$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bb760eff-5d50-348f-809c-0dc1a1c253a5.roa File: bb760eff-5d50-348f-809c-0dc1a1c253a5.roa (raw, json) Hash identifier: 8lihjOoLjNCbDRQRHBZFayHIcAPAwJP7sqXd97aTjL4= Subject key identifier: 97:90:A6:1D:E4:B8:B3:74:57:9C:0B:F4:2E:07:14:72:25:08:5F:6E Certificate issuer: /CN=bf3c3bd5-3b94-47e2-81fc-f4900814e494 Certificate serial: 010D0C9F43285849FE0FFBE5BF5C216F817A5300 Authority key identifier: BF:6E:E0:CD:B4:2F:74:96:46:0C:2E:CD:76:0C:7F:16:5A:5C:81:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bb760eff-5d50-348f-809c-0dc1a1c253a5.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 40867 IP address blocks: 2605:3240::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:0f:fb:e5:bf:5c:21:6f:81:7a:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf3c3bd5-3b94-47e2-81fc-f4900814e494 Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=269310de-9f7b-42be-9b3f-402f5746acee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:10:af:7e:63:14:87:7e:be:ca:06:4a:55:63: 67:02:03:6a:50:86:f6:66:87:e0:a3:d2:c6:2a:96: 98:29:3a:fc:85:eb:dd:88:b2:6e:ea:1d:0d:07:77: fd:de:6a:99:5b:5d:92:35:3d:d3:44:97:fd:52:2a: fc:05:68:93:09:69:cc:96:ff:3c:6f:2b:82:ef:72: 31:f6:5f:93:c6:f5:01:b1:ff:be:48:82:0a:b0:40: f1:e9:3f:be:07:95:39:9d:3f:4b:ce:13:ea:0e:0d: 3f:12:85:99:fe:3f:1b:c8:cb:4e:53:d4:7a:c4:bc: 1a:b3:02:ab:1f:fb:45:bc:3e:54:53:bf:1d:46:8c: 9e:62:8f:e0:31:88:2f:eb:67:1e:f5:10:d8:77:86: 25:55:cf:90:d6:b8:71:d6:6b:d3:09:2b:65:ad:c9: 5b:a8:7a:0f:59:fb:cc:a9:9a:80:3a:dc:f8:fa:64: e3:36:06:d9:bf:1d:a5:d8:86:75:fc:a4:b0:3b:a2: d4:64:42:31:0d:1d:72:2f:b0:4b:02:36:e6:e5:bd: 11:43:e3:73:dc:c2:bd:af:e8:e9:67:3a:b5:54:fd: 5f:e1:7b:19:03:51:d9:ea:dc:6d:07:cb:c9:70:b1: cf:db:9c:b5:84:72:bc:b8:5a:64:d7:e0:a1:ee:46: 25:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:90:A6:1D:E4:B8:B3:74:57:9C:0B:F4:2E:07:14:72:25:08:5F:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bb760eff-5d50-348f-809c-0dc1a1c253a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.crl X509v3 Authority Key Identifier: keyid:BF:6E:E0:CD:B4:2F:74:96:46:0C:2E:CD:76:0C:7F:16:5A:5C:81:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer sbgp-ipAddrBlock: critical IPv6: 2605:3240::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:71:1f:bb:14:b5:af:d9:80:03:cf:c8:b5:08:45:09:38:5c: ff:c3:97:2b:40:3f:e8:a0:b6:d2:4a:0a:cd:46:e3:4b:e7:0d: 18:65:6e:d0:d5:23:f0:e4:1c:d2:7d:00:7a:bb:97:88:b1:e8: 15:09:de:a7:8e:5a:06:d1:1f:5e:b1:33:e1:7f:52:58:1a:a8: 8a:fd:43:61:e6:a3:2b:30:33:6a:24:c7:dd:5b:c8:84:26:35: 23:78:bc:f1:63:2b:73:3c:22:21:7b:8c:94:6c:54:9b:55:2a: 7d:1c:a5:5b:57:04:86:33:8d:7a:88:2d:50:d8:2d:ca:20:bc: fc:6c:ab:44:2f:b7:4d:71:72:7b:01:3f:df:41:33:e1:2b:30: f5:a3:b6:fe:43:02:6b:b5:95:d4:21:c1:d8:58:5c:f0:ca:f4: cd:60:48:97:de:c4:e3:7c:25:46:d6:57:30:85:be:77:07:ff: 0e:80:bb:c6:1c:09:fc:1a:6c:32:44:75:16:b4:98:8f:16:28: b9:20:d7:6e:c3:15:13:8d:95:69:f0:bd:f5:c6:5e:f6:ca:91: d9:7a:f0:5d:8a:65:01:8f:a6:c2:72:96:60:d0:1d:06:51:5e: 58:5c:a0:bd:04:5e:e1:b5:04:4a:cc:85:df:16:78:82:fb:52: ae:db:1f:b8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEn+D/vlv1whb4F6UwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYzYzNiZDUtM2I5NC00N2UyLTgxZmMtZjQ5MDA4MTRl NDk0MB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk MjY5MzEwZGUtOWY3Yi00MmJlLTliM2YtNDAyZjU3NDZhY2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxCvfmMUh36+ygZKVWNnAgNqUIb2Zofgo9LG KpaYKTr8hevdiLJu6h0NB3f93mqZW12SNT3TRJf9Uir8BWiTCWnMlv88byuC73Ix 9l+TxvUBsf++SIIKsEDx6T++B5U5nT9LzhPqDg0/EoWZ/j8byMtOU9R6xLwaswKr H/tFvD5UU78dRoyeYo/gMYgv62ce9RDYd4YlVc+Q1rhx1mvTCStlrclbqHoPWfvM qZqAOtz4+mTjNgbZvx2l2IZ1/KSwO6LUZEIxDR1yL7BLAjbm5b0RQ+Nz3MK9r+jp Zzq1VP1f4XsZA1HZ6txtB8vJcLHP25y1hHK8uFpk1+Ch7kYl+wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJeQph3kuLN0V5wL9C4HFHIlCF9uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjNj M2JkNS0zYjk0LTQ3ZTItODFmYy1mNDkwMDgxNGU0OTQvYmI3NjBlZmYtNWQ1MC0z NDhmLTgwOWMtMGRjMWExYzI1M2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmYzYzNiZDUtM2I5NC00N2UyLTgx ZmMtZjQ5MDA4MTRlNDk0L2JmM2MzYmQ1LTNiOTQtNDdlMi04MWZjLWY0OTAwODE0 ZTQ5NC5jcmwwHwYDVR0jBBgwFoAUv27gzbQvdJZGDC7Ndgx/FlpcgW8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjNjM2JkNS0zYjk0LTQ3ZTItODFmYy1mNDkw MDgxNGU0OTQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgUyQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQATcR+7FLWv2YADz8i1CEUJOFz/w5crQD/ooLbSSgrNRuNL5w0YZW7Q 1SPw5BzSfQB6u5eIsegVCd6njloG0R9esTPhf1JYGqiK/UNh5qMrMDNqJMfdW8iE JjUjeLzxYytzPCIhe4yUbFSbVSp9HKVbVwSGM416iC1Q2C3KILz8bKtEL7dNcXJ7 AT/fQTPhKzD1o7b+QwJrtZXUIcHYWFzwyvTNYEiX3sTjfCVG1lcwhb53B/8OgLvG HAn8GmwyRHUWtJiPFii5INduwxUTjZVp8L31xl72ypHZevBdimUBj6bCcpZg0B0G UV5YXKC9BF7htQRKzIXfFniC+1Ku2x+4 -----END CERTIFICATE-----Generated at Wed Jun 18 03:47:34 2025 by rpki-client