$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/3faa343e-a472-3f39-808e-bb7ed55b1bb7.roa File: 3faa343e-a472-3f39-808e-bb7ed55b1bb7.roa (raw, json) Hash identifier: hkZQWfWcf+uoj+ZCa9I1PaT48jTNPRh0wjbqUNiI2U4= Subject key identifier: 43:93:7F:97:97:C5:C4:62:E8:BA:6D:CB:56:F1:C2:1B:4B:AD:7B:BA Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Certificate serial: 010D0C9F432858495EEEEC63989F3FA73C42B480 Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/3faa343e-a472-3f39-808e-bb7ed55b1bb7.roa Signing time: Mon 31 Mar 2025 13:00:59 +0000 ROA not before: Mon 31 Mar 2025 13:00:59 +0000 ROA not after: Sun 29 Jun 2025 13:00:59 +0000 asID: 20253 IP address blocks: 2606:bc40:f002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5e:ee:ec:63:98:9f:3f:a7:3c:42:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Validity Not Before: Mar 31 13:00:59 2025 GMT Not After : Jun 29 13:00:59 2025 GMT Subject: CN=a53d7477-d184-4b85-b6ab-7c1b379a3e12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e1:9f:b2:eb:5e:cc:e8:04:0e:65:7f:2b:84: af:38:bd:39:72:87:c6:e7:0a:2a:fb:69:c1:db:cc: 9f:69:c3:38:3a:53:51:b6:8a:77:ab:13:fb:87:57: 29:72:2f:ac:f7:10:37:fa:94:19:2d:8f:e9:9c:88: 09:a7:1a:66:2e:28:f3:a9:b7:b9:28:44:17:a6:07: 98:0a:30:4c:ae:c4:8d:c5:08:70:e8:37:f8:f6:19: d7:29:ea:e3:a3:a5:b6:28:46:c6:5f:9d:5b:0e:44: a3:b2:e3:4d:c5:13:c8:a2:44:4c:70:e8:0f:38:ba: 34:a0:a1:a3:6a:54:c5:b2:ae:9e:6f:26:9b:96:97: d1:5d:f5:73:84:e1:b7:b2:97:b0:39:26:e7:69:a0: fe:d3:92:78:f5:c5:ae:c4:9e:1b:7b:cd:e1:b2:91: 98:9a:4c:1c:ab:e3:6e:16:03:15:92:d4:f9:40:a6: 01:13:28:30:a2:d6:55:f2:76:61:11:dc:50:6f:b0: b2:c6:b6:1d:75:05:f9:c3:8a:29:d8:25:95:8a:a2: b5:c1:91:66:a2:fb:48:1f:44:86:ec:ac:e2:25:4c: 9d:0a:40:e1:eb:12:5c:27:e9:c0:e6:4a:7d:35:0a: 9f:6b:77:ee:25:ce:74:c2:af:cd:a2:4e:44:3a:0c: a6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:93:7F:97:97:C5:C4:62:E8:BA:6D:CB:56:F1:C2:1B:4B:AD:7B:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/3faa343e-a472-3f39-808e-bb7ed55b1bb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl X509v3 Authority Key Identifier: keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer sbgp-ipAddrBlock: critical IPv6: 2606:bc40:f002::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:e0:1e:55:e6:8c:b9:38:50:11:2e:ec:6d:8f:7d:61:26:45: 4f:c9:0d:7f:8e:cd:fb:8f:b1:f6:64:c2:e0:78:d3:93:d8:eb: d9:12:b2:9a:69:87:0e:78:0a:41:4c:69:25:a8:ec:ee:7c:57: 25:89:32:e8:87:5a:b3:af:a3:10:75:13:08:b6:91:68:db:08: 0e:82:a0:dd:0b:62:aa:0a:c7:83:c5:02:ac:6a:2c:6a:1e:a5: 0e:4e:08:98:4c:4f:43:09:77:7a:8d:0b:e3:ba:a9:3b:c9:d7: 82:db:ee:4b:7e:5c:d1:bd:d0:7c:e2:a5:55:b8:8f:c3:3d:b4: f1:c1:8c:88:86:6c:c2:f7:55:0d:c9:ba:7f:b1:1e:0d:d8:e6: ac:c4:f6:c4:d2:72:9e:15:bd:3f:03:04:e1:f5:36:53:ec:2d: 0a:08:03:83:62:93:83:5b:c9:a3:b8:0e:30:1d:a1:9c:b7:6d: 9c:ed:9a:5f:9b:e5:87:bf:a0:92:5a:b6:99:25:b3:73:92:de: 70:46:f9:52:e2:88:71:37:e6:21:cf:6f:5f:61:8d:5c:e6:93: bb:04:98:e8:e6:5b:ff:f2:8f:e8:20:fb:96:c2:d1:10:e7:41: b3:18:f1:0e:ab:87:1f:a0:fb:e3:a8:4e:ec:5a:c7:4f:e4:57: a6:95:76:69 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEle7uxjmJ8/pzxCtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz YTA3MB4XDTI1MDMzMTEzMDA1OVoXDTI1MDYyOTEzMDA1OVowLzEtMCsGA1UEAxMk YTUzZDc0NzctZDE4NC00Yjg1LWI2YWItN2MxYjM3OWEzZTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeGfsutezOgEDmV/K4SvOL05cofG5woq+2nB 28yfacM4OlNRtop3qxP7h1cpci+s9xA3+pQZLY/pnIgJpxpmLijzqbe5KEQXpgeY CjBMrsSNxQhw6Df49hnXKerjo6W2KEbGX51bDkSjsuNNxRPIokRMcOgPOLo0oKGj alTFsq6ebyablpfRXfVzhOG3spewOSbnaaD+05J49cWuxJ4be83hspGYmkwcq+Nu FgMVktT5QKYBEygwotZV8nZhEdxQb7CyxrYddQX5w4op2CWViqK1wZFmovtIH0SG 7KziJUydCkDh6xJcJ+nA5kp9NQqfa3fuJc50wq/Nok5EOgym/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEOTf5eXxcRi6Lpty1bxwhtLrXu6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvM2ZhYTM0M2UtYTQ3Mi0z ZjM5LTgwOGUtYmI3ZWQ1NWIxYmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4 MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QPAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAvgHlXmjLk4UBEu7G2PfWEmRU/JDX+OzfuPsfZkwuB405PY69kS sppphw54CkFMaSWo7O58VyWJMuiHWrOvoxB1Ewi2kWjbCA6CoN0LYqoKx4PFAqxq LGoepQ5OCJhMT0MJd3qNC+O6qTvJ14Lb7kt+XNG90HzipVW4j8M9tPHBjIiGbML3 VQ3Jun+xHg3Y5qzE9sTScp4VvT8DBOH1NlPsLQoIA4Nik4NbyaO4DjAdoZy3bZzt ml+b5Ye/oJJatpkls3OS3nBG+VLiiHE35iHPb19hjVzmk7sEmOjmW//yj+gg+5bC 0RDnQbMY8Q6rhx+g++OoTuxax0/kV6aVdmk= -----END CERTIFICATE-----Generated at Mon Apr 7 10:29:24 2025 by rpki-client