$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/7686a4dd-4c28-3f2f-8a78-7c67d56ad85b.roa File: 7686a4dd-4c28-3f2f-8a78-7c67d56ad85b.roa (raw, json) Hash identifier: Z4uv2sDHCnYxAB5SKNo0xjWmNTS8jkV37vLqQS3RF+8= Subject key identifier: 37:38:72:08:F6:55:AE:04:9F:C5:44:E4:2A:CF:B9:79:43:17:4D:51 Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Certificate serial: 010D0C9F4328584913AC31F47B596C55E97F93A0 Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/7686a4dd-4c28-3f2f-8a78-7c67d56ad85b.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 20253 IP address blocks: 2606:bc40:f0d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:31:f4:7b:59:6c:55:e9:7f:93:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=8a211363-77f1-4a90-9a8b-aa2edddd81c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1e:c6:4b:71:f8:79:a7:0a:3f:6d:89:c3:b6: 7b:e5:d3:18:b0:28:8c:62:6d:f8:1d:ff:0d:7c:08: 0b:0c:c5:ee:83:54:eb:4c:fa:79:b7:a6:20:4b:f6: d9:d3:21:f4:5d:2f:73:96:5a:f7:4e:88:aa:1a:aa: 70:19:a6:3b:5d:b8:a0:1d:9e:16:8c:cd:77:2c:7d: 10:37:b5:5b:4d:84:d1:b6:88:83:8b:3a:e7:05:9e: f7:30:27:70:15:c1:13:79:f4:3e:80:06:d5:29:08: 0e:5f:af:f5:fb:ef:8d:07:61:eb:94:a1:f0:44:4e: 72:8a:52:56:d6:36:82:dd:85:77:14:09:b6:d9:42: a7:79:e7:02:bc:39:59:14:1a:1f:38:8d:a9:d3:82: 24:04:2b:17:e6:be:b5:1c:8d:ff:ee:7a:b1:35:ba: 15:86:32:40:ae:6f:ca:df:2c:c5:0f:fa:29:ea:87: 89:b5:4d:31:1d:1c:c8:2c:fa:2b:74:43:1c:01:af: 5a:1c:27:77:49:50:0b:59:66:49:fd:04:a5:b4:b3: c5:b8:a1:e4:5f:41:60:ce:fd:ad:68:f8:fb:b8:63: 55:09:de:9f:ea:a8:47:77:e1:34:2b:31:e9:16:60: 26:42:51:14:84:5c:4c:13:65:e2:8d:1d:5b:3b:7e: 25:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:38:72:08:F6:55:AE:04:9F:C5:44:E4:2A:CF:B9:79:43:17:4D:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/7686a4dd-4c28-3f2f-8a78-7c67d56ad85b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl X509v3 Authority Key Identifier: keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer sbgp-ipAddrBlock: critical IPv6: 2606:bc40:f0d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:e2:71:9f:f1:a9:be:91:6f:4f:76:88:aa:bf:e0:69:0b:51: 77:c9:18:80:6c:e6:05:a9:72:8a:d3:b7:5f:2b:d7:8d:27:36: f4:c3:4d:f4:a0:82:04:07:94:14:69:3c:97:69:da:0e:b0:82: ac:22:3b:bc:df:ea:f5:ae:b8:1d:80:02:29:58:c5:45:00:e5: 06:4f:d3:66:9b:2c:b5:df:c2:ff:8d:31:74:d7:b5:0a:66:61: a9:82:e8:c0:9f:ca:90:ab:0c:49:1f:11:7c:37:67:68:dd:b8: b1:88:a7:74:ce:4e:20:ff:07:8c:03:a6:63:b7:c3:43:6e:5b: 9d:50:78:b4:24:19:ab:db:9e:04:49:f7:f7:14:f2:8a:7b:92: e0:5f:01:90:2e:be:f7:f8:63:8f:94:b7:76:da:70:dd:75:6a: ac:dc:af:74:6f:4f:c6:1d:74:70:1b:11:76:f0:3b:f9:90:ca: 4a:30:81:44:e6:95:3d:f8:14:3b:d4:5b:b5:80:4f:9d:1a:81: 7c:15:48:94:d8:09:f1:8c:07:8f:31:81:70:5e:61:14:6f:d1: 6c:53:e6:0e:d7:88:ee:b0:70:6a:6f:77:60:6f:79:50:d7:76: 3b:f7:75:0d:17:49:e9:74:78:e5:1e:1b:1b:f6:c5:f8:df:be: d4:16:80:11 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkTrDH0e1lsVel/k6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz YTA3MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk OGEyMTEzNjMtNzdmMS00YTkwLTlhOGItYWEyZWRkZGQ4MWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlB7GS3H4eacKP22Jw7Z75dMYsCiMYm34Hf8N fAgLDMXug1TrTPp5t6YgS/bZ0yH0XS9zllr3ToiqGqpwGaY7XbigHZ4WjM13LH0Q N7VbTYTRtoiDizrnBZ73MCdwFcETefQ+gAbVKQgOX6/1+++NB2HrlKHwRE5yilJW 1jaC3YV3FAm22UKneecCvDlZFBofOI2p04IkBCsX5r61HI3/7nqxNboVhjJArm/K 3yzFD/op6oeJtU0xHRzILPordEMcAa9aHCd3SVALWWZJ/QSltLPFuKHkX0Fgzv2t aPj7uGNVCd6f6qhHd+E0KzHpFmAmQlEUhFxME2XijR1bO34ltwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDc4cgj2Va4En8VE5CrPuXlDF01RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvNzY4NmE0ZGQtNGMyOC0z ZjJmLThhNzgtN2M2N2Q1NmFkODViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4 MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QA8N MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIzicZ/xqb6Rb092iKq/4GkLUXfJGIBs5gWpcorTt18r140nNvTD TfSgggQHlBRpPJdp2g6wgqwiO7zf6vWuuB2AAilYxUUA5QZP02abLLXfwv+NMXTX tQpmYamC6MCfypCrDEkfEXw3Z2jduLGIp3TOTiD/B4wDpmO3w0NuW51QeLQkGavb ngRJ9/cU8op7kuBfAZAuvvf4Y4+Ut3bacN11aqzcr3RvT8YddHAbEXbwO/mQykow gUTmlT34FDvUW7WAT50agXwVSJTYCfGMB48xgXBeYRRv0WxT5g7XiO6wcGpvd2Bv eVDXdjv3dQ0XSel0eOUeGxv2xfjfvtQWgBE= -----END CERTIFICATE-----Generated at Fri Mar 14 09:40:19 2025 by rpki-client