$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e8305b95-975c-38ea-a00d-aeeaf3a324ed.roa File: e8305b95-975c-38ea-a00d-aeeaf3a324ed.roa (raw, json) Hash identifier: EE5fAF2rclqz8g7NUZa56XT+GSXGQpw23OWWGb8IY1Y= Subject key identifier: B1:CB:5A:2E:27:56:14:BC:07:68:9D:9E:8E:69:62:75:75:65:F1:A8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B21CC365F38E492448FB12780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e8305b95-975c-38ea-a00d-aeeaf3a324ed.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 397197 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:36:5f:38:e4:92:44:8f:b1:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=0dfc0c3d-e43d-473f-b1be-d4d105633d37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:75:0e:be:bf:b5:74:6a:c7:c3:90:c7:16:06: 7b:cc:83:8f:aa:f0:12:76:e8:58:e4:c9:cb:1f:59: e9:39:2d:72:31:17:8c:6a:46:7f:32:59:39:dc:44: 3b:45:6b:7c:a0:c4:af:8a:7c:62:76:4d:99:b1:2b: 4a:a5:f2:25:6e:62:78:54:e0:ed:87:ac:2a:6b:4a: 01:34:70:4a:89:21:3c:99:c4:d6:e2:32:ae:90:5d: 15:2e:25:dc:1b:00:40:4d:c0:29:8a:5c:78:d5:66: 18:07:fc:13:84:69:6c:c2:76:06:e5:d0:11:c6:f3: 56:59:0a:cd:79:43:4b:08:f6:b5:81:bb:27:c9:28: 05:52:fd:9f:63:4c:44:fc:8c:35:d4:44:09:15:6e: c6:db:d7:e3:54:1d:2b:0c:31:2c:2e:c7:f1:f2:05: 57:df:5d:67:a3:16:85:dc:dd:f0:e9:35:06:e1:4e: 98:df:bc:ad:5d:c0:a7:14:69:be:8e:47:ba:f0:b0: 5d:7b:de:05:8c:0c:15:6f:6e:ba:02:c7:67:36:a8: c2:a2:bf:7d:1a:40:15:e2:59:ad:14:29:ba:78:48: 33:30:1e:5f:cc:26:94:9e:3e:33:bf:0a:ce:93:9c: 43:4f:bd:f9:34:d3:32:b6:ca:0e:f6:63:16:e3:31: a5:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:CB:5A:2E:27:56:14:BC:07:68:9D:9E:8E:69:62:75:75:65:F1:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e8305b95-975c-38ea-a00d-aeeaf3a324ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:f2:a9:43:23:87:fa:aa:3c:8e:ed:9b:40:58:10:88:81:c4: 54:b1:b4:01:33:2d:c9:b5:5b:0b:d6:11:5a:c1:84:df:14:fb: 3f:6c:30:45:7d:38:a1:f9:f2:31:cf:a1:4c:43:1c:0d:c4:bb: ca:0f:f3:96:d0:0d:c0:c3:79:a5:af:92:06:f7:80:74:13:f9: b6:07:a5:9e:c4:16:3d:8a:b8:1c:80:b4:6c:eb:3f:af:89:18: bc:5e:3f:eb:7e:ac:58:23:6f:02:47:86:f1:14:01:e7:62:61: 7e:b3:37:20:3c:72:bb:37:d9:83:7b:39:4d:97:d0:44:e0:70: 6f:b2:a5:6e:d7:8f:db:25:bd:f0:bd:6c:c7:07:84:21:2e:c6: dc:88:f9:f5:fc:bb:09:f5:73:9c:ce:ed:b4:48:2f:45:35:29: 84:b1:75:bc:a4:93:08:39:3e:c0:3f:50:54:63:7e:09:1d:73: a8:cb:19:c1:20:30:66:74:fa:c7:02:2b:eb:8d:c8:2b:c1:c9: b4:a3:77:69:a5:64:27:a4:43:fc:5f:77:40:79:b6:44:c3:b4: 1c:98:dc:d0:1a:e6:05:b0:b2:44:fd:19:24:c1:89:09:53:42: a2:ca:22:34:be:84:67:79:6c:be:7d:38:75:00:3a:12:52:5c: 10:d1:07:90 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEshzDZfOOSSRI+xJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk MGRmYzBjM2QtZTQzZC00NzNmLWIxYmUtZDRkMTA1NjMzZDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHUOvr+1dGrHw5DHFgZ7zIOPqvASduhY5MnL H1npOS1yMReMakZ/Mlk53EQ7RWt8oMSvinxidk2ZsStKpfIlbmJ4VODth6wqa0oB NHBKiSE8mcTW4jKukF0VLiXcGwBATcApilx41WYYB/wThGlswnYG5dARxvNWWQrN eUNLCPa1gbsnySgFUv2fY0xE/Iw11EQJFW7G29fjVB0rDDEsLsfx8gVX311noxaF 3N3w6TUG4U6Y37ytXcCnFGm+jke68LBde94FjAwVb266AsdnNqjCor99GkAV4lmt FCm6eEgzMB5fzCaUnj4zvwrOk5xDT735NNMytsoO9mMW4zGlcQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLHLWi4nVhS8B2idno5pYnV1ZfGoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTgzMDViOTUtOTc1Yy0z OGVhLWEwMGQtYWVlYWYzYTMyNGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAZ8qlDI4f6qjyO7ZtAWBCIgcRUsbQBMy3JtVsL 1hFawYTfFPs/bDBFfTih+fIxz6FMQxwNxLvKD/OW0A3Aw3mlr5IG94B0E/m2B6We xBY9irgcgLRs6z+viRi8Xj/rfqxYI28CR4bxFAHnYmF+szcgPHK7N9mDezlNl9BE 4HBvsqVu14/bJb3wvWzHB4QhLsbciPn1/LsJ9XOczu20SC9FNSmEsXW8pJMIOT7A P1BUY34JHXOoyxnBIDBmdPrHAivrjcgrwcm0o3dppWQnpEP8X3dAebZEw7QcmNzQ GuYFsLJE/RkkwYkJU0KiyiI0voRneWy+fTh1ADoSUlwQ0QeQ -----END CERTIFICATE-----Generated at Wed Oct 29 20:03:10 2025 by rpki-client