$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5c14a4fa-9d9a-3f74-95d4-6159758b8d3a.roa File: 5c14a4fa-9d9a-3f74-95d4-6159758b8d3a.roa (raw, json) Hash identifier: f50kNKxDzvqbRqzN854yo34zm7aYifNYgUi9qIG8oBE= Subject key identifier: 32:62:A8:D2:AA:9A:B6:46:7F:2F:0C:91:A6:B0:6D:F0:3D:DE:5E:3A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B21CC3C1997FCD9ACBD01DA80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5c14a4fa-9d9a-3f74-95d4-6159758b8d3a.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 397198 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 12 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:3c:19:97:fc:d9:ac:bd:01:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=f13d0a4b-43ae-4217-a772-dbc12b49a885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:10:1a:33:c7:0e:31:b2:0a:8e:ef:ed:12:24: d9:6e:0f:d2:00:54:6f:41:48:1e:b9:78:3d:53:c5: f7:ca:dc:5e:9e:25:af:4f:09:b8:f7:81:0b:df:26: 0e:b6:dd:1f:aa:e1:58:d7:b0:66:bf:ca:f7:08:8c: 3f:53:c7:c7:03:2c:2a:18:50:48:26:7d:a1:33:36: 45:19:bc:5c:b0:f4:df:bf:33:af:d1:88:57:19:31: b3:48:5a:7e:38:09:97:9e:40:2a:7b:19:9c:00:fa: 9e:83:3a:37:3e:37:fb:b5:1a:76:b7:16:74:7a:ca: fc:1d:33:00:93:cf:f0:63:07:27:8c:bc:88:0d:a4: 24:0e:c8:88:d9:2c:a0:a3:87:79:02:92:32:50:88: f3:c7:59:9c:40:6b:35:4d:ba:2b:4e:bc:81:38:be: 32:9c:f4:51:f1:15:a8:60:4b:04:b1:d2:ca:ea:ce: 2b:79:f5:c3:d5:93:06:28:a2:5d:6d:ae:ba:60:b0: 78:c3:6a:29:73:4c:ec:e7:1f:57:50:52:dc:27:16: 4a:19:df:72:31:d8:45:4d:64:b3:d1:40:74:53:67: 25:55:d8:4f:35:eb:6d:87:0b:c0:e5:13:32:e1:b4: 63:9c:1e:ab:33:6a:e1:ef:d5:e0:8d:37:2f:57:1f: cb:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:62:A8:D2:AA:9A:B6:46:7F:2F:0C:91:A6:B0:6D:F0:3D:DE:5E:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5c14a4fa-9d9a-3f74-95d4-6159758b8d3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:5f:ba:8a:b2:e2:01:6d:94:eb:c0:e6:35:0e:2d:fc:41:c1: a4:75:df:9c:b8:d2:3c:ce:92:41:55:f5:16:89:d2:df:a9:8a: 8f:b8:90:d5:bc:bf:09:0f:f9:e5:ba:73:42:1b:eb:33:c1:f8: 15:7a:f4:06:4d:1c:45:ba:37:22:5a:81:3b:df:0e:f8:de:b5: 1e:8a:80:aa:9f:80:6a:67:4f:da:12:da:b2:eb:f4:2a:1a:7f: d2:f5:58:5b:16:a0:1f:75:f1:c8:e9:9d:d5:36:f5:da:bc:31: 6e:55:ec:7f:6b:80:f4:a4:4f:34:7d:02:0d:12:a7:44:a8:f1: 64:df:e1:b7:ae:37:2e:77:b4:f2:bc:4e:b7:dd:20:58:9f:31: 85:83:5c:79:c1:1b:e7:d9:10:f7:4d:5b:98:24:c6:ab:33:a6: 8f:b4:11:e2:5f:2f:21:ca:16:b6:96:38:86:4f:f4:7b:dc:e4: ed:67:9b:7c:8e:9f:ea:63:88:fd:b2:ac:15:92:a8:bd:16:83: 32:fe:e7:44:23:10:29:bd:ad:05:cc:eb:93:a3:d1:05:ab:dc: 5e:f2:ec:bb:be:68:eb:bd:92:a4:df:0b:a1:04:7f:af:18:b4: df:93:15:f9:4a:93:14:dc:f7:c0:d7:2c:d1:9a:44:4f:3b:e3: 1b:77:16:e0 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEshzDwZl/zZrL0B2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk ZjEzZDBhNGItNDNhZS00MjE3LWE3NzItZGJjMTJiNDlhODg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBAaM8cOMbIKju/tEiTZbg/SAFRvQUgeuXg9 U8X3ytxeniWvTwm494EL3yYOtt0fquFY17Bmv8r3CIw/U8fHAywqGFBIJn2hMzZF GbxcsPTfvzOv0YhXGTGzSFp+OAmXnkAqexmcAPqegzo3Pjf7tRp2txZ0esr8HTMA k8/wYwcnjLyIDaQkDsiI2Sygo4d5ApIyUIjzx1mcQGs1TborTryBOL4ynPRR8RWo YEsEsdLK6s4refXD1ZMGKKJdba66YLB4w2opc0zs5x9XUFLcJxZKGd9yMdhFTWSz 0UB0U2clVdhPNetthwvA5RMy4bRjnB6rM2rh79XgjTcvVx/LYwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDJiqNKqmrZGfy8MkaawbfA93l46MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWMxNGE0ZmEtOWQ5YS0z Zjc0LTk1ZDQtNjE1OTc1OGI4ZDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCCX7qKsuIBbZTrwOY1Di38QcGkdd+cuNI8zpJB VfUWidLfqYqPuJDVvL8JD/nlunNCG+szwfgVevQGTRxFujciWoE73w743rUeioCq n4BqZ0/aEtqy6/QqGn/S9VhbFqAfdfHI6Z3VNvXavDFuVex/a4D0pE80fQINEqdE qPFk3+G3rjcud7TyvE633SBYnzGFg1x5wRvn2RD3TVuYJMarM6aPtBHiXy8hyha2 ljiGT/R73OTtZ5t8jp/qY4j9sqwVkqi9FoMy/udEIxApva0FzOuTo9EFq9xe8uy7 vmjrvZKk3wuhBH+vGLTfkxX5SpMU3PfA1yzRmkRPO+Mbdxbg -----END CERTIFICATE-----Generated at Wed Sep 10 22:51:51 2025 by rpki-client