$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/98271e78-5414-3dd6-b2f4-98dc5c9ee1ab.roa File: 98271e78-5414-3dd6-b2f4-98dc5c9ee1ab.roa (raw, json) Hash identifier: XNaIFiETJ2v9gdivcivn4in6zIivlhXQwOGjWLvPuZo= Subject key identifier: F1:B8:F9:E1:69:39:0E:A9:85:6F:AD:2C:82:8B:B3:48:BF:B6:85:70 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B21CC375A2FE4825355F2A380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/98271e78-5414-3dd6-b2f4-98dc5c9ee1ab.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 36629 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 12 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:37:5a:2f:e4:82:53:55:f2:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=5ec37dcd-70ea-4c51-9928-828a5f9fdf94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:37:c1:b4:bc:25:fd:55:ff:4c:61:5e:f0:0b: 55:03:4f:28:c7:6c:d9:83:d5:58:a4:a7:00:a7:d2: 1b:29:92:11:c9:21:b0:80:ea:cf:b6:4f:dc:d6:4e: b7:6f:f7:d3:f0:d9:44:3f:b2:1c:ac:8b:db:ee:8b: 2e:da:53:67:c0:78:0a:32:0b:c8:0c:26:7b:7f:68: 18:d9:56:c0:05:cf:94:bf:99:4a:69:84:bc:4d:ef: c8:a2:42:46:09:4c:1a:22:d5:ab:55:65:5b:40:b0: 92:6f:f6:6b:89:0a:50:44:3b:03:ec:e6:c7:d4:40: 02:14:28:89:75:87:07:6f:0e:52:3b:0f:d8:40:24: 50:40:8b:46:67:1a:47:c0:65:a1:2b:87:4b:45:be: 6c:f6:4e:ab:ac:ed:02:2f:c2:f1:a7:3b:55:97:61: b5:07:c9:6c:34:10:c0:6b:62:10:86:e9:cf:dd:08: 65:ef:cf:c3:63:75:d0:05:25:eb:1f:37:3c:b8:04: 3f:c2:47:0e:c7:e8:7c:96:3e:6c:46:1f:9c:40:7c: 58:91:41:95:f8:88:cb:f3:46:9f:df:20:7b:a5:56: 9f:12:ae:c5:79:a6:e5:c9:88:8e:ef:2e:b4:b3:43: e4:63:51:87:85:a0:ad:3a:78:80:50:c0:0b:4c:8e: 05:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:B8:F9:E1:69:39:0E:A9:85:6F:AD:2C:82:8B:B3:48:BF:B6:85:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/98271e78-5414-3dd6-b2f4-98dc5c9ee1ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:f5:6d:c4:cd:56:17:19:12:a3:03:8b:58:2f:97:04:bd:08: 41:74:95:c1:8e:5a:d8:d2:2d:19:7d:a5:8d:e3:24:30:a5:3b: 83:67:6a:ff:ce:ab:94:ab:d3:4c:5d:31:51:48:84:4c:bb:38: 04:95:32:3a:fa:b4:54:97:b2:71:8e:7a:c0:29:e8:52:c0:28: ce:e2:c7:ab:29:99:8b:09:4f:f9:ca:e8:43:a6:91:a1:c1:f1: 8e:c7:e7:0b:56:e5:02:fb:46:db:24:77:60:64:56:2e:32:e3: cf:68:80:48:72:c0:a8:49:f4:6e:6a:d1:5e:4a:3e:1f:94:6a: c3:09:2e:2f:34:8d:d8:fe:3c:55:01:d5:ef:b9:b7:bb:1f:2b: 8c:56:d6:7c:78:f1:67:89:6c:d5:5c:c9:08:8b:be:43:17:ff: 65:5e:f8:6d:73:88:03:7e:7a:1b:bc:49:c7:79:10:03:2f:ed: 0f:cd:e3:4b:03:36:34:59:95:8a:fc:09:bc:8f:5d:9b:02:1f: df:5b:ac:97:66:01:6d:34:f2:46:e6:3c:38:a9:f0:ec:6b:d5: a0:9e:81:09:eb:fd:f6:a5:fc:37:4c:ae:b3:a9:a4:a4:da:94: bc:9e:55:f6:40:db:d1:f2:52:fc:d6:57:f9:5e:ca:ff:54:a1: 6f:48:fa:07 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEshzDdaL+SCU1Xyo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk NWVjMzdkY2QtNzBlYS00YzUxLTk5MjgtODI4YTVmOWZkZjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjfBtLwl/VX/TGFe8AtVA08ox2zZg9VYpKcA p9IbKZIRySGwgOrPtk/c1k63b/fT8NlEP7IcrIvb7osu2lNnwHgKMgvIDCZ7f2gY 2VbABc+Uv5lKaYS8Te/IokJGCUwaItWrVWVbQLCSb/ZriQpQRDsD7ObH1EACFCiJ dYcHbw5SOw/YQCRQQItGZxpHwGWhK4dLRb5s9k6rrO0CL8LxpztVl2G1B8lsNBDA a2IQhunP3Qhl78/DY3XQBSXrHzc8uAQ/wkcOx+h8lj5sRh+cQHxYkUGV+IjL80af 3yB7pVafEq7FeablyYiO7y60s0PkY1GHhaCtOniAUMALTI4F0QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPG4+eFpOQ6phW+tLIKLs0i/toVwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTgyNzFlNzgtNTQxNC0z ZGQ2LWIyZjQtOThkYzVjOWVlMWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAJ9W3EzVYXGRKjA4tYL5cEvQhBdJXBjlrY0i0Z faWN4yQwpTuDZ2r/zquUq9NMXTFRSIRMuzgElTI6+rRUl7JxjnrAKehSwCjO4ser KZmLCU/5yuhDppGhwfGOx+cLVuUC+0bbJHdgZFYuMuPPaIBIcsCoSfRuatFeSj4f lGrDCS4vNI3Y/jxVAdXvube7HyuMVtZ8ePFniWzVXMkIi75DF/9lXvhtc4gDfnob vEnHeRADL+0PzeNLAzY0WZWK/Am8j12bAh/fW6yXZgFtNPJG5jw4qfDsa9WgnoEJ 6/32pfw3TK6zqaSk2pS8nlX2QNvR8lL81lf5Xsr/VKFvSPoH -----END CERTIFICATE-----Generated at Wed Sep 10 22:42:37 2025 by rpki-client