$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0e25af9e-dfdb-314e-aba9-07e3b60c3978.roa File: 0e25af9e-dfdb-314e-aba9-07e3b60c3978.roa (raw, json) Hash identifier: 0tdOZ67sig1lxdNZmmF3Ais1DxhyhqTsLDLEqO2rqUk= Subject key identifier: 4E:2B:98:EB:DF:95:1D:60:D1:1B:40:56:F7:E8:53:60:61:82:3A:59 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285849403957102595652D44EA0000 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0e25af9e-dfdb-314e-aba9-07e3b60c3978.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 54113 IP address blocks: 2607:8940:4010::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:57:10:25:95:65:2d:44:ea:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=e940ded3-2b96-4fbe-ae71-12a37b9faf0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ca:da:95:dc:5c:f8:37:b9:d5:d6:ed:b1:b3: ad:8a:3b:f6:47:f9:4d:33:2d:26:3f:1a:27:da:b4: 86:64:43:ac:55:40:05:ae:8a:85:ee:3b:a7:fc:b5: 47:a6:04:19:c3:87:16:27:80:5f:4f:2a:e8:ad:f0: 2a:cb:09:1f:b1:42:af:0e:07:74:7a:9f:7e:2e:54: e9:aa:10:b0:56:b4:96:59:d3:ff:63:73:e9:0a:31: c2:d1:b6:b0:a2:a8:f3:a8:23:cd:0f:e2:fc:d2:32: 1b:ab:f1:28:16:4b:bf:41:b8:62:6d:41:05:b4:18: 76:8f:14:54:79:73:2f:b7:9f:56:f1:53:7b:2b:53: 26:09:ac:6d:58:36:6e:23:2c:4b:59:38:69:50:1e: 84:c9:f7:51:b6:1e:94:aa:4b:3d:6e:7d:03:f9:04: 9d:ad:a9:a1:2e:92:7a:c1:7f:0a:71:e8:d0:ba:03: ca:98:17:24:40:b2:9c:6a:61:df:94:c7:30:f8:bb: b0:b0:a3:5f:b5:ad:ad:49:55:03:80:10:a5:30:36: d3:7e:84:84:e5:0e:60:33:be:89:15:22:ef:c6:10: 5b:37:29:5e:74:98:39:33:b2:88:63:b5:17:c8:f1: 67:2f:fe:da:04:b9:b7:56:fe:1e:5c:1a:e7:49:2c: 4c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:2B:98:EB:DF:95:1D:60:D1:1B:40:56:F7:E8:53:60:61:82:3A:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0e25af9e-dfdb-314e-aba9-07e3b60c3978.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:4010::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:38:63:c4:e2:79:9c:dd:27:9e:06:ff:87:42:57:a0:0b:74: 31:29:cb:5e:03:05:68:f5:6f:4d:50:3f:44:fb:4e:f2:2a:f4: 23:5f:ac:4d:1c:d4:ea:59:58:af:ca:f0:e4:67:8f:33:17:4e: f5:ad:26:46:f9:df:06:26:ba:a3:06:1e:a8:f8:7c:ea:68:1c: b4:9f:03:63:10:7a:bb:87:9a:3c:65:cc:50:b9:40:b5:cb:e4: 5f:08:ee:1d:56:e5:45:9a:dd:fb:b1:c3:61:b0:a9:22:36:ec: 88:c4:06:c6:29:0a:e4:eb:d1:76:8e:54:5e:19:19:c0:56:f9: 8a:32:3c:7b:10:89:1f:a5:f1:f3:3e:d9:4e:56:96:1a:41:88: b1:2a:89:c4:82:77:98:48:aa:46:00:91:b2:84:af:0a:8b:7f: 30:de:50:84:32:e0:ac:2e:b8:e2:d8:90:03:c6:6a:03:25:3c: a2:f2:42:7d:cf:e6:6a:8a:31:a4:7f:a1:f3:1c:bc:ba:79:f8: 8f:1b:c2:13:7f:fe:2e:a5:3b:6a:ee:68:da:2e:10:43:83:73: 51:21:6f:f3:f7:8e:23:b7:06:bd:4d:50:71:e1:84:8c:73:5b: a1:22:6a:9a:7a:80:88:f8:e4:e3:7a:af:a4:f2:5f:24:74:0f: f7:9a:c4:b2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElAOVcQJZVlLUTqAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk ZTk0MGRlZDMtMmI5Ni00ZmJlLWFlNzEtMTJhMzdiOWZhZjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMraldxc+De51dbtsbOtijv2R/lNMy0mPxon 2rSGZEOsVUAFroqF7jun/LVHpgQZw4cWJ4BfTyrorfAqywkfsUKvDgd0ep9+LlTp qhCwVrSWWdP/Y3PpCjHC0bawoqjzqCPND+L80jIbq/EoFku/QbhibUEFtBh2jxRU eXMvt59W8VN7K1MmCaxtWDZuIyxLWThpUB6EyfdRth6Uqks9bn0D+QSdramhLpJ6 wX8KcejQugPKmBckQLKcamHflMcw+LuwsKNfta2tSVUDgBClMDbTfoSE5Q5gM76J FSLvxhBbNyledJg5M7KIY7UXyPFnL/7aBLm3Vv4eXBrnSSxM0QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE4rmOvflR1g0RtAVvfoU2BhgjpZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMGUyNWFmOWUtZGZkYi0z MTRlLWFiYTktMDdlM2I2MGMzOTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEAQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABU4Y8TieZzdJ54G/4dCV6ALdDEpy14DBWj1b01QP0T7TvIq9CNf rE0c1OpZWK/K8ORnjzMXTvWtJkb53wYmuqMGHqj4fOpoHLSfA2MQeruHmjxlzFC5 QLXL5F8I7h1W5UWa3fuxw2GwqSI27IjEBsYpCuTr0XaOVF4ZGcBW+YoyPHsQiR+l 8fM+2U5WlhpBiLEqicSCd5hIqkYAkbKErwqLfzDeUIQy4KwuuOLYkAPGagMlPKLy Qn3P5mqKMaR/ofMcvLp5+I8bwhN//i6lO2ruaNouEEODc1Ehb/P3jiO3Br1NUHHh hIxzW6Eiapp6gIj45ON6r6TyXyR0D/eaxLI= -----END CERTIFICATE-----Generated at Sat Apr 26 17:39:17 2025 by rpki-client