$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/dfe7e74b-e11b-3e5c-9d51-9d3c71471aa6.roa File: dfe7e74b-e11b-3e5c-9d51-9d3c71471aa6.roa (raw, json) Hash identifier: cOQEgpHOd1LNKKGRQ2pDeqNv58s3SL1ACV4ZX7cW2W4= Subject key identifier: B5:C2:94:AE:E4:EA:1B:4F:83:DD:16:DA:DB:5C:51:80:06:76:3B:52 Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Certificate serial: 010D0C9F4328584961B998AE4B558AB3743A5D80 Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/dfe7e74b-e11b-3e5c-9d51-9d3c71471aa6.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 20253 IP address blocks: 2606:bc40:f17::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:98:ae:4b:55:8a:b3:74:3a:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=29f127af-d60f-4008-b77f-0c17ff56c70f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:97:8f:30:04:fd:5c:af:25:5b:76:6f:83:4b: d4:75:5d:51:4d:54:1e:af:4b:9a:db:52:34:0b:6e: e1:65:01:0c:f3:40:76:68:c2:fa:88:91:07:d9:22: e5:5a:76:2a:c8:c8:a5:c6:b6:a9:91:7c:87:be:f4: 05:fd:f9:41:92:3b:98:b1:6f:68:f0:38:ed:99:ec: fb:50:2a:2c:5e:1c:fc:d5:30:3a:46:24:60:07:3f: b0:1d:7f:f4:c7:a5:66:a9:c3:b9:af:57:e7:db:9b: 9e:3f:6e:07:ea:93:1a:cf:19:e4:71:22:f8:c0:3c: ee:5b:bf:c3:f1:bd:59:48:c4:43:5c:7c:3b:20:60: 20:f8:c7:be:05:c6:81:87:0d:15:cb:84:b5:2a:6c: 99:3c:20:45:ae:1c:ee:09:e5:d6:be:67:05:94:49: ff:5f:23:95:90:e7:31:b4:cf:99:04:b1:49:40:d7: 32:dd:65:0c:49:73:c2:0c:7b:12:82:be:4c:4a:48: 15:7c:a9:44:47:57:55:d8:f0:a5:ea:25:b6:bf:b4: ca:4e:56:6b:28:8c:d6:d1:cf:e4:0a:34:e5:89:a8: be:01:91:fd:f9:0e:3d:dd:88:fb:28:24:ed:11:3b: 11:63:70:60:c1:97:df:55:31:03:b5:25:64:41:ad: 0a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:C2:94:AE:E4:EA:1B:4F:83:DD:16:DA:DB:5C:51:80:06:76:3B:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/dfe7e74b-e11b-3e5c-9d51-9d3c71471aa6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl X509v3 Authority Key Identifier: keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer sbgp-ipAddrBlock: critical IPv6: 2606:bc40:f17::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:de:08:bc:56:7d:35:64:33:34:b1:49:c6:29:52:19:41:9a: 55:94:26:1b:8a:10:49:a8:aa:88:f7:b0:78:a4:2e:da:88:f8: 2c:ab:fb:7c:b6:44:dc:83:7c:94:2c:06:ff:fc:74:21:54:c1: ad:ff:c2:55:c5:ce:98:b6:7e:3f:6d:59:77:d8:ce:90:06:a1: 4e:2b:c0:57:93:48:00:11:76:c8:e7:52:35:c0:8b:af:ed:87: a1:92:af:7e:d8:80:19:56:84:67:ff:2f:9d:89:b2:40:5c:aa: 88:fa:34:bd:f5:5c:1d:01:bf:46:79:92:73:b1:70:ed:b4:82: 8b:16:53:bc:4c:d8:3e:0a:88:53:10:b6:e1:10:dc:ba:d4:0d: 01:28:08:76:4e:0b:b1:e1:38:32:a9:4b:cd:83:ca:07:fa:09: 7e:ab:d1:e8:a0:0b:e6:38:77:57:a3:da:06:06:65:6d:91:22: e9:ee:61:06:20:0f:09:29:55:8e:da:9f:73:9a:a6:49:71:57: 1f:47:cb:96:44:c7:f5:54:57:cc:6c:4f:b7:78:61:cd:62:bb: 71:76:42:0e:1f:df:fe:d8:88:a3:f2:9f:de:b9:7c:31:a1:bb: 77:c8:e2:12:17:f4:33:95:05:33:e6:1f:a3:16:6e:0e:7f:92: 73:72:da:f0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElhuZiuS1WKs3Q6XYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz YTA3MB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk MjlmMTI3YWYtZDYwZi00MDA4LWI3N2YtMGMxN2ZmNTZjNzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJePMAT9XK8lW3Zvg0vUdV1RTVQer0ua21I0 C27hZQEM80B2aML6iJEH2SLlWnYqyMilxrapkXyHvvQF/flBkjuYsW9o8Djtmez7 UCosXhz81TA6RiRgBz+wHX/0x6VmqcO5r1fn25ueP24H6pMazxnkcSL4wDzuW7/D 8b1ZSMRDXHw7IGAg+Me+BcaBhw0Vy4S1KmyZPCBFrhzuCeXWvmcFlEn/XyOVkOcx tM+ZBLFJQNcy3WUMSXPCDHsSgr5MSkgVfKlER1dV2PCl6iW2v7TKTlZrKIzW0c/k CjTliai+AZH9+Q493Yj7KCTtETsRY3BgwZffVTEDtSVkQa0KmwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLXClK7k6htPg90W2ttcUYAGdjtSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvZGZlN2U3NGItZTExYi0z ZTVjLTlkNTEtOWQzYzcxNDcxYWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4 MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QA8X MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJDeCLxWfTVkMzSxScYpUhlBmlWUJhuKEEmoqoj3sHikLtqI+Cyr +3y2RNyDfJQsBv/8dCFUwa3/wlXFzpi2fj9tWXfYzpAGoU4rwFeTSAARdsjnUjXA i6/th6GSr37YgBlWhGf/L52JskBcqoj6NL31XB0Bv0Z5knOxcO20gosWU7xM2D4K iFMQtuEQ3LrUDQEoCHZOC7HhODKpS82Dygf6CX6r0eigC+Y4d1ej2gYGZW2RIunu YQYgDwkpVY7an3OapklxVx9Hy5ZEx/VUV8xsT7d4Yc1iu3F2Qg4f3/7YiKPyn965 fDGhu3fI4hIX9DOVBTPmH6MWbg5/knNy2vA= -----END CERTIFICATE-----Generated at Mon Apr 7 10:29:34 2025 by rpki-client