$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9897e08e-3b07-3795-b18d-a3a81becf2a1.roa File: 9897e08e-3b07-3795-b18d-a3a81becf2a1.roa (raw, json) Hash identifier: bEtSPlcQ656IfHRUHiGPLvfzeUA6Rq0ueoJezaAGnYI= Subject key identifier: 56:F0:F1:1A:47:B0:BA:E2:C6:5F:F0:13:AD:71:80:81:BE:97:10:A3 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584940395F9E3D6085367EDE2A00 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9897e08e-3b07-3795-b18d-a3a81becf2a1.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 54113 IP address blocks: 2607:8940:43a0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:5f:9e:3d:60:85:36:7e:de:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=a8eb9167-84cb-4632-9a32-159ffc95a9ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:09:82:6c:66:78:64:a2:76:69:10:26:99:f5: 49:53:af:44:f1:05:24:8e:01:4e:09:86:97:5d:55: 85:1a:80:53:88:04:60:be:0e:f7:47:23:05:42:20: 8d:07:e4:93:43:dd:3e:ac:44:b8:17:b1:e4:87:d3: c0:3b:d4:fd:33:32:b5:00:39:b9:99:04:50:57:fc: cd:f7:48:b6:0b:34:23:8b:81:56:23:d3:b5:8a:98: 19:77:56:f1:3e:6c:48:89:9f:e3:6c:52:1e:1c:9b: f8:0a:43:dd:78:3b:af:13:ae:54:29:15:df:23:df: f9:5a:4f:b6:2a:6b:f3:c6:7d:09:e5:75:aa:75:64: 6f:71:99:0b:1b:11:23:37:50:5c:9b:af:86:5e:d2: ea:97:a9:d7:03:ee:2f:89:03:56:bf:e1:38:ea:e7: bf:61:00:09:1a:64:bd:fb:e0:9f:7d:85:aa:3f:08: b4:5e:4a:3d:66:41:a6:99:20:f5:c4:85:84:e6:ed: 64:cc:64:e6:ac:51:7c:9b:b6:4e:ba:af:79:f8:17: af:04:c7:20:6a:45:19:a9:dd:62:3d:9f:57:c0:84: 94:04:f4:13:5a:22:bf:8a:a8:8e:e2:b9:74:da:b9: 32:13:d0:16:21:5a:ed:b7:8b:92:37:d9:76:45:02: f7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F0:F1:1A:47:B0:BA:E2:C6:5F:F0:13:AD:71:80:81:BE:97:10:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9897e08e-3b07-3795-b18d-a3a81becf2a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:43a0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:ef:d8:f4:0b:c4:22:82:2f:6f:5a:5b:3b:87:bc:9e:66:c7: db:d0:d4:e7:d8:67:89:51:e6:5c:fc:11:0e:ef:9b:dc:a8:49: 4a:8f:b0:77:90:bd:50:05:e5:8b:ee:1a:99:8d:85:42:6e:04: 11:fa:42:e2:4f:68:87:18:08:b2:b3:59:e9:55:01:5f:b8:8e: e3:87:92:25:f6:8d:12:b9:73:31:34:8b:9e:19:21:6b:91:5a: 9e:7e:a5:df:85:63:e6:4b:7b:6e:3c:cf:f8:0b:c1:c6:6f:18: c4:47:a8:85:8e:49:23:52:97:b8:1d:6a:09:5a:52:25:20:cc: 1a:2a:d2:91:f5:06:8b:c7:d9:02:ec:d4:10:23:d4:ed:6a:0b: e5:e5:58:c3:34:3b:db:67:93:25:84:61:26:20:07:9f:2f:fa: d0:3d:e3:f2:3e:a6:69:41:a9:74:5b:79:ad:31:68:26:e9:f9: 6e:40:9a:b6:16:d6:58:90:2b:5a:85:83:86:8a:0b:d2:10:22: cc:a8:3e:7c:77:92:9f:f2:63:84:7b:c5:51:84:52:b1:d0:b6: ba:25:5b:f5:91:e6:c4:e9:ad:58:16:a8:8c:b0:8f:e0:a3:52: 13:4a:be:59:cb:58:cc:02:ef:c6:66:17:a6:05:61:dd:1b:a1: 93:cd:17:69 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElAOV+ePWCFNn7eKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk YThlYjkxNjctODRjYi00NjMyLTlhMzItMTU5ZmZjOTVhOWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwmCbGZ4ZKJ2aRAmmfVJU69E8QUkjgFOCYaX XVWFGoBTiARgvg73RyMFQiCNB+STQ90+rES4F7Hkh9PAO9T9MzK1ADm5mQRQV/zN 90i2CzQji4FWI9O1ipgZd1bxPmxIiZ/jbFIeHJv4CkPdeDuvE65UKRXfI9/5Wk+2 Kmvzxn0J5XWqdWRvcZkLGxEjN1Bcm6+GXtLql6nXA+4viQNWv+E46ue/YQAJGmS9 ++CffYWqPwi0Xko9ZkGmmSD1xIWE5u1kzGTmrFF8m7ZOuq95+BevBMcgakUZqd1i PZ9XwISUBPQTWiK/iqiO4rl02rkyE9AWIVrtt4uSN9l2RQL31wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFbw8RpHsLrixl/wE61xgIG+lxCjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvOTg5N2UwOGUtM2IwNy0z Nzk1LWIxOGQtYTNhODFiZWNmMmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEOg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACLv2PQLxCKCL29aWzuHvJ5mx9vQ1OfYZ4lR5lz8EQ7vm9yoSUqP sHeQvVAF5YvuGpmNhUJuBBH6QuJPaIcYCLKzWelVAV+4juOHkiX2jRK5czE0i54Z IWuRWp5+pd+FY+ZLe248z/gLwcZvGMRHqIWOSSNSl7gdaglaUiUgzBoq0pH1BovH 2QLs1BAj1O1qC+XlWMM0O9tnkyWEYSYgB58v+tA94/I+pmlBqXRbea0xaCbp+W5A mrYW1liQK1qFg4aKC9IQIsyoPnx3kp/yY4R7xVGEUrHQtrolW/WR5sTprVgWqIyw j+CjUhNKvlnLWMwC78ZmF6YFYd0boZPNF2k= -----END CERTIFICATE-----Generated at Sat Apr 26 18:03:45 2025 by rpki-client