$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/a7013767-de4a-3bb7-8745-c92717794f3e.roa File: a7013767-de4a-3bb7-8745-c92717794f3e.roa (raw, json) Hash identifier: tC6v8LfzUdy7d7Hlqs1oV5jd8vFPn9haUl129A8gASw= Subject key identifier: 00:D8:58:72:18:1B:56:58:A5:10:1E:58:9D:B7:99:2C:03:00:41:23 Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Certificate serial: 010D0C9F43285848F4F69B02E20599D8A3DE3800 Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/a7013767-de4a-3bb7-8745-c92717794f3e.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 20253 IP address blocks: 2606:bc40:f1d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:9b:02:e2:05:99:d8:a3:de:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=c22fe469-7d51-4a6f-b703-006ddc6148a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3a:2d:af:0c:0f:03:66:79:14:1e:3d:07:14: 7e:99:83:52:fb:dc:c0:9b:0c:01:c8:ec:95:31:a2: cd:dd:51:5a:0b:a8:7f:43:63:9b:23:fd:d1:8c:7a: cf:5f:d9:63:4d:3d:7e:69:fd:7b:23:b9:a9:a9:e3: a3:7c:9b:44:0e:8f:f2:5d:84:d5:db:55:ab:d1:63: 07:19:18:92:f9:33:74:1b:8d:d1:9e:c7:88:f7:45: 5e:85:3e:7c:31:8b:f0:c3:aa:e7:8c:87:29:52:42: 3e:8e:04:7d:bf:8a:63:88:ba:92:51:81:1b:2a:2e: c2:f3:69:f8:91:c9:13:c6:e4:5c:89:86:28:ca:ee: b5:0c:b2:ea:4e:49:b3:88:04:67:ec:4d:3d:11:e7: e6:05:a6:d3:88:84:85:a1:f3:b5:3a:08:96:6b:e1: 2f:6c:3f:29:97:ad:92:dc:9f:1f:11:10:46:c1:66: 28:5e:04:6c:52:19:86:8d:ca:68:fa:92:bf:3e:c9: a4:a3:9f:be:25:a2:02:99:5a:4a:f6:a8:6b:fa:a5: 37:6b:57:64:75:53:48:b2:0c:6f:01:09:c2:ef:e5: 19:cf:c1:aa:30:0e:f8:4b:2b:c4:9c:3c:97:77:86: 02:36:62:5a:df:75:c4:e4:06:75:e3:57:57:28:e1: 00:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:D8:58:72:18:1B:56:58:A5:10:1E:58:9D:B7:99:2C:03:00:41:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/a7013767-de4a-3bb7-8745-c92717794f3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl X509v3 Authority Key Identifier: keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer sbgp-ipAddrBlock: critical IPv6: 2606:bc40:f1d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:54:64:1b:ee:5a:91:cf:19:af:ad:ae:68:a1:06:dd:0c:66: eb:f2:f4:85:19:c4:98:d4:5b:6a:72:3a:47:ed:f5:a5:3e:13: 00:d7:b5:64:b3:21:46:c7:f3:cf:25:31:1b:91:7f:db:40:fb: 0a:41:34:0b:84:e1:c4:f4:b7:4c:74:e2:35:04:53:d1:ee:62: 30:ab:f5:17:a3:90:3c:69:6a:79:a0:a2:2c:1f:b4:27:49:1a: 3c:a1:48:2a:4a:e0:a4:83:e9:ca:da:d2:c7:ca:1d:94:9d:20: 6a:b1:8c:55:cb:05:20:69:8c:5c:09:fd:de:fb:fd:da:32:0f: 3c:12:7d:b5:87:bd:33:c2:07:71:cd:3e:44:b2:4b:ae:48:6f: c2:d2:dd:43:5d:f3:e5:d9:ed:7e:a3:1b:62:c7:c2:89:c6:f7: c0:b2:65:54:cd:3b:74:c4:3c:14:fd:92:a0:94:b9:3f:9f:ce: 96:fd:48:71:ea:07:2d:b4:3a:50:3b:2c:9f:05:03:35:47:fa: 08:bf:33:00:8e:1c:8d:a9:76:8f:ab:9b:01:40:f6:ec:2f:64: c1:89:f7:0e:52:81:b7:ad:97:f6:a5:42:99:7f:41:cc:69:9e: 8f:58:ef:bb:36:b7:7e:e6:19:1d:57:76:1a:fa:59:c6:bc:72: 3a:05:49:13 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj09psC4gWZ2KPeOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz YTA3MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk YzIyZmU0NjktN2Q1MS00YTZmLWI3MDMtMDA2ZGRjNjE0OGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TotrwwPA2Z5FB49BxR+mYNS+9zAmwwByOyV MaLN3VFaC6h/Q2ObI/3RjHrPX9ljTT1+af17I7mpqeOjfJtEDo/yXYTV21Wr0WMH GRiS+TN0G43RnseI90VehT58MYvww6rnjIcpUkI+jgR9v4pjiLqSUYEbKi7C82n4 kckTxuRciYYoyu61DLLqTkmziARn7E09EefmBabTiISFofO1OgiWa+EvbD8pl62S 3J8fERBGwWYoXgRsUhmGjcpo+pK/Psmko5++JaICmVpK9qhr+qU3a1dkdVNIsgxv AQnC7+UZz8GqMA74SyvEnDyXd4YCNmJa33XE5AZ141dXKOEAIwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFADYWHIYG1ZYpRAeWJ23mSwDAEEjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvYTcwMTM3NjctZGU0YS0z YmI3LTg3NDUtYzkyNzE3Nzk0ZjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4 MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QA8d MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHRUZBvuWpHPGa+trmihBt0MZuvy9IUZxJjUW2pyOkft9aU+EwDX tWSzIUbH888lMRuRf9tA+wpBNAuE4cT0t0x04jUEU9HuYjCr9RejkDxpanmgoiwf tCdJGjyhSCpK4KSD6cra0sfKHZSdIGqxjFXLBSBpjFwJ/d77/doyDzwSfbWHvTPC B3HNPkSyS65Ib8LS3UNd8+XZ7X6jG2LHwonG98CyZVTNO3TEPBT9kqCUuT+fzpb9 SHHqBy20OlA7LJ8FAzVH+gi/MwCOHI2pdo+rmwFA9uwvZMGJ9w5Sgbetl/alQpl/ Qcxpno9Y77s2t37mGR1Xdhr6Wca8cjoFSRM= -----END CERTIFICATE-----Generated at Wed Apr 30 21:23:45 2025 by rpki-client