$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/bd8bec6f-1a70-3378-91b5-cb21c5533d5d.roa File: bd8bec6f-1a70-3378-91b5-cb21c5533d5d.roa (raw, json) Hash identifier: ugT1rzqqeh66JQHtZDoZzY2cbTRTj5CK2JY6UnX8JAs= Subject key identifier: 9F:AC:50:FC:3D:47:FF:80:03:68:51:24:79:D5:AE:6D:6D:A1:DB:6A Certificate issuer: /CN=1380a44d-7851-4eb6-8887-413917dcdc12 Certificate serial: 010D0C9F4328584A4C3B1A1B041CD42F92241A80 Authority key identifier: 6C:37:E1:61:68:B4:CF:88:64:11:CB:68:E9:4A:65:72:4A:96:54:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/bd8bec6f-1a70-3378-91b5-cb21c5533d5d.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 31972 IP address blocks: 2607:8680::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/1380a44d-7851-4eb6-8887-413917dcdc12.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/1380a44d-7851-4eb6-8887-413917dcdc12.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:1a:1b:04:1c:d4:2f:92:24:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1380a44d-7851-4eb6-8887-413917dcdc12 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=e66f97a4-2d42-46fb-bd41-1565b45c119f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:04:27:95:2c:ca:4a:51:12:de:2a:84:1d:81: c5:e1:77:df:ad:30:e6:d9:23:7f:1f:bb:85:51:54: c7:9d:6c:0c:23:bd:79:05:59:2f:2e:05:75:95:f4: 26:d6:11:4f:d6:cb:3b:a1:14:f8:9a:c7:83:fd:8c: d1:31:53:d6:00:44:62:11:72:51:9e:8b:26:85:2f: 79:1c:c4:28:56:89:33:ea:50:c4:39:19:92:04:1f: 70:e1:6a:67:a5:a1:af:03:98:f4:4d:96:5c:cf:64: ee:0b:11:dd:bd:3d:7c:bb:23:ae:91:71:e2:60:2b: 20:29:14:91:77:ea:79:f9:39:f9:3f:8f:89:86:d4: 61:76:78:5d:fb:29:c3:07:99:51:f6:c0:32:ff:58: 01:e3:72:e0:50:9d:ce:74:39:47:5f:96:6e:6e:89: 5e:de:8f:2a:44:75:eb:0a:bb:9e:88:d6:e7:5d:12: 02:95:24:9f:e1:4c:00:dd:5a:66:53:cb:22:b8:66: 5b:07:e2:b1:69:8c:98:96:ac:95:ac:e4:fd:ba:b2: 27:f1:ad:e3:cf:8d:19:c3:63:1b:8c:27:94:df:e4: 1d:39:df:43:51:aa:ca:32:de:94:87:4c:69:79:b2: 80:76:52:25:f8:62:14:75:09:63:40:db:7d:7f:20: de:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:AC:50:FC:3D:47:FF:80:03:68:51:24:79:D5:AE:6D:6D:A1:DB:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/bd8bec6f-1a70-3378-91b5-cb21c5533d5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/1380a44d-7851-4eb6-8887-413917dcdc12.crl X509v3 Authority Key Identifier: keyid:6C:37:E1:61:68:B4:CF:88:64:11:CB:68:E9:4A:65:72:4A:96:54:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12.cer sbgp-ipAddrBlock: critical IPv6: 2607:8680::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:4a:0f:2d:da:04:cc:bd:13:18:4e:ff:ea:b6:74:3d:4c:5a: 7c:d2:d3:69:fa:a6:70:9e:53:6b:c7:f4:60:80:2f:8f:5e:2d: 07:58:d4:9a:53:3c:ff:b1:e5:f4:2f:80:18:b4:c9:1f:16:fa: 35:31:5c:08:d0:18:62:0c:13:79:b9:63:23:b8:32:e4:78:ca: a9:eb:5d:7b:e9:00:9b:0e:90:c2:c9:0f:6f:18:f2:ca:fa:7f: 9e:c2:a7:80:46:38:bd:99:fc:2a:15:38:3d:8c:5e:d4:3c:cf: da:5d:2e:61:92:ba:ef:3a:5e:57:24:3c:2b:5c:75:f8:4b:d2: 0a:e4:3b:d5:73:72:f7:a3:33:2f:31:62:c8:92:5d:fd:e6:b6: 03:a1:9e:f9:b6:d9:d2:9d:21:2d:fb:b4:3f:68:f3:9b:0c:52: 24:ff:87:10:21:da:3a:3c:e2:5d:b6:8b:8c:71:4c:36:96:60: 55:27:d4:fb:ab:e5:58:60:91:6a:d0:56:cc:39:7a:c5:3b:46: 10:88:b4:3b:d7:cb:24:8e:4e:d9:f8:95:eb:b6:05:9c:22:1c: b2:b4:b8:c1:a5:8d:51:b2:69:d1:5c:9d:30:4a:ac:81:ee:50: f9:14:17:c6:52:06:9f:46:72:51:b9:11:b6:a0:bf:22:b2:4e: 6e:0f:69:90 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpMOxobBBzUL5IkGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTM4MGE0NGQtNzg1MS00ZWI2LTg4ODctNDEzOTE3ZGNk YzEyMB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk ZTY2Zjk3YTQtMmQ0Mi00NmZiLWJkNDEtMTU2NWI0NWMxMTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAQnlSzKSlES3iqEHYHF4XffrTDm2SN/H7uF UVTHnWwMI715BVkvLgV1lfQm1hFP1ss7oRT4mseD/YzRMVPWAERiEXJRnosmhS95 HMQoVokz6lDEORmSBB9w4WpnpaGvA5j0TZZcz2TuCxHdvT18uyOukXHiYCsgKRSR d+p5+Tn5P4+JhtRhdnhd+ynDB5lR9sAy/1gB43LgUJ3OdDlHX5Zubole3o8qRHXr CrueiNbnXRIClSSf4UwA3VpmU8siuGZbB+KxaYyYlqyVrOT9urIn8a3jz40Zw2Mb jCeU3+QdOd9DUarKMt6Uh0xpebKAdlIl+GIUdQljQNt9fyDeVQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJ+sUPw9R/+AA2hRJHnVrm1todtqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xMzgw YTQ0ZC03ODUxLTRlYjYtODg4Ny00MTM5MTdkY2RjMTIvYmQ4YmVjNmYtMWE3MC0z Mzc4LTkxYjUtY2IyMWM1NTMzZDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMTM4MGE0NGQtNzg1MS00ZWI2LTg4 ODctNDEzOTE3ZGNkYzEyLzEzODBhNDRkLTc4NTEtNGViNi04ODg3LTQxMzkxN2Rj ZGMxMi5jcmwwHwYDVR0jBBgwFoAUbDfhYWi0z4hkEcto6UplckqWVJMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xMzgwYTQ0ZC03ODUxLTRlYjYtODg4Ny00MTM5 MTdkY2RjMTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgeGgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBFSg8t2gTMvRMYTv/qtnQ9TFp80tNp+qZwnlNrx/RggC+PXi0HWNSa Uzz/seX0L4AYtMkfFvo1MVwI0BhiDBN5uWMjuDLkeMqp61176QCbDpDCyQ9vGPLK +n+ewqeARji9mfwqFTg9jF7UPM/aXS5hkrrvOl5XJDwrXHX4S9IK5DvVc3L3ozMv MWLIkl395rYDoZ75ttnSnSEt+7Q/aPObDFIk/4cQIdo6POJdtouMcUw2lmBVJ9T7 q+VYYJFq0FbMOXrFO0YQiLQ718skjk7Z+JXrtgWcIhyytLjBpY1RsmnRXJ0wSqyB 7lD5FBfGUgafRnJRuRG2oL8isk5uD2mQ -----END CERTIFICATE-----Generated at Thu Jul 3 16:42:55 2025 by rpki-client