$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a2202de2-2aea-3fb9-8c47-c0d09ba47560.roa File: a2202de2-2aea-3fb9-8c47-c0d09ba47560.roa (raw, json) Hash identifier: SPkpSdPVUK/Ig7w+ZS0uMU5YoaXh+Y8PgW/sDHqyg7s= Subject key identifier: 97:62:EA:2D:2C:B6:44:B3:70:2E:5D:4C:05:5C:26:B6:44:88:D6:09 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F432858494039654CAC4078BB77A04DC0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a2202de2-2aea-3fb9-8c47-c0d09ba47560.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 54113 IP address blocks: 2607:8940:5ce0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:65:4c:ac:40:78:bb:77:a0:4d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=3c3c643d-c40d-4b52-bbd1-11ef97e2e6d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a7:40:52:65:7b:69:f1:51:9b:3b:74:7a:1e: 1d:1d:29:fd:d6:e5:23:96:48:b1:fc:54:08:40:67: 5b:41:bd:eb:07:da:bc:19:f2:70:b6:26:15:2d:46: a3:e3:98:3c:7e:3a:ae:dd:1d:08:97:aa:ee:40:d4: bb:b2:ed:46:20:70:8c:e7:9a:51:61:8f:60:76:d7: e9:90:cc:fa:6c:c6:3a:b5:50:80:c5:77:2b:89:e6: 6a:41:3a:17:2d:ea:b4:3a:23:3e:6f:5c:27:77:5c: 3c:c1:bb:95:a0:38:19:0e:1f:2a:b8:79:8d:93:ca: 9e:66:65:2b:e0:39:6b:bf:44:4d:11:12:21:9e:a5: 62:5c:3b:83:31:a0:33:9d:1f:e2:19:8e:0d:01:a5: ba:d4:ee:8b:46:32:7b:33:9a:c0:af:c7:31:7f:6f: 14:2a:98:7b:88:88:1e:3c:61:91:66:77:ce:42:89: 65:b9:89:5f:b7:38:98:20:3b:e7:79:74:91:65:92: e0:ea:e3:97:d7:6a:04:40:e4:fb:f6:fa:1f:88:4b: 9f:b3:0d:11:0a:53:87:df:9e:ea:47:3f:46:8d:3a: 1a:5e:c0:bf:0e:8e:7f:62:5d:67:2b:f9:4f:04:60: 5c:8c:ea:6e:6f:01:e7:d4:60:5c:9b:8e:2c:55:43: c0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:62:EA:2D:2C:B6:44:B3:70:2E:5D:4C:05:5C:26:B6:44:88:D6:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a2202de2-2aea-3fb9-8c47-c0d09ba47560.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:5ce0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:69:83:67:3d:b2:e9:12:6b:54:c3:d5:72:20:57:b2:30:99: 15:57:b5:80:74:ba:fc:b6:a0:62:c0:9a:9c:0f:c9:10:7c:5e: 20:cd:ac:96:f2:9d:b7:b7:e2:8e:76:22:9a:b7:55:48:d1:cb: 9e:0d:2e:23:9a:b1:bd:5a:74:7f:43:3b:7f:eb:67:76:f9:6e: 3a:45:8a:5b:56:b5:55:ea:9a:49:c9:ea:69:be:6d:05:65:3d: 67:89:58:c3:1e:35:ec:2f:5e:3a:fa:07:b2:dd:83:1f:89:41: f7:8e:66:43:46:2b:a3:ad:28:4c:d4:76:08:02:3a:ab:45:03: 06:94:07:9f:21:b6:a2:e2:57:b1:a5:93:ba:7e:3f:d9:ae:61: 2a:aa:23:8f:d9:46:76:6c:04:74:1b:c5:f1:61:f7:72:a9:29: 62:ca:82:93:fb:a4:a1:d9:9a:4e:98:82:34:26:fd:a9:80:bc: d7:39:c5:94:18:d2:82:b1:89:11:b0:13:a8:04:0e:f2:68:d8: b4:47:ae:1a:45:28:41:2d:d3:d4:f2:da:94:bc:32:97:4f:6c: 7d:6b:c2:74:6b:44:e9:e8:ed:c9:46:44:31:8a:9c:98:91:a4: f8:0d:32:1f:50:16:3c:f4:38:b0:b6:0d:b1:86:b0:fe:a1:0f: 2b:5f:56:31 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElAOWVMrEB4u3egTcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk M2MzYzY0M2QtYzQwZC00YjUyLWJiZDEtMTFlZjk3ZTJlNmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKdAUmV7afFRmzt0eh4dHSn91uUjlkix/FQI QGdbQb3rB9q8GfJwtiYVLUaj45g8fjqu3R0Il6ruQNS7su1GIHCM55pRYY9gdtfp kMz6bMY6tVCAxXcrieZqQToXLeq0OiM+b1wnd1w8wbuVoDgZDh8quHmNk8qeZmUr 4Dlrv0RNERIhnqViXDuDMaAznR/iGY4NAaW61O6LRjJ7M5rAr8cxf28UKph7iIge PGGRZnfOQolluYlftziYIDvneXSRZZLg6uOX12oEQOT79vofiEufsw0RClOH357q Rz9GjToaXsC/Do5/Yl1nK/lPBGBcjOpubwHn1GBcm44sVUPAcwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJdi6i0stkSzcC5dTAVcJrZEiNYJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYTIyMDJkZTItMmFlYS0z ZmI5LThjNDctYzBkMDliYTQ3NTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFzg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHlpg2c9sukSa1TD1XIgV7IwmRVXtYB0uvy2oGLAmpwPyRB8XiDN rJbynbe34o52Ipq3VUjRy54NLiOasb1adH9DO3/rZ3b5bjpFiltWtVXqmknJ6mm+ bQVlPWeJWMMeNewvXjr6B7Ldgx+JQfeOZkNGK6OtKEzUdggCOqtFAwaUB58htqLi V7Glk7p+P9muYSqqI4/ZRnZsBHQbxfFh93KpKWLKgpP7pKHZmk6YgjQm/amAvNc5 xZQY0oKxiRGwE6gEDvJo2LRHrhpFKEEt09Ty2pS8MpdPbH1rwnRrROno7clGRDGK nJiRpPgNMh9QFjz0OLC2DbGGsP6hDytfVjE= -----END CERTIFICATE-----Generated at Sat Apr 26 18:01:52 2025 by rpki-client