$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a4568767-5c04-3962-82f2-183cd71daf52.roa File: a4568767-5c04-3962-82f2-183cd71daf52.roa (raw, json) Hash identifier: AAsHqlp7gFe3W6YRyB9wSus/3ID/iXlcjiWqTiLAlcw= Subject key identifier: 29:B3:40:D9:31:00:29:17:B5:CC:84:FD:C0:6A:20:34:91:F8:77:B6 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285849403961A3653F4C7213798D80 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a4568767-5c04-3962-82f2-183cd71daf52.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 54113 IP address blocks: 2607:8940:4c40::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:61:a3:65:3f:4c:72:13:79:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=e25f4482-3c9a-4d03-ad73-7909a8d7aedf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:41:d6:3c:13:7e:3e:52:c6:d7:c9:19:bd:69: 6c:b5:5d:fd:d1:4d:98:4d:21:49:d0:ec:05:b9:cd: aa:b5:9a:b5:b1:29:bd:11:18:00:ba:8b:0f:a3:42: 6e:1f:bb:94:8a:50:a9:8b:e8:28:e8:d3:e9:52:8e: aa:87:0f:b7:e8:e2:6b:e1:9e:26:b8:97:7d:6d:7a: 78:49:73:f8:04:15:00:bf:7d:a9:00:0b:20:a0:42: 6f:28:41:ed:a2:5c:db:5a:14:87:9c:d6:b3:99:58: e8:27:3c:3b:f5:6a:bd:c6:95:eb:de:6c:72:c4:25: 81:ef:78:e1:00:59:27:bb:23:3f:ec:42:3d:5a:15: 20:d3:c0:f9:db:f2:17:ab:f0:32:9f:39:c7:2b:6a: fe:8d:81:b4:97:b6:9f:1a:a3:3d:b7:3c:6a:cc:94: c6:08:d5:cc:4c:dd:6b:5b:38:e7:bd:8b:63:c7:99: 6f:67:73:e5:c2:89:ef:41:81:61:64:3c:45:7b:34: a2:e6:52:37:8f:26:28:18:e8:e8:c8:dc:01:b5:f0: dc:48:b2:e8:0d:41:56:85:ed:cb:a5:2d:2e:b2:3b: 01:d0:8f:5a:5c:f6:9f:05:4d:b5:10:1e:63:ef:33: 4d:3b:e6:49:10:76:64:2a:24:f3:d5:2f:56:ea:32: b1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:B3:40:D9:31:00:29:17:B5:CC:84:FD:C0:6A:20:34:91:F8:77:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a4568767-5c04-3962-82f2-183cd71daf52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:4c40::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:66:a8:4d:55:a3:5c:ee:f4:96:7a:82:8e:bd:f1:d7:02:c7: 2a:77:a7:ce:5d:bb:19:ee:fc:e6:64:35:8f:0d:26:4a:af:c9: 77:84:85:8c:98:79:fc:9b:ba:a1:2e:68:de:54:d0:1e:08:d4: 04:3b:c7:17:2a:a5:aa:a3:48:1a:b1:52:c4:a7:f5:aa:a0:81: f9:a0:ee:21:46:47:d6:2d:18:3c:66:87:da:bd:b4:46:f7:d9: 6a:0f:9a:10:33:ec:ee:cc:a2:5e:87:53:97:fd:c7:0c:77:2d: d6:d6:c1:ad:61:d2:78:d1:e1:6a:b8:c9:1b:ef:3b:0a:c3:fd: 42:c4:81:4e:a4:2a:9c:7c:3a:33:05:ef:b6:b0:00:46:c1:73: 4f:6f:81:42:b8:72:f8:28:cb:94:60:a0:d8:e2:a3:68:84:86: 52:b3:61:64:b2:ed:c2:4b:58:47:06:77:58:d4:24:d6:e8:2f: e5:ab:a1:7b:c6:e8:4c:e9:da:2d:7c:3e:d3:65:8b:b9:49:ec: aa:d9:60:be:69:14:89:11:0e:01:0c:68:1f:80:28:3c:00:38: 43:79:20:4d:9c:86:92:d8:bb:0f:3d:50:85:17:85:11:4d:47: 1b:ae:d6:89:ec:ee:9a:03:28:ac:03:10:43:3a:b8:3b:b7:a0: 29:8b:7f:05 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElAOWGjZT9MchN5jYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk ZTI1ZjQ0ODItM2M5YS00ZDAzLWFkNzMtNzkwOWE4ZDdhZWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEHWPBN+PlLG18kZvWlstV390U2YTSFJ0OwF uc2qtZq1sSm9ERgAuosPo0JuH7uUilCpi+go6NPpUo6qhw+36OJr4Z4muJd9bXp4 SXP4BBUAv32pAAsgoEJvKEHtolzbWhSHnNazmVjoJzw79Wq9xpXr3mxyxCWB73jh AFknuyM/7EI9WhUg08D52/IXq/AynznHK2r+jYG0l7afGqM9tzxqzJTGCNXMTN1r WzjnvYtjx5lvZ3PlwonvQYFhZDxFezSi5lI3jyYoGOjoyNwBtfDcSLLoDUFWhe3L pS0usjsB0I9aXPafBU21EB5j7zNNO+ZJEHZkKiTz1S9W6jKxlQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCmzQNkxACkXtcyE/cBqIDSR+He2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYTQ1Njg3NjctNWMwNC0z OTYyLTgyZjItMTgzY2Q3MWRhZjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQExA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH1mqE1Vo1zu9JZ6go698dcCxyp3p85duxnu/OZkNY8NJkqvyXeE hYyYefybuqEuaN5U0B4I1AQ7xxcqpaqjSBqxUsSn9aqggfmg7iFGR9YtGDxmh9q9 tEb32WoPmhAz7O7Mol6HU5f9xwx3LdbWwa1h0njR4Wq4yRvvOwrD/ULEgU6kKpx8 OjMF77awAEbBc09vgUK4cvgoy5RgoNjio2iEhlKzYWSy7cJLWEcGd1jUJNboL+Wr oXvG6Ezp2i18PtNli7lJ7KrZYL5pFIkRDgEMaB+AKDwAOEN5IE2chpLYuw89UIUX hRFNRxuu1ons7poDKKwDEEM6uDu3oCmLfwU= -----END CERTIFICATE-----Generated at Sat Apr 26 16:18:18 2025 by rpki-client