$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/dbf5bff9-818a-3eaa-8a8f-cc27270151b1.roa File: dbf5bff9-818a-3eaa-8a8f-cc27270151b1.roa (raw, json) Hash identifier: GcIKClqPpkVjSWnBPIhTyxqIXoCyGGC8s+iqQCKxlus= Subject key identifier: 29:1A:A7:84:B0:5B:FF:90:A9:7D:EA:33:D4:03:28:C3:12:EB:59:1E Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Certificate serial: 010D0C9F432858480EA510DEEF46943DD9560C00 Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/dbf5bff9-818a-3eaa-8a8f-cc27270151b1.roa Signing time: Sun 01 Dec 2024 02:00:39 +0000 ROA not before: Sun 01 Dec 2024 02:00:39 +0000 ROA not after: Sat 01 Mar 2025 02:00:39 +0000 asID: 20253 IP address blocks: 2606:bc40:23::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:0e:a5:10:de:ef:46:94:3d:d9:56:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Validity Not Before: Dec 1 02:00:39 2024 GMT Not After : Mar 1 02:00:39 2025 GMT Subject: CN=0bc71f3d-1a66-4723-a8c3-b0a4514d75d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d0:f8:67:82:a1:73:e8:c7:33:fe:4e:6c:03: 52:ae:fd:63:19:a6:9f:b7:67:0e:bb:fe:48:44:47: ef:98:10:32:e4:b0:d6:58:84:33:c7:77:a7:b0:9e: 3e:d0:44:8c:10:38:82:d0:3d:0d:30:d4:e8:43:da: c8:19:f6:76:84:36:ec:00:1e:db:45:e2:66:1b:09: d0:d2:9b:57:6d:a7:27:33:1d:71:b5:ae:a6:08:f9: 49:64:16:ba:78:d9:fd:8e:1d:ce:6c:63:69:1a:cb: b6:02:0b:e2:da:94:10:35:f9:4b:6f:75:ec:3c:ec: ad:8f:07:4f:7e:2e:8a:44:12:4d:d8:0d:b1:a9:bf: b0:73:e2:b9:2c:92:0f:f8:88:bc:2a:50:66:3d:d0: c6:03:fb:57:dc:50:ad:3b:ec:62:63:0a:b1:3e:56: 09:b0:43:c5:a8:4c:20:77:b1:f0:dc:13:7a:8d:7a: be:5b:33:50:36:06:34:42:cd:a4:e7:a3:c7:b4:72: cf:fc:1f:27:cc:ab:b5:2e:9a:ee:53:6d:72:ff:76: 01:a1:c5:19:64:b4:e3:5e:de:18:7e:d7:d7:6a:31: 82:4d:8c:d3:a9:e2:88:59:51:35:94:67:e3:40:8e: dc:96:87:65:3d:84:e5:d2:b2:3a:75:6c:4a:9d:80: dc:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:1A:A7:84:B0:5B:FF:90:A9:7D:EA:33:D4:03:28:C3:12:EB:59:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/dbf5bff9-818a-3eaa-8a8f-cc27270151b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl X509v3 Authority Key Identifier: keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer sbgp-ipAddrBlock: critical IPv6: 2606:bc40:23::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:b6:e8:81:99:58:ce:7b:e2:e1:a1:06:79:a2:70:2a:5e:d4: 0e:ed:20:85:db:46:68:f3:71:05:6f:df:d4:87:0b:a5:8d:20: 29:b3:ce:14:80:e7:0b:38:14:a2:8f:6e:48:2f:e8:a9:c4:1c: 11:6a:f9:65:3b:1b:2d:54:fa:9d:af:f6:3f:5a:41:46:eb:ac: e5:b6:9c:c1:f2:ee:c0:99:2a:f1:75:c8:19:09:bd:8f:6e:e1: 12:9a:2b:37:22:df:cf:b4:cf:c9:88:5a:20:05:7c:d5:d4:3d: a0:1d:97:9f:01:4a:47:63:2c:ca:f6:f6:5a:2d:f0:72:e6:f8: ea:47:63:22:67:1b:47:09:54:08:36:ca:71:8d:b8:5c:1f:a6: 38:b2:aa:0c:90:ca:d5:2e:9e:94:ca:41:a6:3c:53:82:71:d6: 2a:18:b6:de:9e:9d:54:42:24:f9:ea:c7:08:f7:7c:26:08:54: 2b:ed:13:2a:9b:96:db:93:d4:54:13:d7:ab:a6:f6:fc:51:c7: 0f:48:9e:8b:d1:b5:39:49:82:b8:b6:cb:15:75:9a:b5:e0:25: f5:e8:5b:3e:58:ab:c5:c4:6d:31:1b:7c:48:7b:d0:b2:ff:cf: df:49:59:e8:c1:3e:c5:39:99:ec:f9:11:2b:e9:b8:1c:42:16: 65:25:ed:09 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgOpRDe70aUPdlWDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz YTA3MB4XDTI0MTIwMTAyMDAzOVoXDTI1MDMwMTAyMDAzOVowLzEtMCsGA1UEAxMk MGJjNzFmM2QtMWE2Ni00NzIzLWE4YzMtYjBhNDUxNGQ3NWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldD4Z4Khc+jHM/5ObANSrv1jGaaft2cOu/5I REfvmBAy5LDWWIQzx3ensJ4+0ESMEDiC0D0NMNToQ9rIGfZ2hDbsAB7bReJmGwnQ 0ptXbacnMx1xta6mCPlJZBa6eNn9jh3ObGNpGsu2Agvi2pQQNflLb3XsPOytjwdP fi6KRBJN2A2xqb+wc+K5LJIP+Ii8KlBmPdDGA/tX3FCtO+xiYwqxPlYJsEPFqEwg d7Hw3BN6jXq+WzNQNgY0Qs2k56PHtHLP/B8nzKu1LpruU21y/3YBocUZZLTjXt4Y ftfXajGCTYzTqeKIWVE1lGfjQI7clodlPYTl0rI6dWxKnYDcZQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCkap4SwW/+QqX3qM9QDKMMS61keMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvZGJmNWJmZjktODE4YS0z ZWFhLThhOGYtY2MyNzI3MDE1MWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4 MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QAAj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIW26IGZWM574uGhBnmicCpe1A7tIIXbRmjzcQVv39SHC6WNICmz zhSA5ws4FKKPbkgv6KnEHBFq+WU7Gy1U+p2v9j9aQUbrrOW2nMHy7sCZKvF1yBkJ vY9u4RKaKzci38+0z8mIWiAFfNXUPaAdl58BSkdjLMr29lot8HLm+OpHYyJnG0cJ VAg2ynGNuFwfpjiyqgyQytUunpTKQaY8U4Jx1ioYtt6enVRCJPnqxwj3fCYIVCvt EyqbltuT1FQT16um9vxRxw9InovRtTlJgri2yxV1mrXgJfXoWz5Yq8XEbTEbfEh7 0LL/z99JWejBPsU5mez5ESvpuBxCFmUl7Qk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:52:58 2025 by rpki-client