$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/00c5af8d-1f47-3b57-9ef5-7f235ae40355.roa File: 00c5af8d-1f47-3b57-9ef5-7f235ae40355.roa (raw, json) Hash identifier: HIIbQCXIg8Qq2LnhbdmuVu1ubB+yKlG7obLqMT0exgs= Subject key identifier: 10:8E:F3:45:FD:8D:B0:63:F4:4B:19:8B:06:3E:11:0B:1A:DC:05:5D Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584940395E974EB2F9C8452C1980 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/00c5af8d-1f47-3b57-9ef5-7f235ae40355.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 54113 IP address blocks: 2607:8940:56e0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:5e:97:4e:b2:f9:c8:45:2c:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=a38d12ba-8ca5-4417-8e0e-bf2cd5d268fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6e:5d:72:20:9d:2a:bb:32:31:db:3b:ce:e9: fb:a4:bb:d2:07:34:a3:8b:08:00:9e:fe:70:0e:be: 52:90:4a:86:34:af:3c:48:e1:ef:ee:22:46:77:9a: 26:b5:36:5a:b0:83:54:8e:86:4d:d5:a6:fe:3a:66: 5c:17:7e:1f:14:48:a1:b3:b0:ac:8f:9a:17:b8:76: 70:79:fc:7f:74:f5:16:dc:e8:7c:12:60:b1:93:cd: f0:32:ed:3e:1f:f3:f6:25:62:48:9f:eb:c0:67:ed: ed:be:fb:e8:21:33:b4:55:68:67:d1:23:6a:c1:f6: d5:a1:f7:3a:6c:d1:da:ae:ce:44:75:c8:1f:3e:f5: a1:7a:6c:ae:b0:67:a2:f2:5f:2c:8e:fa:66:4e:b0: 6a:32:7d:c5:70:83:10:10:14:6f:eb:cd:8d:1a:6e: 1a:c4:90:69:8f:18:0a:69:56:bc:3e:14:9e:e6:9f: de:30:19:20:18:1b:52:01:40:ee:86:f4:ed:44:4d: c0:25:6a:bc:d6:5d:44:57:f3:2a:3d:20:23:fe:3f: bb:e4:21:37:d8:20:18:f5:bd:94:b9:7e:c9:3d:bc: cb:38:9b:ba:d7:16:59:69:6a:d9:42:4a:8c:4d:fb: b8:72:b1:73:f6:6e:f3:e9:77:d2:82:63:a1:19:74: 6a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:8E:F3:45:FD:8D:B0:63:F4:4B:19:8B:06:3E:11:0B:1A:DC:05:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/00c5af8d-1f47-3b57-9ef5-7f235ae40355.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:56e0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:e3:1c:f8:fb:2e:9d:f7:e8:14:79:75:ae:93:ab:2a:e7:ee: bf:36:dc:05:88:13:ac:9b:49:b3:91:0d:3a:12:6b:63:84:6c: 95:15:91:36:cd:e9:48:fb:56:b7:a1:f2:a4:52:53:db:15:d9: 4e:df:cb:9a:6e:3e:ae:7d:c2:22:29:23:40:ee:4c:59:20:c4: 38:11:d1:34:1a:cd:ff:60:f1:5a:27:da:85:39:a2:0e:05:00: e0:cc:79:aa:4c:f1:0a:a7:d2:80:16:3e:f2:aa:07:bd:b0:38: 69:f5:3c:d1:68:16:fc:08:aa:3b:a1:eb:e1:78:34:39:3c:d9: 57:c2:d2:99:82:30:eb:a5:f8:18:81:e3:e1:6d:f2:e7:5c:59: b2:3d:71:1d:46:d1:4d:56:31:0b:87:fc:91:63:a2:41:01:bd: 4b:88:94:12:c2:19:c1:df:a1:d3:bf:e6:dd:e3:bb:f9:b8:53: d4:8d:ae:65:67:c5:7e:19:6b:59:03:35:15:0a:66:f8:0f:d0: 77:ac:4f:79:36:d9:1a:bc:f2:1f:0c:5b:a0:91:61:92:a9:bb: 83:f7:c8:f3:d3:e7:8d:05:29:ac:1b:17:d5:66:db:57:2e:4a: 98:e9:d2:99:9e:a1:f4:48:dc:75:88:21:c1:16:98:b8:ff:24: 32:54:be:c1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElAOV6XTrL5yEUsGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk YTM4ZDEyYmEtOGNhNS00NDE3LThlMGUtYmYyY2Q1ZDI2OGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArm5dciCdKrsyMds7zun7pLvSBzSjiwgAnv5w Dr5SkEqGNK88SOHv7iJGd5omtTZasINUjoZN1ab+OmZcF34fFEihs7Csj5oXuHZw efx/dPUW3Oh8EmCxk83wMu0+H/P2JWJIn+vAZ+3tvvvoITO0VWhn0SNqwfbVofc6 bNHars5EdcgfPvWhemyusGei8l8sjvpmTrBqMn3FcIMQEBRv682NGm4axJBpjxgK aVa8PhSe5p/eMBkgGBtSAUDuhvTtRE3AJWq81l1EV/MqPSAj/j+75CE32CAY9b2U uX7JPbzLOJu61xZZaWrZQkqMTfu4crFz9m7z6XfSgmOhGXRqAwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBCO80X9jbBj9EsZiwY+EQsa3AVdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMDBjNWFmOGQtMWY0Ny0z YjU3LTllZjUtN2YyMzVhZTQwMzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFbg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIbjHPj7Lp336BR5da6Tqyrn7r823AWIE6ybSbORDToSa2OEbJUV kTbN6Uj7Vreh8qRSU9sV2U7fy5puPq59wiIpI0DuTFkgxDgR0TQazf9g8Von2oU5 og4FAODMeapM8Qqn0oAWPvKqB72wOGn1PNFoFvwIqjuh6+F4NDk82VfC0pmCMOul +BiB4+Ft8udcWbI9cR1G0U1WMQuH/JFjokEBvUuIlBLCGcHfodO/5t3ju/m4U9SN rmVnxX4Za1kDNRUKZvgP0HesT3k22Rq88h8MW6CRYZKpu4P3yPPT540FKawbF9Vm 21cuSpjp0pmeofRI3HWIIcEWmLj/JDJUvsE= -----END CERTIFICATE-----Generated at Sat Apr 26 17:44:18 2025 by rpki-client