$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2b05d98d-e46e-3896-a59e-72b1d1d5a892.roa File: 2b05d98d-e46e-3896-a59e-72b1d1d5a892.roa (raw, json) Hash identifier: vf+bmAVkKTXlPTIKHqUGgB6mmPjyhNjHPjCdRf/CXFk= Subject key identifier: A0:D7:81:D1:4F:E4:C9:26:3C:45:9D:46:5B:85:6B:C0:C7:D5:F4:19 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285849403964A86716F66082151E40 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2b05d98d-e46e-3896-a59e-72b1d1d5a892.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 54113 IP address blocks: 2607:8940:4aa0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:64:a8:67:16:f6:60:82:15:1e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=318dab31-41ae-402d-9c25-5720864da553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:62:f5:ee:47:cf:35:3e:2e:47:01:da:51:91: 40:81:8a:27:8d:ca:08:b2:e7:ff:de:0a:ce:31:dc: 6b:c9:88:fc:c5:d0:33:17:f1:85:08:2a:21:ae:d7: 77:7b:81:9d:5c:7b:a9:b9:9e:bb:49:d3:67:63:15: 46:80:d8:66:04:76:1f:86:98:a3:58:e6:16:5d:0f: e5:2f:b8:5f:7e:ca:6d:b1:c0:7a:1e:2a:46:42:6f: d3:ce:77:00:2d:89:59:a0:d6:36:b9:df:63:cc:ae: fe:2e:c6:72:3c:17:28:92:ed:79:d0:44:62:41:d2: f6:b4:f4:b8:c2:69:48:4a:af:ee:5a:9a:e4:c6:44: ed:44:7b:ff:ea:65:64:4f:b9:41:fa:04:94:6f:b2: db:19:a2:18:0b:af:70:89:90:36:92:7d:66:2c:e4: f2:45:b5:b5:8d:4a:1c:6b:49:eb:f9:d7:e4:58:2f: 42:0f:68:0e:df:55:4b:4b:11:db:42:78:78:8b:96: 8e:ee:35:f4:04:75:84:6b:06:ef:5c:45:8f:6a:1a: fd:af:f8:30:75:95:57:b3:f3:0e:4f:76:99:0d:25: c2:63:f4:5c:35:7b:46:f5:65:88:a8:56:3a:8b:94: 63:1e:58:b3:85:49:4e:b7:b0:a5:70:13:15:55:55: 1d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:D7:81:D1:4F:E4:C9:26:3C:45:9D:46:5B:85:6B:C0:C7:D5:F4:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2b05d98d-e46e-3896-a59e-72b1d1d5a892.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:4aa0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:21:2c:3d:1a:53:1a:17:bc:c3:b6:45:17:30:bd:b5:27:18: 2d:81:3e:78:f9:63:06:5b:16:54:e1:aa:4f:2b:7d:2e:72:81: e8:49:fd:47:80:df:ee:78:bb:26:e3:95:b2:d3:01:0d:e2:35: f1:52:e3:ae:2f:6c:76:dc:dd:49:8e:ea:79:af:7e:e9:56:ba: 32:e6:1a:83:a1:b9:df:cf:0c:92:e3:1b:3a:a7:7e:11:61:03: b2:f0:2e:82:51:a3:ab:02:0f:d9:47:ec:2a:b6:da:ce:ff:13: 3f:c8:d1:91:1d:9a:50:04:45:53:da:7d:2b:f9:73:b8:42:a7: af:89:45:cb:9e:44:4c:72:93:92:a1:3c:55:ae:fe:17:17:03: e9:f2:02:04:44:4c:e3:fd:82:c6:12:06:6a:e2:68:e6:23:51: 64:83:eb:f9:26:19:fa:c9:fb:66:85:c5:86:e4:71:82:98:81: 2a:9d:68:14:2d:87:d2:fb:dd:e3:cc:87:bd:ce:11:b5:5a:fd: e2:63:88:c0:34:f0:35:49:97:23:0b:5d:dd:6a:a2:ba:36:d3: c0:c0:a8:f1:b3:c1:0a:56:77:51:cc:e4:e1:1b:86:97:8c:7d: db:67:31:9e:5a:df:b1:80:17:8b:93:08:8e:ea:a2:fe:e4:53: 9d:68:a7:34 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElAOWSoZxb2YIIVHkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk MzE4ZGFiMzEtNDFhZS00MDJkLTljMjUtNTcyMDg2NGRhNTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWL17kfPNT4uRwHaUZFAgYonjcoIsuf/3grO MdxryYj8xdAzF/GFCCohrtd3e4GdXHupuZ67SdNnYxVGgNhmBHYfhpijWOYWXQ/l L7hffsptscB6HipGQm/TzncALYlZoNY2ud9jzK7+LsZyPBcoku150ERiQdL2tPS4 wmlISq/uWprkxkTtRHv/6mVkT7lB+gSUb7LbGaIYC69wiZA2kn1mLOTyRbW1jUoc a0nr+dfkWC9CD2gO31VLSxHbQnh4i5aO7jX0BHWEawbvXEWPahr9r/gwdZVXs/MO T3aZDSXCY/RcNXtG9WWIqFY6i5RjHlizhUlOt7ClcBMVVVUdcwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKDXgdFP5MkmPEWdRluFa8DH1fQZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMmIwNWQ5OGQtZTQ2ZS0z ODk2LWE1OWUtNzJiMWQxZDVhODkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEqg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHwhLD0aUxoXvMO2RRcwvbUnGC2BPnj5YwZbFlThqk8rfS5ygehJ /UeA3+54uybjlbLTAQ3iNfFS464vbHbc3UmO6nmvfulWujLmGoOhud/PDJLjGzqn fhFhA7LwLoJRo6sCD9lH7Cq22s7/Ez/I0ZEdmlAERVPafSv5c7hCp6+JRcueRExy k5KhPFWu/hcXA+nyAgRETOP9gsYSBmriaOYjUWSD6/kmGfrJ+2aFxYbkcYKYgSqd aBQth9L73ePMh73OEbVa/eJjiMA08DVJlyMLXd1qoro208DAqPGzwQpWd1HM5OEb hpeMfdtnMZ5a37GAF4uTCI7qov7kU51opzQ= -----END CERTIFICATE-----Generated at Sat Apr 26 17:43:34 2025 by rpki-client