$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/8029ca08-8f5e-39bb-983d-9cde1d0c2b1a.roa File: 8029ca08-8f5e-39bb-983d-9cde1d0c2b1a.roa (raw, json) Hash identifier: 4v34XrdiDhLgbKhY2EY17prbHsLqr9BA2xPnd0yc2aI= Subject key identifier: B4:08:90:6A:B5:92:21:1D:28:E3:43:53:C6:FA:F5:4F:EE:1C:64:BF Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Certificate serial: 010D0C9F43285848EF61448032E452B6EC9C4118 Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/8029ca08-8f5e-39bb-983d-9cde1d0c2b1a.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 20253 IP address blocks: 2606:bc40:17::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:44:80:32:e4:52:b6:ec:9c:41:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=3a69f35b-d931-4a85-8066-25bba181583b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:57:e7:7d:c6:ee:e5:bf:4d:5f:ff:1f:71:7b: d3:3d:4c:9c:76:6f:61:0a:dc:22:36:b4:10:2d:0f: 74:44:34:86:d6:20:2b:de:ce:cf:74:f0:cd:38:34: 8f:69:a9:3f:b4:87:64:06:62:66:ad:ba:ad:e5:9f: 55:7a:0b:b7:37:18:ef:bc:e8:9a:dc:4d:d1:b3:14: 04:c7:81:01:b0:de:36:68:a0:8c:8b:db:e4:db:7f: 3f:29:ad:dc:54:ee:3a:59:29:74:28:35:04:b0:78: 7a:7f:b0:11:1b:a9:75:2a:06:dc:bd:a0:ca:3f:12: ec:10:4e:7e:81:33:d3:12:ca:0e:49:95:58:4e:65: 20:fb:ef:03:00:72:67:ee:10:d7:dc:11:3b:81:bf: 94:07:8c:3f:c6:5b:e4:58:22:54:76:d9:09:25:ec: b4:fd:dd:7e:f0:ec:c2:a3:c3:20:68:c8:55:0b:58: 5f:84:05:37:2c:e1:0b:1d:c7:95:f4:8d:ab:7e:e7: 66:ae:fa:48:fc:e0:e5:67:61:b1:51:9f:5f:66:1f: db:90:3c:69:15:9e:7c:8d:7a:e6:e9:5e:cb:55:7f: bf:62:63:4f:1a:47:13:a4:d5:0c:43:9a:38:a1:71: 31:c2:af:83:7b:eb:48:2b:45:ec:fa:d5:58:33:2b: 87:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:08:90:6A:B5:92:21:1D:28:E3:43:53:C6:FA:F5:4F:EE:1C:64:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/8029ca08-8f5e-39bb-983d-9cde1d0c2b1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl X509v3 Authority Key Identifier: keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer sbgp-ipAddrBlock: critical IPv6: 2606:bc40:17::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:b2:bd:6c:ff:9b:94:14:b9:51:96:20:2f:0d:cd:7d:81:78: e6:5e:2b:a2:bb:20:06:6a:2d:f8:20:82:87:39:2f:33:4e:b4: 7b:6f:76:82:8d:47:56:97:7f:33:c8:8a:a6:42:3f:b9:c6:3f: 86:00:77:19:6b:b2:48:de:e7:24:12:44:4f:06:70:ff:6e:83: e5:eb:53:90:2a:2a:c3:58:20:7a:ed:a4:8a:90:39:11:3d:68: f5:ef:6d:c2:77:c3:41:a8:0b:a8:c0:a9:23:39:ce:9b:6b:4d: 45:d1:40:f5:57:9d:48:31:bf:34:dc:4a:1b:f2:18:a1:d2:38: 63:bb:b5:9f:b2:a1:ad:d1:fc:bd:b9:b2:94:d8:86:e2:f0:39: 01:47:c3:7e:20:ab:ff:92:c7:25:78:bd:b5:8d:bb:8d:3a:e7: c8:b6:85:9a:73:4a:dd:fe:f1:db:c2:df:c4:4f:42:09:4b:ac: 01:a0:a4:ee:f6:a4:29:3b:e8:b5:38:4e:4f:73:0b:f5:6c:26: cd:01:f1:2d:a6:40:2f:88:f7:bb:b4:9b:6a:1f:60:f2:d1:d8: 50:c9:19:08:ef:56:34:f7:6e:d3:d6:d6:bb:eb:18:05:c1:fd: 1d:e2:41:ee:b1:70:73:56:83:f6:7b:01:b3:07:14:2d:d3:9f: 51:fe:51:92 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjvYUSAMuRStuycQRgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz YTA3MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk M2E2OWYzNWItZDkzMS00YTg1LTgwNjYtMjViYmExODE1ODNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1fnfcbu5b9NX/8fcXvTPUycdm9hCtwiNrQQ LQ90RDSG1iAr3s7PdPDNODSPaak/tIdkBmJmrbqt5Z9Vegu3NxjvvOia3E3RsxQE x4EBsN42aKCMi9vk238/Ka3cVO46WSl0KDUEsHh6f7ARG6l1KgbcvaDKPxLsEE5+ gTPTEsoOSZVYTmUg++8DAHJn7hDX3BE7gb+UB4w/xlvkWCJUdtkJJey0/d1+8OzC o8MgaMhVC1hfhAU3LOELHceV9I2rfudmrvpI/ODlZ2GxUZ9fZh/bkDxpFZ58jXrm 6V7LVX+/YmNPGkcTpNUMQ5o4oXExwq+De+tIK0Xs+tVYMyuHLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLQIkGq1kiEdKONDU8b69U/uHGS/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvODAyOWNhMDgtOGY1ZS0z OWJiLTk4M2QtOWNkZTFkMGMyYjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4 MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QAAX MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB+yvWz/m5QUuVGWIC8NzX2BeOZeK6K7IAZqLfgggoc5LzNOtHtv doKNR1aXfzPIiqZCP7nGP4YAdxlrskje5yQSRE8GcP9ug+XrU5AqKsNYIHrtpIqQ ORE9aPXvbcJ3w0GoC6jAqSM5zptrTUXRQPVXnUgxvzTcShvyGKHSOGO7tZ+yoa3R /L25spTYhuLwOQFHw34gq/+SxyV4vbWNu40658i2hZpzSt3+8dvC38RPQglLrAGg pO72pCk76LU4Tk9zC/VsJs0B8S2mQC+I97u0m2ofYPLR2FDJGQjvVjT3btPW1rvr GAXB/R3iQe6xcHNWg/Z7AbMHFC3Tn1H+UZI= -----END CERTIFICATE-----Generated at Fri Mar 14 11:17:48 2025 by rpki-client