$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/3bdf900d-17b8-3fef-a0bf-1ee4e3c07a4c.roa File: 3bdf900d-17b8-3fef-a0bf-1ee4e3c07a4c.roa (raw, json) Hash identifier: GT3OUUm6zE7bCrtRnHHnMW5PrYTV7ZdWwxqHVnCHivE= Subject key identifier: CD:22:4F:36:B0:F4:E1:B8:60:8E:AB:3E:4F:30:41:2F:73:1C:D0:73 Certificate issuer: /CN=8ce84fb2-c539-46e7-8212-12b9730afeba Certificate serial: 010D0C9F43285849E0BF8AF21BD8BABD53337080 Authority key identifier: D3:8A:39:65:E1:53:C3:03:64:C1:56:0F:C9:45:83:B6:FA:B1:38:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/3bdf900d-17b8-3fef-a0bf-1ee4e3c07a4c.roa Signing time: Sat 17 May 2025 01:00:47 +0000 ROA not before: Sat 17 May 2025 01:00:47 +0000 ROA not after: Fri 15 Aug 2025 01:00:47 +0000 asID: 5650 IP address blocks: 2606:8940::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e0:bf:8a:f2:1b:d8:ba:bd:53:33:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ce84fb2-c539-46e7-8212-12b9730afeba Validity Not Before: May 17 01:00:47 2025 GMT Not After : Aug 15 01:00:47 2025 GMT Subject: CN=21c2591d-6c6c-4706-8a6e-7190d9874ed0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a3:7f:8a:2a:3c:8d:d3:c1:74:20:96:41:57: 6a:31:07:6f:0d:e5:56:d9:d4:cc:b1:28:0a:a9:3a: 82:da:60:0b:80:69:36:e9:7b:59:e2:f1:04:69:6d: 42:5e:b0:9f:ab:86:1a:c4:65:4a:74:35:7c:21:e8: c3:6a:7a:da:ce:29:1a:c7:e8:59:cf:a7:e3:99:c0: d0:68:e3:7e:e5:65:2d:48:98:9b:88:2f:2e:94:07: ad:08:f5:84:f1:98:1b:7d:83:be:23:c7:b9:a1:2c: 04:17:9d:bb:19:e6:84:00:fd:e1:07:1b:64:a5:99: 82:9a:cb:e4:d7:8f:1f:ab:71:c5:72:1f:53:a2:2e: b1:a4:76:5e:9d:c0:cb:ef:68:96:56:36:1c:cb:cd: e8:c8:60:0b:52:e5:32:7d:3e:68:e2:bd:8f:a3:1c: d2:47:2e:b2:cd:3e:be:1c:16:16:87:fb:7e:69:16: a3:08:3f:c9:95:88:d8:d5:20:fd:37:79:93:e1:71: c1:10:61:e1:01:2c:4e:2c:d4:4a:ed:47:34:0c:5b: 2c:14:d1:14:61:d8:cd:7d:1b:b4:a5:23:e7:a7:82: 97:a1:cd:b7:52:3b:cf:30:49:e8:5e:e0:90:59:c4: 2c:b5:a0:4c:8c:5b:f1:3a:3e:c6:46:c1:71:dc:55: 45:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:22:4F:36:B0:F4:E1:B8:60:8E:AB:3E:4F:30:41:2F:73:1C:D0:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/3bdf900d-17b8-3fef-a0bf-1ee4e3c07a4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.crl X509v3 Authority Key Identifier: keyid:D3:8A:39:65:E1:53:C3:03:64:C1:56:0F:C9:45:83:B6:FA:B1:38:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba.cer sbgp-ipAddrBlock: critical IPv6: 2606:8940::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:f4:8f:9b:63:66:20:43:72:9f:af:1f:f7:cb:02:9a:5e:00: f1:e7:6b:09:57:b7:e0:82:d4:51:b7:f3:0b:cb:03:f3:12:f3: 65:d8:50:d9:88:89:6b:21:18:98:53:14:f0:80:9b:68:92:c4: 4f:e8:2f:44:f6:36:36:e1:4f:15:4a:76:1d:27:21:8c:66:19: af:95:f4:71:01:bf:ae:dc:1b:c7:52:10:1a:d7:48:c9:11:06: f4:73:68:97:54:27:11:a8:d3:cd:4d:f4:58:75:55:88:0c:ac: df:82:8f:f8:9c:24:bc:09:4c:4a:4d:fe:ec:ec:f4:cb:8b:c1: 35:05:05:3f:9c:ad:c0:5c:26:26:a0:41:1c:64:0b:72:01:7b: 37:87:98:08:79:89:ad:45:8d:8c:6d:dd:16:eb:c2:fd:0d:bb: fa:02:b1:23:5c:55:92:8f:e1:aa:b2:a7:b9:9d:23:99:9f:5a: 83:08:57:4f:b6:6e:9c:e3:e7:bf:68:fb:2c:0d:69:ff:a5:ef: f6:5b:4b:35:a2:71:12:c9:c8:af:6a:54:6d:c9:d9:a2:82:83: aa:a9:dd:d1:4d:a1:73:90:03:7b:83:ed:e1:21:0e:cf:46:70: e2:07:91:76:17:b5:51:f8:5e:e9:95:5c:a2:35:4f:b8:b0:54: 94:79:8e:c9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEngv4ryG9i6vVMzcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGNlODRmYjItYzUzOS00NmU3LTgyMTItMTJiOTczMGFm ZWJhMB4XDTI1MDUxNzAxMDA0N1oXDTI1MDgxNTAxMDA0N1owLzEtMCsGA1UEAxMk MjFjMjU5MWQtNmM2Yy00NzA2LThhNmUtNzE5MGQ5ODc0ZWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6N/iio8jdPBdCCWQVdqMQdvDeVW2dTMsSgK qTqC2mALgGk26XtZ4vEEaW1CXrCfq4YaxGVKdDV8IejDanrazikax+hZz6fjmcDQ aON+5WUtSJibiC8ulAetCPWE8ZgbfYO+I8e5oSwEF527GeaEAP3hBxtkpZmCmsvk 148fq3HFch9Toi6xpHZencDL72iWVjYcy83oyGALUuUyfT5o4r2PoxzSRy6yzT6+ HBYWh/t+aRajCD/JlYjY1SD9N3mT4XHBEGHhASxOLNRK7Uc0DFssFNEUYdjNfRu0 pSPnp4KXoc23UjvPMEnoXuCQWcQstaBMjFvxOj7GRsFx3FVF+QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFM0iTzaw9OG4YI6rPk8wQS9zHNBzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84Y2U4 NGZiMi1jNTM5LTQ2ZTctODIxMi0xMmI5NzMwYWZlYmEvM2JkZjkwMGQtMTdiOC0z ZmVmLWEwYmYtMWVlNGUzYzA3YTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGNlODRmYjItYzUzOS00NmU3LTgy MTItMTJiOTczMGFmZWJhLzhjZTg0ZmIyLWM1MzktNDZlNy04MjEyLTEyYjk3MzBh ZmViYS5jcmwwHwYDVR0jBBgwFoAU04o5ZeFTwwNkwVYPyUWDtvqxONswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84Y2U4NGZiMi1jNTM5LTQ2ZTctODIxMi0xMmI5 NzMwYWZlYmEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgaJQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB49I+bY2YgQ3Kfrx/3ywKaXgDx52sJV7fggtRRt/MLywPzEvNl2FDZ iIlrIRiYUxTwgJtoksRP6C9E9jY24U8VSnYdJyGMZhmvlfRxAb+u3BvHUhAa10jJ EQb0c2iXVCcRqNPNTfRYdVWIDKzfgo/4nCS8CUxKTf7s7PTLi8E1BQU/nK3AXCYm oEEcZAtyAXs3h5gIeYmtRY2Mbd0W68L9Dbv6ArEjXFWSj+Gqsqe5nSOZn1qDCFdP tm6c4+e/aPssDWn/pe/2W0s1onESycivalRtydmigoOqqd3RTaFzkAN7g+3hIQ7P RnDiB5F2F7VR+F7plVyiNU+4sFSUeY7J -----END CERTIFICATE-----Generated at Sun Jun 15 17:55:08 2025 by rpki-client