$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f1f83f21-0e5c-3b07-88e0-a1a508aff4f1.roa File: f1f83f21-0e5c-3b07-88e0-a1a508aff4f1.roa (raw, json) Hash identifier: VZjf2YmNpnsvahFraPYCTPqSrsyWMZ8Hjgr9gwvZ6+o= Subject key identifier: 62:D3:44:17:2F:3D:DB:31:D8:92:CC:17:8C:19:07:01:66:FC:F8:32 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B21CC3639CCFFB254EC107C00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f1f83f21-0e5c-3b07-88e0-a1a508aff4f1.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 396592 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 12 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:36:39:cc:ff:b2:54:ec:10:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=e9acf62a-d39e-44ad-a0a3-545a1313965d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8e:12:19:97:cc:04:24:4a:8f:e7:a7:5c:ad: b7:50:87:77:b0:a0:0d:92:46:b6:4c:28:45:78:89: dc:02:e8:b4:92:a5:e8:f2:5f:80:58:8c:a4:66:77: 93:83:04:da:f7:44:03:08:2f:b0:f1:92:12:67:9e: c2:2e:46:61:16:56:46:c5:a7:14:3d:df:08:9f:76: f8:74:45:b8:a5:b5:dd:c7:ac:b4:a0:9b:5a:89:1c: de:17:89:67:11:82:5d:f9:63:44:d7:72:f6:d3:69: ea:72:40:77:27:eb:98:30:25:33:35:90:c8:04:ee: af:93:92:23:3f:c3:38:18:3e:f8:4e:0d:8b:5d:55: 41:9f:90:1c:d2:95:92:2d:5c:28:e3:a4:11:3d:3a: 0a:fc:1d:e6:82:3c:4d:a1:2d:54:36:9b:95:a6:80: c5:a2:da:f8:ab:2d:0c:b5:35:b1:b1:6c:62:eb:74: 6a:b2:d5:7c:e1:11:e0:4b:16:e4:42:34:86:54:43: 20:9f:1b:70:9a:95:3a:c9:7f:60:ae:81:21:ed:9e: 60:f6:d4:c5:85:69:c5:64:1f:d4:0e:c7:18:b2:f1: b5:80:46:13:61:46:10:bc:50:d3:91:6b:bc:cc:df: 41:9b:e7:9a:1f:ad:13:c3:f2:b9:d7:f7:d7:14:0e: db:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:D3:44:17:2F:3D:DB:31:D8:92:CC:17:8C:19:07:01:66:FC:F8:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f1f83f21-0e5c-3b07-88e0-a1a508aff4f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:95:5f:67:e1:69:9f:25:62:fb:a5:fd:4d:8f:bd:30:ab:0f: 08:ee:17:3e:56:65:e5:c7:6b:4f:2f:70:60:34:4e:26:c4:6a: 8c:fb:ed:a1:bf:96:bf:41:af:77:61:5d:99:46:6d:22:f7:7f: 53:85:fa:8c:26:e7:81:e0:56:a5:f6:92:e8:08:ea:55:f4:be: 96:ce:2d:d2:5c:5b:b2:8b:15:75:1b:3a:25:5b:33:5c:e6:12: 63:74:f9:28:6d:64:0f:ba:a2:40:2d:15:a7:49:b5:a3:d8:39: a9:44:8e:46:fa:77:37:3a:57:97:da:13:5d:bc:72:f1:ae:a7: fd:52:a5:00:db:d5:92:83:51:bc:0f:9d:34:f9:e4:91:b1:ec: b4:16:d7:6d:0e:e6:d9:b4:88:28:1d:b8:fa:38:d7:19:61:b0: 58:14:32:b9:77:de:36:94:6d:54:c2:4d:11:db:f3:97:64:94: ba:eb:7c:e5:11:2b:60:86:b4:23:3a:7d:d5:d7:2f:84:da:10: 05:6c:36:35:61:6d:40:46:ad:8c:70:dc:53:77:4d:96:ae:80: 56:0d:3b:60:cd:0f:9e:a1:ce:79:32:a0:a1:b8:21:18:df:ce: c4:5b:12:e8:70:17:2d:a4:5b:8f:ac:9b:a8:4b:d4:70:bd:e0: bb:ee:c9:23 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEshzDY5zP+yVOwQfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk ZTlhY2Y2MmEtZDM5ZS00NGFkLWEwYTMtNTQ1YTEzMTM5NjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoY4SGZfMBCRKj+enXK23UId3sKANkka2TChF eIncAui0kqXo8l+AWIykZneTgwTa90QDCC+w8ZISZ57CLkZhFlZGxacUPd8In3b4 dEW4pbXdx6y0oJtaiRzeF4lnEYJd+WNE13L202nqckB3J+uYMCUzNZDIBO6vk5Ij P8M4GD74Tg2LXVVBn5Ac0pWSLVwo46QRPToK/B3mgjxNoS1UNpuVpoDFotr4qy0M tTWxsWxi63RqstV84RHgSxbkQjSGVEMgnxtwmpU6yX9groEh7Z5g9tTFhWnFZB/U DscYsvG1gEYTYUYQvFDTkWu8zN9Bm+eaH60Tw/K51/fXFA7bhQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGLTRBcvPdsx2JLMF4wZBwFm/PgyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjFmODNmMjEtMGU1Yy0z YjA3LTg4ZTAtYTFhNTA4YWZmNGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBylV9n4WmfJWL7pf1Nj70wqw8I7hc+VmXlx2tP L3BgNE4mxGqM++2hv5a/Qa93YV2ZRm0i939ThfqMJueB4Fal9pLoCOpV9L6Wzi3S XFuyixV1GzolWzNc5hJjdPkobWQPuqJALRWnSbWj2DmpRI5G+nc3OleX2hNdvHLx rqf9UqUA29WSg1G8D500+eSRsey0FtdtDubZtIgoHbj6ONcZYbBYFDK5d942lG1U wk0R2/OXZJS663zlEStghrQjOn3V1y+E2hAFbDY1YW1ARq2McNxTd02WroBWDTtg zQ+eoc55MqChuCEY387EWxLocBctpFuPrJuoS9RwveC77skj -----END CERTIFICATE-----Generated at Wed Sep 10 22:36:41 2025 by rpki-client