$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bf01a003-fbbb-3504-b777-06506ff47819.roa File: bf01a003-fbbb-3504-b777-06506ff47819.roa (raw, json) Hash identifier: yT5ol+b6Dx8NpvX0bAoc+V3rQpgQdwy1jzMzhAP4yqk= Subject key identifier: 34:3C:70:F4:64:22:1D:44:86:2F:22:90:6C:99:66:AA:36:FD:A4:3F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849F2E521C973D52F7F32601D40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bf01a003-fbbb-3504-b777-06506ff47819.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 30036 IP address blocks: 2604:2d80:8c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:21:c9:73:d5:2f:7f:32:60:1d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=55feb6c1-dee3-4387-bd6e-0e22caef57e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d9:42:ea:84:0f:5e:95:1b:89:47:a4:4d:59: a8:c2:ae:3a:cb:f9:9b:6e:d8:a8:86:21:5a:44:08: b1:63:ce:a3:9d:9b:4a:da:36:aa:0a:e7:26:d4:de: 1f:18:24:ab:8c:20:7f:48:87:f5:5a:80:88:73:db: 29:d7:1e:b6:95:54:2a:fd:bf:8a:61:1c:d2:66:a0: 89:38:69:6a:4c:9c:89:75:4e:e7:81:16:bb:1a:55: d3:c2:73:9b:1c:bb:01:65:ce:d1:7f:d6:a8:e0:f0: 1c:b7:66:ad:ca:29:ac:64:c9:1a:64:82:42:af:c7: 6c:dc:a6:c0:ab:56:17:fc:41:0f:21:e5:07:19:a2: 1c:5b:fd:ff:78:ac:d3:54:fd:a0:da:12:33:7d:30: 03:87:a2:f7:92:7f:84:c5:8d:e0:39:42:db:fb:69: 8c:66:4a:16:31:f3:fc:9b:e3:e8:2d:71:d6:5b:ff: 62:60:86:c0:64:8e:fd:06:c0:93:53:f4:48:a1:15: 58:ff:80:4b:ae:72:66:82:05:cd:60:68:b8:b4:7f: a3:6e:51:ac:55:dd:af:2a:f4:8f:51:8b:df:ca:12: ec:01:36:04:52:a6:f6:bb:98:26:bc:ba:43:97:9a: c7:8b:de:2e:09:2f:ad:ac:86:32:68:f6:b2:8b:5e: 1e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:3C:70:F4:64:22:1D:44:86:2F:22:90:6C:99:66:AA:36:FD:A4:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bf01a003-fbbb-3504-b777-06506ff47819.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:8c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:fb:a0:d1:34:bc:bf:30:ec:2c:d8:e3:ff:f3:16:1c:5b:2b: 96:f0:e8:43:e7:6b:af:ff:14:d7:56:a1:8a:35:d5:24:f3:8a: eb:2e:c6:b2:a7:fd:e4:b8:8f:73:6e:63:bf:3a:0e:7d:ad:5c: 80:80:a6:c8:71:6d:ac:ca:80:76:dd:ff:ed:c3:cb:ec:f5:0d: 4c:f4:4c:90:d6:15:36:0d:af:06:a2:1d:2d:34:2c:1a:41:f8: f8:34:96:44:70:e5:80:f6:b6:01:78:9a:51:81:77:4d:db:a1: 97:65:d8:6d:57:8c:39:41:af:8b:eb:b5:eb:2d:ec:27:c4:31: b1:fd:b5:b8:e1:48:36:ac:0e:f8:d3:fa:fc:11:5a:11:04:a4: a9:80:eb:d1:61:ef:44:ef:bc:45:7d:b1:17:66:5e:19:cd:49: 9d:25:47:eb:5b:90:75:b1:9e:e2:88:e6:11:e5:aa:51:27:3c: ae:45:b8:b4:30:4d:f8:6b:7c:8b:5a:13:c0:84:92:29:03:ad: 2b:5f:61:29:82:99:c7:4e:26:16:93:c4:70:ca:bc:a4:cf:31: 6c:85:b7:d4:9c:e6:7a:59:f5:30:6c:2c:0c:db:af:92:3e:9c: ad:69:27:7b:29:0e:c0:2e:ea:0a:7f:5f:4a:f2:1f:c2:5a:39: 82:80:92:79 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEny5SHJc9UvfzJgHUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk NTVmZWI2YzEtZGVlMy00Mzg3LWJkNmUtMGUyMmNhZWY1N2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNlC6oQPXpUbiUekTVmowq46y/mbbtiohiFa RAixY86jnZtK2jaqCucm1N4fGCSrjCB/SIf1WoCIc9sp1x62lVQq/b+KYRzSZqCJ OGlqTJyJdU7ngRa7GlXTwnObHLsBZc7Rf9ao4PAct2atyimsZMkaZIJCr8ds3KbA q1YX/EEPIeUHGaIcW/3/eKzTVP2g2hIzfTADh6L3kn+ExY3gOULb+2mMZkoWMfP8 m+PoLXHWW/9iYIbAZI79BsCTU/RIoRVY/4BLrnJmggXNYGi4tH+jblGsVd2vKvSP UYvfyhLsATYEUqb2u5gmvLpDl5rHi94uCS+trIYyaPayi14e0QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDQ8cPRkIh1Ehi8ikGyZZqo2/aQ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmYwMWEwMDMtZmJiYi0z NTA0LWI3NzctMDY1MDZmZjQ3ODE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQtgIww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAIvug0TS8vzDsLNjj//MWHFsrlvDoQ+drr/8U11ahijXVJPOK6y7G sqf95LiPc25jvzoOfa1cgICmyHFtrMqAdt3/7cPL7PUNTPRMkNYVNg2vBqIdLTQs GkH4+DSWRHDlgPa2AXiaUYF3Tduhl2XYbVeMOUGvi+u16y3sJ8Qxsf21uOFINqwO +NP6/BFaEQSkqYDr0WHvRO+8RX2xF2ZeGc1JnSVH61uQdbGe4ojmEeWqUSc8rkW4 tDBN+Gt8i1oTwISSKQOtK19hKYKZx04mFpPEcMq8pM8xbIW31Jzmeln1MGwsDNuv kj6crWkneykOwC7qCn9fSvIfwlo5goCSeQ== -----END CERTIFICATE-----Generated at Tue Jul 1 00:27:28 2025 by rpki-client