$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/25e51a87-cd99-3d4f-975e-9fc43a2d0787.roa File: 25e51a87-cd99-3d4f-975e-9fc43a2d0787.roa (raw, json) Hash identifier: sU148HtZnqY7uvYR7Cx+ffWbUxqeNliv4k4oAjoW1eE= Subject key identifier: B9:01:7A:A1:91:D8:28:CA:70:5C:0C:DF:29:95:F8:58:B4:73:70:FE Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584940396A2D290B66B0464DF080 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/25e51a87-cd99-3d4f-975e-9fc43a2d0787.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 54113 IP address blocks: 2607:8940:4d60::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:6a:2d:29:0b:66:b0:46:4d:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=ad63496f-add4-4c61-9ede-6c269b3c001f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b4:61:40:9d:a6:f9:2b:bb:b6:f9:64:aa:a2: 60:b3:3b:df:4a:7c:38:bd:1d:49:93:c9:ac:f6:20: 7c:4d:98:d9:cf:1d:70:a9:86:c9:e1:6a:aa:6d:17: bb:bb:70:df:11:1c:ca:5a:f2:44:c6:4a:44:3e:6d: 7d:91:9f:75:af:9d:f6:4e:3c:2d:5e:05:46:bc:3f: a3:8c:dc:00:bf:cd:16:6a:36:4b:d0:b9:9b:26:3a: 16:51:73:6f:3a:81:3f:95:05:94:b3:b2:9b:05:5b: 03:fd:e1:09:b6:ac:92:30:8a:7b:60:56:23:fc:66: 82:75:a1:3c:36:fa:00:5a:6b:ae:78:bb:86:8e:ef: 2a:dd:ba:48:e1:80:d6:68:2e:e9:bb:5d:6c:96:f7: 8b:0a:b1:a2:75:e5:bd:83:4c:05:a4:c6:03:6a:f9: d3:d2:99:9d:81:63:e9:19:eb:53:be:ca:56:e1:87: 16:5e:c4:0c:a6:7b:f3:4d:86:9b:07:f1:81:04:0d: 2c:dc:6b:f8:14:c3:c8:ad:dc:9c:0a:25:e1:a7:e6: a7:a4:b3:e3:9e:d6:2c:23:8b:83:fc:0f:b6:3a:a4: 52:11:c7:b9:42:1f:0c:6e:5c:d5:12:9c:2b:c0:71: c4:c4:0f:4b:85:a6:cc:e2:7d:bb:20:c8:5c:f4:8b: f5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:01:7A:A1:91:D8:28:CA:70:5C:0C:DF:29:95:F8:58:B4:73:70:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/25e51a87-cd99-3d4f-975e-9fc43a2d0787.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:4d60::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:70:61:bb:47:cc:88:1e:97:7d:ba:b7:45:2f:80:21:c2:29: 5d:ed:db:d5:d9:7b:3b:7c:d0:40:08:05:23:ba:d1:05:b8:3d: 3e:a9:5e:f3:5a:b2:a9:e2:b9:02:fe:df:7a:41:69:04:b9:4b: 64:bd:a5:69:3d:18:eb:a9:19:7d:5a:ef:18:5b:b2:be:20:e7: d0:76:da:01:4d:e1:3d:34:7f:47:de:63:e9:31:41:6e:92:19: f4:57:23:33:a7:d5:99:0d:2c:b5:11:bc:15:72:46:fe:d9:92: 5f:36:b8:51:d3:09:e8:df:72:ad:02:12:fb:de:5b:7f:d2:06: 0f:24:c5:e2:a3:8f:34:12:ba:fd:00:c6:d8:14:4f:5e:11:55: a3:e3:47:bc:4f:4b:3b:f8:34:c6:d5:32:de:c3:78:87:03:03: 34:fc:7b:36:95:ae:da:b4:ac:78:ad:b2:62:3e:55:5a:02:3b: 0a:bf:80:98:a1:d8:86:e6:71:1b:51:5e:8f:18:ce:46:68:c6: f0:ee:20:09:d4:a1:e0:79:89:a0:be:e8:06:8a:67:35:68:23: 7e:37:07:44:ec:d7:17:74:db:b8:d7:e2:8d:5c:33:3e:55:d9: 9b:4c:95:5f:5b:cd:94:31:9b:12:72:b3:55:2e:82:c3:b7:b9: 93:21:01:9b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElAOWotKQtmsEZN8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk YWQ2MzQ5NmYtYWRkNC00YzYxLTllZGUtNmMyNjliM2MwMDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbRhQJ2m+Su7tvlkqqJgszvfSnw4vR1Jk8ms 9iB8TZjZzx1wqYbJ4WqqbRe7u3DfERzKWvJExkpEPm19kZ91r532TjwtXgVGvD+j jNwAv80WajZL0LmbJjoWUXNvOoE/lQWUs7KbBVsD/eEJtqySMIp7YFYj/GaCdaE8 NvoAWmuueLuGju8q3bpI4YDWaC7pu11slveLCrGideW9g0wFpMYDavnT0pmdgWPp GetTvspW4YcWXsQMpnvzTYabB/GBBA0s3Gv4FMPIrdycCiXhp+anpLPjntYsI4uD /A+2OqRSEce5Qh8MblzVEpwrwHHExA9LhabM4n27IMhc9Iv1RwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLkBeqGR2CjKcFwM3ymV+Fi0c3D+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMjVlNTFhODctY2Q5OS0z ZDRmLTk3NWUtOWZjNDNhMmQwNzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQE1g MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIFwYbtHzIgel326t0UvgCHCKV3t29XZezt80EAIBSO60QW4PT6p XvNasqniuQL+33pBaQS5S2S9pWk9GOupGX1a7xhbsr4g59B22gFN4T00f0feY+kx QW6SGfRXIzOn1ZkNLLURvBVyRv7Zkl82uFHTCejfcq0CEvveW3/SBg8kxeKjjzQS uv0AxtgUT14RVaPjR7xPSzv4NMbVMt7DeIcDAzT8ezaVrtq0rHitsmI+VVoCOwq/ gJih2IbmcRtRXo8YzkZoxvDuIAnUoeB5iaC+6AaKZzVoI343B0Ts1xd027jX4o1c Mz5V2ZtMlV9bzZQxmxJys1UugsO3uZMhAZs= -----END CERTIFICATE-----Generated at Sat Apr 26 18:31:54 2025 by rpki-client