$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/4862e84e-cebd-32e5-b890-b445c0d81222.roa File: 4862e84e-cebd-32e5-b890-b445c0d81222.roa (raw, json) Hash identifier: 4cGhyA1IR14QbnuFVcisXC2soQHLJCSDJ/Ax9bKtVmU= Subject key identifier: AE:18:E9:96:D3:A5:02:E2:F1:3A:A0:D1:0B:59:D8:A0:50:AD:42:7B Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Certificate serial: 010D0C9F43285848EF613B22860EDABBA6A2E300 Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/4862e84e-cebd-32e5-b890-b445c0d81222.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 20253 IP address blocks: 2606:bc40:22::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:3b:22:86:0e:da:bb:a6:a2:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=b4b42349-0ddd-4b69-8998-f162d8f0bac4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:13:a9:55:ea:d0:e3:9f:73:68:ef:c4:2a:30: 8f:e5:b2:1c:1b:c4:3e:2c:c0:43:d6:e7:c1:61:ef: 88:1f:fb:e9:d2:54:cc:0e:2e:0f:88:0a:77:cb:f0: 6a:fb:93:3e:a9:14:16:8b:e4:08:c5:44:1a:7f:fb: 14:c4:6a:32:b2:71:cd:bd:20:08:95:9e:d4:6d:f2: 5c:db:84:f8:4c:09:cc:5d:65:ce:71:0e:34:31:24: ed:99:f7:1e:de:be:6b:23:ae:36:e5:64:6a:9a:19: 86:dc:81:80:74:af:35:99:eb:2d:17:f2:9b:00:84: dc:17:ce:01:9a:cd:be:b0:ce:d1:dc:4a:34:a3:99: 26:ab:a7:cf:ef:3d:9a:e5:2c:b8:63:ad:b9:21:10: 06:5a:ab:b1:cc:2d:52:7d:2a:9e:89:b1:f8:69:5c: 95:13:59:07:db:18:f5:b8:24:ce:c9:4b:00:bc:18: 0b:54:2e:04:9b:e2:9e:ca:77:44:c9:7a:42:16:01: 9d:5c:30:e1:26:66:0a:d2:4f:94:15:6b:50:18:71: 6d:09:6c:e3:91:df:a0:4a:5c:39:e9:e7:90:9d:28: 4b:68:6e:ef:d8:22:68:f8:3a:23:95:ed:c6:0a:bd: 64:5b:59:37:7e:a1:2e:78:72:76:12:b5:da:64:28: 4c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:18:E9:96:D3:A5:02:E2:F1:3A:A0:D1:0B:59:D8:A0:50:AD:42:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/4862e84e-cebd-32e5-b890-b445c0d81222.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl X509v3 Authority Key Identifier: keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer sbgp-ipAddrBlock: critical IPv6: 2606:bc40:22::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:25:7a:ae:15:66:b9:bd:c6:27:cd:dc:f0:f7:02:be:94:9e: da:1d:db:5c:9d:eb:e1:1f:f6:21:bb:d9:39:c8:9c:a7:7b:43: ab:93:7b:be:7e:01:98:dd:71:52:26:db:f6:52:ae:85:53:8c: 7f:be:c9:72:2a:5d:16:f7:72:78:bc:47:4f:c6:1f:fd:32:9b: c0:71:6f:50:ff:27:a2:8b:a1:eb:8c:a8:f6:7b:9a:03:76:cd: 54:e7:f1:02:ea:d9:85:ae:b3:18:8d:f2:a2:a7:88:1c:9c:76: 0d:1d:52:40:49:75:ba:01:0f:29:07:35:d8:60:51:dd:62:8a: 9f:de:44:3a:48:7c:89:23:34:a1:6c:03:e0:e3:ee:7c:51:14: df:2a:9e:b2:b6:75:ae:8f:d6:bc:63:80:37:28:8f:88:3f:bf: 12:8f:f0:e8:6d:80:5d:d5:ae:18:1c:26:81:e8:db:25:f4:cf: 0e:b2:3a:9e:3c:88:bc:51:7b:72:8c:bb:28:e6:f9:17:32:ba: 6b:d8:5b:97:e4:f9:31:51:ec:d3:17:14:2d:c1:4a:2f:ee:e5: 87:3c:fd:36:96:75:10:8f:78:c7:9e:b9:45:ed:1e:56:17:e4: 74:90:7b:f2:4b:93:10:ab:d7:52:fb:a0:a6:a3:bd:87:2c:a3: b1:62:dd:2d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjvYTsihg7au6ai4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz YTA3MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk YjRiNDIzNDktMGRkZC00YjY5LTg5OTgtZjE2MmQ4ZjBiYWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmROpVerQ459zaO/EKjCP5bIcG8Q+LMBD1ufB Ye+IH/vp0lTMDi4PiAp3y/Bq+5M+qRQWi+QIxUQaf/sUxGoysnHNvSAIlZ7UbfJc 24T4TAnMXWXOcQ40MSTtmfce3r5rI6425WRqmhmG3IGAdK81mestF/KbAITcF84B ms2+sM7R3Eo0o5kmq6fP7z2a5Sy4Y625IRAGWquxzC1SfSqeibH4aVyVE1kH2xj1 uCTOyUsAvBgLVC4Em+KeyndEyXpCFgGdXDDhJmYK0k+UFWtQGHFtCWzjkd+gSlw5 6eeQnShLaG7v2CJo+Dojle3GCr1kW1k3fqEueHJ2ErXaZChMkwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK4Y6ZbTpQLi8Tqg0QtZ2KBQrUJ7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvNDg2MmU4NGUtY2ViZC0z MmU1LWI4OTAtYjQ0NWMwZDgxMjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4 MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QAAi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALkleq4VZrm9xifN3PD3Ar6Untod21yd6+Ef9iG72TnInKd7Q6uT e75+AZjdcVIm2/ZSroVTjH++yXIqXRb3cni8R0/GH/0ym8Bxb1D/J6KLoeuMqPZ7 mgN2zVTn8QLq2YWusxiN8qKniBycdg0dUkBJdboBDykHNdhgUd1iip/eRDpIfIkj NKFsA+Dj7nxRFN8qnrK2da6P1rxjgDcoj4g/vxKP8OhtgF3VrhgcJoHo2yX0zw6y Op48iLxRe3KMuyjm+RcyumvYW5fk+TFR7NMXFC3BSi/u5Yc8/TaWdRCPeMeeuUXt HlYX5HSQe/JLkxCr11L7oKajvYcso7Fi3S0= -----END CERTIFICATE-----Generated at Mon Apr 7 10:33:37 2025 by rpki-client