$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/4862e84e-cebd-32e5-b890-b445c0d81222.roa File: 4862e84e-cebd-32e5-b890-b445c0d81222.roa (raw, json) Hash identifier: AAU/xy/tdb1nY+wJBbJu3qzAY98mTQgWYrNCAxnw5kA= Subject key identifier: 8F:6D:FE:27:EA:27:3F:9A:D9:9C:C8:2A:78:B4:D2:49:93:D1:BD:30 Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Certificate serial: 010D0C9F43285849CE9A5BCD6C2B898BF4C7DC00 Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/4862e84e-cebd-32e5-b890-b445c0d81222.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 20253 IP address blocks: 2606:bc40:22::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:5b:cd:6c:2b:89:8b:f4:c7:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=0c042049-7050-4dd8-957b-600d9070a3cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:29:a8:ad:00:8c:bb:26:03:e0:fc:ff:b9:e2: 62:72:19:2a:e0:da:79:92:63:3e:a4:cb:e2:67:0d: 71:09:52:1f:ac:87:5c:16:97:e8:07:af:1b:ac:db: 88:93:92:ae:51:6a:01:61:84:2a:f8:92:cb:14:ed: 31:60:ca:20:4a:ab:d2:37:b8:f2:0b:2d:7c:82:1f: ee:86:e3:79:af:e2:41:00:d0:4e:f0:8b:5b:08:3d: 74:0b:5f:18:90:8f:64:82:90:7c:2c:ae:84:13:56: b1:f3:78:84:03:13:37:22:24:69:47:bf:7d:e2:20: 17:9b:f8:e7:bf:b5:71:27:ff:2e:4b:1f:6a:c0:0f: f5:5b:60:cd:07:ea:7c:20:27:04:53:d2:8a:9a:81: af:b0:dd:5f:e9:f7:b0:cb:96:46:74:ed:2f:28:ab: 4a:4d:ab:55:d7:38:f6:bd:4b:87:8c:43:e2:a7:24: 8c:a9:e0:d4:c3:ec:ea:4c:9e:0a:b4:95:e9:22:49: 95:d3:bb:c8:56:6e:9d:91:d3:41:55:3d:13:6d:9d: 14:9d:57:fa:39:52:a7:ff:77:48:1c:9e:c3:4e:e2: 61:53:80:68:ec:40:97:11:0e:a4:e0:1d:f1:9e:32: f9:6d:b7:d3:fa:b1:11:3f:b4:93:fa:de:ab:4c:af: 1a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:6D:FE:27:EA:27:3F:9A:D9:9C:C8:2A:78:B4:D2:49:93:D1:BD:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/4862e84e-cebd-32e5-b890-b445c0d81222.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl X509v3 Authority Key Identifier: keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer sbgp-ipAddrBlock: critical IPv6: 2606:bc40:22::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:55:c6:c4:dc:88:da:cc:0a:56:82:09:ef:53:34:c3:8d:01: da:28:a4:ca:62:a7:35:fe:61:93:5b:3f:5a:a0:5b:e0:c6:ec: 90:ee:9c:ac:dc:c7:c3:f2:bf:7d:1b:3d:cf:56:d0:89:fa:c2: a8:ec:4f:94:47:c3:63:72:7f:d2:02:48:ca:a3:c2:f6:5a:8a: 43:d6:75:58:ee:4d:fd:46:14:ba:93:f0:b4:d5:a9:90:6d:12: e7:d8:4c:55:c9:2b:cf:4b:c9:88:e2:c3:50:05:60:9c:fa:7f: 34:9a:db:e1:51:78:ff:24:aa:67:e4:ac:73:51:bc:77:57:6c: cf:ad:2e:5c:22:6f:c5:90:5e:f9:95:f2:1c:db:3d:d2:6c:a1: 49:7c:84:a1:46:30:47:3d:88:3b:0c:19:97:42:38:a5:d3:f0: 3f:da:2d:87:06:2e:52:47:31:dd:03:cf:17:97:25:7f:3f:fd: f7:b1:00:67:29:26:3e:e9:b0:e0:e0:88:da:e4:7e:64:e3:77: e3:19:41:37:22:d0:0c:55:e3:f9:5e:27:be:d2:15:4b:65:a8: 62:7e:02:6d:60:fc:2d:ed:b1:61:be:fc:b2:8f:a2:13:f0:57: 42:dc:d7:c9:ea:e1:a2:65:b9:6d:47:a3:b8:8f:a2:1f:a4:05: a3:38:62:92 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnOmlvNbCuJi/TH3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz YTA3MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk MGMwNDIwNDktNzA1MC00ZGQ4LTk1N2ItNjAwZDkwNzBhM2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCmorQCMuyYD4Pz/ueJichkq4Np5kmM+pMvi Zw1xCVIfrIdcFpfoB68brNuIk5KuUWoBYYQq+JLLFO0xYMogSqvSN7jyCy18gh/u huN5r+JBANBO8ItbCD10C18YkI9kgpB8LK6EE1ax83iEAxM3IiRpR7994iAXm/jn v7VxJ/8uSx9qwA/1W2DNB+p8ICcEU9KKmoGvsN1f6fewy5ZGdO0vKKtKTatV1zj2 vUuHjEPipySMqeDUw+zqTJ4KtJXpIkmV07vIVm6dkdNBVT0TbZ0UnVf6OVKn/3dI HJ7DTuJhU4Bo7ECXEQ6k4B3xnjL5bbfT+rERP7ST+t6rTK8aUQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI9t/ifqJz+a2ZzIKni00kmT0b0wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvNDg2MmU4NGUtY2ViZC0z MmU1LWI4OTAtYjQ0NWMwZDgxMjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4 MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QAAi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGRVxsTciNrMClaCCe9TNMONAdoopMpipzX+YZNbP1qgW+DG7JDu nKzcx8Pyv30bPc9W0In6wqjsT5RHw2Nyf9ICSMqjwvZaikPWdVjuTf1GFLqT8LTV qZBtEufYTFXJK89LyYjiw1AFYJz6fzSa2+FReP8kqmfkrHNRvHdXbM+tLlwib8WQ XvmV8hzbPdJsoUl8hKFGMEc9iDsMGZdCOKXT8D/aLYcGLlJHMd0DzxeXJX8//fex AGcpJj7psODgiNrkfmTjd+MZQTci0AxV4/leJ77SFUtlqGJ+Am1g/C3tsWG+/LKP ohPwV0Lc18nq4aJluW1Ho7iPoh+kBaM4YpI= -----END CERTIFICATE-----Generated at Sun Jun 15 16:08:18 2025 by rpki-client