$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/0aefd27d-01a6-3cc6-acdb-87787f51d6fd.roa File: 0aefd27d-01a6-3cc6-acdb-87787f51d6fd.roa (raw, json) Hash identifier: 0FSMXxdUk6QfszucWfFShwA1irVpzgo3MHumzdHPIT8= Subject key identifier: A2:69:B1:CC:70:23:7D:96:16:05:CB:CE:24:26:A1:40:34:7E:E6:CB Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Certificate serial: 010D0C9F432858486695BB0AAF978B06D1EE7080 Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/0aefd27d-01a6-3cc6-acdb-87787f51d6fd.roa Signing time: Wed 01 Jan 2025 14:00:53 +0000 ROA not before: Wed 01 Jan 2025 14:00:53 +0000 ROA not after: Tue 01 Apr 2025 13:00:53 +0000 asID: 20253 IP address blocks: 2606:bc40:f09::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:66:95:bb:0a:af:97:8b:06:d1:ee:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Validity Not Before: Jan 1 14:00:53 2025 GMT Not After : Apr 1 13:00:53 2025 GMT Subject: CN=365a351e-e3b0-473b-b07c-5857efc9cff7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9b:12:dc:e0:45:c3:90:57:12:46:8e:0f:61: 63:58:6e:53:d1:03:4e:7c:e4:7c:eb:c2:18:f9:cd: f6:2b:ae:ae:2a:38:c0:08:42:4d:9e:91:b8:78:bf: 6c:a1:51:dc:d8:9b:f6:1b:93:c4:b7:fa:1c:a3:57: ea:23:78:86:19:eb:ca:12:35:1e:8c:0e:48:7c:03: c5:8e:93:16:4e:91:54:08:23:69:54:b8:e5:61:ca: c6:15:4a:b8:41:11:45:33:4c:91:d9:58:31:86:27: 09:85:e2:0d:f6:3c:03:8b:f0:09:f1:e8:cc:49:c5: e8:10:a6:0e:61:b2:97:cb:8e:4c:0f:c5:67:4e:bf: cd:69:0a:34:27:78:21:d9:c3:d9:46:1d:ba:9f:de: d6:29:cd:5d:b1:f6:03:7e:a9:36:ff:5a:bc:aa:a3: d6:96:f8:bb:af:16:34:fe:2d:77:d4:a6:07:a0:3a: f9:41:2e:e4:4a:be:a7:33:76:ec:62:24:79:56:e9: 4b:54:18:ae:91:16:25:43:f0:06:93:86:30:0d:d9: c9:5b:42:b0:73:e0:fb:97:68:1e:42:0a:20:71:ab: b5:04:df:7b:7f:bd:fa:5d:f4:32:3e:43:90:20:40: 5c:7c:78:08:00:0f:d5:d5:83:7a:18:de:17:cf:60: 07:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:69:B1:CC:70:23:7D:96:16:05:CB:CE:24:26:A1:40:34:7E:E6:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/0aefd27d-01a6-3cc6-acdb-87787f51d6fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl X509v3 Authority Key Identifier: keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer sbgp-ipAddrBlock: critical IPv6: 2606:bc40:f09::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:e2:d1:b8:d0:dc:6c:9b:df:a1:2a:5e:0d:45:1d:cf:83:68: 93:43:bf:6e:25:3e:5d:49:e3:9d:15:89:cb:9c:52:6c:b2:9f: 4d:7b:31:6d:33:54:75:3c:e4:35:c4:ab:c7:19:90:62:7b:06: 22:b2:31:80:06:64:d3:19:1e:f2:f6:e2:52:cd:4f:75:dc:d1: 8c:e8:82:18:d3:8b:8b:4c:12:83:9d:22:1a:31:cd:3d:bd:2b: e7:91:cf:23:1a:f5:e3:29:47:3b:3a:59:28:7d:86:bb:28:95: 3a:7b:12:28:e4:57:47:3c:14:48:21:5a:2e:07:75:68:87:3d: 4c:3d:98:0b:dd:b1:df:ef:08:27:d5:93:f0:f4:dc:f8:50:f3: ab:10:53:8c:2c:2d:49:64:19:15:78:56:c5:8c:6d:85:f3:5c: 2a:be:64:6c:96:34:2c:ae:7b:b3:ba:98:38:88:a5:94:2d:02: 87:13:7a:a8:d1:f9:03:f4:e8:a9:94:ea:c4:e9:70:00:28:03: 47:2b:98:e1:cb:54:7e:02:ec:88:25:73:a8:73:51:c9:35:ee: 88:4e:7f:92:ce:77:d4:a4:19:49:54:af:eb:06:24:2a:0a:f0: b7:2f:a5:b8:c5:3b:01:5f:34:5b:b4:c7:a0:27:fa:ff:dc:3a: f6:73:10:fe -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhmlbsKr5eLBtHucIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz YTA3MB4XDTI1MDEwMTE0MDA1M1oXDTI1MDQwMTEzMDA1M1owLzEtMCsGA1UEAxMk MzY1YTM1MWUtZTNiMC00NzNiLWIwN2MtNTg1N2VmYzljZmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZsS3OBFw5BXEkaOD2FjWG5T0QNOfOR868IY +c32K66uKjjACEJNnpG4eL9soVHc2Jv2G5PEt/oco1fqI3iGGevKEjUejA5IfAPF jpMWTpFUCCNpVLjlYcrGFUq4QRFFM0yR2VgxhicJheIN9jwDi/AJ8ejMScXoEKYO YbKXy45MD8VnTr/NaQo0J3gh2cPZRh26n97WKc1dsfYDfqk2/1q8qqPWlvi7rxY0 /i131KYHoDr5QS7kSr6nM3bsYiR5VulLVBiukRYlQ/AGk4YwDdnJW0Kwc+D7l2ge Qgogcau1BN97f736XfQyPkOQIEBcfHgIAA/V1YN6GN4Xz2AHiwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKJpscxwI32WFgXLziQmoUA0fubLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvMGFlZmQyN2QtMDFhNi0z Y2M2LWFjZGItODc3ODdmNTFkNmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4 MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QA8J MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEzi0bjQ3Gyb36EqXg1FHc+DaJNDv24lPl1J450VicucUmyyn017 MW0zVHU85DXEq8cZkGJ7BiKyMYAGZNMZHvL24lLNT3Xc0YzoghjTi4tMEoOdIhox zT29K+eRzyMa9eMpRzs6WSh9hrsolTp7EijkV0c8FEghWi4HdWiHPUw9mAvdsd/v CCfVk/D03PhQ86sQU4wsLUlkGRV4VsWMbYXzXCq+ZGyWNCyue7O6mDiIpZQtAocT eqjR+QP06KmU6sTpcAAoA0crmOHLVH4C7Iglc6hzUck17ohOf5LOd9SkGUlUr+sG JCoK8LcvpbjFOwFfNFu0x6An+v/cOvZzEP4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:38:37 2025 by rpki-client