$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9ea497da-cb04-340f-aa7e-13ed7e7deb4d.roa File: 9ea497da-cb04-340f-aa7e-13ed7e7deb4d.roa (raw, json) Hash identifier: 6ZRXbBoNwFSZAGOIj8L3/hqRpibqpU+R/5XLqqhDcXw= Subject key identifier: A9:69:05:08:57:17:26:83:12:93:C0:74:D9:CB:8A:9A:72:16:48:49 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AD9366ED05D7609FDAAC48540 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9ea497da-cb04-340f-aa7e-13ed7e7deb4d.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 397201 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:6e:d0:5d:76:09:fd:aa:c4:85:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=c2596132-6fcb-4d4b-a8e5-f9f4c9ec64b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d0:a9:b3:de:b5:9b:cb:8f:f2:ea:95:ce:0c: 71:9e:5d:b5:04:cf:9a:89:c8:a7:58:c6:0a:0a:59: 74:50:33:47:5e:58:5b:eb:e3:4d:72:06:3f:54:48: 28:83:15:4d:b6:e7:37:24:67:37:34:f0:bc:90:f6: c5:34:31:8a:a1:8f:ce:6f:d3:9b:6f:d1:ad:72:46: 85:6e:db:e8:07:43:cb:f5:26:6e:92:ac:31:1f:7a: 68:67:7b:fa:ed:26:87:6b:35:f8:5e:41:bc:fc:bb: 8f:a8:24:90:ca:dc:5c:e2:1e:32:b7:73:5a:3b:c9: 72:3b:5b:bb:70:07:52:1a:db:ab:fd:4d:5f:a0:36: d2:1b:3f:e4:36:b4:2e:12:b0:a8:6e:93:15:2c:33: 9a:94:30:fa:84:ae:28:af:6b:55:38:9e:e0:2a:ec: f0:3c:17:f7:8e:ac:e4:f1:38:b3:c1:e0:98:44:c9: a6:4f:95:b4:d0:74:a0:74:3b:98:75:45:da:fe:9e: b6:d3:25:d4:86:05:a5:20:9b:3e:f9:4a:d4:bd:78: 06:8f:cd:31:db:ff:9a:c0:c8:b8:b0:30:2c:1b:7a: dc:8d:d4:42:ad:29:17:01:22:4e:ac:47:66:97:9a: 42:64:eb:9e:08:0b:bf:82:b9:b6:7c:83:0f:da:83: ad:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:69:05:08:57:17:26:83:12:93:C0:74:D9:CB:8A:9A:72:16:48:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9ea497da-cb04-340f-aa7e-13ed7e7deb4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:0f:bc:b5:52:0d:4a:3b:1e:1b:4b:4a:ef:66:4a:e1:2e:73: ca:66:7e:91:71:c0:bf:c0:33:69:88:00:4a:b1:50:bd:31:29: f1:9f:cb:7e:4b:cd:b9:e6:ec:e4:73:e4:c2:05:b0:fe:c2:dd: 83:f1:34:e4:75:d3:af:dc:49:b2:1d:24:fa:22:a0:fb:09:3a: 14:ec:cd:23:28:4d:af:da:e1:b9:3d:82:54:01:aa:fb:ad:54: 88:ed:90:1b:5a:64:4e:b3:54:f1:3d:22:f9:d5:8a:80:25:62: 14:b0:01:5d:4a:39:37:27:59:cc:ce:86:7c:94:d9:23:08:96: c2:10:29:45:4a:59:fe:ff:3e:ee:9a:b9:68:ae:24:fb:c4:57: 43:15:08:be:7f:a5:15:10:bd:69:b3:e3:05:7f:f1:02:3e:04: 7e:d2:4f:78:f9:ef:56:28:6c:b1:e6:21:f5:70:74:86:30:80: 94:6f:61:71:27:fb:23:82:ca:c5:98:75:dc:53:67:d9:1c:ad: 76:0e:4a:81:dd:bc:08:e2:f4:4e:61:77:d0:0b:86:71:da:f1: 81:9a:3c:05:9b:a7:ac:f0:cf:0c:57:d0:bb:f5:73:da:50:71: 07:e2:d1:52:8e:81:e4:fd:28:49:99:86:00:69:3c:8b:89:82: 5a:e1:52:3e -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErZNm7QXXYJ/arEhUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk YzI1OTYxMzItNmZjYi00ZDRiLWE4ZTUtZjlmNGM5ZWM2NGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdCps961m8uP8uqVzgxxnl21BM+aicinWMYK Cll0UDNHXlhb6+NNcgY/VEgogxVNtuc3JGc3NPC8kPbFNDGKoY/Ob9Obb9GtckaF btvoB0PL9SZukqwxH3poZ3v67SaHazX4XkG8/LuPqCSQytxc4h4yt3NaO8lyO1u7 cAdSGtur/U1foDbSGz/kNrQuErCobpMVLDOalDD6hK4or2tVOJ7gKuzwPBf3jqzk 8TizweCYRMmmT5W00HSgdDuYdUXa/p620yXUhgWlIJs++UrUvXgGj80x2/+awMi4 sDAsG3rcjdRCrSkXASJOrEdml5pCZOueCAu/grm2fIMP2oOt7QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKlpBQhXFyaDEpPAdNnLippyFkhJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWVhNDk3ZGEtY2IwNC0z NDBmLWFhN2UtMTNlZDdlN2RlYjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBXD7y1Ug1KOx4bS0rvZkrhLnPKZn6RccC/wDNp iABKsVC9MSnxn8t+S8255uzkc+TCBbD+wt2D8TTkddOv3EmyHST6IqD7CToU7M0j KE2v2uG5PYJUAar7rVSI7ZAbWmROs1TxPSL51YqAJWIUsAFdSjk3J1nMzoZ8lNkj CJbCEClFSln+/z7umrloriT7xFdDFQi+f6UVEL1ps+MFf/ECPgR+0k94+e9WKGyx 5iH1cHSGMICUb2FxJ/sjgsrFmHXcU2fZHK12DkqB3bwI4vROYXfQC4Zx2vGBmjwF m6es8M8MV9C79XPaUHEH4tFSjoHk/ShJmYYAaTyLiYJa4VI+ -----END CERTIFICATE-----Generated at Sat Aug 23 16:57:07 2025 by rpki-client