$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d4c34597-50af-3811-80f1-06ac34328bc0.roa File: d4c34597-50af-3811-80f1-06ac34328bc0.roa (raw, json) Hash identifier: rMnMR3t678Z95qbUquQnvdh+rI07szyHo0UGcaEBDFk= Subject key identifier: FC:CF:D4:0C:5F:30:51:07:19:32:7B:7D:44:FB:71:51:82:5F:FB:DF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B21CC359D1CCD0D37B8DCAE60 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d4c34597-50af-3811-80f1-06ac34328bc0.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 36625 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:35:9d:1c:cd:0d:37:b8:dc:ae:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=28247e74-758c-4432-a772-60b59ea43c40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e1:a2:4e:68:f5:e4:6a:fa:4d:6f:fb:75:13: bb:85:50:41:70:dc:20:05:7e:7e:e1:a6:71:e9:c2: 0a:cf:29:9e:06:e7:c8:78:54:5e:a0:c0:d3:07:86: 69:30:b6:45:ff:37:65:81:e4:2f:71:3e:8b:50:23: cf:03:0a:13:a2:53:ee:83:09:79:35:52:05:31:61: 16:7b:f3:eb:66:56:1a:13:1c:14:6e:23:49:71:6b: 49:d5:ec:5b:45:63:fa:f5:19:8f:52:58:e3:17:2a: 52:58:d6:b0:dd:f2:f3:53:bd:1b:28:71:40:df:0f: 51:f2:c3:f7:12:88:be:c7:9e:83:ba:b3:36:61:fa: 71:c4:23:6a:e8:75:d1:cc:5e:cd:87:8c:50:b2:dd: 36:51:21:db:f6:11:a8:75:9e:2b:d4:69:10:12:35: 04:63:9c:8c:c6:c1:f9:51:b2:a5:e3:65:71:4e:f5: a8:fc:e1:16:b8:2f:6c:fc:41:4b:ad:56:7d:98:fb: fd:cc:90:80:bf:8b:f6:e4:d7:92:c2:04:c8:b5:66: 5b:e8:2a:ba:89:49:63:08:fe:95:9c:35:5f:93:43: 56:7e:d3:cf:5f:00:42:08:f7:96:78:ae:14:df:ca: c3:37:8b:a8:a4:81:7f:ed:3d:98:64:c0:14:d2:a0: 96:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:CF:D4:0C:5F:30:51:07:19:32:7B:7D:44:FB:71:51:82:5F:FB:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d4c34597-50af-3811-80f1-06ac34328bc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:51:c5:15:2f:fd:49:38:ec:96:dd:46:19:02:a4:5f:71:7f: a8:69:92:86:d3:1f:a9:06:ca:bb:c8:0a:d0:15:d7:70:9f:9d: d7:e2:2d:ad:57:b3:02:10:e1:d2:f8:a4:f7:3f:16:71:2b:6a: 12:f0:ee:45:e7:4e:56:ff:c5:63:64:3f:2d:0b:9f:b8:01:74: 57:f6:87:b8:b3:59:e4:47:e9:bd:1d:9e:c4:55:53:e6:65:0a: 88:01:92:b6:1c:12:f8:67:03:9a:c5:c3:40:c0:30:1c:cf:c4: dc:be:e1:1f:78:f0:64:7b:b1:d2:82:fd:9e:19:34:14:cc:9b: 7b:bc:42:c4:58:a7:12:4c:f0:7e:81:2a:55:45:cd:61:2d:e5: c6:6d:14:d8:9c:93:a3:31:9a:af:1d:ef:4c:07:82:4d:4c:e4: 8f:0a:72:f2:09:69:70:d2:ed:26:b0:d9:95:76:3c:2c:c8:74: 9d:b3:99:ae:75:f3:f3:e0:21:11:85:be:ff:ca:6c:d8:26:f2: ed:4e:f6:eb:09:89:a3:48:0a:68:46:11:f4:c5:e8:d0:db:7a: a2:a6:40:3d:40:05:fd:53:9c:ad:d3:77:10:ad:2b:08:f3:78: 23:6e:56:04:e5:27:5a:29:3e:51:82:8f:76:cc:9f:aa:65:f5: 74:f0:71:36 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEshzDWdHM0NN7jcrmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk MjgyNDdlNzQtNzU4Yy00NDMyLWE3NzItNjBiNTllYTQzYzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuGiTmj15Gr6TW/7dRO7hVBBcNwgBX5+4aZx 6cIKzymeBufIeFReoMDTB4ZpMLZF/zdlgeQvcT6LUCPPAwoTolPugwl5NVIFMWEW e/PrZlYaExwUbiNJcWtJ1exbRWP69RmPUljjFypSWNaw3fLzU70bKHFA3w9R8sP3 Eoi+x56DurM2YfpxxCNq6HXRzF7Nh4xQst02USHb9hGodZ4r1GkQEjUEY5yMxsH5 UbKl42VxTvWo/OEWuC9s/EFLrVZ9mPv9zJCAv4v25NeSwgTItWZb6Cq6iUljCP6V nDVfk0NWftPPXwBCCPeWeK4U38rDN4uopIF/7T2YZMAU0qCWDwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPzP1AxfMFEHGTJ7fUT7cVGCX/vfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDRjMzQ1OTctNTBhZi0z ODExLTgwZjEtMDZhYzM0MzI4YmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAAUcUVL/1JOOyW3UYZAqRfcX+oaZKG0x+pBsq7 yArQFddwn53X4i2tV7MCEOHS+KT3PxZxK2oS8O5F505W/8VjZD8tC5+4AXRX9oe4 s1nkR+m9HZ7EVVPmZQqIAZK2HBL4ZwOaxcNAwDAcz8TcvuEfePBke7HSgv2eGTQU zJt7vELEWKcSTPB+gSpVRc1hLeXGbRTYnJOjMZqvHe9MB4JNTOSPCnLyCWlw0u0m sNmVdjwsyHSds5mudfPz4CERhb7/ymzYJvLtTvbrCYmjSApoRhH0xejQ23qipkA9 QAX9U5yt03cQrSsI83gjblYE5SdaKT5Rgo92zJ+qZfV08HE2 -----END CERTIFICATE-----Generated at Wed Oct 29 20:42:04 2025 by rpki-client