$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/168d0712-652c-3b31-887b-e8dec5e2fc2d.roa File: 168d0712-652c-3b31-887b-e8dec5e2fc2d.roa (raw, json) Hash identifier: hK4X3PlXjgc3mnfEWEQN73Xbo54jpOjdvsTXwsw7PIw= Subject key identifier: DE:14:0E:F7:82:44:3C:8E:98:F1:03:82:47:1E:F0:8C:EF:92:60:B8 Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Certificate serial: 010D0C9F43285848100A72B39D647FB471E78A80 Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/168d0712-652c-3b31-887b-e8dec5e2fc2d.roa Signing time: Sun 01 Dec 2024 14:00:51 +0000 ROA not before: Sun 01 Dec 2024 14:00:51 +0000 ROA not after: Sat 01 Mar 2025 14:00:51 +0000 asID: 20253 IP address blocks: 2606:bc40:109::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:10:0a:72:b3:9d:64:7f:b4:71:e7:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Validity Not Before: Dec 1 14:00:51 2024 GMT Not After : Mar 1 14:00:51 2025 GMT Subject: CN=0678f5e9-296a-4b16-ad15-94048f01d7f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d0:e5:f1:ed:d9:fa:20:f7:54:60:92:41:b3: 2e:7c:24:0e:12:f6:d6:15:b3:0c:0d:b1:47:e9:bd: a9:5b:d0:1a:60:d0:1a:ed:bb:aa:da:1a:bc:3e:05: 3f:08:ea:74:05:95:43:62:25:75:3e:0b:74:f6:d0: de:4d:2e:a9:a6:af:8f:10:8f:ec:c6:ed:0e:fb:a7: f2:4c:a3:be:0b:a1:31:10:ea:e3:a9:d7:50:21:2a: 32:2e:6f:54:0c:d0:05:ed:c3:e4:41:3a:a0:14:97: f2:aa:53:16:bb:eb:ac:f0:73:b8:d3:cb:6b:84:c7: b2:2b:e0:78:d6:09:b5:73:73:81:2f:84:53:e6:7d: b1:62:77:15:51:7d:5c:40:22:c9:ba:04:a5:12:37: 8d:9c:b1:4c:c8:4b:2f:93:f9:89:1a:80:27:37:aa: 2f:d2:a4:10:d1:56:ac:f2:76:8a:de:c9:91:95:02: 80:62:a0:4d:a9:fd:fd:3b:45:33:8e:22:9d:cb:89: 89:08:4f:21:9d:cd:28:da:e4:de:9d:c7:95:91:6c: f6:7e:69:c9:41:89:9e:76:6f:de:2d:ba:54:f3:8c: 92:b1:e1:41:c4:86:0c:d9:56:d7:52:c7:48:e0:e3: bd:73:dd:93:1f:8f:ca:15:62:75:f7:8e:a2:83:99: 6b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:14:0E:F7:82:44:3C:8E:98:F1:03:82:47:1E:F0:8C:EF:92:60:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/168d0712-652c-3b31-887b-e8dec5e2fc2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl X509v3 Authority Key Identifier: keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer sbgp-ipAddrBlock: critical IPv6: 2606:bc40:109::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:41:05:08:20:b7:81:5b:c4:0c:24:1d:28:49:70:2d:68:dc: 4f:20:50:b1:6c:5e:4f:88:f7:10:45:77:8c:b2:d6:fc:a1:89: 6a:72:81:86:5d:56:05:25:ce:50:b4:b0:6c:d5:ad:98:26:b2: 26:a9:ed:48:15:28:26:c5:8b:86:dc:09:d6:08:5e:7c:cf:b4: dc:01:35:43:d9:8a:ab:17:38:0d:7d:fb:e1:d9:a1:5f:9a:e2: 74:55:8a:34:79:3d:f9:dc:57:cb:e5:ec:77:70:47:14:aa:6b: 23:2f:ae:1a:3c:3c:12:b8:e1:f4:58:18:c3:c7:a5:5a:0e:ca: dc:6b:6e:17:7e:e6:2a:94:a4:83:00:54:29:46:4c:13:4a:d9: 74:42:5d:02:2c:1e:f8:fd:68:4a:0c:07:30:03:03:60:3d:61: 28:47:3a:bf:ac:46:5c:3a:07:4a:ad:b2:81:63:69:26:fa:bd: 87:bc:fe:34:e0:db:2e:4b:e2:b4:55:05:f5:c2:0d:05:ab:3d: aa:09:3c:82:39:59:80:94:e3:67:1a:f6:aa:9e:e5:53:41:17: 9b:1f:25:b8:fa:24:fb:a9:26:b8:c7:69:c0:75:36:13:16:a0: 32:bd:07:1b:cc:35:59:bb:8d:c8:8a:92:5c:32:f3:68:aa:fc: 27:a9:f9:62 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgQCnKznWR/tHHnioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz YTA3MB4XDTI0MTIwMTE0MDA1MVoXDTI1MDMwMTE0MDA1MVowLzEtMCsGA1UEAxMk MDY3OGY1ZTktMjk2YS00YjE2LWFkMTUtOTQwNDhmMDFkN2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9Dl8e3Z+iD3VGCSQbMufCQOEvbWFbMMDbFH 6b2pW9AaYNAa7buq2hq8PgU/COp0BZVDYiV1Pgt09tDeTS6ppq+PEI/sxu0O+6fy TKO+C6ExEOrjqddQISoyLm9UDNAF7cPkQTqgFJfyqlMWu+us8HO408trhMeyK+B4 1gm1c3OBL4RT5n2xYncVUX1cQCLJugSlEjeNnLFMyEsvk/mJGoAnN6ov0qQQ0Vas 8naK3smRlQKAYqBNqf39O0UzjiKdy4mJCE8hnc0o2uTenceVkWz2fmnJQYmedm/e LbpU84ySseFBxIYM2VbXUsdI4OO9c92TH4/KFWJ1946ig5lrsQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN4UDveCRDyOmPEDgkce8IzvkmC4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvMTY4ZDA3MTItNjUyYy0z YjMxLTg4N2ItZThkZWM1ZTJmYzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4 MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QAEJ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF5BBQggt4FbxAwkHShJcC1o3E8gULFsXk+I9xBFd4yy1vyhiWpy gYZdVgUlzlC0sGzVrZgmsiap7UgVKCbFi4bcCdYIXnzPtNwBNUPZiqsXOA19++HZ oV+a4nRVijR5PfncV8vl7HdwRxSqayMvrho8PBK44fRYGMPHpVoOytxrbhd+5iqU pIMAVClGTBNK2XRCXQIsHvj9aEoMBzADA2A9YShHOr+sRlw6B0qtsoFjaSb6vYe8 /jTg2y5L4rRVBfXCDQWrPaoJPII5WYCU42ca9qqe5VNBF5sfJbj6JPupJrjHacB1 NhMWoDK9BxvMNVm7jciKklwy82iq/Cep+WI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:36:52 2025 by rpki-client