$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/529cc20c-99e5-3f08-a75e-9c982f67b2a9.roa File: 529cc20c-99e5-3f08-a75e-9c982f67b2a9.roa (raw, json) Hash identifier: omcBrPJaakPF629d0g0SgIbOPLlznxUXbFh8e8ijM24= Subject key identifier: 39:DB:1E:46:CB:60:28:4E:C1:65:B7:17:CD:E2:0D:E2:C9:71:A0:A1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B0CDC17C9CF10D38E180592C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/529cc20c-99e5-3f08-a75e-9c982f67b2a9.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 0 IP address blocks: 2620:74:18::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 12 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:17:c9:cf:10:d3:8e:18:05:92:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=5cddff3e-e4de-4835-838d-1cdc7e6ac81a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:97:f0:5d:19:3a:7a:75:1e:6f:0d:28:2b:eb: bf:58:c1:a5:81:16:de:b8:01:b5:24:b3:55:1d:53: 45:48:eb:e4:49:e0:e9:a9:c3:f2:6b:72:46:d4:61: 56:03:b5:60:1d:3f:4e:0c:49:a4:58:fe:bd:e4:af: 7e:46:e3:82:88:81:fe:05:ae:b4:24:4f:87:52:01: 2e:23:6c:a9:6d:6a:5b:27:75:8f:4b:93:d7:ba:bd: e7:26:d2:d4:d2:48:c3:7f:3b:b9:1c:59:28:c7:df: c9:30:cc:e6:c7:b8:a4:74:71:ec:e6:c4:0b:72:9a: d9:b3:b1:1a:fd:f8:65:bd:fc:04:bd:33:f9:6a:b3: 6a:87:fe:26:a0:35:11:fd:4a:05:75:aa:46:81:81: 23:5d:19:97:da:6d:cb:9a:96:ee:0d:e3:5a:df:06: 28:1b:82:f1:fe:4d:16:2a:51:86:79:6d:63:f2:73: 21:f5:21:6e:88:b6:59:b9:ab:1d:a3:ef:df:46:f3: 3d:97:e9:21:b6:e0:b2:5f:a6:6d:4e:9a:7f:84:be: d2:ea:ca:85:69:d7:59:71:76:ff:ef:57:ad:91:9a: fe:9b:fb:1c:b0:ae:01:b1:a5:32:dc:f0:75:d6:47: bb:84:c6:d7:37:e0:fa:8f:22:4f:09:a2:37:90:3d: ad:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:DB:1E:46:CB:60:28:4E:C1:65:B7:17:CD:E2:0D:E2:C9:71:A0:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/529cc20c-99e5-3f08-a75e-9c982f67b2a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:18::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:40:c4:b8:b4:37:81:31:fb:df:6b:3f:a6:35:7f:e1:35:79: f8:64:d6:ce:13:6d:d4:9a:11:dd:82:37:6e:da:b6:7e:78:ed: cb:eb:94:a5:0b:11:1f:14:af:0f:18:63:a1:d0:3c:1b:42:59: 79:7f:34:a9:45:07:b6:fc:7a:90:79:3a:8f:17:ab:fa:34:82: 85:11:46:2a:84:74:04:67:69:6d:fd:bd:dc:36:90:e6:b2:fd: 2d:a3:d8:2b:08:8c:da:07:fc:2b:58:44:e5:39:ac:93:e2:22: 2e:9f:1c:a5:4a:cf:55:9a:dc:81:41:70:51:50:0a:18:40:b9: 86:5a:c5:76:ab:6e:5f:84:60:3a:f6:e5:7c:6d:bc:49:2d:d6: 77:a4:1c:d0:3b:db:a2:d6:f2:77:b0:a8:ef:f4:62:5a:0a:86: b0:42:bb:b7:02:f0:72:7d:71:fb:81:0b:58:82:62:00:e7:c1: 6b:28:ca:45:fd:fa:b4:41:34:63:15:c9:1a:c8:66:3d:03:02: ee:5c:cc:59:cc:a4:5b:c6:7a:3e:ef:be:be:1d:17:11:6f:91: af:e6:d7:ac:11:0d:09:82:bd:dd:a6:1c:08:29:6b:5d:6e:43: 41:9b:f9:6b:6f:06:2e:9a:51:38:91:93:f0:66:a8:49:23:1b: e7:4d:c6:52 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsM3BfJzxDTjhgFksAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk NWNkZGZmM2UtZTRkZS00ODM1LTgzOGQtMWNkYzdlNmFjODFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZfwXRk6enUebw0oK+u/WMGlgRbeuAG1JLNV HVNFSOvkSeDpqcPya3JG1GFWA7VgHT9ODEmkWP695K9+RuOCiIH+Ba60JE+HUgEu I2ypbWpbJ3WPS5PXur3nJtLU0kjDfzu5HFkox9/JMMzmx7ikdHHs5sQLcprZs7Ea /fhlvfwEvTP5arNqh/4moDUR/UoFdapGgYEjXRmX2m3LmpbuDeNa3wYoG4Lx/k0W KlGGeW1j8nMh9SFuiLZZuasdo+/fRvM9l+khtuCyX6ZtTpp/hL7S6sqFaddZcXb/ 71etkZr+m/scsK4BsaUy3PB11ke7hMbXN+D6jyJPCaI3kD2toQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDnbHkbLYChOwWW3F83iDeLJcaChMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTI5Y2MyMGMtOTllNS0z ZjA4LWE3NWUtOWM5ODJmNjdiMmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJiAAdAAY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIhAxLi0N4Ex+99rP6Y1f+E1efhk1s4TbdSaEd2CN27atn547cvr lKULER8Urw8YY6HQPBtCWXl/NKlFB7b8epB5Oo8Xq/o0goURRiqEdARnaW39vdw2 kOay/S2j2CsIjNoH/CtYROU5rJPiIi6fHKVKz1Wa3IFBcFFQChhAuYZaxXarbl+E YDr25XxtvEkt1nekHNA726LW8newqO/0YloKhrBCu7cC8HJ9cfuBC1iCYgDnwWso ykX9+rRBNGMVyRrIZj0DAu5czFnMpFvGej7vvr4dFxFvka/m16wRDQmCvd2mHAgp a11uQ0Gb+WtvBi6aUTiRk/BmqEkjG+dNxlI= -----END CERTIFICATE-----Generated at Thu Sep 11 02:45:56 2025 by rpki-client