$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf600fd6-981b-3baa-a0ae-30f271c6bb29.roa File: bf600fd6-981b-3baa-a0ae-30f271c6bb29.roa (raw, json) Hash identifier: dKmndrRf3UZnlMc6a/Mscsc34fBY/Qu0YE8uBz8fSsg= Subject key identifier: C1:C2:14:6D:78:0D:25:5B:20:67:FB:66:59:34:99:B7:17:13:5D:38 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584A761B474A0ADD6D5D653D2780 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf600fd6-981b-3baa-a0ae-30f271c6bb29.roa Signing time: Wed 09 Jul 2025 13:01:04 +0000 ROA not before: Wed 09 Jul 2025 13:01:04 +0000 ROA not after: Tue 07 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 2604:2e88:8000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:76:1b:47:4a:0a:dd:6d:5d:65:3d:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jul 9 13:01:04 2025 GMT Not After : Oct 7 13:01:04 2025 GMT Subject: CN=27cda555-d425-4478-91fc-5f7b31f07164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:10:9f:a8:7c:09:94:a5:f0:21:85:58:a3:43: 3b:6b:9b:5c:b4:1c:cc:b4:25:74:ca:d8:ef:e3:00: e8:0c:1a:4c:ca:a2:cd:ee:5e:e9:da:a9:9f:05:e2: ad:68:02:ea:d0:8d:db:0d:e5:73:c9:ad:13:35:b4: cb:cc:47:cf:10:6d:ec:78:53:24:5e:66:08:cd:da: 59:18:a2:e2:b7:18:ca:0f:1d:c3:9f:a9:95:1c:57: 56:55:8b:80:83:d5:03:96:c4:fc:86:28:d0:8e:7d: 8d:7e:e9:39:82:7b:8b:3a:62:d6:4b:a0:99:e3:18: 0e:74:67:cc:a9:e2:f2:fe:c3:f2:ba:2e:d3:84:a3: 69:d3:88:44:90:14:f1:b3:51:16:b6:36:25:f1:1a: 32:40:66:30:1e:58:d4:ea:c6:b3:23:aa:de:ba:e1: 35:f3:d4:f3:93:98:3a:5c:36:b3:09:d8:d5:d9:1d: 69:9a:05:0a:81:f4:39:97:d9:03:6b:a5:dc:6d:b2: 45:54:6b:5c:0c:fd:f4:1f:1f:08:d0:63:2b:73:71: 50:1b:be:ba:4b:c8:90:82:f1:13:19:40:9b:fe:c9: 19:77:d6:e7:6a:81:0b:66:1c:26:25:4f:e3:ae:71: 2a:da:6b:34:0c:a2:b7:ab:e4:1a:8f:03:72:6d:99: cc:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:C2:14:6D:78:0D:25:5B:20:67:FB:66:59:34:99:B7:17:13:5D:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf600fd6-981b-3baa-a0ae-30f271c6bb29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e88:8000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:df:6e:c7:9a:0f:b6:fc:50:0b:18:0f:72:f6:50:24:e4:a4: 09:8f:cb:72:d1:6e:3a:e8:b5:45:f6:52:5d:7b:be:e0:b4:a4: b8:f3:95:94:e6:26:89:97:a5:d2:c3:52:25:16:73:70:d8:0f: 5b:8f:b7:e8:f4:d2:c2:11:fb:4d:43:a0:4b:b5:87:11:17:97: 89:f5:12:d0:e6:4b:05:fd:17:16:fb:8a:ae:33:57:d8:8a:9b: 07:39:5d:bf:d1:87:98:b0:1e:95:72:d1:6a:5a:88:41:e1:47: 93:09:2c:25:47:0d:cb:58:4c:1b:65:f3:e3:97:4b:23:36:7b: 7a:60:fb:9d:51:d6:6e:47:09:75:da:71:9e:6d:79:a4:cd:ec: 09:3a:13:bb:e1:5d:1b:17:c1:d6:c4:72:fa:42:5f:07:f3:80: 41:35:a6:04:e1:fb:8f:26:1e:20:da:4b:30:80:a9:5c:22:7a: be:35:88:7d:1f:c1:e6:18:f1:c4:7e:8a:c6:59:61:a9:34:46: ca:8b:b0:3c:25:b5:24:11:4c:23:56:61:fe:5d:da:89:07:92: 4b:7f:58:3f:21:66:f8:d1:6f:a0:db:6f:90:1e:35:a8:d0:9f: 2f:ae:6e:00:32:2d:e1:81:8a:b8:3e:3d:96:e8:cb:75:ed:6b: 57:9a:3a:1e -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEp2G0dKCt1tXWU9J4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDcwOTEzMDEwNFoXDTI1MTAwNzEzMDEwNFowLzEtMCsGA1UEAxMk MjdjZGE1NTUtZDQyNS00NDc4LTkxZmMtNWY3YjMxZjA3MTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhCfqHwJlKXwIYVYo0M7a5tctBzMtCV0ytjv 4wDoDBpMyqLN7l7p2qmfBeKtaALq0I3bDeVzya0TNbTLzEfPEG3seFMkXmYIzdpZ GKLitxjKDx3Dn6mVHFdWVYuAg9UDlsT8hijQjn2Nfuk5gnuLOmLWS6CZ4xgOdGfM qeLy/sPyui7ThKNp04hEkBTxs1EWtjYl8RoyQGYwHljU6sazI6reuuE189Tzk5g6 XDazCdjV2R1pmgUKgfQ5l9kDa6XcbbJFVGtcDP30Hx8I0GMrc3FQG766S8iQgvET GUCb/skZd9bnaoELZhwmJU/jrnEq2ms0DKK3q+QajwNybZnM/wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMHCFG14DSVbIGf7Zlk0mbcXE104MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYmY2MDBmZDYtOTgxYi0z YmFhLWEwYWUtMzBmMjcxYzZiYjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiIAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEACN9ux5oPtvxQCxgPcvZQJOSkCY/LctFuOui1RfZSXXu+4LSkuPOV lOYmiZel0sNSJRZzcNgPW4+36PTSwhH7TUOgS7WHEReXifUS0OZLBf0XFvuKrjNX 2IqbBzldv9GHmLAelXLRalqIQeFHkwksJUcNy1hMG2Xz45dLIzZ7emD7nVHWbkcJ ddpxnm15pM3sCToTu+FdGxfB1sRy+kJfB/OAQTWmBOH7jyYeINpLMICpXCJ6vjWI fR/B5hjxxH6KxllhqTRGyouwPCW1JBFMI1Zh/l3aiQeSS39YPyFm+NFvoNtvkB41 qNCfL65uADIt4YGKuD49lujLde1rV5o6Hg== -----END CERTIFICATE-----Generated at Thu Jul 10 06:44:04 2025 by rpki-client