$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/833420d9-77fc-37d5-8ecd-825140380577.roa File: 833420d9-77fc-37d5-8ecd-825140380577.roa (raw, json) Hash identifier: K33U2CJQO9SrdEIkxFkI3JAoqn/T0QZtjpTcEkYfwQw= Subject key identifier: 58:33:8D:8C:82:34:BD:F1:41:BA:8B:FC:D0:70:FD:68:F3:86:37:5D Certificate issuer: /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Certificate serial: 010D0C9F4328584A3CE02EA6D8467D174E8490C0 Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/833420d9-77fc-37d5-8ecd-825140380577.roa Signing time: Thu 19 Jun 2025 01:00:50 +0000 ROA not before: Thu 19 Jun 2025 01:00:50 +0000 ROA not after: Wed 17 Sep 2025 01:00:50 +0000 asID: 26548 IP address blocks: 2604:7a80:1000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:e0:2e:a6:d8:46:7d:17:4e:84:90:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Validity Not Before: Jun 19 01:00:50 2025 GMT Not After : Sep 17 01:00:50 2025 GMT Subject: CN=98efeae6-16c1-407d-a84c-cd2c2b8f367f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e0:31:01:e0:7a:ca:be:49:54:2f:68:3f:62: 0e:1c:57:d7:54:90:30:ea:a5:b3:a8:1d:5c:63:0a: 1c:95:d5:d2:f6:d8:c3:b7:b2:bf:f1:f8:c7:b9:df: 95:c5:c7:4b:65:99:7f:3a:a8:e8:ba:72:12:43:3b: 87:87:b6:ee:6a:f3:66:32:57:75:b2:6c:11:1d:12: b5:eb:35:9c:a0:e1:f0:54:ec:53:18:e9:53:f7:d6: 46:b4:22:1e:72:2c:86:ac:b1:65:93:82:a6:89:57: b2:97:40:5f:c6:60:e1:b7:6b:e0:b3:8a:3e:04:86: 4d:72:c2:43:05:37:16:02:af:ec:75:6c:44:3e:5d: cd:c2:cd:a9:ed:da:dc:7d:1b:ef:e2:aa:19:53:f6: ae:17:b8:55:b2:e1:e1:5f:dd:e8:04:ae:64:4b:16: 1f:34:90:a2:d9:e4:e7:c7:3e:04:b8:81:af:d1:ef: e6:63:90:f6:db:2a:ee:0a:75:37:37:40:7d:d3:a8: b7:5e:5b:70:95:91:f7:6e:8f:3d:71:e2:db:70:4b: a2:93:9d:b4:ef:f5:88:65:34:57:42:c4:f9:72:2f: 97:65:aa:cb:3d:6a:e0:cb:53:e4:87:67:b7:0d:ab: 12:7f:ec:89:c3:cc:c8:6a:c3:7f:82:4a:28:d3:7a: ce:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:33:8D:8C:82:34:BD:F1:41:BA:8B:FC:D0:70:FD:68:F3:86:37:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/833420d9-77fc-37d5-8ecd-825140380577.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl X509v3 Authority Key Identifier: keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer sbgp-ipAddrBlock: critical IPv6: 2604:7a80:1000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:8a:f6:ea:5d:fd:00:ba:85:ee:ad:58:22:01:70:3c:63:53: 9b:cd:fe:f4:b7:32:0c:8e:cb:93:3e:a7:50:96:7f:22:0e:26: e8:fc:a7:c9:6d:be:47:54:61:74:6e:6c:62:25:8e:f2:23:19: 04:e2:f0:d3:25:a1:19:2c:29:a0:ca:b9:ba:a6:84:05:a3:45: f3:fc:4f:78:94:f7:10:90:56:5e:b4:7c:24:48:c7:1b:c5:c4: 0c:d1:43:e3:d4:c9:d1:ec:ee:e8:5d:16:87:58:d3:8f:2d:20: 28:1f:2d:b6:bb:f7:95:49:17:0e:03:2e:fd:31:6a:2d:d3:03: ff:78:ea:6b:30:3f:a9:02:d9:25:21:5c:e1:7f:c2:bc:94:10: aa:bb:06:fd:d1:ab:b9:d3:d8:40:6e:a0:26:08:84:92:73:a5: fd:cb:f7:f1:86:b0:e0:1c:6a:c7:d4:4d:ae:3a:40:06:db:15: 7e:7c:95:05:8a:5d:37:2a:3a:e7:f1:a5:22:d2:8d:2f:c4:99: 6d:36:81:bb:65:63:d6:23:59:d1:1c:07:ea:89:b3:12:9c:e3: 04:02:f4:b2:32:44:7d:05:b8:93:a3:3f:e9:64:c4:66:55:b2: d4:e2:30:9b:21:12:5c:5c:bd:51:11:c8:a1:7e:4b:81:60:ed: 30:8a:0d:f5 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEo84C6m2EZ9F06EkMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMxOWEyNDYtZDlmYS00ODFhLWE0ZDctMDEwYWY4YzEz MmIzMB4XDTI1MDYxOTAxMDA1MFoXDTI1MDkxNzAxMDA1MFowLzEtMCsGA1UEAxMk OThlZmVhZTYtMTZjMS00MDdkLWE4NGMtY2QyYzJiOGYzNjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuAxAeB6yr5JVC9oP2IOHFfXVJAw6qWzqB1c YwocldXS9tjDt7K/8fjHud+VxcdLZZl/OqjounISQzuHh7buavNmMld1smwRHRK1 6zWcoOHwVOxTGOlT99ZGtCIeciyGrLFlk4KmiVeyl0BfxmDht2vgs4o+BIZNcsJD BTcWAq/sdWxEPl3Nws2p7drcfRvv4qoZU/auF7hVsuHhX93oBK5kSxYfNJCi2eTn xz4EuIGv0e/mY5D22yruCnU3N0B906i3XltwlZH3bo89ceLbcEuik5207/WIZTRX QsT5ci+XZarLPWrgy1Pkh2e3DasSf+yJw8zIasN/gkoo03rOVQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFFgzjYyCNL3xQbqL/NBw/WjzhjddMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YzE5 YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBhZjhjMTMyYjMvODMzNDIwZDktNzdmYy0z N2Q1LThlY2QtODI1MTQwMzgwNTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWMxOWEyNDYtZDlmYS00ODFhLWE0 ZDctMDEwYWY4YzEzMmIzLzVjMTlhMjQ2LWQ5ZmEtNDgxYS1hNGQ3LTAxMGFmOGMx MzJiMy5jcmwwHwYDVR0jBBgwFoAUGBmr0BGL/MK+/l1zc0BDuuWTrnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YzE5YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBh ZjhjMTMyYjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgR6gBAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAdor26l39ALqF7q1YIgFwPGNTm83+9LcyDI7Lkz6nUJZ/Ig4m6Pyn yW2+R1RhdG5sYiWO8iMZBOLw0yWhGSwpoMq5uqaEBaNF8/xPeJT3EJBWXrR8JEjH G8XEDNFD49TJ0ezu6F0Wh1jTjy0gKB8ttrv3lUkXDgMu/TFqLdMD/3jqazA/qQLZ JSFc4X/CvJQQqrsG/dGrudPYQG6gJgiEknOl/cv38Yaw4Bxqx9RNrjpABtsVfnyV BYpdNyo65/GlItKNL8SZbTaBu2Vj1iNZ0RwH6omzEpzjBAL0sjJEfQW4k6M/6WTE ZlWy1OIwmyESXFy9URHIoX5LgWDtMIoN9Q== -----END CERTIFICATE-----Generated at Tue Jul 1 23:16:13 2025 by rpki-client