$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/bf8f855d-79d9-359a-b716-f369f7368f3d.roa File: bf8f855d-79d9-359a-b716-f369f7368f3d.roa (raw, json) Hash identifier: 2bwzhcywWdkQFFLz0Fb7zhl2xrYaPDOcCmrKsS9AxQo= Subject key identifier: E7:B7:97:B3:CC:78:1B:D3:EF:15:19:31:43:55:01:46:2F:1E:E4:2B Certificate issuer: /CN=8baf6f06-4472-4c79-8a01-5c338d64c402 Certificate serial: 010D0C9F43285849A1EF72B4168800A80DA1BA80 Authority key identifier: 95:D3:B5:8C:0D:5D:5F:85:19:CD:8F:FA:39:F4:82:C2:33:BB:9D:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/bf8f855d-79d9-359a-b716-f369f7368f3d.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 401082 IP address blocks: 2602:f8b4::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/8baf6f06-4472-4c79-8a01-5c338d64c402.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/8baf6f06-4472-4c79-8a01-5c338d64c402.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:72:b4:16:88:00:a8:0d:a1:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8baf6f06-4472-4c79-8a01-5c338d64c402 Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=a5e22f50-6f2a-42e6-ae34-71b57e048f65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b9:42:df:21:39:dc:49:cd:4a:a0:80:17:5f: 78:29:28:4f:32:6f:12:75:8c:e0:a9:1d:b8:1a:84: dc:dc:43:28:5c:e6:69:d3:51:e3:27:bb:48:19:53: cd:0c:8f:14:4f:b5:69:fe:b6:42:80:78:b8:14:6d: 44:bf:1f:ee:39:39:5a:0d:fe:b3:c7:3e:fe:94:70: 61:09:d8:30:46:44:28:84:73:02:ff:c9:c1:43:ad: ba:ee:c9:09:7e:2b:72:53:fa:8b:4f:16:ea:e1:1e: 66:5f:0b:db:ce:69:9f:dc:3b:d2:8b:49:3e:90:d6: 52:44:42:1f:ba:2d:1d:5c:15:ee:7a:39:b4:19:83: d0:0a:15:54:40:08:26:5e:98:f4:b8:1f:5d:7e:55: 40:fc:7f:f9:a9:2e:fa:40:17:ae:c7:c7:ad:70:d8: d6:c0:0a:9e:58:cc:79:5d:71:d6:ed:5c:0a:71:fb: bb:f3:80:cb:58:d7:36:92:5a:a8:63:4c:46:68:f4: 8a:ed:81:31:19:8f:84:e1:30:39:db:29:70:83:b1: 2a:9c:08:72:fd:be:84:54:5e:e6:be:e3:5a:ce:a0: ff:31:34:00:b6:3a:93:5c:5d:1e:21:72:86:93:85: 82:b8:97:d2:21:e6:2b:66:60:d7:2b:ed:7b:d6:ea: 6a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:B7:97:B3:CC:78:1B:D3:EF:15:19:31:43:55:01:46:2F:1E:E4:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/bf8f855d-79d9-359a-b716-f369f7368f3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/8baf6f06-4472-4c79-8a01-5c338d64c402.crl X509v3 Authority Key Identifier: keyid:95:D3:B5:8C:0D:5D:5F:85:19:CD:8F:FA:39:F4:82:C2:33:BB:9D:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402.cer sbgp-ipAddrBlock: critical IPv6: 2602:f8b4::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:b0:2c:3f:a4:43:9b:a7:ad:12:c2:a8:d3:88:60:43:23:9f: 9e:cf:d3:f6:d5:6c:31:32:02:ba:ca:7c:07:cf:2f:37:4c:d4: e2:6f:d4:6c:e1:de:6c:52:e6:be:b1:d9:70:05:bf:8e:9e:e0: 9c:43:5a:f2:0b:65:b3:3d:b4:5d:a6:c8:69:a2:48:36:bf:86: 76:d4:67:29:7b:67:32:88:82:d7:7a:e9:d5:c6:0a:40:f8:ff: 0d:98:70:1e:55:2a:8c:97:f6:30:85:89:ea:35:d4:54:fa:0d: 82:7d:51:9a:37:5e:30:57:53:27:a2:83:27:83:79:68:8c:99: fe:cf:19:63:b1:c0:19:2e:95:2a:c4:0c:b1:61:d0:7b:62:a0: ae:2a:58:57:6d:bf:03:40:71:8e:fd:15:c0:bd:85:1e:6b:32: d2:01:98:9f:71:db:e6:e5:a7:b1:f1:54:6d:9b:6a:d6:a3:c4: 85:21:e3:f5:68:de:ee:87:0d:fc:58:83:78:58:69:f8:c3:64: d5:56:3e:cc:9b:a9:cf:d8:0b:08:df:61:26:c3:5b:a4:f2:54: 00:94:28:fc:d9:50:6d:c5:89:53:4f:af:4d:7e:f4:1a:3e:5a: 83:ce:49:e7:cd:98:51:15:77:1a:9a:9d:2b:5e:a8:2b:1d:5d: 54:3a:2f:c0 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmh73K0FogAqA2huoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJhZjZmMDYtNDQ3Mi00Yzc5LThhMDEtNWMzMzhkNjRj NDAyMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk YTVlMjJmNTAtNmYyYS00MmU2LWFlMzQtNzFiNTdlMDQ4ZjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkblC3yE53EnNSqCAF194KShPMm8SdYzgqR24 GoTc3EMoXOZp01HjJ7tIGVPNDI8UT7Vp/rZCgHi4FG1Evx/uOTlaDf6zxz7+lHBh CdgwRkQohHMC/8nBQ6267skJfityU/qLTxbq4R5mXwvbzmmf3DvSi0k+kNZSREIf ui0dXBXuejm0GYPQChVUQAgmXpj0uB9dflVA/H/5qS76QBeux8etcNjWwAqeWMx5 XXHW7VwKcfu784DLWNc2klqoY0xGaPSK7YExGY+E4TA52ylwg7EqnAhy/b6EVF7m vuNazqD/MTQAtjqTXF0eIXKGk4WCuJfSIeYrZmDXK+171upqnQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFOe3l7PMeBvT7xUZMUNVAUYvHuQrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84YmFm NmYwNi00NDcyLTRjNzktOGEwMS01YzMzOGQ2NGM0MDIvYmY4Zjg1NWQtNzlkOS0z NTlhLWI3MTYtZjM2OWY3MzY4ZjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGJhZjZmMDYtNDQ3Mi00Yzc5LThh MDEtNWMzMzhkNjRjNDAyLzhiYWY2ZjA2LTQ0NzItNGM3OS04YTAxLTVjMzM4ZDY0 YzQwMi5jcmwwHwYDVR0jBBgwFoAUldO1jA1dX4UZzY/6OfSCwjO7nRYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84YmFmNmYwNi00NDcyLTRjNzktOGEwMS01YzMz OGQ2NGM0MDIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL4tAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEADLAsP6RDm6etEsKo04hgQyOfns/T9tVsMTICusp8B88vN0zU4m/U bOHebFLmvrHZcAW/jp7gnENa8gtlsz20XabIaaJINr+GdtRnKXtnMoiC13rp1cYK QPj/DZhwHlUqjJf2MIWJ6jXUVPoNgn1RmjdeMFdTJ6KDJ4N5aIyZ/s8ZY7HAGS6V KsQMsWHQe2KgripYV22/A0Bxjv0VwL2FHmsy0gGYn3Hb5uWnsfFUbZtq1qPEhSHj 9Wje7ocN/FiDeFhp+MNk1VY+zJupz9gLCN9hJsNbpPJUAJQo/NlQbcWJU0+vTX70 Gj5ag85J582YURV3GpqdK16oKx1dVDovwA== -----END CERTIFICATE-----Generated at Tue May 6 03:46:46 2025 by rpki-client