$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/8f53e0b4-b7cf-369a-a3aa-c241e2f99c46.roa File: 8f53e0b4-b7cf-369a-a3aa-c241e2f99c46.roa (raw, json) Hash identifier: KGbLAndrNJG/LkcxZbDm2vQ77LYbp/1tkc8enxywBtw= Subject key identifier: B5:D3:32:64:05:E7:7C:20:C5:58:78:35:2A:15:E4:5D:37:A0:EB:19 Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Certificate serial: 010D0C9F432858486695BB652A5E78D0A8F41A30 Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/8f53e0b4-b7cf-369a-a3aa-c241e2f99c46.roa Signing time: Wed 01 Jan 2025 14:00:53 +0000 ROA not before: Wed 01 Jan 2025 14:00:53 +0000 ROA not after: Tue 01 Apr 2025 13:00:53 +0000 asID: 20253 IP address blocks: 2606:bc40:16::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:66:95:bb:65:2a:5e:78:d0:a8:f4:1a:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Validity Not Before: Jan 1 14:00:53 2025 GMT Not After : Apr 1 13:00:53 2025 GMT Subject: CN=0a7f36bb-8592-4434-9197-7bc7213124f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b2:9e:02:a3:cb:40:4a:3c:c7:46:1b:bc:73: 2a:c6:dd:78:36:86:2e:1f:37:9c:f9:ad:8a:1a:bc: f9:ce:68:ce:53:04:c6:89:ec:84:43:8a:95:03:42: b1:38:b6:a3:c3:ac:19:14:3c:a4:b9:60:3c:45:ef: db:ce:26:f4:16:ba:ae:8c:13:48:bf:f5:87:4b:36: ca:8a:30:b2:07:a3:dc:e7:d9:64:07:87:83:50:f9: 82:aa:95:fa:7f:87:e8:22:05:bc:af:a2:71:00:02: 6f:2b:58:6c:24:81:de:91:ea:4d:74:5c:4f:fb:d6: 25:2b:58:3e:55:16:b0:96:fb:bc:c5:6e:80:c1:77: 6c:24:03:26:d2:3e:b9:c6:15:9f:0a:b1:c5:be:2a: 82:49:5b:14:a5:c8:56:a1:07:78:11:8e:72:e3:a4: b7:b5:d0:e5:c2:99:2e:ac:6d:56:2b:07:dc:52:4f: 68:4a:d2:a4:bb:8e:03:d9:cd:9a:69:3f:62:23:16: fb:40:e2:96:76:ea:d3:bf:bf:61:b7:b3:77:bd:66: 8c:a1:c3:45:b6:7c:27:7a:01:eb:e6:80:9d:eb:3e: 8f:ff:ce:67:cf:33:17:e0:d7:02:87:de:6e:d2:fd: 09:be:6f:3f:7b:72:60:3c:5c:7b:40:e2:5f:f0:2b: 28:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:D3:32:64:05:E7:7C:20:C5:58:78:35:2A:15:E4:5D:37:A0:EB:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/8f53e0b4-b7cf-369a-a3aa-c241e2f99c46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl X509v3 Authority Key Identifier: keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer sbgp-ipAddrBlock: critical IPv6: 2606:bc40:16::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:5e:dc:f0:f2:63:8d:bf:d4:99:ca:6e:e2:89:02:a2:f8:8b: e5:15:a0:83:94:0f:44:b7:77:82:27:82:40:34:41:93:2d:15: ea:6c:13:5f:c2:bb:ee:45:6a:0c:2c:66:a2:b6:a8:de:75:45: fb:0b:ec:92:4a:89:7a:9e:72:a0:25:54:9c:a3:cd:b3:67:21: 32:52:a8:29:ca:32:ee:97:d5:46:94:0f:34:bf:1a:52:3c:72: 24:da:22:38:e0:ae:8b:a4:ed:ea:d2:c6:52:8d:d6:13:fb:b7: 0e:2e:25:b1:e5:6e:71:94:02:66:00:52:9e:71:50:67:9a:c2: b9:60:4a:17:93:05:9a:5d:19:f8:fe:f3:ee:09:c2:d2:e3:be: 9e:7e:05:ca:d8:fe:43:45:7d:9d:1e:dd:58:5e:1d:1c:ec:8f: 5a:e4:5c:9e:b4:02:0c:c1:21:8d:b7:ae:3a:91:37:ab:18:d0: 55:de:78:b5:25:49:96:d1:97:ae:c2:3e:1f:0d:82:1f:c0:ea: c5:af:00:7b:96:33:53:fe:ec:43:bd:5f:2b:47:32:c7:0a:96: 78:37:ca:eb:35:9f:8c:96:cf:7c:99:4a:17:9b:38:91:9c:4f: 6e:45:9d:c9:05:df:6e:a0:59:e1:c4:62:97:8f:fc:d2:ef:98: d0:dc:71:e9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhmlbtlKl540Kj0GjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz YTA3MB4XDTI1MDEwMTE0MDA1M1oXDTI1MDQwMTEzMDA1M1owLzEtMCsGA1UEAxMk MGE3ZjM2YmItODU5Mi00NDM0LTkxOTctN2JjNzIxMzEyNGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7KeAqPLQEo8x0YbvHMqxt14NoYuHzec+a2K Grz5zmjOUwTGieyEQ4qVA0KxOLajw6wZFDykuWA8Re/bzib0FrqujBNIv/WHSzbK ijCyB6Pc59lkB4eDUPmCqpX6f4foIgW8r6JxAAJvK1hsJIHekepNdFxP+9YlK1g+ VRawlvu8xW6AwXdsJAMm0j65xhWfCrHFviqCSVsUpchWoQd4EY5y46S3tdDlwpku rG1WKwfcUk9oStKku44D2c2aaT9iIxb7QOKWdurTv79ht7N3vWaMocNFtnwnegHr 5oCd6z6P/85nzzMX4NcCh95u0v0Jvm8/e3JgPFx7QOJf8CsoTQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLXTMmQF53wgxVh4NSoV5F03oOsZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvOGY1M2UwYjQtYjdjZi0z NjlhLWEzYWEtYzI0MWUyZjk5YzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4 MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QAAW MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAK1e3PDyY42/1JnKbuKJAqL4i+UVoIOUD0S3d4IngkA0QZMtFeps E1/Cu+5FagwsZqK2qN51RfsL7JJKiXqecqAlVJyjzbNnITJSqCnKMu6X1UaUDzS/ GlI8ciTaIjjgrouk7erSxlKN1hP7tw4uJbHlbnGUAmYAUp5xUGeawrlgSheTBZpd Gfj+8+4JwtLjvp5+BcrY/kNFfZ0e3VheHRzsj1rkXJ60AgzBIY23rjqRN6sY0FXe eLUlSZbRl67CPh8Ngh/A6sWvAHuWM1P+7EO9XytHMscKlng3yus1n4yWz3yZSheb OJGcT25FnckF326gWeHEYpeP/NLvmNDccek= -----END CERTIFICATE-----Generated at Sun Feb 16 15:36:35 2025 by rpki-client