$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1d0c3358-d788-315b-bec6-270541a7a2aa.roa File: 1d0c3358-d788-315b-bec6-270541a7a2aa.roa (raw, json) Hash identifier: 9Fag/li7vS0HpbEAR1rmi/Mr+DY61+4mRYofimJ52ZE= Subject key identifier: 09:BF:5A:93:A0:10:41:36:FC:52:39:76:30:C9:35:DE:3C:7E:DE:35 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F432858485F9AFA1583832852C8480720 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1d0c3358-d788-315b-bec6-270541a7a2aa.roa Signing time: Mon 30 Dec 2024 02:00:39 +0000 ROA not before: Mon 30 Dec 2024 02:00:39 +0000 ROA not after: Sun 30 Mar 2025 01:00:39 +0000 asID: 54113 IP address blocks: 2607:8940:57c0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5f:9a:fa:15:83:83:28:52:c8:48:07:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Dec 30 02:00:39 2024 GMT Not After : Mar 30 01:00:39 2025 GMT Subject: CN=58ef1414-e943-4a0a-9c98-b6cc95af44cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:69:cc:a5:e7:7c:a5:91:b5:1c:5f:0f:ee:f4: 77:0c:d1:d7:df:06:d0:82:d7:5f:5b:24:2d:c2:23: a9:fd:cb:02:59:72:bb:7f:54:a8:48:91:06:aa:60: ff:a0:05:e8:0a:b1:fe:1a:8d:59:de:06:0b:53:c6: d8:7e:d2:1f:ad:3e:33:74:32:58:a7:70:47:b8:ed: a3:e8:b6:bf:2f:45:c6:5c:d1:8d:44:b2:35:c8:05: 93:eb:5a:fd:b0:5e:8c:7f:97:85:c3:2e:ab:e3:d0: 3a:4a:e8:86:5b:18:1b:bf:d8:b3:9a:5b:b7:0f:c3: da:e4:43:81:b9:c4:0a:62:e9:dd:71:ed:94:95:aa: af:0e:a5:10:77:c5:3e:6f:2f:c9:e3:26:af:97:03: 68:6f:41:b2:2e:ab:4a:cb:b9:a6:37:4a:5d:ca:a2: 3b:8a:1a:bb:f1:d8:db:75:ff:62:77:d3:10:38:f8: 4d:84:6d:57:26:1e:49:0a:e7:d9:70:79:b7:fb:15: 91:01:af:96:06:ed:f6:3e:08:44:77:42:86:d5:4e: b6:e5:b1:46:bc:d4:42:50:4d:e8:bc:26:e7:5f:18: 3c:69:18:64:36:9e:f2:5c:5b:91:bb:91:f6:ed:17: 67:92:99:08:53:ef:2a:25:0e:34:ee:bb:47:74:aa: 1d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:BF:5A:93:A0:10:41:36:FC:52:39:76:30:C9:35:DE:3C:7E:DE:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1d0c3358-d788-315b-bec6-270541a7a2aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:57c0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:1d:fe:d5:63:85:76:aa:25:06:39:e1:eb:63:36:42:65:7a: 73:06:23:c2:22:19:3e:05:d5:7b:f8:ba:df:6d:81:c1:22:53: 3e:25:f0:53:0b:67:07:79:79:1c:50:06:e0:e7:4c:bf:46:e6: f6:2d:84:77:6b:fd:09:2e:4c:f7:29:47:dd:3d:da:6f:f5:fd: 12:b6:2d:56:1e:72:2a:6f:79:de:a1:9d:fa:c2:00:28:19:4d: 67:cf:66:66:55:d2:94:51:68:d9:d8:3a:77:5d:b5:a3:4e:01: c3:c4:ac:5c:e2:77:4f:94:b8:b7:e2:77:e7:85:0b:b4:dd:fd: 27:34:fe:97:71:e3:b3:49:ed:76:f0:5b:d3:9c:87:b5:35:1b: 3d:7f:46:ac:43:98:45:57:a7:db:b5:31:34:18:15:23:41:04: 24:5a:b6:76:5b:49:ca:5f:9c:46:da:eb:ea:74:50:f1:52:d8: f4:a0:ea:7f:6a:6d:f1:3f:fd:a0:2e:b1:ec:31:16:a4:9a:61: 50:a8:03:7b:04:08:9d:d7:6c:0f:96:e4:c2:16:08:e1:e1:52: 80:69:af:f1:6a:be:4e:55:2d:d1:75:5a:69:47:bb:59:b7:f1: 0d:15:bf:4e:48:a5:a5:e9:c7:f1:b1:31:1b:e2:4a:b6:9a:44: f5:e7:0b:61 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhfmvoVg4MoUshIByAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI0MTIzMDAyMDAzOVoXDTI1MDMzMDAxMDAzOVowLzEtMCsGA1UEAxMk NThlZjE0MTQtZTk0My00YTBhLTljOTgtYjZjYzk1YWY0NGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWnMped8pZG1HF8P7vR3DNHX3wbQgtdfWyQt wiOp/csCWXK7f1SoSJEGqmD/oAXoCrH+Go1Z3gYLU8bYftIfrT4zdDJYp3BHuO2j 6La/L0XGXNGNRLI1yAWT61r9sF6Mf5eFwy6r49A6SuiGWxgbv9izmlu3D8Pa5EOB ucQKYundce2UlaqvDqUQd8U+by/J4yavlwNob0GyLqtKy7mmN0pdyqI7ihq78djb df9id9MQOPhNhG1XJh5JCufZcHm3+xWRAa+WBu32PghEd0KG1U625bFGvNRCUE3o vCbnXxg8aRhkNp7yXFuRu5H27RdnkpkIU+8qJQ407rtHdKodWwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAm/WpOgEEE2/FI5djDJNd48ft41MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMWQwYzMzNTgtZDc4OC0z MTViLWJlYzYtMjcwNTQxYTdhMmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFfA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADkd/tVjhXaqJQY54etjNkJlenMGI8IiGT4F1Xv4ut9tgcEiUz4l 8FMLZwd5eRxQBuDnTL9G5vYthHdr/QkuTPcpR9092m/1/RK2LVYecipved6hnfrC ACgZTWfPZmZV0pRRaNnYOnddtaNOAcPErFzid0+UuLfid+eFC7Td/Sc0/pdx47NJ 7XbwW9Och7U1Gz1/RqxDmEVXp9u1MTQYFSNBBCRatnZbScpfnEba6+p0UPFS2PSg 6n9qbfE//aAusewxFqSaYVCoA3sECJ3XbA+W5MIWCOHhUoBpr/Fqvk5VLdF1WmlH u1m38Q0Vv05IpaXpx/GxMRviSraaRPXnC2E= -----END CERTIFICATE-----Generated at Fri Mar 14 11:05:37 2025 by rpki-client