$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5aed4f07-4217-361a-a1b5-9af640dcafb1.roa File: 5aed4f07-4217-361a-a1b5-9af640dcafb1.roa (raw, json) Hash identifier: YJJBwyKZV8e+TRHYle2qBOAjj32DoF05E1XJefOCTxY= Subject key identifier: 42:1B:FA:FA:7E:3D:8E:2D:DE:DE:79:BC:70:FD:60:74:7D:E9:FB:72 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B21CC3BAC0E57970F8398A6A0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5aed4f07-4217-361a-a1b5-9af640dcafb1.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 396555 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 12 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:3b:ac:0e:57:97:0f:83:98:a6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=85b53448-c0d9-4f3e-a08a-e0dd005bce60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:85:fd:9b:66:6a:04:fc:72:b4:27:98:d1:0a: fa:93:f4:a3:6f:28:34:7a:5f:49:80:0a:25:5b:0a: 9a:13:37:8f:dc:e5:1d:ba:27:a2:6a:09:f3:24:6c: 7d:85:fc:4a:0a:00:3e:41:1c:a2:e4:73:af:1a:f7: 2d:7f:b6:bc:7b:4c:bd:b3:f4:15:4c:5c:23:4a:ba: 84:4e:c9:06:d4:1b:96:f1:b3:1b:5d:47:9f:41:19: 7a:07:13:de:c1:8b:64:88:f5:60:89:f1:3e:c1:0a: bb:29:66:ca:df:a6:fc:c8:3e:08:a8:1a:e0:6f:f4: 9a:86:54:73:1b:53:a3:7e:ea:e6:76:2d:56:85:b2: be:7d:05:b4:74:0e:5f:97:0f:ca:30:26:fb:16:3a: 2c:f8:98:86:08:74:2b:49:77:7c:33:25:59:69:64: 5e:5c:cc:fc:77:a5:0f:02:a8:37:d9:a3:31:18:83: 73:2b:81:3c:18:a5:41:f7:67:f3:da:8e:3b:b0:68: 5f:74:4a:bb:89:75:e8:58:00:9e:d6:f0:6f:92:93: cb:53:13:bd:9e:66:52:b4:7c:da:b2:71:77:58:f9: e9:16:d9:65:50:b8:3b:bd:29:18:91:16:7f:d6:ab: eb:37:67:09:10:0b:d4:d2:30:36:3d:00:38:8d:e9: e9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:1B:FA:FA:7E:3D:8E:2D:DE:DE:79:BC:70:FD:60:74:7D:E9:FB:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5aed4f07-4217-361a-a1b5-9af640dcafb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:38:3d:44:8c:c3:0b:bc:d9:41:66:ff:1f:1f:e2:9e:c5:55: 69:d3:b5:87:42:03:a3:6c:62:19:b5:cb:20:c5:b7:dd:f4:20: 51:87:2f:be:4c:17:54:71:c9:ec:28:52:98:9d:77:86:93:0b: 12:e3:70:6f:bb:17:23:6a:a7:8d:17:6a:b6:12:31:2c:0e:a5: 45:ad:29:fe:86:2e:c3:5f:d5:01:4a:66:89:81:f4:e6:e9:09: ef:b6:12:93:f5:8d:e6:cc:59:79:d9:3c:56:6a:d9:37:a0:52: 3b:2f:7a:94:d2:84:cd:c5:52:34:db:ce:4f:96:59:95:a9:b2: ff:dc:ae:6f:87:fb:e4:8b:40:ad:ab:ce:dc:85:84:6b:c6:61: 37:04:43:92:79:5a:d9:ec:91:03:5d:b3:1d:17:6a:5d:11:12: dd:53:02:9e:7c:1f:b3:b0:ab:a0:dc:e1:9a:7f:02:a5:b1:94: 71:f4:b2:76:95:f4:df:59:43:9b:ea:ec:41:fb:49:58:b6:fd: 32:2a:dc:a2:c8:c9:2c:fc:0b:78:c3:f4:70:1c:4d:fe:21:66: 3a:04:c8:ea:83:65:fd:ab:eb:01:b1:29:9f:3b:97:bf:d3:23: 1f:c2:f6:2f:e6:11:8c:2f:df:03:01:03:5b:dd:12:c9:de:b2: 4a:ad:79:e1 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEshzDusDleXD4OYpqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk ODViNTM0NDgtYzBkOS00ZjNlLWEwOGEtZTBkZDAwNWJjZTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooX9m2ZqBPxytCeY0Qr6k/Sjbyg0el9JgAol WwqaEzeP3OUduieiagnzJGx9hfxKCgA+QRyi5HOvGvctf7a8e0y9s/QVTFwjSrqE TskG1BuW8bMbXUefQRl6BxPewYtkiPVgifE+wQq7KWbK36b8yD4IqBrgb/SahlRz G1Ojfurmdi1WhbK+fQW0dA5flw/KMCb7Fjos+JiGCHQrSXd8MyVZaWReXMz8d6UP Aqg32aMxGINzK4E8GKVB92fz2o47sGhfdEq7iXXoWACe1vBvkpPLUxO9nmZStHza snF3WPnpFtllULg7vSkYkRZ/1qvrN2cJEAvU0jA2PQA4jenpywIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEIb+vp+PY4t3t55vHD9YHR96ftyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWFlZDRmMDctNDIxNy0z NjFhLWExYjUtOWFmNjQwZGNhZmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAyOD1EjMMLvNlBZv8fH+KexVVp07WHQgOjbGIZ tcsgxbfd9CBRhy++TBdUccnsKFKYnXeGkwsS43BvuxcjaqeNF2q2EjEsDqVFrSn+ hi7DX9UBSmaJgfTm6QnvthKT9Y3mzFl52TxWatk3oFI7L3qU0oTNxVI0285PllmV qbL/3K5vh/vki0Ctq87chYRrxmE3BEOSeVrZ7JEDXbMdF2pdERLdUwKefB+zsKug 3OGafwKlsZRx9LJ2lfTfWUOb6uxB+0lYtv0yKtyiyMks/At4w/RwHE3+IWY6BMjq g2X9q+sBsSmfO5e/0yMfwvYv5hGML98DAQNb3RLJ3rJKrXnh -----END CERTIFICATE-----Generated at Wed Sep 10 22:41:24 2025 by rpki-client