$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e416acd-92af-3d09-8b77-f7de04fa30d8.roa File: 8e416acd-92af-3d09-8b77-f7de04fa30d8.roa (raw, json) Hash identifier: UsJBLt9lneel54W42M9/Ff91+WxpT7a/weFLk8An7Kk= Subject key identifier: 12:FB:CC:AA:D6:44:EB:41:F2:2F:9A:3D:A1:35:F6:9D:0F:FC:5C:26 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B21CC371E0493F0A767D844C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e416acd-92af-3d09-8b77-f7de04fa30d8.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 396597 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 12 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:37:1e:04:93:f0:a7:67:d8:44:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=22b8268e-adfe-4f40-844c-ec18154b6ca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:bd:b9:d2:ee:f3:f6:25:e2:4b:40:a4:ed:16: 86:fd:ab:05:27:e3:36:dc:dc:e5:2c:b0:7f:85:dd: 22:d6:cb:7d:24:8e:9b:c2:b0:fc:f0:23:76:cc:82: 63:53:0f:49:cd:60:15:75:c4:02:9d:e5:a3:af:60: 7b:6e:6d:2e:d0:0b:66:2b:db:f3:be:3c:ba:b1:1a: b8:2d:29:c7:8f:b2:14:12:e2:d5:10:c1:43:ff:d9: 32:a9:5e:15:4d:ec:92:87:ac:db:ab:61:1e:9c:e0: 59:c2:32:39:50:f8:81:05:d9:b3:a5:e6:91:69:0d: 50:27:20:a9:42:d9:3b:83:54:9e:48:1e:98:bb:ae: 85:7f:ed:2f:e1:5d:3a:32:46:8a:09:2a:94:de:37: ab:80:d1:bf:0e:a2:68:2a:53:96:47:0d:e7:c5:f7: 8d:05:b6:8c:66:de:bc:8a:ac:82:b9:a3:93:9d:3d: 10:3f:b1:6b:6f:df:27:d9:a7:ce:42:88:29:54:84: 8e:b1:cb:a9:d7:b6:da:fe:c0:c1:9c:a6:90:dc:31: 80:68:44:ae:6b:73:23:d2:87:45:e2:c6:88:b7:1b: ed:a4:07:4b:66:bf:a9:52:4b:9d:7d:74:66:69:16: 30:a1:9f:ac:5f:59:a6:fc:2e:79:58:6d:4d:5c:80: ae:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:FB:CC:AA:D6:44:EB:41:F2:2F:9A:3D:A1:35:F6:9D:0F:FC:5C:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e416acd-92af-3d09-8b77-f7de04fa30d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:9e:aa:5b:26:1d:a7:3c:6a:52:e8:b0:72:85:ce:0c:20:79: 9b:7c:e3:de:1e:16:90:1d:e2:a5:07:a3:96:0b:cf:56:27:30: 2a:d5:f5:57:bc:ba:ea:dd:43:25:bb:92:79:f3:e6:22:4a:ec: 1d:11:d5:ab:00:a4:83:34:4e:05:d0:65:46:a0:e0:61:67:92: b0:15:45:56:4a:64:ce:a4:de:d4:4c:1b:ce:df:d8:6f:8c:ea: a8:1a:c9:41:2f:a9:be:94:94:30:ac:2e:ae:e0:0e:43:ef:6b: f1:2a:ae:18:9d:a9:6d:0d:08:5c:c2:de:b2:c4:ed:c0:09:38: 9c:17:5a:0a:9a:c8:dc:83:fd:d7:c9:cd:6b:13:56:1e:96:bc: 6c:53:1c:b6:a3:86:2b:c3:4c:74:60:81:03:2d:bc:b5:55:97: ff:48:97:da:fb:0d:f5:e3:97:c7:7d:ec:1f:93:a1:d7:a0:3e: c6:74:ba:42:91:a6:db:14:06:47:bc:f2:fe:0d:46:c8:cd:cb: 2b:02:c8:2a:ef:8c:8a:8f:1d:d8:d2:f0:c8:c5:60:9e:f9:80: f9:7d:35:58:c1:13:00:e6:9e:ff:06:0e:fc:9d:d5:d2:60:c3: 7e:16:30:f3:fd:bb:38:cf:af:75:3d:58:9a:ec:8e:2b:18:43: 03:cd:b5:33 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEshzDceBJPwp2fYRMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk MjJiODI2OGUtYWRmZS00ZjQwLTg0NGMtZWMxODE1NGI2Y2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhL250u7z9iXiS0Ck7RaG/asFJ+M23NzlLLB/ hd0i1st9JI6bwrD88CN2zIJjUw9JzWAVdcQCneWjr2B7bm0u0AtmK9vzvjy6sRq4 LSnHj7IUEuLVEMFD/9kyqV4VTeySh6zbq2EenOBZwjI5UPiBBdmzpeaRaQ1QJyCp Qtk7g1SeSB6Yu66Ff+0v4V06MkaKCSqU3jergNG/DqJoKlOWRw3nxfeNBbaMZt68 iqyCuaOTnT0QP7Frb98n2afOQogpVISOscup17ba/sDBnKaQ3DGAaESua3Mj0odF 4saItxvtpAdLZr+pUkudfXRmaRYwoZ+sX1mm/C55WG1NXICuXwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBL7zKrWROtB8i+aPaE19p0P/FwmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGU0MTZhY2QtOTJhZi0z ZDA5LThiNzctZjdkZTA0ZmEzMGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB8nqpbJh2nPGpS6LByhc4MIHmbfOPeHhaQHeKl B6OWC89WJzAq1fVXvLrq3UMlu5J58+YiSuwdEdWrAKSDNE4F0GVGoOBhZ5KwFUVW SmTOpN7UTBvO39hvjOqoGslBL6m+lJQwrC6u4A5D72vxKq4YnaltDQhcwt6yxO3A CTicF1oKmsjcg/3Xyc1rE1YelrxsUxy2o4Yrw0x0YIEDLby1VZf/SJfa+w3145fH fewfk6HXoD7GdLpCkabbFAZHvPL+DUbIzcsrAsgq74yKjx3Y0vDIxWCe+YD5fTVY wRMA5p7/Bg78ndXSYMN+FjDz/bs4z691PVia7I4rGEMDzbUz -----END CERTIFICATE-----Generated at Wed Sep 10 22:45:19 2025 by rpki-client