$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/753ef9d2-7b48-3420-b969-0bd53dd948ec.roa File: 753ef9d2-7b48-3420-b969-0bd53dd948ec.roa (raw, json) Hash identifier: L4FVRRYpQJJkCaIwFXe0hA8zR3C5p9nciZVOzzw3ZuE= Subject key identifier: F9:7F:10:2B:3D:50:8F:9F:53:36:5D:D9:CE:43:F1:19:07:C8:F0:7F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B21CC398552FEB0145430A880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/753ef9d2-7b48-3420-b969-0bd53dd948ec.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 397196 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 12 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:39:85:52:fe:b0:14:54:30:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=5ccaff00-45d5-4d9f-a705-06ddf0d2b640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:43:11:c7:eb:fa:59:7d:05:01:b1:88:15:6e: a1:de:9d:1f:8e:48:ad:ee:fd:8b:32:f7:4f:13:44: a1:3b:a4:85:d0:71:9e:66:22:d3:d4:cf:9d:cb:b1: 74:c4:97:9a:67:47:1c:78:af:0b:77:f1:c3:4c:43: d9:9e:fa:1d:f8:27:5e:c0:e0:0f:dc:17:2b:c8:02: 9a:87:f9:da:26:61:cd:df:97:79:28:59:e2:59:56: b8:1d:0b:18:e0:16:45:88:42:e6:12:3f:a3:47:79: eb:cf:e1:93:62:bf:8d:00:1b:fd:90:fd:8d:97:9a: c6:d4:65:e4:25:46:89:59:9c:59:fe:1a:b6:bc:2d: 86:91:27:44:df:b7:c1:1b:91:b2:e4:ad:70:f2:6c: 40:c8:e8:55:55:c5:28:30:68:30:83:d8:04:19:b6: 45:ac:dd:9d:18:52:08:93:63:92:e9:5d:11:01:20: e5:88:a1:7a:ea:21:fd:7a:66:5e:6d:e2:85:16:91: 0d:cf:71:65:c5:98:2d:92:f3:be:03:2a:b1:dd:2e: 62:cc:c5:58:13:a7:89:7d:2f:78:ac:b8:35:66:ae: d1:a5:78:66:df:7d:02:36:9d:ac:83:f5:bc:6a:2b: 3e:09:db:5f:6f:4b:82:5a:e5:5c:1f:7c:e4:3e:b1: 42:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:7F:10:2B:3D:50:8F:9F:53:36:5D:D9:CE:43:F1:19:07:C8:F0:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/753ef9d2-7b48-3420-b969-0bd53dd948ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:87:bf:6c:7d:de:0b:ca:64:1a:0d:aa:01:15:72:86:1f:39: 79:1d:ff:23:bf:b3:a6:89:22:a4:f5:d4:fd:f1:55:41:b8:d1: 63:ec:68:52:64:2e:6c:60:93:7b:b1:7d:7e:42:44:c8:71:c3: 91:70:90:7c:d1:d3:43:7b:0c:58:c7:35:51:01:d0:6a:f4:2b: b4:54:32:f1:47:ce:90:dd:05:cf:56:6f:2a:8f:22:ee:d3:2a: bd:25:49:f4:6b:c4:dc:2d:6e:52:8f:f2:ef:89:55:68:81:67: 41:52:9e:df:bc:d2:59:47:46:55:3b:87:2b:b1:63:63:f0:fb: df:70:c8:33:62:6d:75:ee:0c:88:bc:21:a1:2b:3f:81:50:15: d8:b2:0f:71:97:93:83:dd:9c:fb:c0:2f:8a:44:4f:ba:fc:95: 38:5a:a7:ee:d3:dc:74:0f:0f:05:00:00:ae:51:1b:95:98:07: bf:a8:a1:df:20:23:dc:d6:c2:c2:36:b8:cf:e4:78:4b:66:8d: 16:74:e8:c8:02:0b:57:cf:11:c4:11:d9:1f:3b:15:af:0a:f9: ac:49:96:1d:8d:a8:bf:64:aa:b2:3a:55:fe:1b:d9:51:f6:f5: e0:2e:89:9a:ec:9c:83:3c:f5:3b:e1:29:45:9b:f6:2d:0a:b9: 29:a4:94:fb -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEshzDmFUv6wFFQwqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk NWNjYWZmMDAtNDVkNS00ZDlmLWE3MDUtMDZkZGYwZDJiNjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0MRx+v6WX0FAbGIFW6h3p0fjkit7v2LMvdP E0ShO6SF0HGeZiLT1M+dy7F0xJeaZ0cceK8Ld/HDTEPZnvod+CdewOAP3BcryAKa h/naJmHN35d5KFniWVa4HQsY4BZFiELmEj+jR3nrz+GTYr+NABv9kP2Nl5rG1GXk JUaJWZxZ/hq2vC2GkSdE37fBG5Gy5K1w8mxAyOhVVcUoMGgwg9gEGbZFrN2dGFII k2OS6V0RASDliKF66iH9emZebeKFFpENz3FlxZgtkvO+Ayqx3S5izMVYE6eJfS94 rLg1Zq7RpXhm330CNp2sg/W8ais+Cdtfb0uCWuVcH3zkPrFCmQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPl/ECs9UI+fUzZd2c5D8RkHyPB/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzUzZWY5ZDItN2I0OC0z NDIwLWI5NjktMGJkNTNkZDk0OGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBdh79sfd4LymQaDaoBFXKGHzl5Hf8jv7OmiSKk 9dT98VVBuNFj7GhSZC5sYJN7sX1+QkTIccORcJB80dNDewxYxzVRAdBq9Cu0VDLx R86Q3QXPVm8qjyLu0yq9JUn0a8TcLW5Sj/LviVVogWdBUp7fvNJZR0ZVO4crsWNj 8PvfcMgzYm117gyIvCGhKz+BUBXYsg9xl5OD3Zz7wC+KRE+6/JU4Wqfu09x0Dw8F AACuURuVmAe/qKHfICPc1sLCNrjP5HhLZo0WdOjIAgtXzxHEEdkfOxWvCvmsSZYd jai/ZKqyOlX+G9lR9vXgLoma7JyDPPU74SlFm/YtCrkppJT7 -----END CERTIFICATE-----Generated at Wed Sep 10 22:45:07 2025 by rpki-client