$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/dd906173-242b-3137-a918-86b3c41a58d9.roa File: dd906173-242b-3137-a918-86b3c41a58d9.roa (raw, json) Hash identifier: AbDmRXHou13Ik2nNMo4vlqJB+N2x0O0Z5g9eHPetxUU= Subject key identifier: 2C:91:62:B7:88:48:8B:B2:3E:51:E9:DB:B8:44:D8:31:94:66:53:BB Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Certificate serial: 010D0C9F4328584921840D1BAD972F09C672ED80 Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/dd906173-242b-3137-a918-86b3c41a58d9.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 20253 IP address blocks: 2606:bc40:f20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:0d:1b:ad:97:2f:09:c6:72:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=22ad5c30-919a-4b11-96d1-a6b538783ca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:2f:de:21:65:4e:c8:8c:07:6c:0b:ae:9f:55: a2:85:68:95:df:e8:79:a8:93:a0:3d:45:28:06:5d: 21:84:2f:19:68:ac:48:39:bf:fa:fb:d8:c6:1b:09: bf:2d:00:33:85:5f:55:79:0a:7a:37:4b:fb:4d:cd: 8b:c8:b1:78:24:31:8a:22:64:e4:1e:b3:61:34:af: 71:a1:d2:ea:35:38:1f:03:5c:5a:35:d1:44:79:31: 61:89:6d:01:f6:66:62:6b:a3:57:a5:83:f5:51:94: 0f:97:16:95:01:06:ad:d3:3e:f0:45:c1:0f:bc:c9: 35:c7:6f:ea:6f:46:b3:d4:2e:c0:03:83:13:89:a2: 60:8c:4c:b9:84:ed:9c:0a:72:23:ea:4c:e4:bf:c4: 63:e2:ca:01:91:29:60:0d:c6:e4:79:8b:81:7e:07: 0d:54:09:42:04:36:36:14:80:2f:8d:90:09:76:6e: cc:10:14:e9:08:ed:8e:09:5c:02:25:6d:c1:4d:a6: 69:c7:1d:29:24:e3:08:4e:a6:1e:4d:91:a1:5e:e7: 9d:cc:8c:b8:4a:e0:cd:cd:75:75:b6:28:5b:47:b3: 4b:f1:47:33:f1:b0:54:6d:e2:fb:3a:82:db:34:43: f5:ec:71:d2:a3:10:57:70:d0:49:39:2a:11:98:3e: 20:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:91:62:B7:88:48:8B:B2:3E:51:E9:DB:B8:44:D8:31:94:66:53:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/dd906173-242b-3137-a918-86b3c41a58d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl X509v3 Authority Key Identifier: keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer sbgp-ipAddrBlock: critical IPv6: 2606:bc40:f20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:d3:19:aa:51:c3:22:ff:82:93:73:b7:4c:a8:fb:4e:b5:8d: c3:c1:29:3e:87:3a:c7:8a:b3:05:a4:6b:d8:ff:b3:91:f9:3a: 83:90:57:44:e4:01:0a:e3:7a:cf:a7:e0:b9:47:41:c4:e9:d1: f4:c7:40:79:a4:66:14:29:af:25:84:99:c5:55:d9:2c:77:87: f5:e5:fe:51:62:0f:be:9c:49:a6:1d:62:92:49:b1:68:32:a9: e0:93:ca:d3:2a:1c:5d:aa:26:f3:64:14:e6:07:f8:65:fd:7f: 88:b8:ad:93:3f:7a:82:fb:ce:1e:a8:79:72:68:ab:8e:fa:2d: c9:fa:20:b9:2e:0d:2f:ca:00:ab:8f:6c:04:83:4b:ce:fb:b1: a8:63:9e:79:b5:a8:86:db:64:04:28:26:05:c2:2f:ce:59:0f: 38:9a:53:53:c6:aa:f2:6b:a0:52:7f:3f:64:61:95:6b:80:49: 33:b8:62:e7:4b:c7:13:c8:be:b6:b5:e5:85:7a:58:d8:f3:41: d6:95:ab:fe:b1:96:77:79:ec:04:76:f2:f5:10:d5:ff:40:20: f7:22:60:6e:64:59:b5:35:ce:ec:2c:77:cf:c5:89:53:c1:01: e7:42:9b:58:1d:6c:5d:b2:f8:4a:36:57:53:b0:83:bb:e0:09: a4:be:a0:b3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkhhA0brZcvCcZy7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz YTA3MB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk MjJhZDVjMzAtOTE5YS00YjExLTk2ZDEtYTZiNTM4NzgzY2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkC/eIWVOyIwHbAuun1WihWiV3+h5qJOgPUUo Bl0hhC8ZaKxIOb/6+9jGGwm/LQAzhV9VeQp6N0v7Tc2LyLF4JDGKImTkHrNhNK9x odLqNTgfA1xaNdFEeTFhiW0B9mZia6NXpYP1UZQPlxaVAQat0z7wRcEPvMk1x2/q b0az1C7AA4MTiaJgjEy5hO2cCnIj6kzkv8Rj4soBkSlgDcbkeYuBfgcNVAlCBDY2 FIAvjZAJdm7MEBTpCO2OCVwCJW3BTaZpxx0pJOMITqYeTZGhXuedzIy4SuDNzXV1 tihbR7NL8Ucz8bBUbeL7OoLbNEP17HHSoxBXcNBJOSoRmD4gawIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCyRYreISIuyPlHp27hE2DGUZlO7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvZGQ5MDYxNzMtMjQyYi0z MTM3LWE5MTgtODZiM2M0MWE1OGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4 MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QA8g MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAzTGapRwyL/gpNzt0yo+061jcPBKT6HOseKswWka9j/s5H5OoOQ V0TkAQrjes+n4LlHQcTp0fTHQHmkZhQpryWEmcVV2Sx3h/Xl/lFiD76cSaYdYpJJ sWgyqeCTytMqHF2qJvNkFOYH+GX9f4i4rZM/eoL7zh6oeXJoq476Lcn6ILkuDS/K AKuPbASDS877sahjnnm1qIbbZAQoJgXCL85ZDziaU1PGqvJroFJ/P2RhlWuASTO4 YudLxxPIvra15YV6WNjzQdaVq/6xlnd57AR28vUQ1f9AIPciYG5kWbU1zuwsd8/F iVPBAedCm1gdbF2y+Eo2V1Owg7vgCaS+oLM= -----END CERTIFICATE-----Generated at Mon Apr 7 10:32:05 2025 by rpki-client