$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/23c48aa7-7b03-3dc8-8acc-71c1e073bb7d.roa File: 23c48aa7-7b03-3dc8-8acc-71c1e073bb7d.roa (raw, json) Hash identifier: 2E+iIgm9ptUzX5KFtbQGfNS/hVoYC6A/A/+n9V9iDPM= Subject key identifier: 7F:21:A8:0E:74:1C:5F:5A:68:EA:3F:C8:59:89:AE:67:87:1B:BE:3B Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584940395AD1431B0EBB4AB524C0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/23c48aa7-7b03-3dc8-8acc-71c1e073bb7d.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 54113 IP address blocks: 2607:8940:4570::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:5a:d1:43:1b:0e:bb:4a:b5:24:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=bc6e8da8-ffcd-4db5-91d3-3acfda08e695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:30:a6:7d:ca:ef:a5:84:a9:52:b6:58:95:eb: 28:71:61:db:d6:c4:67:57:39:19:4e:2e:fa:14:a0: b3:74:96:4a:1c:2d:c2:7c:28:dc:ae:13:18:1c:63: dc:a6:5d:a2:54:0f:6a:06:b6:9d:59:c9:58:e6:58: 0e:92:74:12:20:ea:54:1e:4d:4d:4b:b7:39:e9:79: ad:4a:33:57:ff:32:6e:75:05:13:6c:a3:3a:1d:d0: 8a:bf:98:37:64:aa:78:08:08:f7:da:e2:0e:a4:35: d8:b3:d0:6e:c3:dc:c6:9d:7f:f9:71:47:92:ed:8a: 88:73:34:06:3b:e5:68:a7:9a:b3:5b:21:38:87:06: e0:7f:d6:26:71:83:fc:79:18:d6:b6:ff:91:ea:43: 35:c0:3a:25:6b:87:5b:01:b2:4f:53:c5:c9:bb:ad: 03:d9:bf:6d:d0:fe:6c:0c:9a:cb:37:08:a0:22:e5: 7a:5e:b1:f1:02:10:a0:11:80:96:69:c0:36:1f:92: 1f:8d:89:52:3b:45:79:9d:cd:cc:f4:17:c2:30:f2: 72:68:90:96:d3:8e:f6:66:33:ac:8f:9f:63:fc:7c: 57:22:49:9a:bb:2e:47:94:90:10:dd:40:b3:21:67: 26:4a:04:6e:5a:27:70:10:e6:4c:e3:42:f5:15:1f: bb:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:21:A8:0E:74:1C:5F:5A:68:EA:3F:C8:59:89:AE:67:87:1B:BE:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/23c48aa7-7b03-3dc8-8acc-71c1e073bb7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:4570::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:29:bd:d6:69:5e:75:6c:f6:09:2e:13:05:6c:bd:3d:33:4b: f1:d0:b9:ff:4f:7f:b6:09:86:0a:6c:0a:0c:6a:9e:0d:d1:55: da:db:36:ee:f6:88:2f:0b:37:9f:cc:48:67:d4:63:e7:8f:ad: 8b:97:d3:a4:13:62:b4:f1:de:3b:35:d1:58:2e:db:1b:73:f7: 06:cc:d6:8e:75:0b:76:c0:a7:ca:07:da:5a:d8:ec:b2:58:31: 37:a3:ad:bf:57:f2:6e:9b:93:3a:cc:37:98:ec:a0:f1:0c:68: ca:1a:56:96:7c:d2:90:81:72:68:21:5b:39:05:e5:16:9e:a0: 03:ef:80:fc:72:07:d8:71:91:38:7e:43:cc:1b:24:7c:7f:83: 4a:48:36:f4:e8:e3:df:d6:de:1d:b8:b1:a3:3a:51:ec:dd:2f: ef:05:81:09:9b:23:72:cc:1e:d9:f9:e5:9d:2d:cb:d0:00:43: cf:d3:79:ad:22:af:2e:0b:20:0d:37:47:f7:64:8b:56:52:5b: 2c:d7:a8:77:4e:ed:3a:d5:8f:f2:ce:19:59:88:06:2e:22:38: 4e:df:30:ab:ec:6e:6f:76:8c:3f:cc:01:7e:7b:73:42:7d:c9: 0c:23:07:33:61:3f:54:4e:d2:41:c1:7b:1c:59:e5:0b:af:e4: 11:d6:dc:45 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElAOVrRQxsOu0q1JMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk YmM2ZThkYTgtZmZjZC00ZGI1LTkxZDMtM2FjZmRhMDhlNjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTCmfcrvpYSpUrZYlesocWHb1sRnVzkZTi76 FKCzdJZKHC3CfCjcrhMYHGPcpl2iVA9qBradWclY5lgOknQSIOpUHk1NS7c56Xmt SjNX/zJudQUTbKM6HdCKv5g3ZKp4CAj32uIOpDXYs9Buw9zGnX/5cUeS7YqIczQG O+Vop5qzWyE4hwbgf9YmcYP8eRjWtv+R6kM1wDola4dbAbJPU8XJu60D2b9t0P5s DJrLNwigIuV6XrHxAhCgEYCWacA2H5IfjYlSO0V5nc3M9BfCMPJyaJCW0472ZjOs j59j/HxXIkmauy5HlJAQ3UCzIWcmSgRuWidwEOZM40L1FR+75wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH8hqA50HF9aaOo/yFmJrmeHG747MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMjNjNDhhYTctN2IwMy0z ZGM4LThhY2MtNzFjMWUwNzNiYjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEVw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACUpvdZpXnVs9gkuEwVsvT0zS/HQuf9Pf7YJhgpsCgxqng3RVdrb Nu72iC8LN5/MSGfUY+ePrYuX06QTYrTx3js10Vgu2xtz9wbM1o51C3bAp8oH2lrY 7LJYMTejrb9X8m6bkzrMN5jsoPEMaMoaVpZ80pCBcmghWzkF5RaeoAPvgPxyB9hx kTh+Q8wbJHx/g0pINvTo49/W3h24saM6UezdL+8FgQmbI3LMHtn55Z0ty9AAQ8/T ea0iry4LIA03R/dki1ZSWyzXqHdO7TrVj/LOGVmIBi4iOE7fMKvsbm92jD/MAX57 c0J9yQwjBzNhP1RO0kHBexxZ5Quv5BHW3EU= -----END CERTIFICATE-----Generated at Sat Apr 26 16:00:01 2025 by rpki-client