$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/beff694d-1ca2-3b4c-928b-216f33196e5c.roa File: beff694d-1ca2-3b4c-928b-216f33196e5c.roa (raw, json) Hash identifier: bNaMY3RcdH3oPx0kEJs6kXQL+1OBr8irCeQ1kR55swU= Subject key identifier: EB:B1:84:25:4B:CC:1E:EA:40:CD:57:26:A2:F0:7F:56:9A:2D:32:CA Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285849403960CF734A72D6143F9680 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/beff694d-1ca2-3b4c-928b-216f33196e5c.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 54113 IP address blocks: 2607:8940:41e0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:60:cf:73:4a:72:d6:14:3f:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=80c69866-04d2-4fba-a08a-c22e61da495b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b5:0a:f0:72:b8:9c:3e:dc:97:af:b9:7b:91: 51:2c:e5:ee:b4:11:bb:d3:2f:b0:bf:d8:14:4e:c8: e5:11:30:2f:f8:15:17:59:2b:66:51:99:23:4f:ef: 18:aa:21:07:6b:ab:95:c0:82:81:33:9a:bb:cb:a0: 73:92:38:5f:03:76:a6:42:c6:38:45:ee:26:5b:c3: 68:75:a4:ae:a4:db:9b:83:fe:ae:78:42:06:d8:53: 8c:74:88:f2:a5:1a:f8:ab:23:79:7c:48:3c:2c:6a: 83:16:76:49:8e:dc:5b:06:9b:7f:a2:e1:e8:ed:42: d3:83:0b:f3:da:a3:f3:79:02:dc:62:41:bb:65:7f: 93:a3:80:ef:6e:de:8c:e0:d1:87:79:e7:ec:b5:27: d2:6a:24:82:2b:df:f5:be:7d:fa:c3:06:d4:d4:4e: bd:42:d2:7a:cc:f6:21:0d:0c:4e:9b:0f:05:5b:76: 0d:ca:32:a6:47:d5:ee:8a:c2:3a:09:43:e8:5d:c5: 80:ec:a8:a4:f5:bf:42:f5:78:35:ac:04:e1:1a:ba: 9f:28:82:85:a2:54:af:1b:d4:7f:ac:cc:39:43:67: 10:02:53:d7:02:8d:21:6e:9a:05:39:54:63:f0:a3: c2:95:2b:b1:6b:7d:ec:80:03:91:4f:cc:a7:c6:09: f4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:B1:84:25:4B:CC:1E:EA:40:CD:57:26:A2:F0:7F:56:9A:2D:32:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/beff694d-1ca2-3b4c-928b-216f33196e5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:41e0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:e6:c1:dd:2c:78:60:6b:c1:f9:6f:98:61:de:4b:3a:8a:e5: c2:5b:a7:cc:e1:22:28:a7:bc:dc:27:2d:31:85:fd:3c:23:72: b3:86:ed:ff:f2:b3:2b:7d:75:fb:cb:81:33:23:30:00:a4:ef: c9:be:45:1a:12:db:fa:6f:eb:d3:48:0c:69:fb:87:28:fa:76: 59:76:64:98:cd:44:bd:93:d7:59:33:72:c7:f0:99:dd:6b:44: 61:37:20:90:70:67:84:b9:57:23:86:9d:0e:e0:b2:0e:33:da: da:1f:9e:59:7d:f6:90:aa:08:a1:14:b6:a3:cd:0b:83:2a:d4: b5:94:a7:44:61:7b:aa:58:48:e1:eb:82:4b:6a:35:57:e8:55: 82:77:24:f4:4a:2d:e7:fd:ad:b7:59:01:19:05:e3:4b:51:4a: f2:f6:3c:51:eb:77:9f:48:b3:27:7b:b5:c2:e0:38:40:d1:d8: 2e:e6:93:cd:bf:c5:45:d9:c1:af:47:26:9c:ad:65:a5:0b:f4: 72:4b:bd:69:c9:3c:12:9d:ac:3d:e3:c8:2c:53:af:26:0d:45: cd:e6:01:4e:83:be:56:20:79:d2:db:c8:db:fa:e0:d3:f9:95: 9e:75:d7:95:65:4e:3a:8e:1d:03:fa:43:16:1a:6f:17:49:0e: 01:9f:f9:97 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElAOWDPc0py1hQ/loAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk ODBjNjk4NjYtMDRkMi00ZmJhLWEwOGEtYzIyZTYxZGE0OTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLUK8HK4nD7cl6+5e5FRLOXutBG70y+wv9gU TsjlETAv+BUXWStmUZkjT+8YqiEHa6uVwIKBM5q7y6BzkjhfA3amQsY4Re4mW8No daSupNubg/6ueEIG2FOMdIjypRr4qyN5fEg8LGqDFnZJjtxbBpt/ouHo7ULTgwvz 2qPzeQLcYkG7ZX+To4Dvbt6M4NGHeefstSfSaiSCK9/1vn36wwbU1E69QtJ6zPYh DQxOmw8FW3YNyjKmR9XuisI6CUPoXcWA7Kik9b9C9Xg1rAThGrqfKIKFolSvG9R/ rMw5Q2cQAlPXAo0hbpoFOVRj8KPClSuxa33sgAORT8ynxgn0EwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOuxhCVLzB7qQM1XJqLwf1aaLTLKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYmVmZjY5NGQtMWNhMi0z YjRjLTkyOGItMjE2ZjMzMTk2ZTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEHg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGfmwd0seGBrwflvmGHeSzqK5cJbp8zhIiinvNwnLTGF/TwjcrOG 7f/ysyt9dfvLgTMjMACk78m+RRoS2/pv69NIDGn7hyj6dll2ZJjNRL2T11kzcsfw md1rRGE3IJBwZ4S5VyOGnQ7gsg4z2tofnll99pCqCKEUtqPNC4Mq1LWUp0Rhe6pY SOHrgktqNVfoVYJ3JPRKLef9rbdZARkF40tRSvL2PFHrd59Isyd7tcLgOEDR2C7m k82/xUXZwa9HJpytZaUL9HJLvWnJPBKdrD3jyCxTryYNRc3mAU6DvlYgedLbyNv6 4NP5lZ5115VlTjqOHQP6QxYabxdJDgGf+Zc= -----END CERTIFICATE-----Generated at Sat Apr 26 15:59:00 2025 by rpki-client