$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8c974770-68c4-386c-bbcd-991a5c79f65b.roa File: 8c974770-68c4-386c-bbcd-991a5c79f65b.roa (raw, json) Hash identifier: mbFcLtUIlR+VcY2WtWXP//mAOwfactTiaRvbsFBnDTw= Subject key identifier: C8:DA:CE:31:7C:E9:A0:F2:49:12:4C:89:8D:74:B3:F0:0F:1F:8C:75 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B3556FF5DD72C5FC9FA7B6B80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8c974770-68c4-386c-bbcd-991a5c79f65b.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 396606 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:ff:5d:d7:2c:5f:c9:fa:7b:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=369bf412-fbb9-463a-8840-b9368d18f4fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c7:c5:7d:a9:b2:47:16:bf:2f:3a:09:2f:d1: 83:80:0a:81:d4:bf:07:1e:69:fd:ec:0e:34:72:b1: a2:23:6c:f1:29:39:19:27:13:13:78:bc:96:f9:fa: 4b:f6:a2:b3:9e:cf:b6:13:af:8f:7f:30:9a:f5:13: 64:6b:ab:d9:e5:5a:83:4a:87:de:7c:08:96:b2:85: 79:24:25:2b:e6:58:24:d1:01:12:9b:cb:62:24:e2: e5:5c:ee:5e:48:a0:49:e5:07:4f:75:22:93:07:42: 9d:eb:c8:cc:3b:ab:af:e8:98:d5:79:72:1a:b1:d1: b6:cf:63:ea:1f:d0:1c:06:78:22:2f:38:0b:3c:ed: 4f:36:7b:9b:b9:7a:11:e0:68:89:4a:61:83:f2:d7: 01:72:f5:ac:a5:cf:0d:f3:7b:ba:c7:72:32:10:e3: a6:44:66:87:02:96:7a:5a:b7:ff:6f:be:c2:b9:1f: 5e:8b:8c:b9:b7:bc:50:0c:98:2f:0f:9f:0c:a9:9b: 96:fa:b9:82:cf:b6:c6:bf:e3:72:76:3f:bb:a0:a1: e3:d0:5b:37:ca:23:82:e7:2a:1f:84:a8:00:d8:4f: b8:8c:97:62:08:33:62:98:fa:2b:ba:8b:07:6c:2f: 03:af:02:21:e1:e8:a1:d1:4a:ec:ca:e6:4e:48:ab: 2e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:DA:CE:31:7C:E9:A0:F2:49:12:4C:89:8D:74:B3:F0:0F:1F:8C:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8c974770-68c4-386c-bbcd-991a5c79f65b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:3b:2a:b9:35:f2:89:2e:93:72:19:7e:78:b0:b3:fd:21:a3: 06:6f:78:ba:37:74:90:7c:13:6a:df:15:d0:d0:47:c5:f5:ad: 9e:f6:32:22:12:e2:5e:64:16:6c:c1:f4:1c:12:4a:12:3b:1c: 9b:7b:e2:21:c7:d1:5a:66:3d:1b:66:b7:02:f2:c8:22:ee:63: 07:b9:9e:7b:d6:7a:9e:8d:d3:8c:74:9f:84:08:7b:6b:6b:0a: 45:8e:20:ac:cb:c0:6a:0c:fe:ca:d0:67:2f:8d:b3:1e:83:6b: e5:33:c9:4b:a7:b9:10:53:fd:dd:8b:fd:f0:d6:64:2f:41:5d: 93:33:00:86:f2:86:bb:39:f1:b6:2d:d4:04:62:01:8f:16:9f: b8:28:01:1f:9f:75:31:5e:a9:0f:3a:62:9c:ac:20:e2:df:b4: fc:db:60:f5:e1:e2:0b:91:08:64:f6:18:63:4b:b3:4b:ed:b5: f8:e9:e2:42:96:9b:21:2a:0b:d2:2b:c0:ce:ab:63:a0:5a:d9: 94:16:e0:d4:f5:7a:5a:b0:1e:eb:54:06:51:5d:39:0f:fa:09: 3f:90:88:83:22:5c:14:b2:24:e6:39:ff:67:8c:b4:ff:90:91: 85:05:99:db:00:fa:55:b9:ff:b5:f0:5d:c9:58:4f:c8:20:d9: 5d:d1:d1:62 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEs1Vv9d1yxfyfp7a4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk MzY5YmY0MTItZmJiOS00NjNhLTg4NDAtYjkzNjhkMThmNGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMfFfamyRxa/LzoJL9GDgAqB1L8HHmn97A40 crGiI2zxKTkZJxMTeLyW+fpL9qKzns+2E6+PfzCa9RNka6vZ5VqDSofefAiWsoV5 JCUr5lgk0QESm8tiJOLlXO5eSKBJ5QdPdSKTB0Kd68jMO6uv6JjVeXIasdG2z2Pq H9AcBngiLzgLPO1PNnubuXoR4GiJSmGD8tcBcvWspc8N83u6x3IyEOOmRGaHApZ6 Wrf/b77CuR9ei4y5t7xQDJgvD58MqZuW+rmCz7bGv+Nydj+7oKHj0Fs3yiOC5yof hKgA2E+4jJdiCDNimPoruosHbC8DrwIh4eih0UrsyuZOSKsuqQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMjazjF86aDySRJMiY10s/APH4x1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGM5NzQ3NzAtNjhjNC0z ODZjLWJiY2QtOTkxYTVjNzlmNjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBSOyq5NfKJLpNyGX54sLP9IaMGb3i6N3SQfBNq 3xXQ0EfF9a2e9jIiEuJeZBZswfQcEkoSOxybe+Ihx9FaZj0bZrcC8sgi7mMHuZ57 1nqejdOMdJ+ECHtrawpFjiCsy8BqDP7K0GcvjbMeg2vlM8lLp7kQU/3di/3w1mQv QV2TMwCG8oa7OfG2LdQEYgGPFp+4KAEfn3UxXqkPOmKcrCDi37T822D14eILkQhk 9hhjS7NL7bX46eJClpshKgvSK8DOq2OgWtmUFuDU9XpasB7rVAZRXTkP+gk/kIiD IlwUsiTmOf9njLT/kJGFBZnbAPpVuf+18F3JWE/IINld0dFi -----END CERTIFICATE-----Generated at Wed Oct 29 22:40:50 2025 by rpki-client