$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/ffd1afb2-ad50-3fd7-9185-09d034503219.roa File: ffd1afb2-ad50-3fd7-9185-09d034503219.roa (raw, json) Hash identifier: E+vrO9/t4VitFyQnpF7OOTeSMyjEfjaFYA0flaNZHRM= Subject key identifier: DD:33:DA:F9:96:D8:24:82:AD:1C:97:70:D4:68:32:67:30:78:96:02 Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Certificate serial: 010D0C9F43285848EF61449BDD790E604EAFDD00 Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/ffd1afb2-ad50-3fd7-9185-09d034503219.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 20253 IP address blocks: 2606:bc40:15::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:44:9b:dd:79:0e:60:4e:af:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=ed0aebfd-b8df-4ff8-b0f0-a19410c26f69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b2:71:04:13:fb:a1:0d:99:4d:61:e6:f1:70: 40:3e:46:cd:22:0a:fe:fc:8f:f0:91:bf:7f:64:84: 2d:b8:7d:45:c3:ca:57:de:62:8e:bc:9b:57:23:2c: 08:86:0a:ac:58:bd:76:c5:c9:0e:e3:4f:b3:97:df: 3f:9a:13:3a:28:b0:f8:04:b7:d8:88:e3:e4:92:5f: 79:ef:8e:d0:7a:ce:df:8a:e4:07:dd:d8:f1:bc:a4: 59:06:6d:f3:d0:80:23:f4:7d:32:ad:7a:05:bc:3d: a7:fc:17:a6:34:3d:7a:7b:88:96:ce:01:87:49:38: c2:6a:4a:53:c4:a4:09:3a:86:bb:e6:93:7e:ea:b8: 97:b3:30:2a:3e:af:8c:01:b2:f4:99:e7:b3:94:e9: 89:c3:b2:95:b4:92:86:9b:e3:51:41:b3:0e:b2:c6: 2f:eb:c1:25:2e:df:57:b0:1e:a6:3e:1a:b1:42:95: cd:7f:f2:14:ed:80:52:da:61:3d:4a:38:9b:4e:ba: 43:a0:ad:ec:a7:bc:1d:e5:9e:f4:a1:97:47:1c:28: d8:91:a7:68:49:09:b5:11:7c:28:4b:14:00:85:0b: 4c:5a:d4:b5:94:68:46:05:3a:30:00:25:68:89:d7: ac:db:84:88:d1:58:06:8a:d3:fa:0f:54:92:11:f5: f7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:33:DA:F9:96:D8:24:82:AD:1C:97:70:D4:68:32:67:30:78:96:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/ffd1afb2-ad50-3fd7-9185-09d034503219.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl X509v3 Authority Key Identifier: keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer sbgp-ipAddrBlock: critical IPv6: 2606:bc40:15::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:39:bc:3e:3d:31:03:49:f1:98:b7:b0:a1:3b:ce:42:c8:75: 8c:a1:ab:9c:6b:8b:88:7b:75:74:27:1f:68:6b:e9:00:a1:a4: fe:50:89:33:10:b0:d0:18:3c:78:a8:08:88:dd:67:b4:bd:96: e1:63:b7:dc:c8:e5:b5:1b:66:a9:66:0f:59:a2:c3:5b:a0:5e: 5c:16:e1:0d:d5:03:1a:ba:c2:db:d5:64:6c:ed:0f:43:8d:d7: 8a:4c:69:c8:1f:1c:7e:23:49:f7:b9:f2:02:80:61:c5:3c:36: 67:e8:81:51:6b:f3:7f:bc:e3:e8:ad:e3:88:19:8a:a6:89:7f: 7a:70:0c:6a:7a:a7:48:7c:87:8d:12:ad:bf:26:a3:2f:1a:5e: f9:9a:72:6f:f7:b0:15:d1:61:a7:ac:9a:d5:2c:31:c7:00:c9: 68:5e:4e:9b:18:75:33:d0:3b:52:79:37:37:3f:f5:46:16:6f: ff:10:eb:15:f5:38:00:b4:05:f0:e6:17:55:48:7c:b9:f9:c6: 15:80:60:ed:6f:23:ab:c8:a9:74:d5:4f:1d:78:99:85:03:5e: 92:1e:19:4b:cf:12:cd:2a:50:7c:ee:d2:37:06:cf:56:7a:91: 24:3d:45:7d:33:c8:9a:35:02:c1:b9:5b:ed:25:a4:f5:8b:c9: 11:e9:3b:13 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjvYUSb3XkOYE6v3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz YTA3MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk ZWQwYWViZmQtYjhkZi00ZmY4LWIwZjAtYTE5NDEwYzI2ZjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7JxBBP7oQ2ZTWHm8XBAPkbNIgr+/I/wkb9/ ZIQtuH1Fw8pX3mKOvJtXIywIhgqsWL12xckO40+zl98/mhM6KLD4BLfYiOPkkl95 747Qes7fiuQH3djxvKRZBm3z0IAj9H0yrXoFvD2n/BemND16e4iWzgGHSTjCakpT xKQJOoa75pN+6riXszAqPq+MAbL0meezlOmJw7KVtJKGm+NRQbMOssYv68ElLt9X sB6mPhqxQpXNf/IU7YBS2mE9SjibTrpDoK3sp7wd5Z70oZdHHCjYkadoSQm1EXwo SxQAhQtMWtS1lGhGBTowACVoides24SI0VgGitP6D1SSEfX3gQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN0z2vmW2CSCrRyXcNRoMmcweJYCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvZmZkMWFmYjItYWQ1MC0z ZmQ3LTkxODUtMDlkMDM0NTAzMjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4 MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QAAV MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI05vD49MQNJ8Zi3sKE7zkLIdYyhq5xri4h7dXQnH2hr6QChpP5Q iTMQsNAYPHioCIjdZ7S9luFjt9zI5bUbZqlmD1miw1ugXlwW4Q3VAxq6wtvVZGzt D0ON14pMacgfHH4jSfe58gKAYcU8NmfogVFr83+84+it44gZiqaJf3pwDGp6p0h8 h40Srb8moy8aXvmacm/3sBXRYaesmtUsMccAyWheTpsYdTPQO1J5Nzc/9UYWb/8Q 6xX1OAC0BfDmF1VIfLn5xhWAYO1vI6vIqXTVTx14mYUDXpIeGUvPEs0qUHzu0jcG z1Z6kSQ9RX0zyJo1AsG5W+0lpPWLyRHpOxM= -----END CERTIFICATE-----Generated at Mon Apr 7 10:32:23 2025 by rpki-client