$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d767279d-822c-3db3-a9f1-93c3a246f435.roa File: d767279d-822c-3db3-a9f1-93c3a246f435.roa (raw, json) Hash identifier: eBFEA79Gnxk9ZOIxoKv3L9nuRvnl7roa4TVm9fIzBEc= Subject key identifier: D6:66:55:92:63:C2:FB:19:18:DC:0D:20:A8:6C:0F:DC:91:5B:1C:5C Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584940396F25FF971CF496358C80 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d767279d-822c-3db3-a9f1-93c3a246f435.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 54113 IP address blocks: 2607:8940:4830::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:6f:25:ff:97:1c:f4:96:35:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=af64f5f7-6fbd-4a90-8d6f-1c70e2327322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:8e:1a:a4:a0:2c:85:5a:da:fc:1e:48:58:09: da:ac:75:1f:63:b9:fd:7e:3a:d7:ca:d9:dc:84:bb: 70:d3:7b:59:c8:7a:87:3d:5d:b6:8b:4c:b4:44:46: a6:5b:d3:e9:22:37:fb:c1:b9:0c:d5:f9:89:69:02: fe:ae:b4:bc:fa:c4:34:9f:98:10:db:c8:61:38:9c: 65:54:c7:65:82:14:0f:fe:d1:bd:14:3f:fb:fe:54: 43:0f:b4:b3:f9:3c:55:96:21:cd:bb:e1:e5:c0:bd: 4e:7a:e4:e6:ab:0a:98:a7:e2:a0:dd:3c:ff:19:3f: 9d:75:dc:b5:5f:b0:f7:fa:78:98:a8:b5:5b:c5:f9: 0b:c6:4f:87:d9:57:51:59:b7:a3:2b:9e:13:71:78: 44:ad:5d:29:e0:d6:d7:46:4c:be:0f:cb:36:f0:0c: 86:7e:d8:25:48:37:8d:ac:bb:15:f2:7c:d1:8f:0f: ab:2b:83:50:e5:99:57:22:6d:14:88:0a:7d:e1:f0: bf:bd:33:5f:7e:58:66:35:81:0b:1f:20:11:71:7b: de:ac:31:d9:34:5c:7c:ca:87:95:91:7b:fb:7a:5c: 8a:e6:e1:1f:24:45:be:63:94:d1:ba:22:03:f2:ec: 83:b3:0c:3b:54:d5:ac:62:f5:54:5f:fe:d5:30:85: ba:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:66:55:92:63:C2:FB:19:18:DC:0D:20:A8:6C:0F:DC:91:5B:1C:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d767279d-822c-3db3-a9f1-93c3a246f435.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:4830::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:73:8b:eb:7e:91:19:1d:41:b4:5a:cc:6b:ab:62:7b:1c:79: 3f:d1:d0:fb:ef:38:48:b2:5e:2b:a8:37:5a:ff:2e:82:95:22: e9:f2:3b:6c:ae:c9:a6:64:27:c0:80:f2:8e:b1:e1:5c:b6:96: 9c:55:03:7f:01:59:b3:ea:19:b6:c7:bf:88:49:be:de:fe:fa: 53:bd:9a:7e:c4:56:66:e8:de:3b:2b:06:58:65:30:21:05:fe: c9:6b:0e:1a:e4:8e:69:b4:63:b3:6a:7e:34:11:ad:43:d4:21: 8f:9b:fa:c3:47:24:14:d8:f5:ad:8f:1e:06:7a:9e:a7:a2:bc: 65:fd:91:dd:47:9c:da:fa:48:72:1d:5f:5a:0f:d4:c3:d8:8b: 74:a0:e0:84:b7:5c:72:3d:4e:a1:68:4c:a9:3f:db:ff:05:de: 0c:f0:72:51:7e:4b:18:2e:b1:38:11:d8:f2:3c:08:ac:9f:c9: f4:f8:19:83:9e:9e:c4:d2:c5:6f:b8:99:fb:2f:0e:6b:6d:a6: 20:94:b3:d0:8f:8c:0f:d0:04:45:40:f9:b8:08:35:0f:6e:aa: d3:8b:a8:82:b6:2c:0b:aa:61:ff:76:0f:9a:9b:87:d7:54:b4: 33:34:ac:97:a7:84:65:b7:71:78:39:9b:e4:81:1c:3c:3f:75: 7a:61:7a:47 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElAOW8l/5cc9JY1jIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk YWY2NGY1ZjctNmZiZC00YTkwLThkNmYtMWM3MGUyMzI3MzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Y4apKAshVra/B5IWAnarHUfY7n9fjrXytnc hLtw03tZyHqHPV22i0y0REamW9PpIjf7wbkM1fmJaQL+rrS8+sQ0n5gQ28hhOJxl VMdlghQP/tG9FD/7/lRDD7Sz+TxVliHNu+HlwL1OeuTmqwqYp+Kg3Tz/GT+dddy1 X7D3+niYqLVbxfkLxk+H2VdRWbejK54TcXhErV0p4NbXRky+D8s28AyGftglSDeN rLsV8nzRjw+rK4NQ5ZlXIm0UiAp94fC/vTNfflhmNYELHyARcXverDHZNFx8yoeV kXv7elyK5uEfJEW+Y5TRuiID8uyDsww7VNWsYvVUX/7VMIW6KQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNZmVZJjwvsZGNwNIKhsD9yRWxxcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZDc2NzI3OWQtODIyYy0z ZGIzLWE5ZjEtOTNjM2EyNDZmNDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEgw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAElzi+t+kRkdQbRazGurYnsceT/R0PvvOEiyXiuoN1r/LoKVIuny O2yuyaZkJ8CA8o6x4Vy2lpxVA38BWbPqGbbHv4hJvt7++lO9mn7EVmbo3jsrBlhl MCEF/slrDhrkjmm0Y7NqfjQRrUPUIY+b+sNHJBTY9a2PHgZ6nqeivGX9kd1HnNr6 SHIdX1oP1MPYi3Sg4IS3XHI9TqFoTKk/2/8F3gzwclF+SxgusTgR2PI8CKyfyfT4 GYOensTSxW+4mfsvDmttpiCUs9CPjA/QBEVA+bgINQ9uqtOLqIK2LAuqYf92D5qb h9dUtDM0rJenhGW3cXg5m+SBHDw/dXphekc= -----END CERTIFICATE-----Generated at Sat Apr 26 20:52:08 2025 by rpki-client