$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b66b3500-9c6b-307f-89ee-ca5eb9ef69ec.roa File: b66b3500-9c6b-307f-89ee-ca5eb9ef69ec.roa (raw, json) Hash identifier: N3qvRdK9CvP9XnJkLpOKoa7+JdQP2iZR6/1w0iEB6Co= Subject key identifier: 97:DA:99:99:BA:9E:AF:E0:82:60:D9:21:8E:B7:9A:E8:CB:4E:8D:7D Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584940397096171B9A032DA0B180 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b66b3500-9c6b-307f-89ee-ca5eb9ef69ec.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 54113 IP address blocks: 2607:8940:4730::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:70:96:17:1b:9a:03:2d:a0:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=7cf34349-9225-4eae-acc7-b1e256a16cfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f2:d1:a4:3e:83:bc:c5:02:0e:ac:0b:c2:4c: 6f:46:d7:8d:86:5b:da:76:17:15:0d:78:8b:b4:11: 5e:f2:64:0b:ef:50:ef:7b:fc:62:59:b8:f1:e2:67: ef:b8:76:b2:13:ba:9c:04:c6:a0:d5:d6:c8:6b:c3: 09:25:8d:5a:f7:96:20:6d:9d:eb:4e:7f:7f:d6:a3: 57:70:02:07:ea:93:01:36:78:8e:cb:fa:5f:18:59: 9e:50:f8:87:45:cf:aa:ec:a5:ee:b7:2b:3c:69:40: 7b:fb:23:6e:58:d5:4c:20:59:6e:2d:60:81:9b:b0: b2:f9:1e:c3:eb:94:3e:db:25:ae:ba:cb:c7:3b:83: 32:4c:54:f1:a7:a4:fd:85:5b:cc:69:fd:9c:cc:ef: 8a:07:9b:61:c6:96:32:85:cd:c6:72:ce:ad:9c:e8: fe:4f:8b:80:6b:8c:7f:b3:4b:19:68:93:b4:92:09: 81:d2:72:08:40:10:8e:7a:a6:86:8c:6c:bd:94:49: cf:54:5a:b4:61:63:ad:46:27:76:9e:7c:5f:00:8b: 89:3e:90:66:db:cc:46:6a:8d:ee:c7:2d:c9:ec:3a: 47:84:e1:b1:43:9d:0e:b2:09:6c:e8:71:85:49:97: 4e:1a:8f:3b:7a:26:89:23:62:8f:39:ff:ab:b6:0e: 97:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:DA:99:99:BA:9E:AF:E0:82:60:D9:21:8E:B7:9A:E8:CB:4E:8D:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b66b3500-9c6b-307f-89ee-ca5eb9ef69ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:4730::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:c4:75:ef:3d:61:d9:f1:95:ea:85:09:1a:82:36:5f:93:dd: 74:17:b7:23:44:9e:c1:04:09:ab:9d:8e:00:93:0e:1f:65:db: a4:d3:07:e1:eb:ea:d2:a5:38:37:1b:d6:ba:d7:26:8e:46:e2: ad:51:38:f9:72:85:1a:9d:7b:73:b9:16:b5:ce:26:46:e5:96: 05:e9:2e:e6:a0:56:41:57:ea:61:21:c4:9c:32:97:cc:60:30: c0:ba:1a:c8:1f:6a:55:07:b9:cc:f6:0a:ef:25:41:e5:99:87: 57:48:51:8d:a2:c5:89:61:47:b9:c5:62:49:43:1c:87:5e:6e: b9:d1:5b:4c:01:68:c0:03:92:1d:66:d3:15:96:14:ba:61:26: a3:b2:5f:b6:1e:90:04:72:7a:40:35:35:c9:ce:8e:6c:d3:23: 02:ca:fc:8f:7e:db:7d:7e:33:6e:5b:c8:3f:4d:a3:37:dd:29: a9:6d:ac:1f:89:47:d4:68:dc:82:d2:ae:db:cc:0e:20:04:c8: ca:bd:d9:21:80:99:8f:f0:9e:82:20:62:ca:44:b1:e0:7c:f2: ea:16:e4:a9:34:69:55:30:7e:ba:ef:ba:ce:be:00:57:28:a9: 33:f7:df:42:4c:fb:54:65:59:49:de:2f:3b:4e:f0:89:18:b4: 7e:13:a8:0e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElAOXCWFxuaAy2gsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk N2NmMzQzNDktOTIyNS00ZWFlLWFjYzctYjFlMjU2YTE2Y2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/LRpD6DvMUCDqwLwkxvRteNhlvadhcVDXiL tBFe8mQL71Dve/xiWbjx4mfvuHayE7qcBMag1dbIa8MJJY1a95YgbZ3rTn9/1qNX cAIH6pMBNniOy/pfGFmeUPiHRc+q7KXutys8aUB7+yNuWNVMIFluLWCBm7Cy+R7D 65Q+2yWuusvHO4MyTFTxp6T9hVvMaf2czO+KB5thxpYyhc3Gcs6tnOj+T4uAa4x/ s0sZaJO0kgmB0nIIQBCOeqaGjGy9lEnPVFq0YWOtRid2nnxfAIuJPpBm28xGao3u xy3J7DpHhOGxQ50Osgls6HGFSZdOGo87eiaJI2KPOf+rtg6XwQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJfamZm6nq/ggmDZIY63mujLTo19MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYjY2YjM1MDAtOWM2Yi0z MDdmLTg5ZWUtY2E1ZWI5ZWY2OWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEcw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACzEde89YdnxleqFCRqCNl+T3XQXtyNEnsEECaudjgCTDh9l26TT B+Hr6tKlODcb1rrXJo5G4q1ROPlyhRqde3O5FrXOJkbllgXpLuagVkFX6mEhxJwy l8xgMMC6GsgfalUHucz2Cu8lQeWZh1dIUY2ixYlhR7nFYklDHIdebrnRW0wBaMAD kh1m0xWWFLphJqOyX7YekARyekA1NcnOjmzTIwLK/I9+231+M25byD9NozfdKalt rB+JR9Ro3ILSrtvMDiAEyMq92SGAmY/wnoIgYspEseB88uoW5Kk0aVUwfrrvus6+ AFcoqTP330JM+1RlWUneLztO8IkYtH4TqA4= -----END CERTIFICATE-----Generated at Sat Apr 26 20:56:17 2025 by rpki-client