$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/bfde4168-8138-3487-825a-8a7cb30ef530.roa File: bfde4168-8138-3487-825a-8a7cb30ef530.roa (raw, json) Hash identifier: vqFTw2/G6Be/YN2LbxS8OTXXr8PZWQi1Eb7B3SQ7xpE= Subject key identifier: 35:AA:18:7C:60:C8:83:F9:34:AA:34:1B:51:24:CA:D7:4A:E7:DE:FF Certificate issuer: /CN=8f9f6775-d445-4be7-9398-1cbbeacb9707 Certificate serial: 010D0C9F4328584A1ED8D21BAFB83939093775C0 Authority key identifier: E0:F5:8A:69:D8:CC:14:75:75:6C:0E:30:5C:47:6E:B4:9D:19:F4:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/bfde4168-8138-3487-825a-8a7cb30ef530.roa Signing time: Sun 08 Jun 2025 06:51:53 +0000 ROA not before: Sun 08 Jun 2025 06:51:53 +0000 ROA not after: Sat 06 Sep 2025 06:51:53 +0000 asID: 62661 IP address blocks: 2602:2d4:1e0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1e:d8:d2:1b:af:b8:39:39:09:37:75:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f9f6775-d445-4be7-9398-1cbbeacb9707 Validity Not Before: Jun 8 06:51:53 2025 GMT Not After : Sep 6 06:51:53 2025 GMT Subject: CN=42c466c6-2bc2-4233-a21b-45459c0381f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:af:c6:74:19:eb:cd:ac:65:87:44:10:ac:40: c6:0b:47:6f:87:b7:fd:a2:05:02:b5:9e:cc:e7:2a: 3f:be:e9:8f:82:b3:0c:f4:bc:8c:e9:38:89:06:0d: bd:99:0c:c8:04:ff:7d:1c:3e:c4:83:c6:e0:12:a1: 83:fc:c9:01:b0:ab:e3:d6:4a:af:15:b2:88:29:89: 24:ce:fb:b3:68:3a:99:62:f9:6f:88:37:65:c5:a7: ae:66:4d:ad:fb:38:48:ce:e1:a3:0a:6e:5a:bc:13: b6:d0:f6:65:98:62:18:58:ea:94:25:c4:74:2f:bf: 18:11:f7:e0:41:d5:46:ed:82:e3:76:cc:ab:c4:0e: c3:72:3b:ac:b1:9a:75:23:7f:dd:b8:97:af:01:8b: 5c:6f:9d:20:df:d8:0c:58:71:63:19:5d:24:75:b0: d6:61:33:9a:34:57:a4:79:47:7d:e0:74:d0:89:08: 0f:33:a6:de:78:c4:f4:80:3e:3f:0c:13:e3:cf:f6: 8d:47:2d:4c:ac:ff:b7:61:66:ea:35:85:3b:9f:62: 28:53:f6:55:b4:84:c4:d3:5e:ab:44:f8:2c:f4:7b: 11:06:8e:d7:e3:ad:f8:f5:66:df:f5:86:d2:76:cc: d5:c0:46:2d:ac:41:1c:69:dd:a9:a0:e6:02:a0:25: 08:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:AA:18:7C:60:C8:83:F9:34:AA:34:1B:51:24:CA:D7:4A:E7:DE:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/bfde4168-8138-3487-825a-8a7cb30ef530.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.crl X509v3 Authority Key Identifier: keyid:E0:F5:8A:69:D8:CC:14:75:75:6C:0E:30:5C:47:6E:B4:9D:19:F4:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer sbgp-ipAddrBlock: critical IPv6: 2602:2d4:1e0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:53:08:95:58:d0:f4:05:6b:0d:66:9c:23:55:4f:25:ba:a1: 40:44:92:e1:ba:da:04:7a:f8:42:bd:f4:c9:b9:85:62:dd:e9: 5d:61:ce:c8:81:d3:d8:74:d4:fd:4a:ab:12:ba:04:80:d5:c5: ea:b5:56:e1:c9:e1:ba:87:12:e4:d2:92:e4:48:41:3e:b6:5d: 0f:5a:cb:e6:89:50:76:ed:69:58:fc:86:13:d6:8f:62:e0:82: 3d:4e:8a:c1:67:68:ca:2a:1c:4d:b7:40:28:93:ca:a2:5b:37: f0:14:80:a4:32:53:ab:ea:ea:63:42:2c:3e:41:50:fc:16:a8: b0:7c:f3:6c:68:f4:27:c3:6d:cd:53:ce:85:a1:23:97:5a:9b: c7:69:ee:8f:e1:5b:86:22:dd:cd:9c:64:0a:43:68:e3:9a:fc: af:37:b0:71:70:30:ad:3b:a5:fb:59:48:cb:2b:0c:f7:10:50: f3:3c:cf:9a:4c:8b:04:b4:3c:05:2f:01:f5:06:92:65:da:dc: e1:35:f8:9e:b3:a7:bb:f5:8b:55:5f:cb:22:a0:87:67:12:2e: 04:c2:9c:49:14:50:d4:55:61:f4:28:ae:1f:cc:26:28:8f:29: 3e:66:c0:40:50:22:c7:5e:cc:8a:b4:5f:3f:a7:c2:17:d3:94: cc:31:6e:5d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoe2NIbr7g5OQk3dcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY5ZjY3NzUtZDQ0NS00YmU3LTkzOTgtMWNiYmVhY2I5 NzA3MB4XDTI1MDYwODA2NTE1M1oXDTI1MDkwNjA2NTE1M1owLzEtMCsGA1UEAxMk NDJjNDY2YzYtMmJjMi00MjMzLWEyMWItNDU0NTljMDM4MWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAga/GdBnrzaxlh0QQrEDGC0dvh7f9ogUCtZ7M 5yo/vumPgrMM9LyM6TiJBg29mQzIBP99HD7Eg8bgEqGD/MkBsKvj1kqvFbKIKYkk zvuzaDqZYvlviDdlxaeuZk2t+zhIzuGjCm5avBO20PZlmGIYWOqUJcR0L78YEffg QdVG7YLjdsyrxA7DcjussZp1I3/duJevAYtcb50g39gMWHFjGV0kdbDWYTOaNFek eUd94HTQiQgPM6beeMT0gD4/DBPjz/aNRy1MrP+3YWbqNYU7n2IoU/ZVtITE016r RPgs9HsRBo7X46349Wbf9YbSdszVwEYtrEEcad2poOYCoCUIZQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDWqGHxgyIP5NKo0G1EkytdK597/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84Zjlm Njc3NS1kNDQ1LTRiZTctOTM5OC0xY2JiZWFjYjk3MDcvYmZkZTQxNjgtODEzOC0z NDg3LTgyNWEtOGE3Y2IzMGVmNTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOGY5ZjY3NzUtZDQ0NS00YmU3LTkz OTgtMWNiYmVhY2I5NzA3LzhmOWY2Nzc1LWQ0NDUtNGJlNy05Mzk4LTFjYmJlYWNi OTcwNy5jcmwwHwYDVR0jBBgwFoAU4PWKadjMFHV1bA4wXEdutJ0Z9BIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi84ZjlmNjc3NS1kNDQ1LTRiZTctOTM5OC0xY2Ji ZWFjYjk3MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIC1AHg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJZTCJVY0PQFaw1mnCNVTyW6oUBEkuG62gR6+EK99Mm5hWLd6V1h zsiB09h01P1KqxK6BIDVxeq1VuHJ4bqHEuTSkuRIQT62XQ9ay+aJUHbtaVj8hhPW j2Lggj1OisFnaMoqHE23QCiTyqJbN/AUgKQyU6vq6mNCLD5BUPwWqLB882xo9CfD bc1TzoWhI5dam8dp7o/hW4Yi3c2cZApDaOOa/K83sHFwMK07pftZSMsrDPcQUPM8 z5pMiwS0PAUvAfUGkmXa3OE1+J6zp7v1i1VfyyKgh2cSLgTCnEkUUNRVYfQorh/M JiiPKT5mwEBQIsdezIq0Xz+nwhfTlMwxbl0= -----END CERTIFICATE-----Generated at Tue Jul 1 13:04:44 2025 by rpki-client