$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/ffd1afb2-ad50-3fd7-9185-09d034503219.roa File: ffd1afb2-ad50-3fd7-9185-09d034503219.roa (raw, json) Hash identifier: MzKRe8tAS5IESez6g9tXMifSkRCmdkiQEJFYs3StfTk= Subject key identifier: B1:83:34:74:9B:31:CB:C7:0E:3B:8D:E3:58:03:4E:F0:12:F5:4C:44 Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Certificate serial: 010D0C9F43285849CE9A67F9F5534FD45EAA3E80 Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/ffd1afb2-ad50-3fd7-9185-09d034503219.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 20253 IP address blocks: 2606:bc40:15::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:67:f9:f5:53:4f:d4:5e:aa:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=74ccd7e3-8de8-41ac-bcd8-8d24dc811064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:12:5b:91:86:ea:ab:e1:24:e2:42:01:c2:c7: dd:06:8f:fa:12:1e:87:42:40:34:6f:c5:e4:ad:7a: 33:46:b3:9f:00:1e:80:9e:3c:35:35:55:d9:98:bf: 27:93:1c:27:2f:f6:4b:9b:a0:bb:e4:82:b8:4c:d9: 39:4b:c0:d7:ef:3d:84:e6:87:dd:c3:70:eb:e1:cc: e8:29:c6:28:29:72:95:fc:77:4c:85:10:cf:74:70: 8e:98:5a:39:78:32:a0:4a:0d:fe:33:49:4c:18:40: 6a:2b:91:67:f6:ee:e9:b7:c4:5b:60:a1:b7:b3:2b: 5e:7d:17:8f:3d:2a:9e:09:5c:54:04:a4:b3:5e:12: 42:4d:cd:09:d3:ad:3a:c8:66:6b:23:5a:e4:0e:5a: 88:c9:e5:6f:f7:64:a1:a4:84:00:fb:d2:13:9d:b3: 78:c5:f7:be:ff:57:74:e6:e5:d3:8d:9f:6a:07:27: af:be:8e:fb:a5:e2:53:5b:af:9a:02:58:2d:8a:37: 8f:a2:d9:ab:6b:a9:46:e3:42:c9:97:88:df:97:37: b2:d4:ba:2b:82:b0:fc:7f:a6:7c:50:14:b2:e0:b6: 5f:53:24:06:44:6f:55:85:d8:8f:eb:46:85:38:f2: 1b:49:4c:f0:68:27:04:36:1a:75:b9:34:02:8a:db: f8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:83:34:74:9B:31:CB:C7:0E:3B:8D:E3:58:03:4E:F0:12:F5:4C:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/ffd1afb2-ad50-3fd7-9185-09d034503219.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl X509v3 Authority Key Identifier: keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer sbgp-ipAddrBlock: critical IPv6: 2606:bc40:15::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:78:ff:4b:00:56:ef:48:2c:9a:25:b3:09:66:16:87:29:2f: a9:ea:83:a9:1c:b4:85:dc:9a:5a:da:0d:3b:a2:e6:0f:ad:fa: d9:fd:ed:13:32:9b:68:88:c8:44:02:ef:5c:ee:53:7d:0f:92: 8d:2c:7d:e0:7d:5d:af:00:62:28:a8:7e:c9:d7:29:03:64:4e: 0b:25:6c:4c:86:c4:ac:a2:d8:86:52:57:3d:ae:b0:8a:e5:ba: f5:24:7a:16:9e:e7:d8:7f:6a:1a:b1:9c:16:2d:0e:8b:6c:a4: 1f:5d:9c:d5:71:a3:a9:c7:2d:49:81:43:8d:08:9c:4a:60:02: 6f:fd:14:74:89:54:01:4b:dc:a1:78:f1:ae:36:d9:06:32:d5: 6f:af:7d:5e:42:73:7e:f5:4c:e9:70:82:69:14:47:dc:2c:f8: 5f:83:df:2e:72:bb:26:87:f3:ac:96:53:4f:b4:53:7c:80:8c: 95:c6:c8:ba:8c:c5:e0:b8:59:18:7e:54:0e:b7:01:ff:50:7c: 2c:98:c9:fc:7d:0a:56:b7:f3:00:61:82:8c:fd:a8:fc:50:86: 0b:fd:2f:20:c8:8f:bf:eb:69:69:cf:27:07:39:da:6f:0a:63: 6b:5d:8b:b0:9c:b3:ee:b5:73:26:6a:f4:57:d5:86:ba:52:7f: 69:32:d1:7d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnOmmf59VNP1F6qPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz YTA3MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk NzRjY2Q3ZTMtOGRlOC00MWFjLWJjZDgtOGQyNGRjODExMDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xJbkYbqq+Ek4kIBwsfdBo/6Eh6HQkA0b8Xk rXozRrOfAB6Anjw1NVXZmL8nkxwnL/ZLm6C75IK4TNk5S8DX7z2E5ofdw3Dr4czo KcYoKXKV/HdMhRDPdHCOmFo5eDKgSg3+M0lMGEBqK5Fn9u7pt8RbYKG3sytefReP PSqeCVxUBKSzXhJCTc0J0606yGZrI1rkDlqIyeVv92ShpIQA+9ITnbN4xfe+/1d0 5uXTjZ9qByevvo77peJTW6+aAlgtijePotmra6lG40LJl4jflzey1LorgrD8f6Z8 UBSy4LZfUyQGRG9VhdiP60aFOPIbSUzwaCcENhp1uTQCitv4GQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLGDNHSbMcvHDjuN41gDTvAS9UxEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvZmZkMWFmYjItYWQ1MC0z ZmQ3LTkxODUtMDlkMDM0NTAzMjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4 MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QAAV MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGF4/0sAVu9ILJolswlmFocpL6nqg6kctIXcmlraDTui5g+t+tn9 7RMym2iIyEQC71zuU30Pko0sfeB9Xa8AYiiofsnXKQNkTgslbEyGxKyi2IZSVz2u sIrluvUkehae59h/ahqxnBYtDotspB9dnNVxo6nHLUmBQ40InEpgAm/9FHSJVAFL 3KF48a422QYy1W+vfV5Cc371TOlwgmkUR9ws+F+D3y5yuyaH86yWU0+0U3yAjJXG yLqMxeC4WRh+VA63Af9QfCyYyfx9Cla38wBhgoz9qPxQhgv9LyDIj7/raWnPJwc5 2m8KY2tdi7Ccs+61cyZq9FfVhrpSf2ky0X0= -----END CERTIFICATE-----Generated at Mon Jun 16 23:07:03 2025 by rpki-client