$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ce538dc7-a925-3f19-9892-858df419ab79.roa File: ce538dc7-a925-3f19-9892-858df419ab79.roa (raw, json) Hash identifier: Uj5xzKDckvkAVzBExNfPsKqKEDg2fKkkDc5wYKCoDP0= Subject key identifier: 46:65:9F:A8:06:E4:69:9A:C3:CC:D1:53:AD:51:58:70:09:E5:8C:F9 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584940395924FF6DE2BA6C6E40F0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ce538dc7-a925-3f19-9892-858df419ab79.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 54113 IP address blocks: 2607:8940:5520::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:59:24:ff:6d:e2:ba:6c:6e:40:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=7a032411-c7e0-48fe-b697-4f2159e638e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ff:a0:f1:56:17:8a:7a:60:53:5a:0f:e2:6a: e4:8d:73:b2:1f:7e:41:5b:d5:8c:e9:1f:87:93:95: cd:cd:3a:76:31:aa:b4:9d:26:89:d7:6d:a3:79:af: 28:ee:52:e4:96:ed:40:48:93:cc:74:30:3c:03:d7: 87:34:86:84:05:93:8b:7f:88:d2:b7:12:8a:6b:ad: 4c:4d:db:cd:a8:73:81:4e:5f:05:03:6e:17:b0:ac: f1:a8:d1:4f:ea:dc:25:36:2e:87:19:71:07:da:3f: ac:5f:f4:3d:e1:46:24:6b:2d:f1:e6:67:0d:44:6a: 37:db:51:e7:e7:8b:ff:67:f9:4d:0e:ef:65:df:46: eb:db:6b:be:fc:ed:bf:da:6b:1a:2f:cb:c0:8f:9a: 63:af:46:16:41:78:40:68:5c:75:0c:97:28:b9:ee: 67:18:0b:cd:7a:2c:23:8e:15:20:be:a4:1a:4c:47: 3a:25:f5:39:36:be:aa:76:63:95:7f:e4:41:6a:25: 32:9f:98:cf:7a:0c:5c:9a:20:3e:2a:02:e2:79:93: 45:4a:f5:d4:30:92:65:7e:38:5d:a4:dc:ea:6e:cc: 26:5d:fb:3f:ed:df:f3:e1:fe:1b:72:48:43:37:e3: 21:75:04:55:62:38:9a:81:7b:2b:d8:48:ad:ea:7b: e3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:65:9F:A8:06:E4:69:9A:C3:CC:D1:53:AD:51:58:70:09:E5:8C:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ce538dc7-a925-3f19-9892-858df419ab79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:5520::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:dc:f3:e7:d8:b4:92:33:2c:8e:9a:1a:b4:d5:d8:f3:9f:d6: 22:a2:e2:0f:f8:c7:6e:76:5b:22:6e:c6:37:99:78:c8:93:22: 6d:57:9b:9c:54:29:3b:d3:c3:64:eb:c8:b1:f8:81:54:1a:6e: 13:55:4e:3d:6d:27:3c:af:ca:05:26:c9:3c:c1:03:36:c9:2e: 5a:64:ef:ba:23:7c:e9:9b:04:40:99:9e:be:bc:7c:9f:d4:a7: af:7f:0c:95:c6:1d:8c:ff:6f:88:44:60:86:c1:ac:0e:3c:3d: f8:74:59:5f:4c:88:0c:8f:10:69:2d:79:b1:b5:84:a5:f9:21: b7:b7:07:9e:86:a2:de:b7:e4:97:72:53:a6:c8:d7:25:25:e2: 30:8c:ea:d5:32:ef:de:e0:fa:ad:8c:34:9b:57:db:a1:fb:59: e9:0e:df:bf:72:1f:c7:23:11:ee:6b:36:63:62:b8:77:90:ea: 12:c5:39:e2:2f:2a:64:ba:65:fa:1e:fe:94:89:d6:2b:f8:73: 18:27:88:71:cf:a8:ee:7c:45:e0:74:f0:be:d7:58:2d:fd:67: a3:e7:c9:4c:cf:59:64:c5:6d:3d:8c:76:a1:d4:51:6f:e9:85: 9a:1d:5b:f0:91:81:d6:7c:67:58:66:c1:7a:b5:9f:29:d2:f1: ef:d0:82:41 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElAOVkk/23iumxuQPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk N2EwMzI0MTEtYzdlMC00OGZlLWI2OTctNGYyMTU5ZTYzOGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhf+g8VYXinpgU1oP4mrkjXOyH35BW9WM6R+H k5XNzTp2Maq0nSaJ122jea8o7lLklu1ASJPMdDA8A9eHNIaEBZOLf4jStxKKa61M TdvNqHOBTl8FA24XsKzxqNFP6twlNi6HGXEH2j+sX/Q94UYkay3x5mcNRGo321Hn 54v/Z/lNDu9l30br22u+/O2/2msaL8vAj5pjr0YWQXhAaFx1DJcoue5nGAvNeiwj jhUgvqQaTEc6JfU5Nr6qdmOVf+RBaiUyn5jPegxcmiA+KgLieZNFSvXUMJJlfjhd pNzqbswmXfs/7d/z4f4bckhDN+MhdQRVYjiagXsr2Eit6nvjcQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEZln6gG5Gmaw8zRU61RWHAJ5Yz5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvY2U1MzhkYzctYTkyNS0z ZjE5LTk4OTItODU4ZGY0MTlhYjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFUg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADrc8+fYtJIzLI6aGrTV2POf1iKi4g/4x252WyJuxjeZeMiTIm1X m5xUKTvTw2TryLH4gVQabhNVTj1tJzyvygUmyTzBAzbJLlpk77ojfOmbBECZnr68 fJ/Up69/DJXGHYz/b4hEYIbBrA48Pfh0WV9MiAyPEGktebG1hKX5Ibe3B56Got63 5JdyU6bI1yUl4jCM6tUy797g+q2MNJtX26H7WekO379yH8cjEe5rNmNiuHeQ6hLF OeIvKmS6Zfoe/pSJ1iv4cxgniHHPqO58ReB08L7XWC39Z6PnyUzPWWTFbT2MdqHU UW/phZodW/CRgdZ8Z1hmwXq1nynS8e/QgkE= -----END CERTIFICATE-----Generated at Sat Apr 26 20:22:15 2025 by rpki-client