$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/86fda052-0b14-3bb9-af4c-c7eb44203925.roa File: 86fda052-0b14-3bb9-af4c-c7eb44203925.roa (raw, json) Hash identifier: NeDtXYXmw5l10JUBQ25vfAezMwQc7GrO9bwf6JX/g08= Subject key identifier: 8A:20:52:DF:1B:A9:49:F1:1F:A0:62:8E:9B:7C:0B:6E:2C:F8:74:E2 Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Certificate serial: 010D0C9F432858486695BB73D75EA96DA16C6B80 Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/86fda052-0b14-3bb9-af4c-c7eb44203925.roa Signing time: Wed 01 Jan 2025 14:00:53 +0000 ROA not before: Wed 01 Jan 2025 14:00:53 +0000 ROA not after: Tue 01 Apr 2025 13:00:53 +0000 asID: 20253 IP address blocks: 2606:bc40:1a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:66:95:bb:73:d7:5e:a9:6d:a1:6c:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Validity Not Before: Jan 1 14:00:53 2025 GMT Not After : Apr 1 13:00:53 2025 GMT Subject: CN=f0ed995f-303d-4c7e-b671-dd41b1cc23c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:52:e3:bb:75:c1:68:d4:56:f3:e6:25:fd:30: fd:a9:4a:17:bf:c1:f3:f8:3e:ff:52:02:e1:1a:0e: 6b:d1:1b:27:78:31:e8:55:e1:db:05:33:79:6c:29: 82:af:14:fa:e3:d7:e3:ff:d1:7a:59:90:ee:de:34: cf:a5:5b:e3:7b:cb:21:39:93:73:18:67:48:9f:c2: 62:8e:a5:12:ee:a4:fc:fb:39:97:fc:2d:a6:0d:5e: 0a:ef:fc:40:2f:37:b0:48:65:34:57:72:07:0d:f3: e7:9d:48:b2:3a:db:54:cd:8a:86:92:48:30:2b:cb: 11:b7:3e:28:ef:83:49:a3:22:83:3b:c9:63:d0:35: bd:db:b4:34:01:b8:6b:78:23:73:ad:49:78:6c:17: 36:cc:7e:61:c1:f7:c0:c7:99:6e:c4:ab:bf:00:51: ae:56:6a:b8:67:05:c8:63:06:45:73:e1:f3:01:b9: ee:2f:e2:3b:25:09:7e:ef:7a:05:97:a4:f3:5a:4c: 5c:99:3f:f1:2c:6a:4c:0a:37:94:84:48:8a:f0:82: 5d:c5:3c:f9:86:ef:4e:4a:07:44:08:16:ed:16:ba: 16:bb:f3:f4:ad:57:14:5b:57:d1:99:75:7c:3c:29: 15:c8:b2:07:fd:7c:82:72:fc:b1:e1:ce:6b:12:3f: f0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:20:52:DF:1B:A9:49:F1:1F:A0:62:8E:9B:7C:0B:6E:2C:F8:74:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/86fda052-0b14-3bb9-af4c-c7eb44203925.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl X509v3 Authority Key Identifier: keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer sbgp-ipAddrBlock: critical IPv6: 2606:bc40:1a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:82:55:b8:fe:4f:13:f9:4c:6b:b6:26:65:94:d9:f9:2c:e8: e8:eb:78:74:3c:30:30:80:66:b4:39:14:15:19:af:7a:f2:da: 64:66:60:33:fa:74:80:7f:fb:ce:a5:ec:1f:9c:7a:af:a5:43: f8:79:1d:91:47:cd:32:79:e1:6c:4a:af:83:16:06:8e:10:47: 85:0f:a4:9c:ec:85:a4:25:d9:7b:79:9f:26:ad:55:d5:2d:da: 66:a0:d0:31:40:89:a4:26:f8:76:2a:7e:a2:20:eb:52:79:a2: f4:c0:63:ad:a4:52:0c:b5:5e:37:eb:da:85:68:6e:fb:82:2d: 80:d8:bb:1e:dc:3a:c4:26:32:50:7a:01:fc:d0:ca:bf:21:af: 31:36:51:ee:8f:49:55:5e:45:77:67:09:0f:e1:46:a4:84:b1: cb:95:df:51:dd:d2:90:63:59:19:69:92:d9:42:11:63:af:05: ea:0c:0e:e1:11:ea:a2:9c:44:16:f8:d4:b7:43:49:2b:25:31: 9e:74:3b:c0:c8:fd:b9:14:f4:02:96:6a:e7:5a:c4:56:9c:7b: 9a:0f:a8:50:64:cc:d7:aa:17:ee:a1:b5:e1:7b:14:c3:8c:36: b5:3a:61:d5:4e:07:bb:87:4b:8e:a4:37:e3:bb:94:1b:7d:89: 85:5e:3d:ab -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhmlbtz116pbaFsa4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz YTA3MB4XDTI1MDEwMTE0MDA1M1oXDTI1MDQwMTEzMDA1M1owLzEtMCsGA1UEAxMk ZjBlZDk5NWYtMzAzZC00YzdlLWI2NzEtZGQ0MWIxY2MyM2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7lLju3XBaNRW8+Yl/TD9qUoXv8Hz+D7/UgLh Gg5r0RsneDHoVeHbBTN5bCmCrxT649fj/9F6WZDu3jTPpVvje8shOZNzGGdIn8Ji jqUS7qT8+zmX/C2mDV4K7/xALzewSGU0V3IHDfPnnUiyOttUzYqGkkgwK8sRtz4o 74NJoyKDO8lj0DW927Q0AbhreCNzrUl4bBc2zH5hwffAx5luxKu/AFGuVmq4ZwXI YwZFc+HzAbnuL+I7JQl+73oFl6TzWkxcmT/xLGpMCjeUhEiK8IJdxTz5hu9OSgdE CBbtFroWu/P0rVcUW1fRmXV8PCkVyLIH/XyCcvyx4c5rEj/wBwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIogUt8bqUnxH6Bijpt8C24s+HTiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvODZmZGEwNTItMGIxNC0z YmI5LWFmNGMtYzdlYjQ0MjAzOTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4 MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QAAa MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABeCVbj+TxP5TGu2JmWU2fks6OjreHQ8MDCAZrQ5FBUZr3ry2mRm YDP6dIB/+86l7B+ceq+lQ/h5HZFHzTJ54WxKr4MWBo4QR4UPpJzshaQl2Xt5nyat VdUt2mag0DFAiaQm+HYqfqIg61J5ovTAY62kUgy1Xjfr2oVobvuCLYDYux7cOsQm MlB6AfzQyr8hrzE2Ue6PSVVeRXdnCQ/hRqSEscuV31Hd0pBjWRlpktlCEWOvBeoM DuER6qKcRBb41LdDSSslMZ50O8DI/bkU9AKWaudaxFace5oPqFBkzNeqF+6hteF7 FMOMNrU6YdVOB7uHS46kN+O7lBt9iYVePas= -----END CERTIFICATE-----Generated at Sun Feb 16 15:09:56 2025 by rpki-client