$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1072b390-8c15-3903-aa82-aba7b947a672.roa File: 1072b390-8c15-3903-aa82-aba7b947a672.roa (raw, json) Hash identifier: Tw7cbV6q4qOXxli3RJ9zM3nw7SCZWt6/I4HQLbzQZf0= Subject key identifier: 46:6F:F7:5F:64:47:6B:7A:F1:FE:0A:E0:07:01:26:98:7B:C5:44:1E Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285849403956DED1D4703109235780 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1072b390-8c15-3903-aa82-aba7b947a672.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 54113 IP address blocks: 2607:8940:4b30::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:56:de:d1:d4:70:31:09:23:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=90f4c3ab-c4e5-482f-ac40-dabf9f0bd067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:5f:d0:65:eb:25:a9:e8:0e:ee:77:cc:5d:e9: 3c:d5:9d:af:7f:a1:f1:7c:e3:98:0b:3a:8d:ec:01: 75:00:f2:3d:12:1c:80:fa:03:e3:b3:ae:e1:3f:ba: 42:22:58:fd:0b:99:63:37:72:c3:f0:78:49:56:be: f2:d6:e2:b1:87:7c:9f:2e:f7:ca:b7:3d:2a:e1:8c: 06:b6:30:9f:a8:3f:f3:8a:cc:b3:6b:46:d9:1e:03: 3b:80:d7:bd:41:2d:9c:35:86:72:16:44:ed:03:69: 7d:77:96:dd:41:52:f4:b8:88:e3:f9:97:59:ec:b0: ce:d0:af:f0:ea:95:0b:98:ab:85:2e:9e:8f:3e:51: a1:73:01:59:7e:a5:58:b7:5b:b0:ea:54:29:de:21: 7d:04:f4:c5:08:83:d0:19:f0:3d:95:ba:55:6e:03: ae:44:05:9c:b1:31:84:27:6d:22:56:22:0d:71:d8: 7a:41:a0:7c:52:c3:79:ed:28:10:69:b9:d3:cd:62: 61:4f:03:95:03:ec:3f:30:5a:ca:37:ed:6b:0e:c3: 4f:77:06:8e:b8:68:6b:fb:52:ec:e0:3a:41:82:d9: 09:d7:5c:60:e3:fe:00:08:bb:43:a5:8d:1b:f1:1c: fd:7b:5c:0f:65:af:7c:1a:69:26:dd:1a:57:8f:bd: f9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:6F:F7:5F:64:47:6B:7A:F1:FE:0A:E0:07:01:26:98:7B:C5:44:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1072b390-8c15-3903-aa82-aba7b947a672.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:4b30::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:29:74:33:c6:ed:35:38:d7:f7:1b:89:08:2d:14:64:7d:52: ce:f6:84:69:20:34:44:94:26:26:01:54:b7:0c:2c:21:85:0d: 3e:e2:e2:1b:94:ad:06:c6:12:12:d4:12:3e:19:57:5f:55:1c: 8a:90:0e:63:45:d8:c1:bf:91:c0:93:ce:47:dc:f4:5d:de:fe: b4:87:bf:68:6c:29:fe:6a:a1:56:59:26:87:02:71:e4:a4:f6: ba:c9:c3:77:b1:75:81:da:26:a9:bd:b6:69:eb:92:86:5c:49: ad:82:27:6c:68:d0:e2:ec:70:58:f5:f9:c3:4d:5b:02:2a:bc: c9:91:03:8c:d7:98:e5:e2:9e:29:b5:a9:dd:d1:8c:cf:a5:e8: 1d:f7:1a:6f:ad:d1:c7:29:7c:5f:6c:84:30:ed:62:56:36:91: c3:fb:c5:fd:5d:25:2a:dc:d7:1b:ea:1d:be:65:02:a1:ed:da: 3a:3b:37:4b:83:a8:4b:bf:11:2c:06:9f:2f:66:c6:72:7d:60: b6:88:96:a7:bb:45:b9:54:3c:fa:f0:c4:6c:84:b6:06:2b:11: 46:54:a0:83:19:b6:9d:16:5e:60:6a:56:7d:c5:41:6e:42:69: a0:1a:cc:ca:62:a2:d8:79:4d:64:87:85:20:02:c3:ab:65:19: a1:55:8f:c7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElAOVbe0dRwMQkjV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk OTBmNGMzYWItYzRlNS00ODJmLWFjNDAtZGFiZjlmMGJkMDY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjV/QZeslqegO7nfMXek81Z2vf6HxfOOYCzqN 7AF1API9EhyA+gPjs67hP7pCIlj9C5ljN3LD8HhJVr7y1uKxh3yfLvfKtz0q4YwG tjCfqD/zisyza0bZHgM7gNe9QS2cNYZyFkTtA2l9d5bdQVL0uIjj+ZdZ7LDO0K/w 6pULmKuFLp6PPlGhcwFZfqVYt1uw6lQp3iF9BPTFCIPQGfA9lbpVbgOuRAWcsTGE J20iViINcdh6QaB8UsN57SgQabnTzWJhTwOVA+w/MFrKN+1rDsNPdwaOuGhr+1Ls 4DpBgtkJ11xg4/4ACLtDpY0b8Rz9e1wPZa98Gmkm3RpXj735VQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEZv919kR2t68f4K4AcBJph7xUQeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMTA3MmIzOTAtOGMxNS0z OTAzLWFhODItYWJhN2I5NDdhNjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEsw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAMpdDPG7TU41/cbiQgtFGR9Us72hGkgNESUJiYBVLcMLCGFDT7i 4huUrQbGEhLUEj4ZV19VHIqQDmNF2MG/kcCTzkfc9F3e/rSHv2hsKf5qoVZZJocC ceSk9rrJw3exdYHaJqm9tmnrkoZcSa2CJ2xo0OLscFj1+cNNWwIqvMmRA4zXmOXi nim1qd3RjM+l6B33Gm+t0ccpfF9shDDtYlY2kcP7xf1dJSrc1xvqHb5lAqHt2jo7 N0uDqEu/ESwGny9mxnJ9YLaIlqe7RblUPPrwxGyEtgYrEUZUoIMZtp0WXmBqVn3F QW5CaaAazMpioth5TWSHhSACw6tlGaFVj8c= -----END CERTIFICATE-----Generated at Sat Apr 26 17:46:56 2025 by rpki-client