$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/930a6e43-d549-30f7-98c2-8453b5c55742.roa File: 930a6e43-d549-30f7-98c2-8453b5c55742.roa (raw, json) Hash identifier: XPBieMNjbXecs6SCC8D5wGLO+1eZ0Qxs0O9sLUklWck= Subject key identifier: 24:16:D2:76:4D:67:B9:99:EE:3A:20:1C:40:E9:0B:D6:D2:5F:65:5E Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584940395A82A8B3D0872D9C04A0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/930a6e43-d549-30f7-98c2-8453b5c55742.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 54113 IP address blocks: 2607:8940:5180::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:5a:82:a8:b3:d0:87:2d:9c:04:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=6cc628c8-054e-4aca-a26c-4ffd9d996e7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2e:c2:6b:ce:ba:22:11:9e:3f:3c:df:dc:52: fd:11:71:84:c7:ac:18:13:93:96:b9:9c:a4:44:60: 4d:32:07:8d:e6:a5:89:a1:39:8d:e5:ac:ef:29:c6: b3:e3:ad:8c:93:2e:44:94:02:d5:5a:d6:01:21:85: cf:a7:57:8c:d0:63:da:57:2e:e5:ca:5e:45:93:4d: 37:b3:f1:de:03:dc:19:f9:9a:67:f5:84:5b:67:99: b2:b7:f9:a8:ab:7a:72:68:da:71:f8:a1:54:7f:ba: 91:64:55:22:79:81:7d:e4:0f:6e:31:13:39:3c:7d: 6b:52:fa:99:2f:da:e3:ed:26:da:93:bf:8b:a0:a2: 9e:1e:6e:fb:fb:d3:02:28:1a:fb:80:06:8b:59:aa: d2:2d:0c:90:1d:97:33:e2:ae:21:a8:11:1a:42:f0: 9a:e6:04:3a:0c:f0:b5:01:cf:56:d5:62:90:65:ad: e2:08:ed:8f:1b:93:75:0f:b9:bc:64:d5:60:31:82: 66:e5:c7:75:78:f6:f0:46:59:fc:9c:14:07:ff:a2: 19:96:d7:21:92:1c:ea:3c:7c:9d:c5:41:c0:99:ce: 7e:b1:75:f6:b8:53:07:61:91:64:b5:54:3b:c9:f1: 7f:64:a1:f8:ca:3e:a0:45:51:88:d0:ea:d0:4f:9f: 63:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:16:D2:76:4D:67:B9:99:EE:3A:20:1C:40:E9:0B:D6:D2:5F:65:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/930a6e43-d549-30f7-98c2-8453b5c55742.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:5180::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:b5:4a:a6:c3:23:a9:cd:75:49:62:43:4b:ea:ff:f1:7e:07: e2:51:c1:3f:6b:fa:86:c2:30:df:32:48:57:c9:e0:35:1f:fc: e6:02:c3:de:fd:1a:bd:b9:3f:78:8f:e6:f4:76:53:33:85:0f: 1b:66:8a:25:8e:23:f9:29:6b:71:47:17:cc:bd:0c:8c:40:bd: d4:de:1f:c8:8d:e8:65:7f:ca:6f:99:52:16:c4:46:f8:3f:52: 55:f4:12:8f:6f:c5:61:cc:80:7b:94:9d:73:d3:81:49:17:f1: 24:0d:b0:6c:1e:0b:6f:d1:1c:68:24:8a:d6:d7:35:e6:20:9a: d9:21:84:ae:f8:da:a3:87:eb:fc:aa:be:38:ba:6d:c3:c1:c8: e3:61:d0:62:38:a6:8a:c5:d9:f5:ef:57:95:e4:1c:94:3f:f9: 69:09:22:e7:3a:22:b1:ba:2f:64:75:e2:f0:b4:7c:21:5d:be: 81:ce:bf:cf:43:f5:16:f2:64:fb:f6:12:ed:fb:94:01:b4:db: c4:c6:b4:c9:fb:1c:c4:40:b2:3b:4b:8c:f3:0d:f6:e4:de:0a: b8:2d:c2:5c:00:04:08:3e:b5:d7:f1:d9:5b:bb:58:05:f5:47: e9:31:a1:a7:8a:96:ca:ad:a7:63:db:40:ea:5a:79:6a:90:80: 68:01:b2:76 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElAOVqCqLPQhy2cBKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk NmNjNjI4YzgtMDU0ZS00YWNhLWEyNmMtNGZmZDlkOTk2ZTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiC7Ca866IhGePzzf3FL9EXGEx6wYE5OWuZyk RGBNMgeN5qWJoTmN5azvKcaz462Mky5ElALVWtYBIYXPp1eM0GPaVy7lyl5Fk003 s/HeA9wZ+Zpn9YRbZ5myt/moq3pyaNpx+KFUf7qRZFUieYF95A9uMRM5PH1rUvqZ L9rj7Sbak7+LoKKeHm77+9MCKBr7gAaLWarSLQyQHZcz4q4hqBEaQvCa5gQ6DPC1 Ac9W1WKQZa3iCO2PG5N1D7m8ZNVgMYJm5cd1ePbwRln8nBQH/6IZltchkhzqPHyd xUHAmc5+sXX2uFMHYZFktVQ7yfF/ZKH4yj6gRVGI0OrQT59jIQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCQW0nZNZ7mZ7jogHEDpC9bSX2VeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvOTMwYTZlNDMtZDU0OS0z MGY3LTk4YzItODQ1M2I1YzU1NzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFGA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABO1SqbDI6nNdUliQ0vq//F+B+JRwT9r+obCMN8ySFfJ4DUf/OYC w979Gr25P3iP5vR2UzOFDxtmiiWOI/kpa3FHF8y9DIxAvdTeH8iN6GV/ym+ZUhbE Rvg/UlX0Eo9vxWHMgHuUnXPTgUkX8SQNsGweC2/RHGgkitbXNeYgmtkhhK742qOH 6/yqvji6bcPByONh0GI4porF2fXvV5XkHJQ/+WkJIuc6IrG6L2R14vC0fCFdvoHO v89D9RbyZPv2Eu37lAG028TGtMn7HMRAsjtLjPMN9uTeCrgtwlwABAg+tdfx2Vu7 WAX1R+kxoaeKlsqtp2PbQOpaeWqQgGgBsnY= -----END CERTIFICATE-----Generated at Sun Apr 27 02:26:59 2025 by rpki-client