$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9ecafb93-e009-3102-93f3-09069224ba8c.roa File: 9ecafb93-e009-3102-93f3-09069224ba8c.roa (raw, json) Hash identifier: wAOc2b0I+ShaHfY6k2YHa6miKT6b1SjhweDZo7xg0Hs= Subject key identifier: 08:DD:B1:E4:7E:21:57:B0:C1:8D:80:E1:73:3B:19:BA:3F:94:B5:45 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B21CC3DA18565F7057A463CC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9ecafb93-e009-3102-93f3-09069224ba8c.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 396582 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 12 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:3d:a1:85:65:f7:05:7a:46:3c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=4964e556-e836-4d90-9e61-c27c438c69c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:2a:28:19:ff:ea:d5:2a:61:9e:5a:91:9d:d8: 48:f2:2f:a5:81:a7:1a:9c:8b:63:84:15:bd:b5:27: 0e:e0:3c:ef:45:16:81:e6:3e:3a:5b:45:01:c8:50: 0c:0a:04:11:17:ea:2e:a6:a6:70:d0:8b:aa:46:c9: d4:3b:4e:4d:b3:dd:8a:36:c3:75:42:83:87:bc:8e: cd:60:a1:42:c0:99:69:b6:ce:64:fd:ab:e2:67:16: bd:21:3e:9e:20:b0:7a:07:5a:89:53:71:ef:44:87: 27:93:5f:2e:90:de:76:08:9b:c2:ca:33:08:6d:86: 40:38:7d:a2:29:09:72:d0:9c:e6:bb:4a:30:d0:a7: 78:75:27:a4:c5:fe:2a:65:32:3d:6b:22:e7:f3:45: 9b:87:36:2d:0b:19:1c:df:59:1e:a4:c9:56:75:0a: c8:8f:1e:84:02:35:c3:63:0d:2a:fa:5b:e0:35:e7: 10:10:7c:31:07:a5:1b:0a:7e:90:cb:e7:87:5b:12: 1d:a6:5a:48:d9:a4:15:96:31:3e:1c:b1:d2:4a:05: 78:35:98:e4:aa:11:cd:de:4f:0e:7d:87:da:66:1d: 1d:32:63:95:b8:04:ec:4a:f8:1d:c5:2a:61:7d:ea: ec:c3:5f:55:24:83:c8:0c:c1:f7:de:37:d0:66:06: 4f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:DD:B1:E4:7E:21:57:B0:C1:8D:80:E1:73:3B:19:BA:3F:94:B5:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9ecafb93-e009-3102-93f3-09069224ba8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:e0:bc:b7:52:32:79:cb:dc:bd:1e:bc:05:ae:5f:a8:a2:58: 84:a3:0b:1d:6e:d4:e8:fd:55:af:05:17:49:40:82:d5:95:e0: cb:6d:6a:88:d6:56:1f:51:9f:c7:49:e7:4e:32:ec:84:c8:77: d7:75:c8:b0:3b:c3:7b:10:3e:c9:19:f0:5e:2e:05:f5:fd:1d: d5:13:cb:b7:6f:84:43:a3:8e:f0:c7:4e:72:ad:e7:70:ce:00: 13:bd:ea:ef:52:0c:6b:3c:a3:5e:9b:51:84:a9:52:be:e8:80: 78:a4:e1:b1:f0:85:3f:8b:c8:53:c0:cf:57:39:1b:2a:b5:ee: 93:a0:9a:3f:9d:ed:a4:97:54:14:ed:a7:4a:8a:d9:7f:f2:7e: af:e7:5a:89:08:12:54:eb:82:55:f0:8d:6a:2a:a1:d2:8a:a0: 75:89:fc:83:8f:9a:aa:15:0b:c3:18:b6:d7:ba:0b:bf:03:04: fb:3d:f6:55:84:bd:98:b3:bb:c1:b2:07:2a:9e:87:78:f3:d6: b6:62:38:00:c7:e2:5a:5b:bd:1a:3d:40:be:3b:b8:f4:82:87: e7:c6:67:00:cb:2b:38:88:ea:81:ed:a3:e3:3e:f6:67:0b:96: 01:f8:bc:54:28:d2:52:65:94:ee:f3:32:bb:05:91:a8:2d:5d: 3e:58:bc:26 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEshzD2hhWX3BXpGPMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk NDk2NGU1NTYtZTgzNi00ZDkwLTllNjEtYzI3YzQzOGM2OWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiooGf/q1SphnlqRndhI8i+lgacanItjhBW9 tScO4DzvRRaB5j46W0UByFAMCgQRF+oupqZw0IuqRsnUO05Ns92KNsN1QoOHvI7N YKFCwJlpts5k/aviZxa9IT6eILB6B1qJU3HvRIcnk18ukN52CJvCyjMIbYZAOH2i KQly0Jzmu0ow0Kd4dSekxf4qZTI9ayLn80WbhzYtCxkc31kepMlWdQrIjx6EAjXD Yw0q+lvgNecQEHwxB6UbCn6Qy+eHWxIdplpI2aQVljE+HLHSSgV4NZjkqhHN3k8O fYfaZh0dMmOVuATsSvgdxSphfersw19VJIPIDMH33jfQZgZPkwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFAjdseR+IVewwY2A4XM7Gbo/lLVFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWVjYWZiOTMtZTAwOS0z MTAyLTkzZjMtMDkwNjkyMjRiYThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB/4Ly3UjJ5y9y9HrwFrl+ooliEowsdbtTo/VWv BRdJQILVleDLbWqI1lYfUZ/HSedOMuyEyHfXdciwO8N7ED7JGfBeLgX1/R3VE8u3 b4RDo47wx05yredwzgATvervUgxrPKNem1GEqVK+6IB4pOGx8IU/i8hTwM9XORsq te6ToJo/ne2kl1QU7adKitl/8n6v51qJCBJU64JV8I1qKqHSiqB1ifyDj5qqFQvD GLbXugu/AwT7PfZVhL2Ys7vBsgcqnod489a2YjgAx+JaW70aPUC+O7j0gofnxmcA yys4iOqB7aPjPvZnC5YB+LxUKNJSZZTu8zK7BZGoLV0+WLwm -----END CERTIFICATE-----Generated at Wed Sep 10 22:43:46 2025 by rpki-client