$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c4b1861c-17b0-3be4-a8d2-f41b3156e4b8.roa File: c4b1861c-17b0-3be4-a8d2-f41b3156e4b8.roa (raw, json) Hash identifier: sPHi3wkvSx+9e4lKnXFRxsKHKL2PcSP7VC5pbDm+nuI= Subject key identifier: AF:E6:1A:3E:8E:79:49:BA:24:2F:D0:43:95:76:73:CE:44:79:B4:03 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285849403962C6788656A073E82424 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c4b1861c-17b0-3be4-a8d2-f41b3156e4b8.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 54113 IP address blocks: 2607:8940:5630::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:62:c6:78:86:56:a0:73:e8:24:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=49d41fe6-4514-4b6b-94b5-901733d03873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:16:7c:93:0e:a1:2a:23:10:7c:21:86:20:2a: e7:2b:34:05:d9:93:ff:bf:fe:46:06:a6:1d:b4:fc: 59:7a:a3:f8:1a:77:1d:c9:02:18:f6:d2:fa:75:07: 14:47:51:e8:68:bf:b9:64:e1:87:b4:db:17:74:e1: 12:88:0d:7f:22:b8:95:69:e4:f1:c7:22:bb:51:44: 1b:f4:72:5f:20:d2:1a:68:a1:4d:cf:f3:ee:e7:cb: 0b:af:a5:9c:2a:d2:e7:2e:2a:e7:37:0e:ae:c9:2b: d0:4a:46:fb:f8:52:03:c6:42:20:85:8e:0e:e3:e8: 5f:c4:5a:29:30:a9:21:22:df:91:5e:32:d3:d3:29: 82:43:74:59:2c:f1:52:cc:6c:8a:83:ed:4b:e1:ea: a7:57:36:39:51:fe:d0:7a:4c:fa:c3:c8:a7:55:63: 6f:53:49:1c:1b:22:60:77:58:95:24:e3:ed:ba:fd: b2:77:fd:6b:75:91:cd:b5:98:34:73:17:76:bb:e2: 14:04:34:52:7b:b6:bd:76:94:52:e4:9e:7f:23:50: 44:5e:d9:55:1c:63:41:c8:74:63:19:b5:24:3d:84: da:59:20:c3:17:cd:df:57:ac:6e:fc:ca:5a:b3:91: 27:f7:f9:ee:58:f1:60:aa:f9:45:af:17:be:00:0d: f1:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E6:1A:3E:8E:79:49:BA:24:2F:D0:43:95:76:73:CE:44:79:B4:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c4b1861c-17b0-3be4-a8d2-f41b3156e4b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:5630::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:6a:fe:ac:08:2c:f2:5e:b0:80:7a:1e:26:b3:58:4c:cd:fd: 69:cb:1c:20:24:86:28:6a:81:77:71:96:37:a7:22:39:13:69: 5e:31:3f:0f:f9:97:2e:84:ad:19:d3:80:aa:c2:a1:bc:22:99: b8:eb:5e:b4:f8:b5:9c:b1:01:b5:5f:5d:48:de:a5:81:95:c8: 81:07:d7:a2:66:61:9d:c1:74:56:56:d0:0e:b1:c0:35:ba:13: 21:d1:63:21:aa:4d:b9:c3:d3:e6:a6:ad:a4:c3:bd:27:09:e9: f5:9b:f4:af:a4:1d:87:35:92:fd:55:7c:60:10:24:95:e8:6a: 10:22:ca:bc:9f:be:a4:a5:cb:eb:28:2b:7c:13:e5:a0:89:13: 18:31:f4:64:6d:d0:da:93:de:49:cb:ae:c6:62:c9:63:93:d4: 17:0c:eb:78:0a:3f:6a:37:d6:5e:d2:dc:c8:8c:55:34:89:5e: 80:39:05:2e:9b:19:f0:0c:12:9d:ac:09:de:bf:78:43:2c:36: 59:6a:fc:b8:9d:ab:23:c1:cf:8d:57:a9:81:e1:4e:c5:77:ee: f5:74:e2:53:89:c6:44:60:6b:6f:a0:a3:b6:1b:c3:30:df:69: 41:97:1b:f1:72:7e:d2:8b:f6:e0:97:f9:aa:4e:75:e9:4d:b2: 1f:66:d4:2b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElAOWLGeIZWoHPoJCQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk NDlkNDFmZTYtNDUxNC00YjZiLTk0YjUtOTAxNzMzZDAzODczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRZ8kw6hKiMQfCGGICrnKzQF2ZP/v/5GBqYd tPxZeqP4GncdyQIY9tL6dQcUR1HoaL+5ZOGHtNsXdOESiA1/IriVaeTxxyK7UUQb 9HJfINIaaKFNz/Pu58sLr6WcKtLnLirnNw6uySvQSkb7+FIDxkIghY4O4+hfxFop MKkhIt+RXjLT0ymCQ3RZLPFSzGyKg+1L4eqnVzY5Uf7Qekz6w8inVWNvU0kcGyJg d1iVJOPtuv2yd/1rdZHNtZg0cxd2u+IUBDRSe7a9dpRS5J5/I1BEXtlVHGNByHRj GbUkPYTaWSDDF83fV6xu/Mpas5En9/nuWPFgqvlFrxe+AA3xHwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK/mGj6OeUm6JC/QQ5V2c85EebQDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYzRiMTg2MWMtMTdiMC0z YmU0LWE4ZDItZjQxYjMxNTZlNGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFYw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFxq/qwILPJesIB6HiazWEzN/WnLHCAkhihqgXdxljenIjkTaV4x Pw/5ly6ErRnTgKrCobwimbjrXrT4tZyxAbVfXUjepYGVyIEH16JmYZ3BdFZW0A6x wDW6EyHRYyGqTbnD0+amraTDvScJ6fWb9K+kHYc1kv1VfGAQJJXoahAiyryfvqSl y+soK3wT5aCJExgx9GRt0NqT3knLrsZiyWOT1BcM63gKP2o31l7S3MiMVTSJXoA5 BS6bGfAMEp2sCd6/eEMsNllq/LidqyPBz41XqYHhTsV37vV04lOJxkRga2+go7Yb wzDfaUGXG/FyftKL9uCX+apOdelNsh9m1Cs= -----END CERTIFICATE-----Generated at Sat Apr 26 15:56:44 2025 by rpki-client