$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2ef9af2c-99e8-3422-826d-a49cf4a7693b.roa File: 2ef9af2c-99e8-3422-826d-a49cf4a7693b.roa (raw, json) Hash identifier: Oc3utwbz1eFBE92v7LDNVGb1oov9PLOaIVoqHtpS3zc= Subject key identifier: 5F:B8:20:F3:94:06:02:1C:63:8D:24:BE:90:00:31:D7:42:3D:89:FC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B21CC3B8B89A038343D9A2740 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2ef9af2c-99e8-3422-826d-a49cf4a7693b.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 396591 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 12 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:3b:8b:89:a0:38:34:3d:9a:27:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=09f9ceb3-30f9-4ed0-88c4-d39f8a057836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:96:70:b6:ea:e1:3b:e2:45:06:e5:9d:63:03: da:01:d7:be:77:4b:b8:0e:c9:09:5d:58:6c:4e:3f: 0e:cb:9a:c6:5c:24:d3:30:81:f5:bf:9e:af:bf:6d: 17:9a:c3:09:a8:a4:0c:d6:37:8c:96:22:5e:b4:0d: c0:14:54:b8:fd:05:7d:78:cf:b8:d8:67:f4:9a:6f: 53:b7:8a:52:3c:c5:9c:e4:5b:c6:c1:a5:3c:c1:34: e9:06:68:60:37:6c:6d:52:5d:e8:ba:bf:b7:12:c5: 53:c5:da:14:20:15:df:85:15:4c:83:aa:87:ff:ad: 2e:9a:a6:a2:55:8a:a2:c3:f2:cd:ba:20:73:0e:eb: e7:bd:55:3e:7d:0d:2c:fb:b3:2c:d2:29:9c:9f:f0: 19:54:3b:f4:08:8f:67:b2:81:39:be:a3:5b:38:56: 6b:7d:ae:88:9c:bd:cc:5d:15:ca:18:26:7d:93:7f: 29:60:f7:71:6f:8a:00:9e:b0:16:ed:45:53:6e:6f: 8b:53:93:be:da:b1:aa:54:66:45:84:56:db:2b:b6: e6:8e:6d:95:5b:e5:5a:ab:5b:0f:a8:a3:b4:4c:1d: a7:c5:60:dc:e5:4f:e4:82:ae:6c:bd:c5:23:a6:47: f9:7b:7e:79:93:da:f0:6f:2b:df:4f:e8:7d:c2:fb: fd:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:B8:20:F3:94:06:02:1C:63:8D:24:BE:90:00:31:D7:42:3D:89:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2ef9af2c-99e8-3422-826d-a49cf4a7693b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:d9:6c:5c:e3:99:2f:35:d5:c6:2b:67:80:0f:bb:06:f2:d6: 64:25:5e:c4:f6:0f:5d:09:b4:c7:f3:c4:54:73:0b:f5:89:2f: 71:d4:4d:e4:cf:8f:fc:c6:e2:99:b7:8e:29:cc:76:ae:66:53: 62:9f:21:5b:60:ad:1d:b3:7b:9b:21:03:9a:36:a1:cf:0b:f7: 4c:aa:93:59:ec:f8:29:49:6f:74:4a:a5:f3:9e:3d:dd:84:1a: f2:98:1a:e1:33:48:3f:b5:5e:77:dc:a6:48:0b:e7:14:fa:0a: 82:82:02:af:3a:a3:6b:32:42:e8:15:cf:53:5c:a3:a0:3f:2e: 82:12:48:5e:13:78:3a:e9:b2:75:ff:31:69:21:03:cf:06:0d: 47:dd:75:f7:1d:59:f7:e3:a1:4a:98:69:f7:c5:0f:70:3d:4f: a6:3a:6b:45:70:73:18:fd:00:93:14:d2:e1:c6:5c:86:5b:c9: 4b:0c:b3:06:63:2c:99:39:2d:e4:53:65:91:d9:57:22:13:72: b0:e6:c9:6b:61:72:5e:ea:fb:f8:e9:e4:cb:df:c4:0d:66:fb: 14:7d:c0:6e:6d:d1:51:c8:7a:c9:70:10:93:0c:fb:d1:ff:c7: 7e:48:28:68:7c:11:ed:9d:93:38:d4:49:07:78:ae:7b:f0:28: 96:9d:10:15 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEshzDuLiaA4ND2aJ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk MDlmOWNlYjMtMzBmOS00ZWQwLTg4YzQtZDM5ZjhhMDU3ODM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZZwturhO+JFBuWdYwPaAde+d0u4DskJXVhs Tj8Oy5rGXCTTMIH1v56vv20XmsMJqKQM1jeMliJetA3AFFS4/QV9eM+42Gf0mm9T t4pSPMWc5FvGwaU8wTTpBmhgN2xtUl3our+3EsVTxdoUIBXfhRVMg6qH/60umqai VYqiw/LNuiBzDuvnvVU+fQ0s+7Ms0imcn/AZVDv0CI9nsoE5vqNbOFZrfa6InL3M XRXKGCZ9k38pYPdxb4oAnrAW7UVTbm+LU5O+2rGqVGZFhFbbK7bmjm2VW+Vaq1sP qKO0TB2nxWDc5U/kgq5svcUjpkf5e355k9rwbyvfT+h9wvv9wQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFF+4IPOUBgIcY40kvpAAMddCPYn8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmVmOWFmMmMtOTllOC0z NDIyLTgyNmQtYTQ5Y2Y0YTc2OTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA12Wxc45kvNdXGK2eAD7sG8tZkJV7E9g9dCbTH 88RUcwv1iS9x1E3kz4/8xuKZt44pzHauZlNinyFbYK0ds3ubIQOaNqHPC/dMqpNZ 7PgpSW90SqXznj3dhBrymBrhM0g/tV533KZIC+cU+gqCggKvOqNrMkLoFc9TXKOg Py6CEkheE3g66bJ1/zFpIQPPBg1H3XX3HVn346FKmGn3xQ9wPU+mOmtFcHMY/QCT FNLhxlyGW8lLDLMGYyyZOS3kU2WR2VciE3Kw5slrYXJe6vv46eTL38QNZvsUfcBu bdFRyHrJcBCTDPvR/8d+SChofBHtnZM41EkHeK578CiWnRAV -----END CERTIFICATE-----Generated at Wed Sep 10 22:37:38 2025 by rpki-client