$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/bb9123bb-240f-3b53-a541-2ad27fca5e81.roa File: bb9123bb-240f-3b53-a541-2ad27fca5e81.roa (raw, json) Hash identifier: 8Ezb1ErT8r/dsxSKd1otYERJLs+hv3kEanx01n0baBY= Subject key identifier: 96:1F:D7:F3:69:C1:19:54:64:75:CF:D0:D5:EF:08:90:FF:06:85:6E Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Certificate serial: 010D0C9F43285849711433FB6209152DF3834380 Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/bb9123bb-240f-3b53-a541-2ad27fca5e81.roa Signing time: Mon 07 Apr 2025 01:00:47 +0000 ROA not before: Mon 07 Apr 2025 01:00:47 +0000 ROA not after: Sun 06 Jul 2025 01:00:47 +0000 asID: 397391 IP address blocks: 2604:7580:7f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:71:14:33:fb:62:09:15:2d:f3:83:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Validity Not Before: Apr 7 01:00:47 2025 GMT Not After : Jul 6 01:00:47 2025 GMT Subject: CN=683784da-ebb8-42fc-af58-c89d47e21c13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:38:f6:61:2e:94:fa:e0:09:20:8b:8f:11:a7: 10:d3:7d:9f:14:7f:aa:51:cc:aa:04:b7:73:81:bc: 21:75:95:c9:58:97:7f:c8:91:ad:e7:e4:cc:71:b9: 17:b6:f0:1c:97:29:f9:d5:58:48:ed:c9:43:49:e0: 18:06:84:80:ec:54:90:0e:be:50:73:d0:74:17:a7: 8c:0e:5e:2e:b9:a4:bf:d3:ae:46:92:d6:0a:1b:63: d0:d5:69:3e:fd:16:00:9d:03:76:cb:b7:32:e0:ac: f3:3a:b2:05:34:40:dc:7c:2b:95:cc:dd:1b:69:f5: 5b:7e:cc:44:f4:22:11:6e:f5:d9:cc:81:4f:55:75: 7e:d2:95:ba:7a:df:33:12:81:0e:f2:ef:b1:92:b5: 83:3e:c0:d3:2b:b0:4a:86:54:e6:fb:4d:1d:18:05: 7f:db:5f:66:0b:56:90:e8:91:52:64:42:35:b1:fc: 74:3d:e8:af:6b:bd:52:27:85:58:31:3c:69:63:c3: ce:d7:3f:8b:1d:cf:1c:45:96:43:6c:66:e7:e6:d8: 52:6d:65:ae:d5:7a:1c:b1:c7:c6:05:19:55:2a:4d: 2f:c9:c4:6c:28:0e:6d:75:6d:ed:68:2e:d7:01:23: 49:8f:8f:15:b7:d4:4f:6f:cb:5c:74:2c:f3:2f:9c: 2b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:1F:D7:F3:69:C1:19:54:64:75:CF:D0:D5:EF:08:90:FF:06:85:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/bb9123bb-240f-3b53-a541-2ad27fca5e81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl X509v3 Authority Key Identifier: keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer sbgp-ipAddrBlock: critical IPv6: 2604:7580:7f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:37:24:8b:75:7d:89:fc:49:bf:e9:ed:ba:4f:07:ab:9f:a2: 89:63:71:fd:0f:a6:6f:2c:9c:23:dd:79:af:4a:5f:b5:1f:48: 06:ea:4f:70:8c:3e:6e:73:82:dc:65:73:4f:20:98:4a:cf:b1: e5:b7:ba:4d:96:f2:1f:ee:1c:51:e5:2a:22:c5:b1:31:36:40: 5b:30:f3:85:0d:c4:07:bb:75:2e:56:8b:7e:0b:e9:88:f0:97: f8:a1:57:d8:a1:bf:b4:e6:c2:2b:c0:37:9c:e9:5c:36:37:02: cc:4d:f8:52:83:d9:36:17:46:07:5e:56:ce:ee:4e:f6:cd:1b: 26:92:bf:3e:30:cf:6c:8a:58:d5:6f:ed:7a:88:e7:a0:aa:6e: c0:4d:7c:be:49:0e:de:bd:63:d4:83:1a:ad:d8:93:26:3d:9c: b5:49:72:bc:b7:b4:7b:80:bb:ff:e1:7d:da:bb:7a:87:e8:55: 64:63:89:5a:be:b9:7e:11:33:b1:37:18:a1:bc:a5:b6:ab:96: 95:f2:d0:e1:f0:3c:30:f5:99:cd:f9:bc:57:a1:15:2e:3c:76: 08:b1:4c:5b:5c:60:f4:42:9f:f3:08:b3:d7:94:d3:de:a7:d9: 53:00:20:6b:10:d1:1b:5d:72:26:2a:39:be:84:a0:e4:35:b7: 19:bb:4e:5a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElxFDP7YgkVLfODQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4 N2ZmMB4XDTI1MDQwNzAxMDA0N1oXDTI1MDcwNjAxMDA0N1owLzEtMCsGA1UEAxMk NjgzNzg0ZGEtZWJiOC00MmZjLWFmNTgtYzg5ZDQ3ZTIxYzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjj2YS6U+uAJIIuPEacQ032fFH+qUcyqBLdz gbwhdZXJWJd/yJGt5+TMcbkXtvAclyn51VhI7clDSeAYBoSA7FSQDr5Qc9B0F6eM Dl4uuaS/065GktYKG2PQ1Wk+/RYAnQN2y7cy4KzzOrIFNEDcfCuVzN0bafVbfsxE 9CIRbvXZzIFPVXV+0pW6et8zEoEO8u+xkrWDPsDTK7BKhlTm+00dGAV/219mC1aQ 6JFSZEI1sfx0Peiva71SJ4VYMTxpY8PO1z+LHc8cRZZDbGbn5thSbWWu1XocscfG BRlVKk0vycRsKA5tdW3taC7XASNJj48Vt9RPb8tcdCzzL5wrOQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJYf1/NpwRlUZHXP0NXvCJD/BoVuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1 YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvYmI5MTIzYmItMjQwZi0z YjUzLWE1NDEtMmFkMjdmY2E1ZTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5 NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi OGVjZTg3ZmYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgR1gAB/ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHI3JIt1fYn8Sb/p7bpPB6ufooljcf0Ppm8snCPdea9KX7UfSAbq T3CMPm5zgtxlc08gmErPseW3uk2W8h/uHFHlKiLFsTE2QFsw84UNxAe7dS5Wi34L 6Yjwl/ihV9ihv7TmwivAN5zpXDY3AsxN+FKD2TYXRgdeVs7uTvbNGyaSvz4wz2yK WNVv7XqI56CqbsBNfL5JDt69Y9SDGq3YkyY9nLVJcry3tHuAu//hfdq7eofoVWRj iVq+uX4RM7E3GKG8pbarlpXy0OHwPDD1mc35vFehFS48dgixTFtcYPRCn/MIs9eU 096n2VMAIGsQ0RtdciYqOb6EoOQ1txm7Tlo= -----END CERTIFICATE-----Generated at Mon Apr 7 06:30:58 2025 by rpki-client