$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8f836bb-29ac-3284-978c-e634cfcb8096.roa File: c8f836bb-29ac-3284-978c-e634cfcb8096.roa (raw, json) Hash identifier: 7F+SEg0VtBQqGJlCc1S6s2MZqpuggR1R+60WU/RuPoc= Subject key identifier: 2E:9C:C3:E4:BA:8B:B4:3E:A3:3C:74:27:23:17:FD:18:C7:1D:67:F0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B21CC3BCAF8608063BC65C440 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8f836bb-29ac-3284-978c-e634cfcb8096.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 20172 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 12 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:3b:ca:f8:60:80:63:bc:65:c4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=22a9cf87-7860-4591-b65a-160cf9121619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9f:7d:32:29:09:de:30:b2:f4:22:9b:9a:86: a2:ad:65:74:dd:43:72:ee:33:ed:41:dd:2b:e7:93: a1:9f:56:33:33:63:89:64:43:60:b6:3b:c3:67:75: c0:b6:3b:67:30:c9:4c:53:4f:65:80:2e:44:44:1d: 83:21:60:c3:08:bf:2d:42:47:0d:d1:c5:06:98:91: d6:eb:70:76:2e:2f:e7:e5:e4:95:74:85:f4:32:19: e3:71:db:84:02:67:17:f2:de:d3:dc:36:92:2d:6b: cb:2c:a4:2f:b4:7f:2a:e3:05:3f:ac:10:f2:34:98: 5b:56:40:26:e7:44:9d:9c:c2:75:f3:f6:ec:c1:50: f7:3e:47:3d:c2:fa:c1:1f:d2:13:d8:7a:6e:a7:57: 7a:65:ee:b3:5c:9b:24:94:ca:04:19:6c:48:6d:2e: b2:71:ba:c7:7f:43:e6:d1:c0:4e:37:12:19:dc:71: 0b:c4:54:23:40:09:40:0b:2d:46:56:43:50:98:7e: 1f:81:57:0c:c2:83:4c:89:0a:3c:4b:44:35:57:1e: 92:dc:11:9a:33:04:29:ff:81:f5:72:b7:ec:57:a1: 82:7a:79:57:c7:b5:3e:5f:64:9b:bb:88:60:ba:ce: 2b:bc:65:b0:7c:e8:7e:88:27:b9:c7:80:d7:85:56: 0c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:9C:C3:E4:BA:8B:B4:3E:A3:3C:74:27:23:17:FD:18:C7:1D:67:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8f836bb-29ac-3284-978c-e634cfcb8096.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:92:34:b4:f3:ce:ab:ee:bd:bd:ba:09:ff:dd:80:52:c8:a7: ed:8f:ea:bc:1d:75:41:28:25:4b:19:05:1c:69:fe:c3:75:85: 39:e9:47:52:13:c5:d9:3e:e1:44:0b:bb:63:50:91:a5:ef:55: 9e:46:64:dc:5e:82:0c:5f:2c:5d:e5:64:83:7b:6e:6e:27:0e: 2a:04:19:fa:b0:89:92:a8:22:e4:d6:04:f2:7c:e2:2e:94:f5: 5d:15:dc:04:43:fa:35:a0:a2:de:89:24:9e:1d:7b:61:8a:ab: 86:20:59:c1:31:7d:5c:1c:88:a2:81:03:4c:62:fb:e8:9f:7e: a4:08:96:de:32:d0:82:bd:60:60:67:65:40:aa:f4:d1:bb:cf: fc:f9:96:26:33:fe:eb:a3:d8:72:df:99:8d:6d:6d:fc:b5:b2: 9c:ea:46:f5:0d:82:41:86:ae:a2:97:38:08:82:bc:66:44:9d: dd:96:4f:c4:2a:8b:69:9e:28:35:af:19:3d:44:ba:f7:6d:ac: e7:e1:14:4a:54:9f:14:a5:09:95:14:39:4c:79:ae:56:6a:59: e9:87:a0:81:1f:c0:2e:18:63:91:68:9b:de:6b:bb:4e:1b:94: 2c:85:33:de:13:3e:78:a3:c8:16:c9:56:d9:c8:8f:1a:42:a1: d0:7c:a4:1c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEshzDvK+GCAY7xlxEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk MjJhOWNmODctNzg2MC00NTkxLWI2NWEtMTYwY2Y5MTIxNjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo599MikJ3jCy9CKbmoairWV03UNy7jPtQd0r 55Ohn1YzM2OJZENgtjvDZ3XAtjtnMMlMU09lgC5ERB2DIWDDCL8tQkcN0cUGmJHW 63B2Li/n5eSVdIX0MhnjcduEAmcX8t7T3DaSLWvLLKQvtH8q4wU/rBDyNJhbVkAm 50SdnMJ18/bswVD3Pkc9wvrBH9IT2Hpup1d6Ze6zXJsklMoEGWxIbS6ycbrHf0Pm 0cBONxIZ3HELxFQjQAlACy1GVkNQmH4fgVcMwoNMiQo8S0Q1Vx6S3BGaMwQp/4H1 crfsV6GCenlXx7U+X2Sbu4hgus4rvGWwfOh+iCe5x4DXhVYM/wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFC6cw+S6i7Q+ozx0JyMX/RjHHWfwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzhmODM2YmItMjlhYy0z Mjg0LTk3OGMtZTYzNGNmY2I4MDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBNkjS0886r7r29ugn/3YBSyKftj+q8HXVBKCVL GQUcaf7DdYU56UdSE8XZPuFEC7tjUJGl71WeRmTcXoIMXyxd5WSDe25uJw4qBBn6 sImSqCLk1gTyfOIulPVdFdwEQ/o1oKLeiSSeHXthiquGIFnBMX1cHIiigQNMYvvo n36kCJbeMtCCvWBgZ2VAqvTRu8/8+ZYmM/7ro9hy35mNbW38tbKc6kb1DYJBhq6i lzgIgrxmRJ3dlk/EKotpnig1rxk9RLr3bazn4RRKVJ8UpQmVFDlMea5Walnph6CB H8AuGGORaJvea7tOG5QshTPeEz54o8gWyVbZyI8aQqHQfKQc -----END CERTIFICATE-----Generated at Wed Sep 10 22:48:20 2025 by rpki-client