$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/87d87011-80de-397f-85c5-50de5579a4ab.roa File: 87d87011-80de-397f-85c5-50de5579a4ab.roa (raw, json) Hash identifier: 2Ai1eCrC8lc1zQMSYDMY430V1keuykyhOQVdlBhIGag= Subject key identifier: F7:87:6F:82:3E:68:49:C5:63:1F:2F:7A:A4:BB:FD:36:DB:84:DA:DE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B21CC3B0BA3E9087FCA162100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/87d87011-80de-397f-85c5-50de5579a4ab.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 27544 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 12 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:3b:0b:a3:e9:08:7f:ca:16:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=8d247c28-af68-4a25-bc1b-a19fcc05a3cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:6d:b5:01:79:bd:fc:bf:c3:1b:48:da:cc:e2: 02:70:86:be:40:0c:d2:ea:8d:1f:ad:73:c8:58:05: 78:26:18:3c:80:a0:3a:4b:93:3f:21:a6:a7:04:5a: c7:62:73:03:55:59:3d:6e:23:bd:36:c3:5c:7a:40: 82:20:15:5a:c6:8a:75:f8:e0:6a:de:5b:b1:47:68: e4:1a:3b:c5:c6:9b:ed:dd:e8:15:03:3c:b9:b4:ce: c1:45:74:88:d0:18:89:10:01:18:3f:8e:a7:04:52: a6:63:b9:68:6f:c7:e6:d9:ed:06:a0:d7:de:32:11: 91:de:8c:22:4c:d0:33:73:63:74:ae:ab:6f:35:04: 44:1e:33:33:96:8e:ba:36:44:35:d4:f4:87:67:2e: 60:d2:77:18:3c:95:e1:61:df:3e:c1:c2:0a:6f:99: 49:3b:46:46:54:67:98:5c:53:8f:63:89:37:7a:51: 01:63:35:d4:66:66:e6:b0:2f:ca:c4:46:2c:fe:1d: 5a:ad:a6:9a:37:4d:02:98:cd:80:24:3a:7b:ec:63: 0b:26:51:d5:e8:16:ae:8c:09:a1:f3:44:95:88:ec: 81:49:87:a0:32:d4:1d:11:f8:5f:30:da:61:88:f0: 13:c2:60:af:9c:15:42:45:e2:de:0c:08:f2:14:6e: cf:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:87:6F:82:3E:68:49:C5:63:1F:2F:7A:A4:BB:FD:36:DB:84:DA:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/87d87011-80de-397f-85c5-50de5579a4ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:19:81:7a:6b:00:84:fc:7b:19:82:3b:74:dc:15:8a:56:68: 76:8c:47:86:52:54:e4:9d:d6:9e:1d:d5:83:d1:7e:81:46:d1: e4:82:c9:f3:f5:fe:e0:4b:99:cf:30:64:d0:d7:8a:67:b2:c3: b9:88:a4:df:1f:b7:c8:3c:49:d3:e0:6f:da:d7:a8:b9:da:34: 55:8e:a4:ff:a7:7e:2d:5b:3f:e5:77:bf:72:b9:5f:88:e7:32: fc:0b:ab:74:a2:14:71:b4:c9:03:a1:01:f8:02:be:fc:92:30: 44:5e:7f:a9:49:42:61:a2:47:45:4d:aa:7c:8e:c1:9a:bd:66: 63:cb:a8:4a:43:bf:3d:a0:e1:08:88:7a:b9:b5:9e:fb:93:81: d1:21:1e:ca:01:9b:13:fb:cc:c5:e4:99:af:3d:36:c2:b2:08: 68:26:f5:9a:7b:80:12:b1:6c:bb:79:32:cc:a1:c4:f1:ba:1b: 81:b9:df:71:e5:19:0f:2c:65:70:38:04:ba:d3:b2:57:4d:8d: 21:22:c9:40:22:fc:39:0c:07:d6:6a:b0:6e:c6:57:90:4a:b4: 06:79:b2:fe:61:db:84:ec:78:35:1f:53:6b:a2:7f:2b:c3:03: 50:3b:dc:35:00:d5:c0:4d:a1:8f:b9:d4:b8:f2:a2:5d:1d:11: f1:0c:dd:c7 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEshzDsLo+kIf8oWIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk OGQyNDdjMjgtYWY2OC00YTI1LWJjMWItYTE5ZmNjMDVhM2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgm21AXm9/L/DG0jazOICcIa+QAzS6o0frXPI WAV4Jhg8gKA6S5M/IaanBFrHYnMDVVk9biO9NsNcekCCIBVaxop1+OBq3luxR2jk GjvFxpvt3egVAzy5tM7BRXSI0BiJEAEYP46nBFKmY7lob8fm2e0GoNfeMhGR3owi TNAzc2N0rqtvNQREHjMzlo66NkQ11PSHZy5g0ncYPJXhYd8+wcIKb5lJO0ZGVGeY XFOPY4k3elEBYzXUZmbmsC/KxEYs/h1araaaN00CmM2AJDp77GMLJlHV6BaujAmh 80SViOyBSYegMtQdEfhfMNphiPATwmCvnBVCReLeDAjyFG7PgwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPeHb4I+aEnFYx8veqS7/TbbhNreMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODdkODcwMTEtODBkZS0z OTdmLTg1YzUtNTBkZTU1NzlhNGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA9GYF6awCE/HsZgjt03BWKVmh2jEeGUlTkndae HdWD0X6BRtHkgsnz9f7gS5nPMGTQ14pnssO5iKTfH7fIPEnT4G/a16i52jRVjqT/ p34tWz/ld79yuV+I5zL8C6t0ohRxtMkDoQH4Ar78kjBEXn+pSUJhokdFTap8jsGa vWZjy6hKQ789oOEIiHq5tZ77k4HRIR7KAZsT+8zF5JmvPTbCsghoJvWae4ASsWy7 eTLMocTxuhuBud9x5RkPLGVwOAS607JXTY0hIslAIvw5DAfWarBuxleQSrQGebL+ YduE7Hg1H1Nron8rwwNQO9w1ANXATaGPudS48qJdHRHxDN3H -----END CERTIFICATE-----Generated at Wed Sep 10 22:45:24 2025 by rpki-client