$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bc6b4bf3-7fdd-3304-b31d-d341d6db551b.roa File: bc6b4bf3-7fdd-3304-b31d-d341d6db551b.roa (raw, json) Hash identifier: HASoXoeGWkWdv2KEq+tFl+L3KfFHcWG5x+yNMdi+9aA= Subject key identifier: 2E:51:A9:D7:E5:3B:B8:C4:3D:58:47:4C:78:43:73:40:50:36:DD:85 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F432858494039522D7FB771EEDA5F6B80 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bc6b4bf3-7fdd-3304-b31d-d341d6db551b.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 54113 IP address blocks: 2607:8940:4960::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:52:2d:7f:b7:71:ee:da:5f:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=829299d2-0ba6-413d-940d-f68adf966a1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ba:68:23:50:cb:de:0f:49:a5:ed:82:41:ef: 05:f7:f6:5c:27:87:b1:2d:03:d4:9d:69:b1:8a:71: 33:89:95:a4:6e:10:63:cf:4a:41:4c:46:33:a0:bb: 67:4c:67:ff:e2:57:bd:b0:4a:18:82:e3:d3:dc:cc: 1b:93:6e:de:46:1c:7c:ee:1c:6c:52:47:6c:23:a2: 82:b3:67:d7:1d:39:65:4f:a7:ef:bc:24:66:ec:57: 1c:b9:47:1e:71:0f:16:65:62:94:7f:f3:0b:96:2b: ea:9a:2b:0c:3c:99:53:6b:fd:61:53:aa:2f:5a:01: 3c:89:93:ea:3c:39:7f:f3:dc:93:10:12:15:f6:40: cd:a6:e1:ca:4b:27:fd:b0:11:26:48:7b:af:20:13: fc:02:61:0d:63:80:ae:a7:d9:f7:29:86:5b:39:5b: db:aa:42:ea:49:1e:08:4d:89:ab:12:e8:bc:d1:11: d8:ba:6a:fc:fd:79:cd:2b:71:9f:5f:57:18:fc:cb: cc:2f:d5:37:98:6b:6e:bd:5a:a8:c9:89:e8:34:8f: b5:1e:03:96:a2:8b:85:d8:da:1b:1c:e1:7d:94:46: e0:7c:4b:ed:d7:fa:1d:8e:84:06:91:ef:d8:e8:ad: 74:72:5f:02:06:03:6d:b2:26:68:cc:c1:d7:da:f0: 06:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:51:A9:D7:E5:3B:B8:C4:3D:58:47:4C:78:43:73:40:50:36:DD:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bc6b4bf3-7fdd-3304-b31d-d341d6db551b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:4960::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:dc:53:80:57:77:f7:90:85:0b:ee:55:17:d0:32:63:16:6c: 56:a4:8f:c7:3c:72:4a:5b:28:2a:5a:cf:5c:2c:d7:dc:6c:c6: 45:7e:fc:fb:e4:30:63:24:25:0a:1c:d5:cc:8a:85:cf:4c:fc: 7a:30:5b:66:58:a8:46:9e:57:d0:d5:e1:be:e6:59:47:db:a7: 14:4c:7e:1d:e9:74:ed:ca:c0:18:5b:86:ff:28:b1:e3:53:50: 4f:06:53:3e:ab:7e:61:74:96:a8:cc:38:f8:95:22:af:2a:b8: b1:38:72:db:15:14:4e:95:bc:ac:22:3f:6e:53:92:36:e3:8f: 8c:41:11:b6:83:7a:e3:a8:94:43:c1:bc:5b:a1:e7:2e:6c:53: 63:bb:59:e8:a5:05:d5:07:3b:c3:0e:39:2c:23:e4:2d:7d:43: 49:90:c7:b7:2f:4a:7c:97:60:79:3c:69:64:4a:0f:d5:86:98: fb:75:1c:37:f7:ed:da:f8:a7:4a:0d:72:d2:08:b1:47:65:1e: 3e:c5:01:fa:80:02:fe:4a:d8:80:19:0f:ee:e9:0c:db:1a:ce: 81:ce:b2:45:62:b4:06:8d:b6:0d:32:c9:aa:74:1c:1f:aa:ff: 9b:76:f2:1a:2a:33:51:92:c5:24:87:ca:98:de:0b:87:eb:4a: c2:4c:b2:92 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElAOVItf7dx7tpfa4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk ODI5Mjk5ZDItMGJhNi00MTNkLTk0MGQtZjY4YWRmOTY2YTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7poI1DL3g9Jpe2CQe8F9/ZcJ4exLQPUnWmx inEziZWkbhBjz0pBTEYzoLtnTGf/4le9sEoYguPT3Mwbk27eRhx87hxsUkdsI6KC s2fXHTllT6fvvCRm7FccuUcecQ8WZWKUf/MLlivqmisMPJlTa/1hU6ovWgE8iZPq PDl/89yTEBIV9kDNpuHKSyf9sBEmSHuvIBP8AmENY4Cup9n3KYZbOVvbqkLqSR4I TYmrEui80RHYumr8/XnNK3GfX1cY/MvML9U3mGtuvVqoyYnoNI+1HgOWoouF2Nob HOF9lEbgfEvt1/odjoQGke/Y6K10cl8CBgNtsiZozMHX2vAGjwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC5RqdflO7jEPVhHTHhDc0BQNt2FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYmM2YjRiZjMtN2ZkZC0z MzA0LWIzMWQtZDM0MWQ2ZGI1NTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQElg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACbcU4BXd/eQhQvuVRfQMmMWbFakj8c8ckpbKCpaz1ws19xsxkV+ /PvkMGMkJQoc1cyKhc9M/HowW2ZYqEaeV9DV4b7mWUfbpxRMfh3pdO3KwBhbhv8o seNTUE8GUz6rfmF0lqjMOPiVIq8quLE4ctsVFE6VvKwiP25Tkjbjj4xBEbaDeuOo lEPBvFuh5y5sU2O7WeilBdUHO8MOOSwj5C19Q0mQx7cvSnyXYHk8aWRKD9WGmPt1 HDf37dr4p0oNctIIsUdlHj7FAfqAAv5K2IAZD+7pDNsazoHOskVitAaNtg0yyap0 HB+q/5t28hoqM1GSxSSHypjeC4frSsJMspI= -----END CERTIFICATE-----Generated at Sat Apr 26 15:59:41 2025 by rpki-client