$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bccc3259-c300-390a-a899-ca18efd298bd.roa File: bccc3259-c300-390a-a899-ca18efd298bd.roa (raw, json) Hash identifier: nX+VXj4bOnkhnUgGme9v/95kSDzGyjaL2w2ghUGric0= Subject key identifier: 68:D9:1E:CC:64:91:CB:A0:1A:61:E0:3E:B3:E2:9D:DB:36:B7:93:63 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AA42B9E26B8D4A59F6017B270 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bccc3259-c300-390a-a899-ca18efd298bd.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 396574 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:9e:26:b8:d4:a5:9f:60:17:b2:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=28f9553e-3d51-4364-838b-a52e2ddae6f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ce:76:a4:80:3f:66:15:f3:50:c5:6a:81:1a: 58:8a:18:0c:65:42:02:a8:a6:97:4a:b6:14:20:6e: c3:7b:c7:4e:b8:b7:e8:09:56:0d:2d:85:b3:d4:fc: 55:db:93:0d:ec:3e:f5:60:67:e1:bb:ac:af:3e:57: 64:58:5a:a9:c6:a9:3a:d0:2a:42:e0:52:30:b7:46: cf:ac:b8:63:11:df:d0:7f:72:17:12:45:17:2e:02: 39:79:3f:ab:70:98:a2:74:89:55:15:76:ff:84:dd: 5b:8b:9f:8b:67:31:2d:64:21:cd:b2:6d:a0:26:43: 3b:81:00:1f:ad:62:65:6a:4b:43:96:ba:e7:85:0a: f9:1b:67:f9:37:56:38:da:c8:af:9f:4d:a2:11:a3: f9:88:7b:45:7d:2f:ac:bd:62:e0:a7:63:eb:78:01: 6f:57:1c:dd:6d:59:ad:67:93:55:cc:88:b4:36:17: a2:7a:3d:79:74:56:b8:f0:76:cf:ac:36:49:56:97: 42:c2:0d:31:56:fa:56:fe:07:33:cb:16:38:0f:b7: ad:24:c5:94:87:c1:a7:0c:9d:9e:5b:24:12:80:1c: fd:ee:86:6f:40:9e:67:b0:40:17:8a:a5:04:34:a1: 9b:78:51:9d:5c:eb:42:67:ab:25:8c:17:11:38:01: f4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:D9:1E:CC:64:91:CB:A0:1A:61:E0:3E:B3:E2:9D:DB:36:B7:93:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bccc3259-c300-390a-a899-ca18efd298bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:e7:ab:ec:00:4c:41:a3:ee:9b:15:10:34:79:e0:53:c6:8e: 55:ec:e0:9c:3b:6e:15:e5:97:e5:c9:61:cb:49:6b:d7:cd:82: 9b:8a:81:05:42:d3:32:23:4d:78:15:9e:9d:43:e9:b7:b3:bf: be:51:b1:20:01:32:4d:e4:65:b1:eb:b8:55:bb:5d:9a:34:e5: 78:8c:37:da:ef:1b:77:11:b2:21:7e:b7:fd:c7:7d:cb:ea:d0: 3f:8e:55:09:96:bb:c3:22:11:d9:86:d2:3b:b3:16:ea:e5:84: bc:95:5c:d0:41:aa:75:ba:a4:e9:f4:49:74:c1:9c:35:92:91: cc:df:17:1f:4d:9b:8e:14:3c:6f:60:96:19:71:6f:a4:94:5f: 13:fd:a0:94:97:8d:ff:f4:ce:86:44:77:6a:d7:c6:e2:1a:83: a6:6c:94:c7:2e:12:ae:12:e8:cc:3c:92:af:87:ea:f5:3a:df: db:d0:af:c0:dc:95:8e:cb:a2:db:5f:60:4b:a3:f4:a4:79:9e: ba:1b:43:b5:8c:f2:c9:57:e7:17:2a:b7:c3:27:10:4c:d0:f9: ff:27:e7:24:1d:1e:e0:67:3c:5c:a6:50:e5:ef:3e:a0:ac:4b: f3:0a:9b:69:6c:4a:87:22:20:f4:3b:25:7b:47:f1:a6:06:f2: e3:77:83:6e -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqkK54muNSln2AXsnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk MjhmOTU1M2UtM2Q1MS00MzY0LTgzOGItYTUyZTJkZGFlNmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvs52pIA/ZhXzUMVqgRpYihgMZUICqKaXSrYU IG7De8dOuLfoCVYNLYWz1PxV25MN7D71YGfhu6yvPldkWFqpxqk60CpC4FIwt0bP rLhjEd/Qf3IXEkUXLgI5eT+rcJiidIlVFXb/hN1bi5+LZzEtZCHNsm2gJkM7gQAf rWJlaktDlrrnhQr5G2f5N1Y42sivn02iEaP5iHtFfS+svWLgp2PreAFvVxzdbVmt Z5NVzIi0Nheiej15dFa48HbPrDZJVpdCwg0xVvpW/gczyxY4D7etJMWUh8GnDJ2e WyQSgBz97oZvQJ5nsEAXiqUENKGbeFGdXOtCZ6sljBcROAH0TwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGjZHsxkkcugGmHgPrPinds2t5NjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmNjYzMyNTktYzMwMC0z OTBhLWE4OTktY2ExOGVmZDI5OGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB156vsAExBo+6bFRA0eeBTxo5V7OCcO24V5Zfl yWHLSWvXzYKbioEFQtMyI014FZ6dQ+m3s7++UbEgATJN5GWx67hVu12aNOV4jDfa 7xt3EbIhfrf9x33L6tA/jlUJlrvDIhHZhtI7sxbq5YS8lVzQQap1uqTp9El0wZw1 kpHM3xcfTZuOFDxvYJYZcW+klF8T/aCUl43/9M6GRHdq18biGoOmbJTHLhKuEujM PJKvh+r1Ot/b0K/A3JWOy6LbX2BLo/SkeZ66G0O1jPLJV+cXKrfDJxBM0Pn/J+ck HR7gZzxcplDl7z6grEvzCptpbEqHIiD0OyV7R/GmBvLjd4Nu -----END CERTIFICATE-----Generated at Wed Aug 6 16:24:51 2025 by rpki-client