$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/40d11d89-9022-3c13-ab02-4d286fb7a11d.roa File: 40d11d89-9022-3c13-ab02-4d286fb7a11d.roa (raw, json) Hash identifier: r2CdIM++IVBbap52+oBkyWtsOI6BztZ/vhLB56AX1Lc= Subject key identifier: 14:8E:C3:7A:0A:75:EB:D5:FD:41:23:5B:10:CB:0B:02:62:AA:73:BC Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584940395CCDC78FB295514E6780 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/40d11d89-9022-3c13-ab02-4d286fb7a11d.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 54113 IP address blocks: 2607:8940:5840::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:5c:cd:c7:8f:b2:95:51:4e:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=fab96816-a65a-4bb9-a2d6-9a9eba711474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:eb:15:fd:99:56:43:54:80:44:97:da:9b:91: f2:c4:49:a9:38:8c:95:fc:8d:c6:32:46:fa:96:3f: 76:cb:9c:b6:f7:34:03:36:a0:89:a1:94:2e:c9:1e: ca:49:95:c7:bc:ab:39:e8:b4:ca:ad:d1:58:42:ea: bb:84:d5:f0:38:ae:a6:e8:f9:7c:58:93:c0:56:86: fe:87:ee:c3:52:dd:0a:30:64:c2:0c:61:95:1e:22: cb:f9:f2:07:69:85:12:cc:55:5d:83:e7:df:cf:4d: ab:e1:ad:55:30:31:69:fb:f1:03:b9:73:fb:cc:89: 13:7d:06:c7:2c:65:ca:f0:9a:47:e7:2c:f8:fe:a7: 79:e3:f8:f3:9c:9c:e2:2f:27:78:2f:45:56:fd:ee: 4e:cf:ec:37:7d:e5:70:23:59:aa:50:f1:59:37:04: 5c:40:6a:17:4b:f6:7c:c3:10:6c:3a:0a:92:06:5e: 53:b2:3c:48:1c:5c:18:c3:11:21:f3:ec:ae:47:bb: e3:13:c1:68:9c:0f:e5:ad:61:fc:77:a6:7a:16:f8: e4:68:31:d1:0e:ac:17:a8:1e:21:f0:3e:6f:fa:a1: 57:bd:39:ad:c0:93:6b:7b:fb:4e:43:c6:32:84:df: b6:5d:a1:1f:8b:48:e9:5a:20:9f:33:83:ba:4a:71: 7e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:8E:C3:7A:0A:75:EB:D5:FD:41:23:5B:10:CB:0B:02:62:AA:73:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/40d11d89-9022-3c13-ab02-4d286fb7a11d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:5840::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:fd:53:19:ce:70:ee:84:c0:01:52:06:46:63:d2:a1:79:2b: 9e:22:01:c1:69:23:08:f8:f2:4c:a9:53:d6:a5:29:6e:d8:37: e5:f1:35:8e:b8:bb:b7:63:fd:47:c1:99:95:b8:66:2d:41:1f: 09:0e:a6:f2:a1:72:37:f0:38:5c:75:aa:3c:b0:2a:4c:11:0f: 10:d6:ce:f3:79:c9:33:ec:7b:e0:7d:5d:33:57:54:a7:9f:5a: f6:b7:d2:d4:b6:35:57:17:72:1e:90:2a:d9:d4:69:90:5f:79: 37:27:d3:fa:14:7d:b3:52:c0:50:b8:c1:07:bd:0e:86:58:75: 6a:4a:16:3f:12:67:9b:fc:0f:bb:55:10:26:32:8e:0e:33:24: 8e:03:d2:b9:97:0d:44:4c:a1:bf:81:1e:19:8b:03:c8:11:d0: 61:83:12:5d:ea:f4:dc:4d:56:b8:80:75:66:74:8d:8f:ab:2e: 61:1a:4e:64:26:d3:35:81:98:77:72:5e:85:44:e1:95:ed:1b: 42:c5:44:29:ee:2b:f1:b9:73:47:ea:34:ee:f1:3e:20:60:d2: e5:f1:fd:a9:08:70:b0:e0:9a:b6:cd:39:84:68:ea:1b:b4:c7: 5c:6c:ad:4d:f4:7f:2b:d6:c2:07:07:8a:e9:75:9d:5f:78:44: 0e:0e:bb:f6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElAOVzNx4+ylVFOZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk ZmFiOTY4MTYtYTY1YS00YmI5LWEyZDYtOWE5ZWJhNzExNDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+sV/ZlWQ1SARJfam5HyxEmpOIyV/I3GMkb6 lj92y5y29zQDNqCJoZQuyR7KSZXHvKs56LTKrdFYQuq7hNXwOK6m6Pl8WJPAVob+ h+7DUt0KMGTCDGGVHiLL+fIHaYUSzFVdg+ffz02r4a1VMDFp+/EDuXP7zIkTfQbH LGXK8JpH5yz4/qd54/jznJziLyd4L0VW/e5Oz+w3feVwI1mqUPFZNwRcQGoXS/Z8 wxBsOgqSBl5TsjxIHFwYwxEh8+yuR7vjE8FonA/lrWH8d6Z6FvjkaDHRDqwXqB4h 8D5v+qFXvTmtwJNre/tOQ8YyhN+2XaEfi0jpWiCfM4O6SnF+JwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBSOw3oKdevV/UEjWxDLCwJiqnO8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNDBkMTFkODktOTAyMi0z YzEzLWFiMDItNGQyODZmYjdhMTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFhA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABP9UxnOcO6EwAFSBkZj0qF5K54iAcFpIwj48kypU9alKW7YN+Xx NY64u7dj/UfBmZW4Zi1BHwkOpvKhcjfwOFx1qjywKkwRDxDWzvN5yTPse+B9XTNX VKefWva30tS2NVcXch6QKtnUaZBfeTcn0/oUfbNSwFC4wQe9DoZYdWpKFj8SZ5v8 D7tVECYyjg4zJI4D0rmXDURMob+BHhmLA8gR0GGDEl3q9NxNVriAdWZ0jY+rLmEa TmQm0zWBmHdyXoVE4ZXtG0LFRCnuK/G5c0fqNO7xPiBg0uXx/akIcLDgmrbNOYRo 6hu0x1xsrU30fyvWwgcHiul1nV94RA4Ou/Y= -----END CERTIFICATE-----Generated at Sat Apr 26 16:06:12 2025 by rpki-client