$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/36ab3d37-b07f-33af-a16a-e84078184ce5.roa File: 36ab3d37-b07f-33af-a16a-e84078184ce5.roa (raw, json) Hash identifier: V4hV0kj3IlTCvkB7r4vQrfFfARBtsnLIfh/1yCp7M44= Subject key identifier: 86:F3:80:66:04:6C:11:22:46:C3:67:1B:75:EE:5E:CD:CA:D8:1F:4C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B21CC39F60CB513E7C44B3F60 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/36ab3d37-b07f-33af-a16a-e84078184ce5.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 396827 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 12 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:39:f6:0c:b5:13:e7:c4:4b:3f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=20d5a996-dfa4-4656-a07b-bb7809ee9201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:33:bf:29:4e:2d:d7:d1:18:46:56:4d:ff:ef: 51:f4:03:2f:ae:75:4c:17:4b:f2:97:48:f4:df:68: fc:e8:62:85:9f:f9:64:85:de:14:6f:cc:7d:e6:0d: e9:9c:3e:22:3c:1d:f6:ae:38:81:ac:c7:da:87:0a: db:39:71:d2:c7:87:e6:3a:8d:38:97:be:fa:a1:d4: 3b:29:e7:f0:74:e5:df:e3:67:15:16:fb:45:13:c2: 3d:e2:35:27:62:c2:d3:45:11:6d:c6:2c:2b:9c:96: 98:2e:0b:ea:fa:67:32:ab:02:da:21:00:be:a9:e6: 17:52:36:1a:8c:06:8d:63:04:9b:33:4a:d1:ee:5e: cf:48:5a:17:29:c4:84:fd:3c:18:1b:5d:33:ae:85: 2f:30:ef:1a:f0:5f:96:c5:d1:0d:43:68:1e:bd:bd: d8:ee:96:20:3a:87:0e:39:f0:aa:1b:2c:06:35:d0: 14:95:fc:0a:16:15:0d:e2:21:08:a4:46:84:dc:35: 5b:46:49:2d:55:b4:7c:97:2b:c6:ec:91:35:c9:92: 9b:d4:38:26:52:ef:e6:ec:cc:5e:ca:ff:bd:b4:e6: 19:c5:3a:09:c1:d8:04:06:52:24:b1:c3:1b:ed:78: 8f:aa:f0:fe:9f:9e:99:1b:48:1f:98:54:c5:93:ea: 63:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F3:80:66:04:6C:11:22:46:C3:67:1B:75:EE:5E:CD:CA:D8:1F:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/36ab3d37-b07f-33af-a16a-e84078184ce5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:07:d3:24:64:ca:ef:06:ce:ff:c2:b9:8f:bf:47:e1:d8:18: 3a:da:6a:54:c3:42:f7:15:44:1c:71:19:98:db:88:81:23:b5: 43:8a:99:06:c9:7c:a0:81:40:0d:17:df:83:86:e4:87:dc:00: 24:1c:08:81:02:ca:02:94:17:79:f3:8f:53:18:9c:16:b3:1b: ed:cd:05:b0:2d:ca:b0:41:3c:46:d0:43:77:8d:32:87:89:e9: c7:c8:44:3b:bf:c4:15:bd:ba:ce:40:35:1d:02:92:85:39:e5: 5a:f1:ba:40:4b:a6:5c:38:ee:93:e4:12:8e:d8:be:6a:46:7c: c0:7d:96:b7:8d:ae:7b:74:bd:0d:6b:7e:09:40:6e:7f:0f:e4: a6:38:5b:29:5e:85:05:b7:3d:a7:1d:b1:70:a9:2a:ed:07:1d: 78:99:7c:bd:35:4e:0a:bd:a7:74:48:cd:d8:4f:d2:03:0f:3b: 4e:3b:1b:ca:c4:03:43:a1:55:59:75:12:0a:15:f2:e5:0f:06: 0e:34:d8:76:61:27:f7:41:43:63:fd:19:98:54:57:2b:b4:6a: 2f:1b:a5:c2:f3:e4:46:23:7d:4c:14:a7:df:47:99:ad:75:db: f5:a8:09:b2:ca:6c:ec:e9:1b:2d:64:e8:b7:9f:99:05:b2:85: 6d:18:94:66 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEshzDn2DLUT58RLP2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk MjBkNWE5OTYtZGZhNC00NjU2LWEwN2ItYmI3ODA5ZWU5MjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjO/KU4t19EYRlZN/+9R9AMvrnVMF0vyl0j0 32j86GKFn/lkhd4Ub8x95g3pnD4iPB32rjiBrMfahwrbOXHSx4fmOo04l776odQ7 KefwdOXf42cVFvtFE8I94jUnYsLTRRFtxiwrnJaYLgvq+mcyqwLaIQC+qeYXUjYa jAaNYwSbM0rR7l7PSFoXKcSE/TwYG10zroUvMO8a8F+WxdENQ2gevb3Y7pYgOocO OfCqGywGNdAUlfwKFhUN4iEIpEaE3DVbRkktVbR8lyvG7JE1yZKb1DgmUu/m7Mxe yv+9tOYZxToJwdgEBlIkscMb7XiPqvD+n56ZG0gfmFTFk+pjcwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIbzgGYEbBEiRsNnG3XuXs3K2B9MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzZhYjNkMzctYjA3Zi0z M2FmLWExNmEtZTg0MDc4MTg0Y2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAQB9MkZMrvBs7/wrmPv0fh2Bg62mpUw0L3FUQc cRmY24iBI7VDipkGyXyggUANF9+DhuSH3AAkHAiBAsoClBd5849TGJwWsxvtzQWw LcqwQTxG0EN3jTKHienHyEQ7v8QVvbrOQDUdApKFOeVa8bpAS6ZcOO6T5BKO2L5q RnzAfZa3ja57dL0Na34JQG5/D+SmOFspXoUFtz2nHbFwqSrtBx14mXy9NU4Kvad0 SM3YT9IDDztOOxvKxANDoVVZdRIKFfLlDwYONNh2YSf3QUNj/RmYVFcrtGovG6XC 8+RGI31MFKffR5mtddv1qAmyymzs6RstZOi3n5kFsoVtGJRm -----END CERTIFICATE-----Generated at Wed Sep 10 22:48:23 2025 by rpki-client