$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bf0d8f5a-37be-31d2-bc71-22237b74a3e6.roa File: bf0d8f5a-37be-31d2-bc71-22237b74a3e6.roa (raw, json) Hash identifier: L91QMuJlEqNaAE0rn994nllgkcrwnnxFPr6+aelndPM= Subject key identifier: E2:46:7D:63:AE:D1:4B:22:87:0E:25:6A:23:EA:D4:66:D3:21:62:AB Certificate issuer: /CN=bc3bcc6d-6679-419c-8300-bdebdffc8ffd Certificate serial: 010D0C9F43285849F87A8DFF91BFBC4D174D3240 Authority key identifier: CC:59:79:C9:D5:F2:E0:6A:F8:9F:25:4F:78:84:1B:76:E3:65:E4:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bf0d8f5a-37be-31d2-bc71-22237b74a3e6.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 398698 IP address blocks: 2605:eac0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:8d:ff:91:bf:bc:4d:17:4d:32:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc3bcc6d-6679-419c-8300-bdebdffc8ffd Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=405af4cd-df85-4995-8910-5c47f9045802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:4b:96:68:19:57:74:b7:17:82:ec:0c:76:37: 0f:78:40:21:16:9c:4a:47:ba:5f:a1:b7:e8:a9:d6: fa:82:f6:ee:c1:fe:41:cb:0d:64:62:e3:a2:84:e1: b6:d9:42:1c:08:77:43:55:21:aa:d9:11:be:18:f0: 03:71:fb:1f:6f:15:ff:17:78:88:5b:54:fd:6a:21: 68:09:77:0e:23:50:2f:b1:bf:46:7e:c7:2b:ce:d4: 1c:78:d1:be:fc:bf:45:e2:e4:23:55:e9:d3:30:b3: 91:f7:b1:ee:d0:46:eb:5d:1d:96:f2:bb:54:65:8a: 7c:9a:bc:58:ed:63:fa:98:36:6b:2d:97:c7:a6:fe: 4c:8a:41:f0:ca:e5:23:13:a9:a9:da:fd:4b:e5:63: 08:cf:26:40:02:3d:35:f8:34:96:be:06:67:d5:a8: 0b:3d:b8:f1:ae:a0:3e:cf:5c:94:b5:24:34:67:68: e2:56:1d:28:f6:f7:51:c5:38:fa:c3:ec:d1:77:4a: 93:20:50:25:f4:55:0e:d5:b6:6a:1b:2c:44:58:46: e4:b0:05:ac:9e:b6:f7:8a:b5:57:07:e6:46:80:a1: cf:fd:a1:38:ab:92:d2:87:71:f0:f1:87:c6:38:8b: 93:c9:91:11:cc:6b:f4:28:5e:1d:5f:0a:8a:ca:d3: 7e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:46:7D:63:AE:D1:4B:22:87:0E:25:6A:23:EA:D4:66:D3:21:62:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bf0d8f5a-37be-31d2-bc71-22237b74a3e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.crl X509v3 Authority Key Identifier: keyid:CC:59:79:C9:D5:F2:E0:6A:F8:9F:25:4F:78:84:1B:76:E3:65:E4:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.cer sbgp-ipAddrBlock: critical IPv6: 2605:eac0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:f7:b1:df:f6:53:6b:32:c8:fc:fb:5c:97:43:9b:4d:41:01: 56:91:90:b5:72:25:ec:62:da:6f:ad:60:7a:7e:1d:d6:c7:e8: 71:8a:f7:42:e8:bf:90:5e:03:1b:a5:c9:ca:85:43:aa:05:8d: 46:6e:04:f3:12:a9:d3:e0:f9:a1:d8:74:ff:bd:21:cb:e9:81: ee:fa:4b:31:05:80:61:91:26:4d:b7:9b:3d:f2:26:27:17:22: b9:5b:dd:af:54:64:96:a5:73:38:12:75:52:72:0d:0d:78:5f: 9d:9c:ce:41:ab:78:51:3b:13:09:ba:37:47:4e:26:e9:5a:71: 9e:e2:30:08:d5:e3:72:a5:a8:50:dd:bb:66:cc:1b:e1:88:f3: 99:d8:56:21:7c:de:ac:09:75:78:4f:ed:a3:1b:1c:63:6c:fb: 92:7f:df:fd:a4:fd:10:62:5a:05:90:07:eb:82:42:64:98:1d: 1e:08:ac:bc:7a:88:29:c8:dd:7e:a2:af:93:e6:0a:81:00:77: 8f:a0:73:ad:e9:3b:fa:b6:cb:2d:de:12:36:91:ba:4d:59:14: 6e:bb:46:b3:ee:f9:5d:f2:3f:a5:68:41:5c:37:ba:7b:10:9a: 20:00:d9:95:b5:5a:7a:a0:bb:ca:a7:73:70:0d:15:73:b0:a9: 19:8b:64:fc -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEn4eo3/kb+8TRdNMkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzYmNjNmQtNjY3OS00MTljLTgzMDAtYmRlYmRmZmM4 ZmZkMB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk NDA1YWY0Y2QtZGY4NS00OTk1LTg5MTAtNWM0N2Y5MDQ1ODAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0uWaBlXdLcXguwMdjcPeEAhFpxKR7pfobfo qdb6gvbuwf5Byw1kYuOihOG22UIcCHdDVSGq2RG+GPADcfsfbxX/F3iIW1T9aiFo CXcOI1Avsb9GfscrztQceNG+/L9F4uQjVenTMLOR97Hu0EbrXR2W8rtUZYp8mrxY 7WP6mDZrLZfHpv5MikHwyuUjE6mp2v1L5WMIzyZAAj01+DSWvgZn1agLPbjxrqA+ z1yUtSQ0Z2jiVh0o9vdRxTj6w+zRd0qTIFAl9FUO1bZqGyxEWEbksAWsnrb3irVX B+ZGgKHP/aE4q5LSh3Hw8YfGOIuTyZERzGv0KF4dXwqKytN+pwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOJGfWOu0Usihw4laiPq1GbTIWKrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iYzNi Y2M2ZC02Njc5LTQxOWMtODMwMC1iZGViZGZmYzhmZmQvYmYwZDhmNWEtMzdiZS0z MWQyLWJjNzEtMjIyMzdiNzRhM2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYmMzYmNjNmQtNjY3OS00MTljLTgz MDAtYmRlYmRmZmM4ZmZkL2JjM2JjYzZkLTY2NzktNDE5Yy04MzAwLWJkZWJkZmZj OGZmZC5jcmwwHwYDVR0jBBgwFoAUzFl5ydXy4Gr4nyVPeIQbduNl5EkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iYzNiY2M2ZC02Njc5LTQxOWMtODMwMC1iZGVi ZGZmYzhmZmQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgXqwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCO97Hf9lNrMsj8+1yXQ5tNQQFWkZC1ciXsYtpvrWB6fh3Wx+hxivdC 6L+QXgMbpcnKhUOqBY1GbgTzEqnT4Pmh2HT/vSHL6YHu+ksxBYBhkSZNt5s98iYn FyK5W92vVGSWpXM4EnVScg0NeF+dnM5Bq3hROxMJujdHTibpWnGe4jAI1eNypahQ 3btmzBvhiPOZ2FYhfN6sCXV4T+2jGxxjbPuSf9/9pP0QYloFkAfrgkJkmB0eCKy8 eogpyN1+oq+T5gqBAHePoHOt6Tv6tsst3hI2kbpNWRRuu0az7vld8j+laEFcN7p7 EJogANmVtVp6oLvKp3NwDRVzsKkZi2T8 -----END CERTIFICATE-----Generated at Tue Jun 17 00:14:13 2025 by rpki-client