$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0ba504b4-0e64-338f-9383-f8cd192a2f13.roa File: 0ba504b4-0e64-338f-9383-f8cd192a2f13.roa (raw, json) Hash identifier: 4hVO3JmqRWIdhl590hHFiVUr52klr70KOSddGEuRSmk= Subject key identifier: 28:F7:FA:09:51:5B:A5:DA:AD:C3:65:D2:79:A4:35:F9:BD:20:95:15 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285849403974EA20D8BF7885B2F7C0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0ba504b4-0e64-338f-9383-f8cd192a2f13.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 54113 IP address blocks: 2607:8940:5260::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:74:ea:20:d8:bf:78:85:b2:f7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=c1b6dd92-adfc-455d-93ba-5af12119aa36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e7:09:9f:0c:e1:d7:f3:ec:ec:1e:66:4a:9e: 17:41:8c:6c:1f:ae:43:ce:ee:a8:b3:7d:16:7c:e9: 24:ed:79:79:44:dc:3c:b1:8a:8a:45:4c:8c:9a:0a: 5b:a6:bc:4a:88:f0:72:5e:35:a9:a4:9e:4a:b5:76: 3c:bc:79:5c:a1:e5:32:1f:40:77:f5:48:a3:ce:8b: f5:b4:47:c9:38:2f:6b:f2:5c:06:64:e7:6d:78:1b: 1d:73:25:42:a3:20:ee:cd:25:db:f5:60:5f:72:c8: f9:f3:e1:bc:a4:84:5b:72:d8:51:26:a4:65:2e:8d: f2:f5:a4:f4:a8:bc:c7:44:7c:dd:d7:44:41:4a:13: 47:95:b4:88:ba:0b:83:74:70:66:2d:cc:8a:21:dd: 47:e4:0b:82:8b:65:47:f4:30:cb:78:0b:6a:00:87: 33:0a:50:1a:f7:db:3f:1e:52:3a:62:39:ea:4a:41: 36:20:29:a6:c9:14:12:12:fe:00:a8:9d:3b:70:e5: 96:77:d8:d9:45:9c:31:9c:96:2c:c9:09:af:7e:09: 25:70:15:9d:f3:8e:a9:a1:c6:c2:65:a9:a8:83:dd: 68:a4:74:0d:10:af:9e:0f:a7:77:4d:7e:f2:79:7d: 4a:78:bd:12:67:d6:e7:ae:41:49:8f:c8:0e:81:d6: ab:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:F7:FA:09:51:5B:A5:DA:AD:C3:65:D2:79:A4:35:F9:BD:20:95:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0ba504b4-0e64-338f-9383-f8cd192a2f13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:5260::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:e4:41:7e:2a:a7:11:a1:dc:62:45:d5:bd:e9:ff:37:d0:5c: c2:85:cf:7e:70:e7:95:5e:9b:1c:b6:d0:60:cd:0e:43:7a:85: 96:20:74:fa:c2:9b:52:08:ad:c1:32:b2:78:96:a9:01:3b:cb: 69:23:7e:14:1e:83:39:e4:02:aa:55:75:21:8b:f3:83:30:05: 03:4d:92:36:62:30:0c:ee:36:8b:17:0f:41:e7:55:a1:be:d8: 69:64:e1:e3:50:41:5e:5e:b8:f9:c7:4c:30:b9:23:c4:ff:de: 2c:f1:e1:26:8d:13:21:39:87:a3:b2:38:32:a1:79:c5:b2:7b: cc:88:c5:35:b7:b8:89:03:65:15:97:5f:66:ee:b3:0c:4e:11: 3c:0e:ad:0b:9a:f0:34:55:80:b3:27:92:f5:91:fb:36:12:0d: 78:8e:3b:bb:6e:2c:3f:96:78:23:d0:f1:32:e2:43:8f:40:9b: ea:0e:f7:20:ad:06:27:32:25:27:3d:40:bc:e5:23:41:8e:d5: a4:1e:23:4a:84:ee:7c:ce:b5:19:3f:39:b5:42:47:61:de:42: 4b:3b:c0:b0:44:e4:ba:59:a2:bd:21:7e:79:97:7e:9d:f0:b5: 58:4a:94:52:48:8c:04:1f:cb:33:2d:ee:6e:bb:6c:bc:f2:38: a6:6c:8f:da -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElAOXTqINi/eIWy98AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk YzFiNmRkOTItYWRmYy00NTVkLTkzYmEtNWFmMTIxMTlhYTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ucJnwzh1/Ps7B5mSp4XQYxsH65Dzu6os30W fOkk7Xl5RNw8sYqKRUyMmgpbprxKiPByXjWppJ5KtXY8vHlcoeUyH0B39Uijzov1 tEfJOC9r8lwGZOdteBsdcyVCoyDuzSXb9WBfcsj58+G8pIRbcthRJqRlLo3y9aT0 qLzHRHzd10RBShNHlbSIuguDdHBmLcyKId1H5AuCi2VH9DDLeAtqAIczClAa99s/ HlI6YjnqSkE2ICmmyRQSEv4AqJ07cOWWd9jZRZwxnJYsyQmvfgklcBWd846pocbC Zamog91opHQNEK+eD6d3TX7yeX1KeL0SZ9bnrkFJj8gOgdarOQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCj3+glRW6XarcNl0nmkNfm9IJUVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMGJhNTA0YjQtMGU2NC0z MzhmLTkzODMtZjhjZDE5MmEyZjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFJg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADjkQX4qpxGh3GJF1b3p/zfQXMKFz35w55Vemxy20GDNDkN6hZYg dPrCm1IIrcEysniWqQE7y2kjfhQegznkAqpVdSGL84MwBQNNkjZiMAzuNosXD0Hn VaG+2Glk4eNQQV5euPnHTDC5I8T/3izx4SaNEyE5h6OyODKhecWye8yIxTW3uIkD ZRWXX2buswxOETwOrQua8DRVgLMnkvWR+zYSDXiOO7tuLD+WeCPQ8TLiQ49Am+oO 9yCtBicyJSc9QLzlI0GO1aQeI0qE7nzOtRk/ObVCR2HeQks7wLBE5LpZor0hfnmX fp3wtVhKlFJIjAQfyzMt7m67bLzyOKZsj9o= -----END CERTIFICATE-----Generated at Thu Apr 3 02:43:34 2025 by rpki-client