$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2927fde4-c48b-3a61-a990-44a73aa90286.roa File: 2927fde4-c48b-3a61-a990-44a73aa90286.roa (raw, json) Hash identifier: hSgJSehcJKZXBfPzpc232l+ypnRo8MDWfPECHjnfPLo= Subject key identifier: 75:96:BD:AC:F8:53:1C:0E:B4:7B:21:82:14:83:B0:C7:41:C8:06:80 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285849403974A77783CDBDAB270F00 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2927fde4-c48b-3a61-a990-44a73aa90286.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 54113 IP address blocks: 2607:8940:48e0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:74:a7:77:83:cd:bd:ab:27:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=d16a5e04-26bb-415c-9b83-c9e032fdd27e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2a:36:18:4c:d9:6b:88:41:66:ff:8e:27:3b: 40:1f:57:47:03:f6:05:25:ae:1f:d8:24:81:1c:8a: e9:51:2d:73:ce:56:33:64:19:2c:cf:cb:bb:dc:f1: d0:f8:66:fa:0a:22:1f:ec:25:e6:3e:1d:d8:8f:a6: 27:41:fd:97:68:cd:5b:b1:4b:b6:80:46:8e:39:62: 27:2a:e0:65:49:96:06:e3:9d:ef:79:7c:10:3f:7a: 07:e6:49:1b:22:6c:ac:c4:78:9e:75:ed:50:e9:64: 19:a6:ff:d0:9a:9a:56:29:16:4f:d2:8c:b5:fd:36: 03:a3:bb:80:68:43:2d:2f:f2:40:c8:1d:b2:a7:5c: 94:fd:78:ec:71:8b:78:f3:d0:f9:83:9b:6d:21:4f: 28:19:29:ca:c2:81:c6:a9:18:1f:e5:12:c6:0f:7e: 7f:fe:cb:46:87:6f:6d:b1:56:9a:ae:b9:27:70:9e: 4b:3e:46:84:fa:f1:a6:97:28:13:f3:dc:6e:71:2e: 2d:09:37:b6:04:c9:63:34:61:16:06:9f:f0:22:a0: 55:7e:63:d5:97:55:ff:e0:e1:af:7c:fb:3a:54:b2: cc:c4:a5:5b:6e:59:f9:5e:ea:08:f7:6a:7b:2f:42: 3c:41:12:18:f4:37:3a:c5:39:b7:2e:2f:d6:bb:5f: 97:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:96:BD:AC:F8:53:1C:0E:B4:7B:21:82:14:83:B0:C7:41:C8:06:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2927fde4-c48b-3a61-a990-44a73aa90286.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:48e0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:1c:c5:73:0a:9b:14:ff:ad:b8:05:cf:d9:fe:27:8f:13:96: 4e:70:96:1f:fc:66:4c:26:0f:7e:07:85:28:fe:4c:29:31:e2: 18:96:19:94:76:c0:9d:5b:b5:60:d0:38:13:b9:df:ea:d1:50: da:2a:c5:68:4c:f7:cc:1e:69:de:c7:13:1d:25:cc:c1:87:02: e1:dc:1b:f9:70:d5:db:47:d1:c4:c9:7c:80:0d:18:ec:26:6c: f5:f0:47:0e:00:f6:87:4a:23:d8:e2:35:87:d7:dc:00:91:f1: 9e:4d:57:08:e4:23:1e:e0:1d:a0:e5:47:5d:aa:c4:44:cb:a1: b7:56:50:ca:0d:fa:7f:bd:61:ec:dc:6d:3a:72:86:41:7f:6f: fd:36:ad:41:99:41:5c:0b:93:1c:67:b8:3e:72:b2:a0:33:c8: 21:05:2f:8f:d2:45:ce:1e:49:65:ed:4d:80:6d:94:50:e4:9e: ef:3d:0d:78:d8:04:e2:4e:27:50:47:45:9a:f6:b0:a5:f5:ee: 46:d8:bf:09:6c:98:49:56:70:61:8e:d6:b5:0f:28:af:8d:ca: 72:fc:b9:ff:8e:bd:d4:c3:bc:1c:38:9b:0c:76:c2:e1:70:0c: 9b:4f:82:4c:78:c3:d1:d8:94:c2:d9:e5:be:0a:96:59:fd:8a: 44:f9:7b:8f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElAOXSnd4PNvasnDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk ZDE2YTVlMDQtMjZiYi00MTVjLTliODMtYzllMDMyZmRkMjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSo2GEzZa4hBZv+OJztAH1dHA/YFJa4f2CSB HIrpUS1zzlYzZBksz8u73PHQ+Gb6CiIf7CXmPh3Yj6YnQf2XaM1bsUu2gEaOOWIn KuBlSZYG453veXwQP3oH5kkbImysxHiede1Q6WQZpv/QmppWKRZP0oy1/TYDo7uA aEMtL/JAyB2yp1yU/XjscYt489D5g5ttIU8oGSnKwoHGqRgf5RLGD35//stGh29t sVaarrkncJ5LPkaE+vGmlygT89xucS4tCTe2BMljNGEWBp/wIqBVfmPVl1X/4OGv fPs6VLLMxKVbbln5XuoI92p7L0I8QRIY9Dc6xTm3Li/Wu1+XvwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHWWvaz4UxwOtHshghSDsMdByAaAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMjkyN2ZkZTQtYzQ4Yi0z YTYxLWE5OTAtNDRhNzNhYTkwMjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEjg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAccxXMKmxT/rbgFz9n+J48Tlk5wlh/8ZkwmD34HhSj+TCkx4hiW GZR2wJ1btWDQOBO53+rRUNoqxWhM98wead7HEx0lzMGHAuHcG/lw1dtH0cTJfIAN GOwmbPXwRw4A9odKI9jiNYfX3ACR8Z5NVwjkIx7gHaDlR12qxETLobdWUMoN+n+9 YezcbTpyhkF/b/02rUGZQVwLkxxnuD5ysqAzyCEFL4/SRc4eSWXtTYBtlFDknu89 DXjYBOJOJ1BHRZr2sKX17kbYvwlsmElWcGGO1rUPKK+NynL8uf+OvdTDvBw4mwx2 wuFwDJtPgkx4w9HYlMLZ5b4Klln9ikT5e48= -----END CERTIFICATE-----Generated at Sat Apr 26 19:08:17 2025 by rpki-client