$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/dc01c5ca-0ead-3352-878a-4003bf1cc818.roa File: dc01c5ca-0ead-3352-878a-4003bf1cc818.roa (raw, json) Hash identifier: k+/sCdLMs/7LAVwSft67pxBdYrM/63Xf5D+jmHMb+Mc= Subject key identifier: 87:04:88:95:7E:C9:9B:57:53:FA:08:EF:1B:4D:18:AC:B0:FA:56:81 Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Certificate serial: 010D0C9F43285849CE9A5B8888883F5AADF88AC8 Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/dc01c5ca-0ead-3352-878a-4003bf1cc818.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 20253 IP address blocks: 2606:bc40:1f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:5b:88:88:88:3f:5a:ad:f8:8a:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=2e8d8f4b-51e1-4ff1-9c15-446ec2e0b21a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c0:d3:f6:04:09:50:f0:85:c7:62:21:fa:a5: fd:06:f4:42:25:fd:7b:45:e9:dd:de:71:99:af:91: b5:cc:15:93:c0:1e:a1:0b:2c:ba:e6:c9:9c:55:af: 94:a7:a9:0f:8d:b4:0f:6e:94:79:52:a1:c0:5f:3e: 2f:5f:44:28:fb:ec:ba:bb:57:d8:21:83:59:ef:9c: 80:ed:16:ff:f7:35:6d:8d:60:3e:4d:f6:1a:fe:75: cf:a3:b6:b3:74:7a:41:63:5f:66:22:70:71:c1:22: 44:5d:18:d8:bb:b1:1c:9a:1b:40:fe:34:e0:b4:ac: fb:27:63:e4:69:1c:32:19:29:73:c0:b8:0c:37:52: c6:d0:86:c6:f9:8d:09:8d:3b:b8:b7:ea:ae:23:f2: 8d:e4:94:4c:03:53:03:8e:86:64:87:53:31:53:95: ad:a3:db:a6:c3:9f:f5:95:69:df:92:a0:4c:6a:d3: 70:59:a1:fe:3b:20:a1:a7:5d:62:e6:87:d2:54:d9: b0:14:5a:5d:da:d0:6d:3c:83:ac:46:05:af:24:15: b4:cc:1d:e4:63:5e:30:33:3a:bb:01:4d:b3:1a:f4: d5:c3:42:43:d4:6c:3a:4a:b8:a5:e3:c9:35:14:4f: 13:35:e0:19:9d:be:ec:05:cd:90:9a:18:ae:0e:31: 1b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:04:88:95:7E:C9:9B:57:53:FA:08:EF:1B:4D:18:AC:B0:FA:56:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/dc01c5ca-0ead-3352-878a-4003bf1cc818.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl X509v3 Authority Key Identifier: keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer sbgp-ipAddrBlock: critical IPv6: 2606:bc40:1f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:39:4a:57:12:68:c2:f1:5c:bc:66:5f:c3:be:f0:97:7f:d0: 91:84:5d:35:e1:27:88:ed:53:8f:71:61:f3:20:11:5f:84:7c: c4:d4:36:27:42:6e:1d:2c:37:ec:11:9c:5f:30:80:46:95:68: d5:8b:40:44:bf:3b:4d:72:e1:01:36:3e:c8:2b:02:3f:17:b0: 94:d4:5a:6a:38:d7:65:90:7a:d1:b5:5d:7f:24:65:e0:8a:8f: 9f:d2:e6:61:37:65:68:34:d4:b1:12:40:4b:af:ee:54:5e:08: 47:26:25:f1:7a:8c:80:f2:d4:3f:4a:ed:99:12:3d:20:3a:50: 51:81:a7:5b:bf:8d:f2:7d:5b:7c:fb:ec:3f:f4:fb:31:a7:5b: e6:0d:85:20:a3:a5:a4:0d:4d:fb:5a:74:c7:60:77:71:f5:3c: 10:10:2f:d8:1a:cd:27:f6:4b:a9:a8:95:fb:e0:f5:4a:9e:7d: 7c:9a:e2:b4:5a:27:cc:ea:0c:65:25:5b:24:23:c6:45:81:f0: 96:6a:dc:54:b3:1b:f8:55:77:9a:ca:de:03:f6:3b:ef:35:f7: 33:cd:c5:aa:11:b0:f2:2a:41:e2:f0:e9:c7:53:cb:e4:da:fe: b7:a8:75:f2:a7:05:15:58:98:74:c5:8f:36:d6:fd:8d:ea:be: 2f:77:cd:2f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnOmluIiIg/Wq34isgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz YTA3MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk MmU4ZDhmNGItNTFlMS00ZmYxLTljMTUtNDQ2ZWMyZTBiMjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMDT9gQJUPCFx2Ih+qX9BvRCJf17Rend3nGZ r5G1zBWTwB6hCyy65smcVa+Up6kPjbQPbpR5UqHAXz4vX0Qo++y6u1fYIYNZ75yA 7Rb/9zVtjWA+TfYa/nXPo7azdHpBY19mInBxwSJEXRjYu7EcmhtA/jTgtKz7J2Pk aRwyGSlzwLgMN1LG0IbG+Y0JjTu4t+quI/KN5JRMA1MDjoZkh1MxU5Wto9umw5/1 lWnfkqBMatNwWaH+OyChp11i5ofSVNmwFFpd2tBtPIOsRgWvJBW0zB3kY14wMzq7 AU2zGvTVw0JD1Gw6Sril48k1FE8TNeAZnb7sBc2QmhiuDjEbFQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIcEiJV+yZtXU/oI7xtNGKyw+laBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvZGMwMWM1Y2EtMGVhZC0z MzUyLTg3OGEtNDAwM2JmMWNjODE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4 MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QAAf MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEw5SlcSaMLxXLxmX8O+8Jd/0JGEXTXhJ4jtU49xYfMgEV+EfMTU NidCbh0sN+wRnF8wgEaVaNWLQES/O01y4QE2PsgrAj8XsJTUWmo412WQetG1XX8k ZeCKj5/S5mE3ZWg01LESQEuv7lReCEcmJfF6jIDy1D9K7ZkSPSA6UFGBp1u/jfJ9 W3z77D/0+zGnW+YNhSCjpaQNTftadMdgd3H1PBAQL9gazSf2S6molfvg9UqefXya 4rRaJ8zqDGUlWyQjxkWB8JZq3FSzG/hVd5rK3gP2O+819zPNxaoRsPIqQeLw6cdT y+Ta/reodfKnBRVYmHTFjzbW/Y3qvi93zS8= -----END CERTIFICATE-----Generated at Sun Jun 15 17:25:38 2025 by rpki-client