$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8333a007-1b4a-3ea6-bbc0-c37ac5d450ee.roa File: 8333a007-1b4a-3ea6-bbc0-c37ac5d450ee.roa (raw, json) Hash identifier: wuOp2VZDrjGgCtwV8MDGIEIU2cYgXE/HrxtmupLd0Ao= Subject key identifier: 73:DF:E9:12:F6:E7:41:EE:E5:7D:93:36:9C:A4:9D:C3:0F:30:1B:B8 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285849403958522460505C167F1540 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8333a007-1b4a-3ea6-bbc0-c37ac5d450ee.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 54113 IP address blocks: 2607:8940:4ff0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:58:52:24:60:50:5c:16:7f:15:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=ce3f0dd5-e2a7-48ed-95f0-8f3e479c56cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fc:b7:25:08:f9:40:3f:60:68:47:b3:11:7d: bc:e7:a3:52:ec:83:e7:9a:3c:e8:c8:f1:46:e8:07: 27:a0:68:60:bf:ca:b2:e0:23:b3:90:32:a7:71:79: 41:ae:bd:ad:c0:c1:32:56:5b:f6:19:b5:b5:e5:4a: d0:ef:74:74:40:d7:32:8d:e7:53:fc:42:8c:02:4b: de:ee:d2:14:16:97:88:b4:6e:10:03:39:a5:92:d0: a5:19:09:1e:b6:14:21:fb:c8:12:20:9f:c5:81:d1: 76:0b:4a:b6:9b:06:89:49:d2:0a:8c:08:f1:17:ce: 93:18:ca:75:b3:83:3e:95:19:f9:5c:df:45:c5:fb: 5a:53:65:c5:89:53:9e:f8:64:bc:84:b9:6a:bd:41: 4c:f9:11:46:2f:b3:12:7a:d6:2e:90:8e:71:95:f7: 40:e4:12:75:ad:ed:3a:20:38:39:7c:d8:7d:29:e6: 1b:00:d4:54:8d:36:33:9a:37:21:c8:ba:ec:71:d5: 9a:3c:09:28:4c:92:a8:9f:dd:d3:3a:8b:39:0a:d0: 3e:9c:fc:4f:2c:54:46:81:fb:be:f8:91:43:60:49: 67:ee:4f:f0:2c:82:d4:7c:2c:d3:a9:8c:2f:7b:47: 14:0c:59:59:08:2c:42:1a:e7:ed:4e:ed:6c:b4:4b: 09:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:DF:E9:12:F6:E7:41:EE:E5:7D:93:36:9C:A4:9D:C3:0F:30:1B:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8333a007-1b4a-3ea6-bbc0-c37ac5d450ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:4ff0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:bb:15:0f:0c:98:4a:ff:95:30:8e:3a:b9:bc:d5:89:b9:b2: fb:99:f9:ed:de:43:3d:94:40:14:ac:ce:b8:4f:3f:c8:88:1d: 30:9b:db:e7:b8:a3:fe:95:6f:9e:4f:d2:db:be:17:ac:c9:6b: 03:ac:20:4a:81:8e:49:3a:ee:bb:33:11:8e:0b:01:dd:3b:2a: 63:60:df:9d:4a:9d:11:c3:75:90:5d:7f:44:6d:65:eb:c2:b9: f9:6c:0b:a3:7f:21:13:63:37:c8:49:74:7d:d4:0a:11:0f:cc: 5c:ce:68:85:46:4e:00:4b:76:79:b0:4d:a6:bc:19:10:ab:4a: e1:7a:3d:5e:d5:5d:21:fa:ad:37:63:3a:9b:2b:60:f8:f2:da: 3c:ea:86:03:d6:32:a7:d3:2f:24:b9:0b:b1:c7:6c:4f:0e:7c: 56:84:f2:f1:c4:0f:af:23:1c:e6:ce:86:05:b1:c4:2e:44:ce: ac:bc:a2:72:c6:45:9b:27:f7:e6:79:de:a3:ee:a2:ac:ba:b8: b8:de:eb:19:b0:e5:7a:e4:9b:96:76:de:66:95:25:6b:b3:87: 31:09:0a:49:fc:71:f8:b2:e5:d7:89:86:70:13:75:32:f4:c5: a7:a5:ce:a7:1e:f4:21:5b:42:d4:86:09:4a:40:68:2b:d1:10: 62:b1:58:e3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElAOVhSJGBQXBZ/FUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk Y2UzZjBkZDUtZTJhNy00OGVkLTk1ZjAtOGYzZTQ3OWM1NmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPy3JQj5QD9gaEezEX2856NS7IPnmjzoyPFG 6AcnoGhgv8qy4COzkDKncXlBrr2twMEyVlv2GbW15UrQ73R0QNcyjedT/EKMAkve 7tIUFpeItG4QAzmlktClGQkethQh+8gSIJ/FgdF2C0q2mwaJSdIKjAjxF86TGMp1 s4M+lRn5XN9FxftaU2XFiVOe+GS8hLlqvUFM+RFGL7MSetYukI5xlfdA5BJ1re06 IDg5fNh9KeYbANRUjTYzmjchyLrscdWaPAkoTJKon93TOos5CtA+nPxPLFRGgfu+ +JFDYEln7k/wLILUfCzTqYwve0cUDFlZCCxCGuftTu1stEsJnwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHPf6RL250Hu5X2TNpykncMPMBu4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvODMzM2EwMDctMWI0YS0z ZWE2LWJiYzAtYzM3YWM1ZDQ1MGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQE/w MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHe7FQ8MmEr/lTCOOrm81Ym5svuZ+e3eQz2UQBSszrhPP8iIHTCb 2+e4o/6Vb55P0tu+F6zJawOsIEqBjkk67rszEY4LAd07KmNg351KnRHDdZBdf0Rt ZevCuflsC6N/IRNjN8hJdH3UChEPzFzOaIVGTgBLdnmwTaa8GRCrSuF6PV7VXSH6 rTdjOpsrYPjy2jzqhgPWMqfTLyS5C7HHbE8OfFaE8vHED68jHObOhgWxxC5Ezqy8 onLGRZsn9+Z53qPuoqy6uLje6xmw5Xrkm5Z23maVJWuzhzEJCkn8cfiy5deJhnAT dTL0xaelzqce9CFbQtSGCUpAaCvREGKxWOM= -----END CERTIFICATE-----Generated at Sat Apr 26 19:16:30 2025 by rpki-client