$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/beaf5995-a580-35dc-b4a9-719173ffda0e.roa File: beaf5995-a580-35dc-b4a9-719173ffda0e.roa (raw, json) Hash identifier: TgX9xaZuNoiSZjYqHwAKXEQP3Q/8X9EPJwMy1Y7Lcsw= Subject key identifier: AF:12:38:75:60:39:7B:46:9E:06:39:E3:9C:D9:60:C1:E7:F8:9F:D3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B21CC3C07AE149EA1CC8CEEA0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/beaf5995-a580-35dc-b4a9-719173ffda0e.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 396593 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 12 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:3c:07:ae:14:9e:a1:cc:8c:ee:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=181bf11b-8e48-449a-82fd-0982f767b28f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:79:97:71:9e:bd:ef:a5:e9:f4:08:a5:bc:1b: ef:ff:59:54:1d:1a:bc:eb:fd:39:1b:2c:4b:44:14: 64:87:a4:e9:34:3c:40:a9:e6:af:3d:74:66:ec:4a: 5e:f0:a2:cc:51:d3:61:11:bb:90:57:02:72:0b:16: 95:0a:a2:13:c4:fe:1c:30:00:2a:c5:50:88:f6:e5: a9:d9:69:b8:47:06:41:1e:56:a1:02:4c:6f:17:07: 15:ea:36:1f:cb:93:8d:c5:27:44:81:01:60:c0:7a: 80:f1:13:de:63:87:d4:c6:ee:2d:f7:1b:26:ea:bc: f5:24:2b:bd:b3:8e:cd:5b:df:05:a8:85:f0:07:c6: 33:12:8b:31:39:04:17:c9:c9:96:7d:b8:c9:0f:c5: 23:ac:25:a4:73:86:a5:fa:f1:35:ae:b2:c4:e9:c2: ec:79:ec:d1:7e:dc:b6:bc:03:ec:eb:7d:72:58:b2: a8:6e:39:e8:ea:6d:45:52:1d:ee:6a:0d:06:08:5b: c3:59:e0:74:df:76:ed:a7:e0:4e:b2:6c:c2:ba:5d: d5:e6:4e:df:1a:4c:7b:b0:46:a8:9e:fe:60:74:20: c9:91:2a:56:a5:7f:93:c0:a5:2e:34:5a:9f:b7:c8: ff:7c:b3:9f:39:56:cf:75:ea:bb:67:dd:42:e9:f9: b9:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:12:38:75:60:39:7B:46:9E:06:39:E3:9C:D9:60:C1:E7:F8:9F:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/beaf5995-a580-35dc-b4a9-719173ffda0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:1a:c9:2f:ef:31:af:49:e4:ad:3a:18:72:1d:fd:3d:fb:30: 8d:38:d9:24:40:b6:81:3a:1b:99:69:a3:55:81:76:94:f3:7d: 66:10:8b:52:74:1d:25:6b:31:03:6c:e3:a1:9d:bc:ce:b2:8b: 9b:a6:3e:e4:d6:cf:1b:dc:8d:aa:9d:d4:16:6c:39:4e:a6:18: da:3a:3c:b0:bf:9b:ae:4f:de:20:ed:f0:4b:9a:25:28:2a:cf: a1:47:90:2e:91:2f:e5:83:8d:8c:dc:2c:20:94:40:55:3b:e3: 8e:67:ff:b9:7e:e4:7c:69:94:77:1b:08:e9:22:c0:80:c8:df: 6d:6c:7b:b3:d2:74:ec:73:56:44:3b:ee:4e:08:84:21:6b:32: 36:b4:35:c5:a7:79:d0:0d:5b:6a:0b:0f:34:20:c4:5a:46:57: 99:4e:18:a3:6f:0e:9c:28:cc:d7:f0:05:59:96:8a:fd:4c:a4: db:7b:fc:73:43:19:ae:c3:38:c4:18:95:cf:49:5d:e3:fd:c5: 2d:b6:a0:ab:5d:4c:9c:95:1e:3c:6d:b6:15:84:8d:90:3a:95: 09:8f:e2:b0:a3:87:17:63:d5:9b:b8:32:9e:92:fa:b7:8a:b6: 76:d2:b6:17:40:2f:37:4d:29:45:5e:2a:6c:f0:bc:1b:fb:1e: 8d:05:0f:6f -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEshzDwHrhSeocyM7qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk MTgxYmYxMWItOGU0OC00NDlhLTgyZmQtMDk4MmY3NjdiMjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3mXcZ6976Xp9AilvBvv/1lUHRq86/05GyxL RBRkh6TpNDxAqeavPXRm7Epe8KLMUdNhEbuQVwJyCxaVCqITxP4cMAAqxVCI9uWp 2Wm4RwZBHlahAkxvFwcV6jYfy5ONxSdEgQFgwHqA8RPeY4fUxu4t9xsm6rz1JCu9 s47NW98FqIXwB8YzEosxOQQXycmWfbjJD8UjrCWkc4al+vE1rrLE6cLseezRfty2 vAPs631yWLKobjno6m1FUh3uag0GCFvDWeB033btp+BOsmzCul3V5k7fGkx7sEao nv5gdCDJkSpWpX+TwKUuNFqft8j/fLOfOVbPdeq7Z91C6fm50QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFK8SOHVgOXtGngY545zZYMHn+J/TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmVhZjU5OTUtYTU4MC0z NWRjLWI0YTktNzE5MTczZmZkYTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB/Gskv7zGvSeStOhhyHf09+zCNONkkQLaBOhuZ aaNVgXaU831mEItSdB0lazEDbOOhnbzOsoubpj7k1s8b3I2qndQWbDlOphjaOjyw v5uuT94g7fBLmiUoKs+hR5AukS/lg42M3CwglEBVO+OOZ/+5fuR8aZR3GwjpIsCA yN9tbHuz0nTsc1ZEO+5OCIQhazI2tDXFp3nQDVtqCw80IMRaRleZThijbw6cKMzX 8AVZlor9TKTbe/xzQxmuwzjEGJXPSV3j/cUttqCrXUyclR48bbYVhI2QOpUJj+Kw o4cXY9WbuDKekvq3irZ20rYXQC83TSlFXips8Lwb+x6NBQ9v -----END CERTIFICATE-----Generated at Wed Sep 10 22:50:50 2025 by rpki-client