:72:BB:58:0B:2F:D5:8D:63:BD:A7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B21CC3960FA8D3A91C7897080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2af53097-4196-3969-b6f5-fca84330ddf4.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 397201 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 12 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:39:60:fa:8d:3a:91:c7:89:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=32997b66-5af1-48f6-bdd1-17464180c997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c4:36:3d:fd:8e:57:4a:3b:08:a5:b4:f5:95: a3:5c:e5:f1:5f:d2:de:ea:76:77:05:a8:8f:cb:01: bd:0a:f4:e2:99:cf:41:e8:0f:22:63:c3:c0:78:eb: 53:45:4c:57:7c:51:26:03:30:0b:3a:43:95:c9:41: 04:43:a1:2c:71:fe:7f:6d:93:dd:d8:aa:01:56:8d: 35:e7:d9:67:26:e7:ce:fc:fa:c9:bf:36:ef:20:4b: fe:59:fe:0b:74:24:6e:47:61:38:0d:cb:43:f7:e8: bb:e0:cf:cc:7d:b3:bc:d9:03:06:ef:58:db:ce:39: d0:9c:8c:2c:6d:30:95:72:5d:36:db:a5:ab:1a:29: bd:c0:3a:be:46:7c:4a:2b:b1:7a:18:05:09:e3:b5: 34:5f:d1:65:fa:1f:fb:32:a8:7a:0d:76:86:ac:4a: 85:42:57:42:39:e1:44:84:a1:e6:45:da:2b:b6:85: 48:a3:ab:fd:61:47:40:1f:6f:aa:97:bc:f7:69:f7: 22:64:12:ea:9b:c3:27:a5:37:fd:16:de:97:b2:57: 83:18:fa:be:1b:de:61:19:51:6f:d2:7d:ca:60:a8: 54:0d:c8:b9:17:e9:68:07:a4:8a:d3:46:0d:40:e8: 4b:cc:6f:c6:3e:0b:4f:e7:00:d6:fc:6b:7f:78:34: 03:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:E3:AD:66:20:C4:90:63:11:96:72:BB:58:0B:2F:D5:8D:63:BD:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2af53097-4196-3969-b6f5-fca84330ddf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:23:fb:c4:01:08:32:5b:44:31:89:6f:86:3e:cb:63:99:ed: 48:54:f7:cb:4e:65:f1:ad:7f:a0:d7:30:a7:86:9f:93:39:c4: 48:05:a0:de:c3:8e:da:36:d5:5f:22:99:3e:78:ae:f8:1a:59: 8d:5a:bf:39:9d:43:16:19:36:5b:89:d4:3c:0d:fa:fb:dc:82: b2:90:71:3a:80:a2:7e:65:72:be:86:04:65:39:1b:00:44:6b: 63:fb:1f:04:ab:f3:c7:b1:d9:1f:e3:0c:cf:f7:fa:05:b8:a8: 10:e3:ff:87:bd:dd:2e:49:3c:f4:8b:e1:3d:d6:51:22:83:56: 8f:87:36:02:03:b6:fb:1b:73:15:46:6b:c8:e0:56:c0:d5:5e: d6:cd:bc:be:35:a5:17:73:07:ab:e6:15:11:e3:20:d9:61:8f: 34:92:24:ea:da:96:61:ab:6c:00:b9:5a:77:14:9e:eb:eb:5d: 9f:51:6c:d0:0e:91:6e:e3:34:4a:93:31:e9:53:1f:60:59:a6: 52:38:46:a1:15:97:61:c0:a8:dd:ff:16:d1:fa:ab:f2:c8:6f: 51:44:87:38:ce:3a:6a:fb:b6:03:27:b7:97:b0:bf:24:56:66: a9:98:4e:5d:60:f9:35:b6:ef:52:89:e8:4c:dd:b6:13:ac:48: 4e:a9:5f:7f -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEshzDlg+o06kceJcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk MzI5OTdiNjYtNWFmMS00OGY2LWJkZDEtMTc0NjQxODBjOTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8Q2Pf2OV0o7CKW09ZWjXOXxX9Le6nZ3BaiP ywG9CvTimc9B6A8iY8PAeOtTRUxXfFEmAzALOkOVyUEEQ6Escf5/bZPd2KoBVo01 59lnJufO/PrJvzbvIEv+Wf4LdCRuR2E4DctD9+i74M/MfbO82QMG71jbzjnQnIws bTCVcl0226WrGim9wDq+RnxKK7F6GAUJ47U0X9Fl+h/7Mqh6DXaGrEqFQldCOeFE hKHmRdortoVIo6v9YUdAH2+ql7z3afciZBLqm8MnpTf9Ft6XsleDGPq+G95hGVFv 0n3KYKhUDci5F+loB6SK00YNQOhLzG/GPgtP5wDW/Gt/eDQDIwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNvjrWYgxJBjEZZyu1gLL9WNY72nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmFmNTMwOTctNDE5Ni0z OTY5LWI2ZjUtZmNhODQzMzBkZGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB3I/vEAQgyW0QxiW+GPstjme1IVPfLTmXxrX+g 1zCnhp+TOcRIBaDew47aNtVfIpk+eK74GlmNWr85nUMWGTZbidQ8Dfr73IKykHE6 gKJ+ZXK+hgRlORsARGtj+x8Eq/PHsdkf4wzP9/oFuKgQ4/+Hvd0uSTz0i+E91lEi g1aPhzYCA7b7G3MVRmvI4FbA1V7Wzby+NaUXcwer5hUR4yDZYY80kiTq2pZhq2wA uVp3FJ7r612fUWzQDpFu4zRKkzHpUx9gWaZSOEahFZdhwKjd/xbR+qvyyG9RRIc4 zjpq+7YDJ7eXsL8kVmapmE5dYPk1tu9SiehM3bYTrEhOqV9/ -----END CERTIFICATE-----Generated at Wed Sep 10 22:50:04 2025 by rpki-client