$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3adf23d3-6504-323c-9e1a-a0056920d146.roa File: 3adf23d3-6504-323c-9e1a-a0056920d146.roa (raw, json) Hash identifier: rNT6ooA3nJRfO3xZNX96Xjt52Tjzwd3bkQ0szGlVNTU= Subject key identifier: E9:21:B8:DA:01:6A:7A:BF:DD:6E:8F:EA:0B:2D:B1:3B:06:57:37:35 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584940396D18AD6CD87783535BD0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3adf23d3-6504-323c-9e1a-a0056920d146.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 54113 IP address blocks: 2607:8940:47e0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:6d:18:ad:6c:d8:77:83:53:5b:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=0daf3d4f-0a25-4d77-a82a-ef12069983d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:17:e2:f7:ff:12:b4:11:20:25:e0:a5:b0:66: 61:3f:f1:05:52:09:8e:7e:f9:d6:ae:53:a7:55:10: 32:2e:23:7e:b1:18:8f:e4:c7:2b:59:37:08:7a:a5: 1e:4c:59:ad:28:50:16:9f:5c:4b:92:11:d5:75:3e: 1d:cf:8a:d7:85:87:01:d8:3e:71:ed:0b:7f:59:01: 6f:5b:d2:1d:3a:3a:b3:02:32:dc:0b:46:17:8b:68: 8a:58:ce:f9:cf:d3:c0:a8:ff:43:5f:ad:a8:9c:da: 14:ef:bd:a9:9b:01:14:c1:77:9e:31:3e:a2:f2:85: a0:3e:f0:b4:5c:ea:a1:9b:b1:8b:2e:a2:b1:95:fe: 15:6b:0c:80:2b:96:d2:ed:62:42:e6:46:24:20:b7: f2:e4:92:e7:25:1d:25:24:10:21:27:37:44:a7:4e: 72:26:5e:1a:ad:52:ef:7c:69:10:9c:fb:60:c4:99: e3:04:3c:3e:d4:84:1b:83:7e:9e:d1:9a:85:f1:77: 83:35:03:51:05:68:7e:81:de:73:e1:8b:c3:5f:3d: 2c:71:ec:b0:c0:12:65:58:3c:8b:29:82:2f:ab:9a: 7e:d9:04:96:20:47:89:07:29:58:5e:2b:cc:d1:ef: 80:fe:4c:7c:81:d3:a3:18:64:90:ec:bd:7d:be:b7: 21:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:21:B8:DA:01:6A:7A:BF:DD:6E:8F:EA:0B:2D:B1:3B:06:57:37:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3adf23d3-6504-323c-9e1a-a0056920d146.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:47e0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:5f:93:a1:fb:6e:d1:cf:b6:23:ba:c4:2f:56:5f:8a:c6:1f: c5:35:8d:d3:27:b0:e7:0c:af:09:42:bd:91:0b:31:11:dc:af: 50:87:e9:45:bb:82:fd:95:78:c7:77:4e:fb:86:e5:0d:e1:f0: 35:9e:fc:ad:50:b8:47:c4:54:1a:5c:ab:ed:cd:86:b6:ea:62: 12:59:8a:7d:50:67:8f:ed:0e:ce:de:fe:44:b5:47:8e:2a:04: 2b:04:3d:0a:09:93:f7:9e:96:91:d3:42:de:5e:cf:2e:eb:20: 7d:17:10:07:f5:fc:31:97:c6:b1:55:bc:67:92:86:59:18:23: 1b:8e:28:5a:c0:a1:41:64:5a:a8:ed:91:5a:f1:e0:8b:65:49: 5d:a9:63:a4:79:af:da:5d:c8:74:e0:b3:d1:37:c9:b3:fd:e5: cb:5f:0a:ed:09:ff:f8:49:9e:90:d8:2b:8d:e1:af:0e:bc:fd: fb:72:c5:89:b2:ab:78:09:2b:b8:0d:67:1b:b2:35:f8:da:e2: 77:37:81:06:15:45:6a:77:38:76:57:5a:20:c6:38:93:94:ed: bf:0e:c3:04:94:38:13:fc:fd:6a:30:4b:44:f3:c8:d0:aa:c6: fb:c7:91:57:14:ae:df:11:5c:01:f1:33:fc:30:2e:f3:d6:06: 14:4c:d1:77 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElAOW0YrWzYd4NTW9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk MGRhZjNkNGYtMGEyNS00ZDc3LWE4MmEtZWYxMjA2OTk4M2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRfi9/8StBEgJeClsGZhP/EFUgmOfvnWrlOn VRAyLiN+sRiP5McrWTcIeqUeTFmtKFAWn1xLkhHVdT4dz4rXhYcB2D5x7Qt/WQFv W9IdOjqzAjLcC0YXi2iKWM75z9PAqP9DX62onNoU772pmwEUwXeeMT6i8oWgPvC0 XOqhm7GLLqKxlf4VawyAK5bS7WJC5kYkILfy5JLnJR0lJBAhJzdEp05yJl4arVLv fGkQnPtgxJnjBDw+1IQbg36e0ZqF8XeDNQNRBWh+gd5z4YvDXz0sceywwBJlWDyL KYIvq5p+2QSWIEeJBylYXivM0e+A/kx8gdOjGGSQ7L19vrch2QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOkhuNoBanq/3W6P6gstsTsGVzc1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvM2FkZjIzZDMtNjUwNC0z MjNjLTllMWEtYTAwNTY5MjBkMTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEfg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG5fk6H7btHPtiO6xC9WX4rGH8U1jdMnsOcMrwlCvZELMRHcr1CH 6UW7gv2VeMd3TvuG5Q3h8DWe/K1QuEfEVBpcq+3NhrbqYhJZin1QZ4/tDs7e/kS1 R44qBCsEPQoJk/eelpHTQt5ezy7rIH0XEAf1/DGXxrFVvGeShlkYIxuOKFrAoUFk WqjtkVrx4ItlSV2pY6R5r9pdyHTgs9E3ybP95ctfCu0J//hJnpDYK43hrw68/fty xYmyq3gJK7gNZxuyNfja4nc3gQYVRWp3OHZXWiDGOJOU7b8OwwSUOBP8/WowS0Tz yNCqxvvHkVcUrt8RXAHxM/wwLvPWBhRM0Xc= -----END CERTIFICATE-----Generated at Sat Apr 26 19:16:04 2025 by rpki-client