$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/df06a591-de7d-3d32-ac3a-c3ae36cab293.roa File: df06a591-de7d-3d32-ac3a-c3ae36cab293.roa (raw, json) Hash identifier: 3pczbzHr37O7vytlbr2Y4uKEfGy5r1ORUjWDtC391L8= Subject key identifier: C0:84:E6:D4:24:E7:E5:2C:B6:D7:B8:B1:1C:BA:E7:38:0E:1C:F9:16 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584940395C74E080B722C155C900 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/df06a591-de7d-3d32-ac3a-c3ae36cab293.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 54113 IP address blocks: 2607:8940:41c0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:5c:74:e0:80:b7:22:c1:55:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=81be6b75-3c8f-4271-a638-6d31b0c55262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:92:42:91:04:8c:1f:9c:44:85:c4:db:07:62: b6:b4:da:c8:06:08:1f:8c:fc:d0:27:32:55:b4:74: cd:ad:70:86:7c:83:84:c3:a8:85:02:e9:3c:68:d7: 3e:b6:52:dd:68:60:b3:89:94:18:24:6d:ed:e5:0d: 2d:02:d1:66:9d:9e:1b:33:be:c2:d5:75:7d:bb:0d: cc:d1:9d:05:4a:db:a0:af:7e:ff:dd:28:1f:67:69: 82:51:6f:34:17:b2:f0:8d:43:72:84:15:de:f7:34: 25:6b:84:8f:78:c6:42:c1:f7:c6:d1:12:2a:27:d7: f0:85:e7:7f:42:66:f9:91:66:15:7b:84:00:78:7c: 5b:6b:7b:9c:85:aa:6f:25:a9:06:93:81:46:bf:77: 4c:9a:bb:28:5e:ad:44:da:05:cf:b3:66:73:dc:eb: 5f:ee:74:be:96:ba:b3:62:1b:03:5e:d7:03:df:58: fb:0e:7e:5e:f6:5c:47:66:0a:99:ac:86:b0:aa:28: ed:cc:7d:27:b9:f7:b7:0f:f4:f4:0d:60:64:6e:1b: 72:b8:9c:fa:96:d2:5a:ff:59:29:58:32:b2:1b:11: 55:a3:f0:27:03:8a:88:4f:57:e5:68:11:31:38:8d: 20:f5:02:43:1b:cc:0a:49:b5:18:ab:b0:f8:c4:27: e2:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:84:E6:D4:24:E7:E5:2C:B6:D7:B8:B1:1C:BA:E7:38:0E:1C:F9:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/df06a591-de7d-3d32-ac3a-c3ae36cab293.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:41c0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:9c:ed:9e:6a:61:75:c3:94:65:21:cd:a8:35:78:d4:3d:12: 5f:d5:c3:98:9a:74:84:96:0e:9e:af:47:0c:04:28:e2:21:6b: 75:1a:8d:54:3a:03:4c:3f:5e:30:c6:df:26:25:7f:f1:9a:21: 46:04:cd:56:30:8e:65:be:0b:f0:18:0a:8d:4e:1c:2f:c8:73: 22:81:d4:a6:c4:d2:8c:12:22:17:09:26:80:dc:64:af:53:c2: 92:be:37:57:96:b4:b0:c9:23:3d:4c:50:eb:79:f4:74:8f:fe: 51:89:4a:7f:87:46:86:c8:a7:45:cc:ed:6c:e9:ec:f7:73:64: 71:96:ec:84:b6:c7:6c:03:86:1c:a8:9b:e2:87:ef:f6:56:ea: 44:dd:fe:53:95:2b:9b:16:d3:32:a3:a8:c9:f1:e1:88:3e:78: 5d:e9:b9:40:62:30:21:27:ad:4c:75:17:46:73:35:34:b7:11: 61:ae:c1:09:d8:75:97:6c:c6:73:a8:98:39:cd:39:70:e9:7a: c9:f9:bc:9c:c3:1b:ca:bb:6b:4f:b3:58:6a:a0:40:ec:e6:04: c2:65:40:bf:64:fa:42:3b:7d:82:f2:42:dc:22:a0:0b:a8:e9: 6e:e2:0b:dc:73:10:87:04:af:37:e4:4f:19:0c:f6:fa:8b:24: c1:7a:43:2f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElAOVx04IC3IsFVyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk ODFiZTZiNzUtM2M4Zi00MjcxLWE2MzgtNmQzMWIwYzU1MjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJJCkQSMH5xEhcTbB2K2tNrIBggfjPzQJzJV tHTNrXCGfIOEw6iFAuk8aNc+tlLdaGCziZQYJG3t5Q0tAtFmnZ4bM77C1XV9uw3M 0Z0FStugr37/3SgfZ2mCUW80F7LwjUNyhBXe9zQla4SPeMZCwffG0RIqJ9fwhed/ Qmb5kWYVe4QAeHxba3uchapvJakGk4FGv3dMmrsoXq1E2gXPs2Zz3Otf7nS+lrqz YhsDXtcD31j7Dn5e9lxHZgqZrIawqijtzH0nufe3D/T0DWBkbhtyuJz6ltJa/1kp WDKyGxFVo/AnA4qIT1flaBExOI0g9QJDG8wKSbUYq7D4xCfirwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMCE5tQk5+Ustte4sRy65zgOHPkWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZGYwNmE1OTEtZGU3ZC0z ZDMyLWFjM2EtYzNhZTM2Y2FiMjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEHA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFec7Z5qYXXDlGUhzag1eNQ9El/Vw5iadISWDp6vRwwEKOIha3Ua jVQ6A0w/XjDG3yYlf/GaIUYEzVYwjmW+C/AYCo1OHC/IcyKB1KbE0owSIhcJJoDc ZK9TwpK+N1eWtLDJIz1MUOt59HSP/lGJSn+HRobIp0XM7Wzp7PdzZHGW7IS2x2wD hhyom+KH7/ZW6kTd/lOVK5sW0zKjqMnx4Yg+eF3puUBiMCEnrUx1F0ZzNTS3EWGu wQnYdZdsxnOomDnNOXDpesn5vJzDG8q7a0+zWGqgQOzmBMJlQL9k+kI7fYLyQtwi oAuo6W7iC9xzEIcErzfkTxkM9vqLJMF6Qy8= -----END CERTIFICATE-----Generated at Sat Apr 26 16:08:35 2025 by rpki-client