$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cde7ec80-ef62-3187-bdd3-52d126a43896.roa File: cde7ec80-ef62-3187-bdd3-52d126a43896.roa (raw, json) Hash identifier: 9xIMNuBACmiOXC6PhOg2/P4KLv6iKhCkL/Pd2K2gKF0= Subject key identifier: AA:80:35:40:85:98:2D:8B:F6:B4:66:44:BA:4B:EB:74:02:59:50:5A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B0CDC182117CAEED61F10B480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cde7ec80-ef62-3187-bdd3-52d126a43896.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 0 IP address blocks: 2620:74:b0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 12 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:18:21:17:ca:ee:d6:1f:10:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=9e7ae017-f3ab-4ba3-8130-fe649879f280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:28:e2:54:74:55:33:c5:28:76:60:d8:e2:ed: 87:03:38:21:3b:ef:cb:e2:2a:04:40:7f:c9:74:4e: e0:f8:a3:c0:c4:3e:b5:c1:19:2c:8f:79:94:c6:c4: a7:98:37:0a:ba:c0:15:17:ab:8e:29:1e:1b:c1:44: 53:13:4e:20:75:ff:12:0d:4f:0c:6b:29:a7:cb:cf: bd:67:3c:7b:74:23:53:9f:ee:8f:bb:13:29:05:64: 9f:f2:13:99:b0:d2:f5:d3:b9:fa:fa:60:77:6a:1e: fe:34:7e:0a:62:03:22:34:fa:05:bc:a1:31:d4:83: 48:98:0e:c6:eb:99:40:a1:04:b0:d5:8d:1c:ad:28: 8e:1a:15:62:1c:b5:7f:0b:26:ca:3e:b5:55:ea:53: 68:c5:18:8c:fd:23:99:bf:d0:ed:5b:db:35:0e:08: fd:41:95:21:61:d4:1a:11:ee:b6:35:49:78:d1:82: 9b:86:08:40:be:14:21:91:2c:19:af:90:e6:a3:40: f1:16:54:ea:12:57:76:e8:21:c9:d8:36:45:75:d9: 25:56:35:3d:d4:97:3e:13:ce:06:06:9f:14:e5:c7: 3d:49:71:f7:09:44:20:2b:2c:e3:2b:9d:d0:72:51: 08:4a:c0:ff:1e:cb:63:74:9c:d3:e5:8a:39:67:6c: 3a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:80:35:40:85:98:2D:8B:F6:B4:66:44:BA:4B:EB:74:02:59:50:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cde7ec80-ef62-3187-bdd3-52d126a43896.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:b0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:d4:ce:33:28:7c:8a:f0:ef:0a:2d:5b:93:6f:2a:21:a2:74: f1:bc:f9:3e:f3:1f:51:38:08:ea:0c:67:4d:b4:6f:02:0c:01: 4f:34:c8:46:4d:9f:07:71:e7:11:d6:88:39:c0:ff:bc:e5:90: f4:88:36:43:82:3b:58:29:08:76:3c:1b:f2:33:00:07:b9:83: e9:92:8e:79:b6:8f:d0:d9:63:8b:45:35:32:cf:38:66:dc:2c: 66:3c:60:50:e7:f2:06:25:70:d4:f2:5e:ed:3c:0f:49:2f:68: a0:dd:c0:09:c9:25:fb:59:96:a0:f2:9b:6f:05:d4:a3:5e:d3: 3f:b0:fd:d2:90:d8:96:5c:10:80:6d:48:6f:cb:f0:d2:9b:9c: 58:77:90:d4:ca:e0:3e:b9:89:aa:01:ee:37:92:cc:35:8b:6e: 33:2a:ab:01:23:8b:1d:88:14:4c:77:52:da:08:5d:6e:87:bd: 0f:c3:73:42:4c:dd:d8:b2:8b:a1:9b:be:19:3a:bc:66:03:1e: 49:f4:98:df:49:13:d8:1c:59:df:67:39:17:e3:ac:ed:f5:0d: 9c:da:04:1e:2e:5e:81:89:69:ea:a3:ca:f3:f7:6d:60:ed:81: e3:3c:d7:08:b9:f1:99:89:96:00:ae:1a:a3:49:6b:b1:3a:b3: ea:8d:41:fa -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsM3BghF8ru1h8QtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk OWU3YWUwMTctZjNhYi00YmEzLTgxMzAtZmU2NDk4NzlmMjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCjiVHRVM8UodmDY4u2HAzghO+/L4ioEQH/J dE7g+KPAxD61wRksj3mUxsSnmDcKusAVF6uOKR4bwURTE04gdf8SDU8Maymny8+9 Zzx7dCNTn+6PuxMpBWSf8hOZsNL107n6+mB3ah7+NH4KYgMiNPoFvKEx1INImA7G 65lAoQSw1Y0crSiOGhViHLV/CybKPrVV6lNoxRiM/SOZv9DtW9s1Dgj9QZUhYdQa Ee62NUl40YKbhghAvhQhkSwZr5Dmo0DxFlTqEld26CHJ2DZFddklVjU91Jc+E84G Bp8U5cc9SXH3CUQgKyzjK53QclEISsD/HstjdJzT5Yo5Z2w6MQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKqANUCFmC2L9rRmRLpL63QCWVBaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2RlN2VjODAtZWY2Mi0z MTg3LWJkZDMtNTJkMTI2YTQzODk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAAdACw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHrUzjMofIrw7wotW5NvKiGidPG8+T7zH1E4COoMZ020bwIMAU80 yEZNnwdx5xHWiDnA/7zlkPSINkOCO1gpCHY8G/IzAAe5g+mSjnm2j9DZY4tFNTLP OGbcLGY8YFDn8gYlcNTyXu08D0kvaKDdwAnJJftZlqDym28F1KNe0z+w/dKQ2JZc EIBtSG/L8NKbnFh3kNTK4D65iaoB7jeSzDWLbjMqqwEjix2IFEx3UtoIXW6HvQ/D c0JM3diyi6Gbvhk6vGYDHkn0mN9JE9gcWd9nORfjrO31DZzaBB4uXoGJaeqjyvP3 bWDtgeM81wi58ZmJlgCuGqNJa7E6s+qNQfo= -----END CERTIFICATE-----Generated at Thu Sep 11 02:55:09 2025 by rpki-client