$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/d67807c8-cb52-3110-92e9-dfa4e3a57f6a.roa File: d67807c8-cb52-3110-92e9-dfa4e3a57f6a.roa (raw, json) Hash identifier: ptI058Bb7fULhgAHfeGopB+bMPy4BCdvky4jHYk7DnY= Subject key identifier: F3:D7:C0:A5:07:E6:52:9F:C7:30:2C:6A:07:35:93:61:0A:93:CA:53 Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Certificate serial: 010D0C9F432858494733E5ECC72152D6775AE200 Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/d67807c8-cb52-3110-92e9-dfa4e3a57f6a.roa Signing time: Sun 23 Mar 2025 01:00:39 +0000 ROA not before: Sun 23 Mar 2025 01:00:39 +0000 ROA not after: Sat 21 Jun 2025 01:00:39 +0000 asID: 20253 IP address blocks: 2606:bc40:f15::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:47:33:e5:ec:c7:21:52:d6:77:5a:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Validity Not Before: Mar 23 01:00:39 2025 GMT Not After : Jun 21 01:00:39 2025 GMT Subject: CN=9cc6d1e1-bd87-4904-89a0-c7a6de01af25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b3:6c:bd:8e:34:af:ee:7a:66:4e:04:37:72: 50:bd:ee:99:cd:64:f7:f0:1d:e8:b5:59:3f:3e:1e: 0b:f9:e0:c6:ac:71:7d:8e:d7:a5:48:da:8b:83:05: e7:8f:50:fe:a4:46:03:f2:8c:d3:78:c9:3f:22:5f: 6b:86:95:0e:93:84:c7:29:41:7f:50:26:f2:73:14: 67:ef:d3:2d:84:67:ac:af:02:fa:b0:d3:d8:9a:75: 74:ff:b1:94:d9:f4:02:4e:d2:28:c5:20:ec:9c:81: b5:43:d9:f2:48:0d:5f:e4:8f:26:a5:70:70:73:ae: 74:6b:e2:dc:94:20:2a:12:af:ee:a6:8f:af:7d:3a: a9:d9:67:a2:a1:5a:58:a4:cf:c5:22:88:b1:56:9e: 3f:43:ce:03:f8:7d:a6:d7:f3:de:f3:cb:cd:69:dd: 5d:7f:d6:43:85:2c:f5:f4:01:00:f5:4d:7f:cd:3a: 91:9d:f9:b7:49:f5:60:ff:7e:13:28:fe:fe:b9:e5: 77:bd:aa:c6:d3:66:0d:14:a3:fa:46:e9:f5:33:a9: bc:3f:dd:e8:3d:bc:a2:66:e7:82:e3:9d:ec:7b:26: 60:69:c7:aa:1d:88:42:e3:d2:cd:0f:4c:eb:a3:d1: 79:4f:4b:c3:e0:81:e8:80:7e:b5:63:ea:ea:3c:ba: a1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:D7:C0:A5:07:E6:52:9F:C7:30:2C:6A:07:35:93:61:0A:93:CA:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/d67807c8-cb52-3110-92e9-dfa4e3a57f6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl X509v3 Authority Key Identifier: keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer sbgp-ipAddrBlock: critical IPv6: 2606:bc40:f15::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:37:6e:ee:29:fe:e9:7c:1c:99:4f:07:30:36:69:54:17:0a: 2b:7d:a4:2e:49:83:e1:05:67:f1:59:c4:7a:8c:ac:90:d0:56: fa:30:08:ba:ac:7e:96:85:bb:e5:fa:fa:0a:5d:26:d4:82:f6: f6:42:d5:77:c8:06:1b:eb:bb:73:df:d9:4d:cf:dc:fb:56:fc: 9d:cf:b0:b2:1e:d2:70:33:09:cb:24:bf:4e:5c:51:8b:55:b0: 14:1e:39:06:f2:2f:80:1b:59:41:65:f0:0e:60:84:f3:96:1c: af:16:79:12:87:a1:76:fc:e8:e9:77:5a:cb:1d:9e:8a:75:09: 9d:39:3e:5e:b4:ab:25:60:9c:57:3d:99:dc:38:dc:be:cc:83: 31:2d:f7:de:1b:d6:ac:01:23:8d:e9:4f:16:2f:d5:9c:7c:4a: 43:0c:75:bc:e5:b7:e3:14:55:5e:ee:f2:73:95:c4:5d:e4:88: a8:bc:92:83:f3:47:ee:7b:2a:9c:1e:c6:72:e0:5c:e0:af:d9: 59:87:6d:6b:79:70:66:b3:a9:92:7a:6d:8d:13:d8:35:c0:df: 79:cf:a9:95:b4:b9:38:d2:1f:de:d4:38:4a:0d:e4:40:35:b7: cc:de:ae:c1:24:05:5c:f7:de:b9:b5:79:a7:86:32:9e:70:3e: d8:39:69:e7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElHM+XsxyFS1nda4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz YTA3MB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk OWNjNmQxZTEtYmQ4Ny00OTA0LTg5YTAtYzdhNmRlMDFhZjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLNsvY40r+56Zk4EN3JQve6ZzWT38B3otVk/ Ph4L+eDGrHF9jtelSNqLgwXnj1D+pEYD8ozTeMk/Il9rhpUOk4THKUF/UCbycxRn 79MthGesrwL6sNPYmnV0/7GU2fQCTtIoxSDsnIG1Q9nySA1f5I8mpXBwc650a+Lc lCAqEq/upo+vfTqp2WeioVpYpM/FIoixVp4/Q84D+H2m1/Pe88vNad1df9ZDhSz1 9AEA9U1/zTqRnfm3SfVg/34TKP7+ueV3varG02YNFKP6Run1M6m8P93oPbyiZueC 453seyZgaceqHYhC49LND0zro9F5T0vD4IHogH61Y+rqPLqhVQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPPXwKUH5lKfxzAsagc1k2EKk8pTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvZDY3ODA3YzgtY2I1Mi0z MTEwLTkyZTktZGZhNGUzYTU3ZjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4 MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QA8V MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIg3bu4p/ul8HJlPBzA2aVQXCit9pC5Jg+EFZ/FZxHqMrJDQVvow CLqsfpaFu+X6+gpdJtSC9vZC1XfIBhvru3Pf2U3P3PtW/J3PsLIe0nAzCcskv05c UYtVsBQeOQbyL4AbWUFl8A5ghPOWHK8WeRKHoXb86Ol3Wssdnop1CZ05Pl60qyVg nFc9mdw43L7MgzEt994b1qwBI43pTxYv1Zx8SkMMdbzlt+MUVV7u8nOVxF3kiKi8 koPzR+57KpwexnLgXOCv2VmHbWt5cGazqZJ6bY0T2DXA33nPqZW0uTjSH97UOEoN 5EA1t8zersEkBVz33rm1eaeGMp5wPtg5aec= -----END CERTIFICATE-----Generated at Wed Apr 30 06:20:48 2025 by rpki-client