$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/268cad49-8fe0-3114-93b6-1669c6777057.roa File: 268cad49-8fe0-3114-93b6-1669c6777057.roa (raw, json) Hash identifier: c1mKC7OQUFy8V3Sl6yrDdHiad6UGCWWfcx9Uhfc1Gy4= Subject key identifier: 3C:77:DE:6E:49:44:CA:DF:87:E4:84:53:59:91:60:F8:75:5F:C7:F4 Certificate issuer: /CN=21c580c1-a05d-4e28-a48d-9ea0ec5edcac Certificate serial: 010D0C9F4328584ABA80CA3D3DA3B351561314C0 Authority key identifier: 43:4C:13:6E:49:56:C6:2F:BF:B3:24:6A:14:9A:43:69:93:9D:9B:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/268cad49-8fe0-3114-93b6-1669c6777057.roa Signing time: Sun 03 Aug 2025 01:00:32 +0000 ROA not before: Sun 03 Aug 2025 01:00:32 +0000 ROA not after: Sat 01 Nov 2025 01:00:32 +0000 asID: 23316 IP address blocks: 69.84.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ba:80:ca:3d:3d:a3:b3:51:56:13:14:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21c580c1-a05d-4e28-a48d-9ea0ec5edcac Validity Not Before: Aug 3 01:00:32 2025 GMT Not After : Nov 1 01:00:32 2025 GMT Subject: CN=aec0229a-ddb7-46eb-a693-ec9fbcc5a351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:39:f4:49:d0:a8:23:80:67:48:1b:04:02:27: aa:f6:66:f4:94:bf:cd:f4:fd:1d:85:d0:94:1a:e1: 20:34:db:cb:b4:1f:3e:ed:27:ae:3c:06:8a:c8:3d: c6:06:29:ec:b3:68:18:f8:c7:58:e3:f1:9e:e9:fa: 1b:98:68:ec:b6:5d:fa:df:a2:a4:8a:10:32:cd:80: 42:0b:6b:c4:b1:6c:29:e7:65:6c:95:94:fe:29:7a: 3c:28:4e:95:21:3d:f6:ee:5e:5e:1d:59:a8:4e:98: a8:d0:68:85:50:6a:0f:de:fe:d0:22:3d:ce:f4:0b: 13:92:2e:34:fe:f5:0b:d4:6d:51:d5:90:ee:70:f8: e0:51:a7:c0:f3:50:6a:e4:b8:1b:fb:48:ec:9c:82: 98:31:a3:c5:7d:dd:eb:b4:c3:0a:ba:94:a9:77:8d: 0c:38:96:23:95:9a:31:59:1a:40:81:3f:27:97:87: 7b:9b:ca:29:07:b0:8d:92:a2:df:0d:df:f7:16:58: b3:1e:2e:6c:c2:7d:6f:c7:4d:d7:be:46:0e:6b:ff: c2:b3:ae:9f:4e:4c:c0:e8:d8:e7:72:a3:a8:a0:97: 7d:03:56:c5:9f:77:7a:f9:85:e9:c1:04:0f:0b:e3: 21:d2:ea:c0:9d:6c:a5:6f:d9:6d:f6:cc:6c:b6:06: 3e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:77:DE:6E:49:44:CA:DF:87:E4:84:53:59:91:60:F8:75:5F:C7:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/268cad49-8fe0-3114-93b6-1669c6777057.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.crl X509v3 Authority Key Identifier: keyid:43:4C:13:6E:49:56:C6:2F:BF:B3:24:6A:14:9A:43:69:93:9D:9B:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.cer sbgp-ipAddrBlock: critical IPv4: 69.84.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:23:1a:23:46:ad:91:63:92:a0:a9:6b:5a:84:fa:68:ce:ca: b9:e6:96:c1:d7:61:3c:8a:ff:1b:1b:8b:ff:6a:be:da:2e:2a: 88:2e:c7:d7:98:dd:5c:c3:ee:83:ed:a5:59:b7:ad:f7:4c:bc: 5b:f3:42:8d:71:b2:d8:74:4c:6c:aa:ac:1a:41:b5:38:91:ab: 82:8a:fd:42:90:a4:71:5d:9a:4c:45:fa:37:9a:3e:4a:50:ef: 1c:ae:7f:a9:d3:db:cf:bf:46:85:02:3e:94:52:c0:88:6b:9d: cd:1b:d6:79:54:b5:c7:f6:38:7f:d7:f1:95:b3:4e:fc:b6:f3: 65:3c:be:89:55:02:3c:14:ab:3e:1b:6d:2f:b1:2a:e3:5b:7b: d2:82:05:e1:ee:d2:05:c1:7e:dd:a4:34:82:22:50:9c:cf:d0: 10:4d:8a:29:a2:d0:08:a2:de:5b:0d:c5:a6:4d:4b:4d:67:e9: b9:72:b1:a6:ed:ad:bc:80:53:bc:ac:7b:8f:83:ab:18:96:8e: 60:c9:0b:b5:9e:02:f8:8f:4c:b0:80:b6:2e:b3:0d:98:0a:d7: ce:14:ff:6d:36:c1:ae:2d:6d:15:92:ee:da:f1:a0:13:c7:18: 9d:6b:cb:26:15:7b:a4:a4:23:45:15:2f:00:dc:28:9e:44:dc: a2:82:f8:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq6gMo9PaOzUVYTFMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFjNTgwYzEtYTA1ZC00ZTI4LWE0OGQtOWVhMGVjNWVk Y2FjMB4XDTI1MDgwMzAxMDAzMloXDTI1MTEwMTAxMDAzMlowLzEtMCsGA1UEAxMk YWVjMDIyOWEtZGRiNy00NmViLWE2OTMtZWM5ZmJjYzVhMzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujn0SdCoI4BnSBsEAieq9mb0lL/N9P0dhdCU GuEgNNvLtB8+7SeuPAaKyD3GBinss2gY+MdY4/Ge6fobmGjstl3636KkihAyzYBC C2vEsWwp52VslZT+KXo8KE6VIT327l5eHVmoTpio0GiFUGoP3v7QIj3O9AsTki40 /vUL1G1R1ZDucPjgUafA81Bq5Lgb+0jsnIKYMaPFfd3rtMMKupSpd40MOJYjlZox WRpAgT8nl4d7m8opB7CNkqLfDd/3FlizHi5swn1vx03XvkYOa//Cs66fTkzA6Njn cqOooJd9A1bFn3d6+YXpwQQPC+Mh0urAnWylb9lt9sxstgY+uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDx33m5JRMrfh+SEU1mRYPh1X8f0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMWM1 ODBjMS1hMDVkLTRlMjgtYTQ4ZC05ZWEwZWM1ZWRjYWMvMjY4Y2FkNDktOGZlMC0z MTE0LTkzYjYtMTY2OWM2Nzc3MDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjFjNTgwYzEtYTA1ZC00ZTI4LWE0 OGQtOWVhMGVjNWVkY2FjLzIxYzU4MGMxLWEwNWQtNGUyOC1hNDhkLTllYTBlYzVl ZGNhYy5jcmwwHwYDVR0jBBgwFoAUQ0wTbklWxi+/syRqFJpDaZOdm+AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMWM1ODBjMS1hMDVkLTRlMjgtYTQ4ZC05ZWEw ZWM1ZWRjYWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERVQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkjGiNGrZFjkqCpa1qE+mjOyrnmlsHXYTyK/xsbi/9qvtouKogux9eY 3VzD7oPtpVm3rfdMvFvzQo1xsth0TGyqrBpBtTiRq4KK/UKQpHFdmkxF+jeaPkpQ 7xyuf6nT28+/RoUCPpRSwIhrnc0b1nlUtcf2OH/X8ZWzTvy282U8volVAjwUqz4b bS+xKuNbe9KCBeHu0gXBft2kNIIiUJzP0BBNiimi0Aii3lsNxaZNS01n6blysabt rbyAU7yse4+DqxiWjmDJC7WeAviPTLCAti6zDZgK184U/202wa4tbRWS7trxoBPH GJ1ryyYVe6SkI0UVLwDcKJ5E3KKC+CQ= -----END CERTIFICATE-----Generated at Mon Aug 4 15:37:48 2025 by rpki-client