$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5f52ad1f-e462-396a-a34a-a161dcd6df80.roa File: 5f52ad1f-e462-396a-a34a-a161dcd6df80.roa (raw, json) Hash identifier: uMktyebPlQJZsq35boJ/bcYiSFYnJnl5cY+A+ci7od8= Subject key identifier: DF:8B:E8:B3:60:53:E8:96:78:3C:F5:28:22:DE:14:26:5B:65:C7:75 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584940396CE98BBC63E24F491680 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5f52ad1f-e462-396a-a34a-a161dcd6df80.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 54113 IP address blocks: 2607:8940:4860::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:6c:e9:8b:bc:63:e2:4f:49:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=a14b2d07-db7d-4630-871e-65b2bc5adbc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:84:5b:cc:8c:67:33:36:fa:e1:0e:b2:c7:fd: 2e:1c:ab:e5:87:82:77:ba:27:f8:5a:e9:c7:0c:47: 1a:14:9f:2f:34:33:02:cf:11:c7:c4:55:4c:14:b9: 71:36:a9:ee:92:6d:0b:65:ea:99:6d:4a:53:ee:a3: c2:fa:4f:02:f3:3d:40:b5:a5:99:ca:93:11:d3:d4: 61:94:2c:d7:53:7e:56:d2:0e:94:b9:a5:84:16:13: 35:d0:5f:36:51:b5:db:8e:c0:ba:f1:02:26:96:c2: 95:fc:18:2a:db:e1:ea:8d:95:3e:68:d9:7b:1e:6e: fa:d0:18:c7:5d:f1:cf:c1:c0:4f:e6:bb:0e:7f:1e: 5a:79:cb:5c:ab:f6:04:ce:16:26:9f:85:2f:72:76: fa:21:52:67:e9:41:c4:66:2d:4c:26:16:56:24:62: db:ef:d4:b2:16:93:8d:ce:66:93:c8:9f:07:87:3e: b7:e8:8b:98:70:30:44:28:34:ac:36:3f:0f:ec:ae: e0:15:ca:5e:ef:ef:6b:89:bc:5f:d2:1e:e0:49:0a: 81:6b:a5:94:4b:8f:b6:c8:9d:4c:82:33:a8:3d:a0: b8:3b:e4:92:0d:56:f5:68:68:7b:73:0f:5b:7a:e3: 8e:9c:39:69:b9:1c:81:3d:e5:b1:98:c7:cb:a0:89: b4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:8B:E8:B3:60:53:E8:96:78:3C:F5:28:22:DE:14:26:5B:65:C7:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5f52ad1f-e462-396a-a34a-a161dcd6df80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:4860::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:28:10:54:bd:d1:89:e5:ef:de:37:1b:66:d2:e9:85:e8:b9: 7e:72:c1:aa:a8:8c:f2:01:5a:aa:88:c6:d4:ba:aa:6e:9b:ed: ff:24:c4:75:e3:65:19:7d:17:9d:9e:4d:fe:d0:f5:07:c1:47: b9:ac:68:1b:50:40:24:ad:6c:b9:24:00:51:8b:08:d0:c7:ee: 41:37:fd:c7:2c:ac:dc:78:2e:90:a6:45:0b:ee:e7:ad:7b:8a: eb:df:4b:01:67:18:1d:ef:d9:ef:5a:1e:0a:9d:16:2b:0a:4d: 1d:90:ed:c5:b0:8b:2f:00:72:ae:19:5a:47:a6:f5:ff:d1:3e: 4f:85:bc:85:e1:7f:06:64:ac:c7:c1:46:ee:64:38:1b:95:9b: c4:20:0e:88:2c:fc:2e:07:0f:2d:98:60:a5:3b:b3:b1:58:a4: b8:1e:f6:8f:25:c5:c2:e3:0d:8b:9d:1c:55:e5:0a:7e:2c:20: 6b:ac:cd:cd:38:9a:3d:94:f7:91:c7:86:40:d7:88:ae:ae:4e: 7d:11:f0:06:d5:9e:fa:88:3d:4d:10:cf:45:58:34:38:64:16: 70:13:19:51:25:ae:ef:25:c0:4e:6f:f7:be:99:22:0f:e8:96: 96:a0:97:f9:82:1c:d8:b5:e2:13:cd:23:b3:21:0e:65:02:d2: 49:7f:51:e6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElAOWzpi7xj4k9JFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk YTE0YjJkMDctZGI3ZC00NjMwLTg3MWUtNjViMmJjNWFkYmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4RbzIxnMzb64Q6yx/0uHKvlh4J3uif4WunH DEcaFJ8vNDMCzxHHxFVMFLlxNqnukm0LZeqZbUpT7qPC+k8C8z1AtaWZypMR09Rh lCzXU35W0g6UuaWEFhM10F82UbXbjsC68QImlsKV/Bgq2+HqjZU+aNl7Hm760BjH XfHPwcBP5rsOfx5aectcq/YEzhYmn4Uvcnb6IVJn6UHEZi1MJhZWJGLb79SyFpON zmaTyJ8Hhz636IuYcDBEKDSsNj8P7K7gFcpe7+9ribxf0h7gSQqBa6WUS4+2yJ1M gjOoPaC4O+SSDVb1aGh7cw9beuOOnDlpuRyBPeWxmMfLoIm0NwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN+L6LNgU+iWeDz1KCLeFCZbZcd1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNWY1MmFkMWYtZTQ2Mi0z OTZhLWEzNGEtYTE2MWRjZDZkZjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEhg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACooEFS90Ynl7943G2bS6YXouX5ywaqojPIBWqqIxtS6qm6b7f8k xHXjZRl9F52eTf7Q9QfBR7msaBtQQCStbLkkAFGLCNDH7kE3/ccsrNx4LpCmRQvu 5617iuvfSwFnGB3v2e9aHgqdFisKTR2Q7cWwiy8Acq4ZWkem9f/RPk+FvIXhfwZk rMfBRu5kOBuVm8QgDogs/C4HDy2YYKU7s7FYpLge9o8lxcLjDYudHFXlCn4sIGus zc04mj2U95HHhkDXiK6uTn0R8AbVnvqIPU0Qz0VYNDhkFnATGVElru8lwE5v976Z Ig/olpagl/mCHNi14hPNI7MhDmUC0kl/UeY= -----END CERTIFICATE-----Generated at Sat Apr 26 16:03:17 2025 by rpki-client