$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/8029ca08-8f5e-39bb-983d-9cde1d0c2b1a.roa File: 8029ca08-8f5e-39bb-983d-9cde1d0c2b1a.roa (raw, json) Hash identifier: Q+A57gnzdmY+NfKO/cOTSoCs8tOB6rz+gw0uBPscOnM= Subject key identifier: 8F:F1:18:71:12:9B:93:B1:A8:DA:97:38:AD:E8:43:F0:8A:E8:47:14 Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Certificate serial: 010D0C9F43285849CE9A67E78658917F558C9C80 Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/8029ca08-8f5e-39bb-983d-9cde1d0c2b1a.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 20253 IP address blocks: 2606:bc40:17::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:67:e7:86:58:91:7f:55:8c:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=322c3bb6-e7d5-457a-bd2a-abf6f574de54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:2f:96:de:01:06:ae:01:04:21:7e:37:a4:cd: c2:92:a7:29:ab:2a:a3:45:79:1e:c3:dd:2d:63:06: 4a:5c:de:3f:65:0d:2a:cb:3c:12:29:79:6e:c0:aa: 87:49:5c:d1:c4:75:89:35:be:ad:92:e9:e8:85:8e: b3:2e:53:dc:39:b9:7b:d5:c9:a4:79:c0:24:48:2c: d7:8d:78:61:e8:aa:bf:3b:ac:3f:3f:bd:f6:7b:f4: 62:fd:a3:7e:55:d6:0e:8b:e9:ba:5b:11:fe:fe:78: b1:fa:41:04:ce:80:73:ef:06:2a:3f:4c:95:f0:8b: 94:b0:ee:f6:11:54:c7:b8:38:76:32:08:75:42:29: c9:03:25:7e:89:8c:e3:a9:ac:f0:0c:32:8e:0b:90: cf:7d:ee:47:46:8e:0e:a2:4b:d9:12:82:e4:45:ce: b3:bc:56:dd:b8:c6:dc:d8:01:b5:60:4f:7b:0c:a0: 93:d6:55:6e:0c:c2:aa:e3:ad:8c:f1:07:8e:a1:0a: 30:1b:26:e2:aa:c6:85:80:53:7e:a5:39:20:12:47: ea:18:46:31:f8:c8:77:f2:29:d6:d1:1e:20:04:df: 4b:b4:a9:e5:0d:fa:64:b9:3d:d9:93:93:20:01:25: cc:16:54:67:5f:ca:38:4d:c4:86:0e:8c:67:e7:6f: 14:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:F1:18:71:12:9B:93:B1:A8:DA:97:38:AD:E8:43:F0:8A:E8:47:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/8029ca08-8f5e-39bb-983d-9cde1d0c2b1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl X509v3 Authority Key Identifier: keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer sbgp-ipAddrBlock: critical IPv6: 2606:bc40:17::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:95:a5:9f:4a:19:e5:e9:ad:6a:3a:26:3c:40:3e:a2:67:02: dc:5f:2f:58:fc:c5:b0:c8:2d:c6:26:49:07:50:a4:5a:f1:ca: 4e:58:ca:d8:b8:b8:8a:06:17:f1:9f:5b:ab:c6:b9:2c:c0:b5: 9b:ad:19:ad:2e:6a:36:92:5a:22:c6:cd:8d:ca:95:67:72:fe: 1c:3d:fa:43:4f:86:7d:3f:b8:ae:c9:fe:54:6e:6f:9d:84:ec: 32:79:58:22:dc:ec:9f:74:75:cd:fe:c2:eb:86:d8:fe:25:d8: 10:6b:f4:ad:de:25:a9:32:04:58:06:36:35:ca:c2:0d:bc:90: d2:fa:74:b0:fc:5d:d9:10:d3:a8:c9:f6:15:66:a9:87:ca:3f: f8:e7:8c:85:58:ce:13:f7:a9:76:02:8c:4e:4d:db:51:24:54: 24:ce:25:f6:c5:14:0c:14:1a:ba:b2:0c:25:55:a4:30:b9:84: 53:87:eb:b1:25:56:4b:50:bc:e1:96:64:b3:fd:86:45:69:92: 3d:5b:d1:34:c5:65:6b:43:7c:f7:b3:ae:f5:e8:d3:93:ee:77: 2b:d7:80:c0:c6:c0:10:11:fc:55:39:66:c0:c3:ac:78:1c:57: 6f:c0:0c:e8:35:c3:be:2e:95:42:fb:a2:73:ff:29:74:4d:44: 49:2c:8b:a4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnOmmfnhliRf1WMnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz YTA3MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk MzIyYzNiYjYtZTdkNS00NTdhLWJkMmEtYWJmNmY1NzRkZTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlS+W3gEGrgEEIX43pM3CkqcpqyqjRXkew90t YwZKXN4/ZQ0qyzwSKXluwKqHSVzRxHWJNb6tkunohY6zLlPcObl71cmkecAkSCzX jXhh6Kq/O6w/P732e/Ri/aN+VdYOi+m6WxH+/nix+kEEzoBz7wYqP0yV8IuUsO72 EVTHuDh2Mgh1QinJAyV+iYzjqazwDDKOC5DPfe5HRo4OokvZEoLkRc6zvFbduMbc 2AG1YE97DKCT1lVuDMKq462M8QeOoQowGybiqsaFgFN+pTkgEkfqGEYx+Mh38inW 0R4gBN9LtKnlDfpkuT3Zk5MgASXMFlRnX8o4TcSGDoxn528UmwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI/xGHESm5OxqNqXOK3oQ/CK6EcUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvODAyOWNhMDgtOGY1ZS0z OWJiLTk4M2QtOWNkZTFkMGMyYjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4 MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QAAX MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFCVpZ9KGeXprWo6JjxAPqJnAtxfL1j8xbDILcYmSQdQpFrxyk5Y yti4uIoGF/GfW6vGuSzAtZutGa0uajaSWiLGzY3KlWdy/hw9+kNPhn0/uK7J/lRu b52E7DJ5WCLc7J90dc3+wuuG2P4l2BBr9K3eJakyBFgGNjXKwg28kNL6dLD8XdkQ 06jJ9hVmqYfKP/jnjIVYzhP3qXYCjE5N21EkVCTOJfbFFAwUGrqyDCVVpDC5hFOH 67ElVktQvOGWZLP9hkVpkj1b0TTFZWtDfPezrvXo05PudyvXgMDGwBAR/FU5ZsDD rHgcV2/ADOg1w74ulUL7onP/KXRNREksi6Q= -----END CERTIFICATE-----Generated at Mon Jun 30 01:01:11 2025 by rpki-client