$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/0817d47b-1b74-3eb9-8fe1-20dcb173d5b8.roa File: 0817d47b-1b74-3eb9-8fe1-20dcb173d5b8.roa (raw, json) Hash identifier: kFYDOO+0zxtogfiviFa23TVR2P2L7vnxcGVP5XraUxY= Subject key identifier: 91:CF:53:05:1A:69:9B:75:6B:97:50:33:DC:A1:1A:98:9D:E7:47:D5 Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Certificate serial: 010D0C9F432858495EEEEAC458F4B92FC17E0900 Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/0817d47b-1b74-3eb9-8fe1-20dcb173d5b8.roa Signing time: Mon 31 Mar 2025 13:00:59 +0000 ROA not before: Mon 31 Mar 2025 13:00:59 +0000 ROA not after: Sun 29 Jun 2025 13:00:59 +0000 asID: 20253 IP address blocks: 2606:bc40:f000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5e:ee:ea:c4:58:f4:b9:2f:c1:7e:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Validity Not Before: Mar 31 13:00:59 2025 GMT Not After : Jun 29 13:00:59 2025 GMT Subject: CN=2ed9391e-520d-46f6-b733-724a889f96fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9f:3c:7e:99:10:7b:69:62:ed:2b:c6:09:ab: 3b:ad:9b:a0:33:5c:b6:f9:40:dc:41:22:61:3a:09: 2e:62:cb:ed:1b:a3:ad:7a:16:68:78:78:34:18:86: 10:4a:c9:58:a6:0a:f3:7d:37:f3:f6:c3:0e:97:56: c8:e6:b8:6c:1f:41:d9:36:9f:84:d2:57:a7:41:93: 50:08:fe:a8:ee:48:74:5b:0e:81:10:90:f4:47:2c: aa:bc:b0:5e:2a:e0:20:65:b8:41:c4:0b:51:22:af: cd:b8:09:03:cd:f9:b9:7e:d7:75:50:78:bb:a7:99: 05:91:4c:62:b1:a9:b5:98:c2:ac:95:5c:ad:36:36: 5f:8c:4e:2f:db:19:78:b3:f2:28:53:16:b1:9e:26: 2c:84:f7:fd:fe:03:4c:af:1e:81:28:23:08:cb:65: e7:1a:d9:a0:34:76:fb:5b:fb:44:21:52:b9:c0:03: c8:b9:f9:81:5e:5a:56:08:03:ff:2a:0a:9b:65:95: f8:ba:4a:2d:f0:42:51:fd:a7:ee:87:28:cb:e8:8b: ea:93:1f:7f:14:9e:37:87:df:a9:4b:5f:a5:75:ee: 4a:ad:51:30:a0:19:fb:dc:cd:a9:f2:bf:86:f5:9f: 68:c8:d1:d2:07:e3:c4:f1:30:cb:a7:8a:33:a3:37: 46:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:CF:53:05:1A:69:9B:75:6B:97:50:33:DC:A1:1A:98:9D:E7:47:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/0817d47b-1b74-3eb9-8fe1-20dcb173d5b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl X509v3 Authority Key Identifier: keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer sbgp-ipAddrBlock: critical IPv6: 2606:bc40:f000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:08:1d:76:e6:37:fb:91:e1:c9:64:ca:81:4a:df:39:cf:03: 56:71:a6:e8:53:36:f7:30:e8:84:c7:d3:1d:24:1b:b8:71:bf: 48:50:16:68:39:0e:53:a5:04:6d:81:44:7f:e4:22:b5:47:ce: fb:d6:fa:fb:af:53:ce:63:95:a6:8a:1e:c2:24:50:63:84:16: 56:dd:a3:17:53:07:31:c7:b1:74:2d:25:de:e7:35:ec:67:c7: 8f:de:c0:a1:fc:30:70:da:c2:00:90:29:de:5e:66:f5:a2:00: 0e:77:ff:c6:31:80:34:ea:a0:20:aa:22:f2:fd:52:96:98:d1: 1e:dd:b7:1a:7f:08:d4:58:09:c4:6f:df:2a:ab:4e:3a:ad:6c: 5a:df:2a:b4:cf:da:e4:e7:e7:c2:d9:e4:ff:1f:ee:2a:86:e4: c5:49:bd:6a:7f:b6:59:fe:d2:1b:51:b4:dd:69:c9:25:d7:86: db:7d:36:e0:92:7d:aa:ab:43:6b:7c:b8:af:40:70:15:ea:ad: 65:c7:b3:66:3c:a9:50:ab:e0:23:4a:5f:7d:18:2a:8c:6b:0d: 53:ea:b5:4a:86:28:3f:d1:e9:63:d1:e9:84:e7:79:b9:cd:15: 07:c1:a8:a8:8e:41:91:6b:aa:37:bf:20:f1:59:88:80:87:98: b6:47:ef:cf -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEle7urEWPS5L8F+CQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz YTA3MB4XDTI1MDMzMTEzMDA1OVoXDTI1MDYyOTEzMDA1OVowLzEtMCsGA1UEAxMk MmVkOTM5MWUtNTIwZC00NmY2LWI3MzMtNzI0YTg4OWY5NmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo588fpkQe2li7SvGCas7rZugM1y2+UDcQSJh OgkuYsvtG6OtehZoeHg0GIYQSslYpgrzfTfz9sMOl1bI5rhsH0HZNp+E0lenQZNQ CP6o7kh0Ww6BEJD0RyyqvLBeKuAgZbhBxAtRIq/NuAkDzfm5ftd1UHi7p5kFkUxi sam1mMKslVytNjZfjE4v2xl4s/IoUxaxniYshPf9/gNMrx6BKCMIy2XnGtmgNHb7 W/tEIVK5wAPIufmBXlpWCAP/KgqbZZX4ukot8EJR/afuhyjL6Ivqkx9/FJ43h9+p S1+lde5KrVEwoBn73M2p8r+G9Z9oyNHSB+PE8TDLp4ozozdGFQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJHPUwUaaZt1a5dQM9yhGpid50fVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvMDgxN2Q0N2ItMWI3NC0z ZWI5LThmZTEtMjBkY2IxNzNkNWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4 MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QPAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE0IHXbmN/uR4clkyoFK3znPA1ZxpuhTNvcw6ITH0x0kG7hxv0hQ Fmg5DlOlBG2BRH/kIrVHzvvW+vuvU85jlaaKHsIkUGOEFlbdoxdTBzHHsXQtJd7n Nexnx4/ewKH8MHDawgCQKd5eZvWiAA53/8YxgDTqoCCqIvL9UpaY0R7dtxp/CNRY CcRv3yqrTjqtbFrfKrTP2uTn58LZ5P8f7iqG5MVJvWp/tln+0htRtN1pySXXhtt9 NuCSfaqrQ2t8uK9AcBXqrWXHs2Y8qVCr4CNKX30YKoxrDVPqtUqGKD/R6WPR6YTn ebnNFQfBqKiOQZFrqje/IPFZiICHmLZH788= -----END CERTIFICATE-----Generated at Mon Apr 7 13:04:41 2025 by rpki-client