$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7af6cab9-4c5e-3819-81db-7f2653d6c63d.roa File: 7af6cab9-4c5e-3819-81db-7f2653d6c63d.roa (raw, json) Hash identifier: y0Kg5Q2WzaRujHxw2CTtilxxiWq2Vmd+1SxhHY1QzvI= Subject key identifier: A8:36:25:16:66:68:BE:1B:EA:3C:06:04:92:44:7F:33:00:15:76:D9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B21CC3C3EF9D170BF6B310C20 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7af6cab9-4c5e-3819-81db-7f2653d6c63d.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 22547 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 12 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:3c:3e:f9:d1:70:bf:6b:31:0c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=8e08a7bb-b626-4a1c-a735-fdf677c31093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c4:0f:ec:75:89:15:d0:88:cb:8b:15:b0:11: 6c:5c:b1:f7:59:5c:77:1a:7a:7c:76:d0:ee:42:6d: 60:f0:7e:2f:29:65:26:46:b9:2d:f3:94:ec:b3:94: 8d:9d:2e:5e:d2:17:0e:1e:c1:09:74:bf:8c:fc:9e: 90:47:f0:d9:67:03:61:ca:3d:9f:af:8d:c6:f5:a1: 81:05:9f:82:24:fd:74:8c:de:a1:ae:cc:b1:19:ae: d7:c2:41:87:88:80:5e:fe:13:cc:36:7f:3a:0c:e3: cc:66:88:66:33:76:1e:d8:cc:f0:1d:d1:fe:d2:40: 61:4c:31:fc:d2:ac:6c:1c:87:b0:33:b2:cd:f5:a6: d4:05:81:84:d6:cd:72:b8:34:d2:02:61:4b:35:b0: 61:7b:4f:77:9d:0e:db:3b:0d:fc:ce:18:94:2e:bb: e5:5c:c7:18:c4:30:fd:78:a8:8f:88:a5:c2:79:bc: 13:4f:08:9e:0f:dd:0f:1f:c6:64:f7:5a:a0:46:63: fb:d9:c9:79:a4:e7:db:69:71:60:25:78:32:35:f0: 6f:2a:76:e8:e8:78:1d:80:2e:1e:7f:ce:45:06:38: 9a:76:6b:f0:31:69:60:9e:b2:af:8c:56:90:1c:0b: 49:82:c3:35:94:22:41:fb:b9:82:8b:44:54:41:33: 4c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:36:25:16:66:68:BE:1B:EA:3C:06:04:92:44:7F:33:00:15:76:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7af6cab9-4c5e-3819-81db-7f2653d6c63d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:5e:44:6a:69:36:e7:7d:44:18:52:68:73:ad:f8:74:db:39: b0:8f:a5:e9:e2:69:b7:39:9b:10:4c:c0:3d:98:b0:c1:c3:e5: b0:52:72:df:39:a0:7e:67:ee:01:e5:70:e8:e4:aa:55:b5:16: f5:d9:d5:d1:ed:08:89:41:11:56:f9:a3:82:38:9b:44:01:30: bf:28:42:3e:e6:8c:3b:69:78:58:41:37:4a:46:07:fe:e9:dd: 3e:f7:58:c0:ec:0a:6b:09:bd:a2:12:78:0c:51:ba:05:ea:43: 94:f7:59:aa:52:33:b9:1d:d1:08:66:85:89:a0:11:c9:ad:5c: 91:d3:ca:ee:be:ec:d7:97:e7:1f:a8:80:6e:e4:af:57:67:9e: e9:a6:99:b0:34:70:ac:aa:c7:1d:a3:31:55:d4:df:b0:af:bb: 39:b2:4c:19:af:28:6c:69:7e:dc:9a:e1:3f:40:7e:3e:89:38: 55:01:a3:89:92:ed:08:b9:da:47:8f:98:e0:b8:da:06:de:42: 09:52:97:8b:ca:c6:d2:d2:5b:eb:c5:68:dc:24:35:ec:e4:bc: c8:f1:cc:51:22:88:87:91:ed:88:5e:5a:fb:0d:e2:41:18:57: b5:f8:ce:94:f9:5b:a5:5b:ad:f5:a8:12:e4:b0:25:6c:2a:da: 50:94:00:70 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEshzDw++dFwv2sxDCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk OGUwOGE3YmItYjYyNi00YTFjLWE3MzUtZmRmNjc3YzMxMDkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8QP7HWJFdCIy4sVsBFsXLH3WVx3Gnp8dtDu Qm1g8H4vKWUmRrkt85Tss5SNnS5e0hcOHsEJdL+M/J6QR/DZZwNhyj2fr43G9aGB BZ+CJP10jN6hrsyxGa7XwkGHiIBe/hPMNn86DOPMZohmM3Ye2MzwHdH+0kBhTDH8 0qxsHIewM7LN9abUBYGE1s1yuDTSAmFLNbBhe093nQ7bOw38zhiULrvlXMcYxDD9 eKiPiKXCebwTTwieD90PH8Zk91qgRmP72cl5pOfbaXFgJXgyNfBvKnbo6HgdgC4e f85FBjiadmvwMWlgnrKvjFaQHAtJgsM1lCJB+7mCi0RUQTNMcQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKg2JRZmaL4b6jwGBJJEfzMAFXbZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvN2FmNmNhYjktNGM1ZS0z ODE5LTgxZGItN2YyNjUzZDZjNjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA6XkRqaTbnfUQYUmhzrfh02zmwj6Xp4mm3OZsQ TMA9mLDBw+WwUnLfOaB+Z+4B5XDo5KpVtRb12dXR7QiJQRFW+aOCOJtEATC/KEI+ 5ow7aXhYQTdKRgf+6d0+91jA7AprCb2iEngMUboF6kOU91mqUjO5HdEIZoWJoBHJ rVyR08ruvuzXl+cfqIBu5K9XZ57pppmwNHCsqscdozFV1N+wr7s5skwZryhsaX7c muE/QH4+iThVAaOJku0IudpHj5jguNoG3kIJUpeLysbS0lvrxWjcJDXs5LzI8cxR IoiHke2IXlr7DeJBGFe1+M6U+VulW631qBLksCVsKtpQlABw -----END CERTIFICATE-----Generated at Wed Sep 10 22:37:40 2025 by rpki-client