$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/421cece2-8c18-41dd-a133-74ed29168835/bdc1790a-cecc-3ae3-863f-105e516b77ef.roa File: bdc1790a-cecc-3ae3-863f-105e516b77ef.roa (raw, json) Hash identifier: yJl4lQ9tg63N0iBYH2Oo2zLzd125HuGwxJ7netxoC3w= Subject key identifier: 36:44:4F:3F:E6:31:BA:E8:48:DE:79:BD:01:BF:BC:EA:DF:2E:27:26 Certificate issuer: /CN=421cece2-8c18-41dd-a133-74ed29168835 Certificate serial: 010D0C9F43285849FCAA6A313D9EF9A120C58A40 Authority key identifier: 07:89:67:D2:68:00:78:72:14:E0:75:D6:C2:41:12:72:10:3E:0D:0F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/421cece2-8c18-41dd-a133-74ed29168835.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/421cece2-8c18-41dd-a133-74ed29168835/bdc1790a-cecc-3ae3-863f-105e516b77ef.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 400235 IP address blocks: 2602:80c:f000::/44 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/421cece2-8c18-41dd-a133-74ed29168835/421cece2-8c18-41dd-a133-74ed29168835.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/421cece2-8c18-41dd-a133-74ed29168835/421cece2-8c18-41dd-a133-74ed29168835.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/421cece2-8c18-41dd-a133-74ed29168835.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:6a:31:3d:9e:f9:a1:20:c5:8a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=421cece2-8c18-41dd-a133-74ed29168835 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=7650af8e-b909-4a9c-9f3a-b15425ecaab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:51:d2:6b:16:89:84:10:55:54:9b:4d:be:1c: f0:6d:2b:a2:3e:05:6f:68:7c:4e:bc:9a:35:8c:2d: 69:39:11:c5:4e:13:77:59:df:0f:67:d7:a9:1c:b8: 4e:b4:e7:ae:9e:95:a5:2b:e7:ab:93:f1:c5:40:97: 3d:8a:c2:f2:be:b6:94:19:05:60:32:d5:d3:55:c6: ab:e1:c9:21:45:59:17:bb:50:53:a5:48:7b:38:8c: a5:16:1f:23:69:8b:68:0a:17:34:ab:1b:2c:31:dd: 7a:dc:2e:be:3f:09:52:b9:90:e7:f3:c8:33:fb:41: 3b:09:63:ec:a4:c8:78:f7:dd:de:94:95:3d:48:69: a7:ca:ba:0e:a1:78:52:d8:7f:66:26:58:94:32:d1: f4:99:ce:78:e2:a3:e9:ca:7a:f5:82:5c:8d:c4:76: ef:9e:4a:04:a4:55:3b:96:36:71:fa:62:2d:f3:8b: 0e:ba:c4:39:24:05:bb:57:17:75:3c:b7:80:44:b2: 51:2d:8e:85:9b:03:6a:67:b6:71:7a:40:4c:b7:eb: a4:8f:ee:c2:ca:24:74:84:ff:94:81:8c:b8:76:41: 4b:e1:2b:84:79:9a:aa:40:f0:e6:17:df:39:87:a3: 79:4d:c1:30:66:f5:5c:25:9c:a8:b7:d4:ec:8b:cc: 37:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:44:4F:3F:E6:31:BA:E8:48:DE:79:BD:01:BF:BC:EA:DF:2E:27:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/421cece2-8c18-41dd-a133-74ed29168835/bdc1790a-cecc-3ae3-863f-105e516b77ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/421cece2-8c18-41dd-a133-74ed29168835/421cece2-8c18-41dd-a133-74ed29168835.crl X509v3 Authority Key Identifier: keyid:07:89:67:D2:68:00:78:72:14:E0:75:D6:C2:41:12:72:10:3E:0D:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/421cece2-8c18-41dd-a133-74ed29168835.cer sbgp-ipAddrBlock: critical IPv6: 2602:80c:f000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:de:48:df:0c:2a:b6:89:62:b7:4e:09:b4:d4:57:09:d7:90: 67:03:07:58:06:a4:fe:72:96:5b:69:bd:b2:c3:8d:bd:7f:36: 9c:d4:88:3b:1d:56:a3:8e:2e:ab:df:b2:4c:6b:d2:39:18:2d: 81:23:e9:94:40:22:53:9b:18:4b:c7:c4:8d:88:13:dd:7d:5b: 43:62:b5:39:1d:dd:34:d3:57:a6:c3:64:2c:7c:4f:04:72:f4: a5:a5:f9:5c:41:60:1a:af:aa:60:d0:a8:35:ce:24:f2:b1:90: 00:af:18:63:58:49:85:a1:68:c2:c0:7b:47:81:68:4c:6b:75: 95:fb:1a:8e:92:73:6b:85:f6:5f:86:52:eb:01:30:42:cb:b4: 89:c2:77:f0:bf:0a:69:bf:37:28:a4:48:5e:b7:c2:bb:dd:63: e6:ba:38:3c:1e:72:d5:df:bf:af:2e:a2:b2:86:95:2d:c2:29: 57:2d:fa:c7:58:bb:bf:be:bf:ae:77:22:6e:74:6a:c2:d3:66: 99:71:0f:3a:c1:64:05:cd:9f:09:06:e1:33:1c:fc:e3:29:d8: 39:c0:bb:2e:c3:52:0c:c2:16:30:87:7e:1d:29:98:a9:25:5e: 13:79:4c:41:79:a1:7d:31:09:20:bd:f6:c7:52:84:d7:85:1c: e8:62:67:0e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEn8qmoxPZ75oSDFikAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDIxY2VjZTItOGMxOC00MWRkLWExMzMtNzRlZDI5MTY4 ODM1MB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk NzY1MGFmOGUtYjkwOS00YTljLTlmM2EtYjE1NDI1ZWNhYWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/FHSaxaJhBBVVJtNvhzwbSuiPgVvaHxOvJo1 jC1pORHFThN3Wd8PZ9epHLhOtOeunpWlK+erk/HFQJc9isLyvraUGQVgMtXTVcar 4ckhRVkXu1BTpUh7OIylFh8jaYtoChc0qxssMd163C6+PwlSuZDn88gz+0E7CWPs pMh4993elJU9SGmnyroOoXhS2H9mJliUMtH0mc544qPpynr1glyNxHbvnkoEpFU7 ljZx+mIt84sOusQ5JAW7Vxd1PLeARLJRLY6FmwNqZ7ZxekBMt+ukj+7CyiR0hP+U gYy4dkFL4SuEeZqqQPDmF985h6N5TcEwZvVcJZyot9Tsi8w3VwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDZETz/mMbroSN55vQG/vOrfLicmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MjFj ZWNlMi04YzE4LTQxZGQtYTEzMy03NGVkMjkxNjg4MzUvYmRjMTc5MGEtY2VjYy0z YWUzLTg2M2YtMTA1ZTUxNmI3N2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDIxY2VjZTItOGMxOC00MWRkLWEx MzMtNzRlZDI5MTY4ODM1LzQyMWNlY2UyLThjMTgtNDFkZC1hMTMzLTc0ZWQyOTE2 ODgzNS5jcmwwHwYDVR0jBBgwFoAUB4ln0mgAeHIU4HXWwkESchA+DQ8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MjFjZWNlMi04YzE4LTQxZGQtYTEzMy03NGVk MjkxNjg4MzUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIDPAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHXeSN8MKraJYrdOCbTUVwnXkGcDB1gGpP5ylltpvbLDjb1/NpzU iDsdVqOOLqvfskxr0jkYLYEj6ZRAIlObGEvHxI2IE919W0NitTkd3TTTV6bDZCx8 TwRy9KWl+VxBYBqvqmDQqDXOJPKxkACvGGNYSYWhaMLAe0eBaExrdZX7Go6Sc2uF 9l+GUusBMELLtInCd/C/Cmm/NyikSF63wrvdY+a6ODwectXfv68uorKGlS3CKVct +sdYu7++v653Im50asLTZplxDzrBZAXNnwkG4TMc/OMp2DnAuy7DUgzCFjCHfh0p mKklXhN5TEF5oX0xCSC99sdShNeFHOhiZw4= -----END CERTIFICATE-----Generated at Sun Jul 6 06:29:33 2025 by rpki-client