$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/40aff6cd-96da-3329-bfba-5b89cba791e5.roa File: 40aff6cd-96da-3329-bfba-5b89cba791e5.roa (raw, json) Hash identifier: jMSKtXh4TIeQE0E8GVfBvJapk6X7YLD9zw8xwwM/GTk= Subject key identifier: 7F:CE:23:EC:A2:BF:46:95:F0:3F:74:8B:64:6F:C0:FA:1F:C1:D6:81 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F432858485F9AF6EA8B3B317D46A3F480 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/40aff6cd-96da-3329-bfba-5b89cba791e5.roa Signing time: Mon 30 Dec 2024 02:00:39 +0000 ROA not before: Mon 30 Dec 2024 02:00:39 +0000 ROA not after: Sun 30 Mar 2025 01:00:39 +0000 asID: 54113 IP address blocks: 2607:8940:5490::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5f:9a:f6:ea:8b:3b:31:7d:46:a3:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Dec 30 02:00:39 2024 GMT Not After : Mar 30 01:00:39 2025 GMT Subject: CN=d796228a-f8c1-4167-b154-0280136b809f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1e:a3:f0:dc:88:db:69:04:fc:9f:60:e8:6f: 79:f4:6a:fb:e5:d5:77:03:10:d9:18:23:30:81:b8: 88:53:41:f4:96:58:26:73:ed:85:d2:95:74:a9:98: f1:20:38:65:72:bd:a9:02:8a:7e:56:d0:85:24:39: b5:a6:81:f3:60:6c:5b:6d:36:08:b3:5e:b7:0d:eb: fe:20:27:d7:49:ef:46:2f:9c:f6:91:f3:f6:ae:92: fe:fe:55:80:2d:30:55:e4:2d:c3:a1:6f:de:7c:9b: fb:9c:17:bc:22:2e:47:8b:30:30:11:9e:01:66:a2: e8:bd:ad:8b:2d:cd:e0:de:29:87:4f:92:8f:0b:e4: 55:33:aa:f6:77:69:eb:ae:71:a7:c2:54:31:18:4b: 52:ae:9a:66:a3:c3:4f:6a:1c:26:bd:c2:26:25:35: d7:1d:1a:9c:ac:47:22:ca:7d:9a:6b:a0:19:22:55: 50:04:40:67:15:0a:b9:86:74:ce:a0:47:9f:98:8e: e5:54:13:21:63:e8:86:2e:b4:fc:ee:5b:42:e5:ee: a6:13:4b:f4:2b:66:dd:96:e8:69:9a:bf:41:99:f9: 0d:32:eb:5d:95:35:73:e3:13:72:97:87:0b:5d:c2: 32:d2:e8:4e:5b:c2:1d:8f:2e:98:b4:61:15:48:d6: 59:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:CE:23:EC:A2:BF:46:95:F0:3F:74:8B:64:6F:C0:FA:1F:C1:D6:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/40aff6cd-96da-3329-bfba-5b89cba791e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:5490::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:a6:c0:99:bf:82:ee:72:3b:a6:56:3a:c4:3d:a9:75:a3:d9: 64:52:06:66:72:41:92:f2:10:a7:55:a5:63:43:3c:44:10:a4: 2e:32:27:24:d9:44:c2:ef:94:65:b1:55:d8:a8:43:09:99:5c: 21:95:2a:e1:09:d1:18:c9:57:86:a8:c4:af:cb:89:31:4c:e1: ad:a1:cb:63:e0:90:4b:15:13:cb:8d:3e:d0:25:00:c4:ef:bc: 72:11:b5:e1:cb:ac:ff:6c:75:1e:aa:dd:88:5f:a2:ba:96:e7: d3:a7:71:7c:92:5a:72:22:9a:61:12:72:58:53:29:86:d7:5b: b2:4c:4f:76:20:de:3a:44:b9:3c:27:bb:02:92:6b:bd:c0:44: e4:b7:e9:b5:54:bd:0b:2d:18:3e:c5:ab:c8:22:07:c0:a6:b9: 62:e6:9b:b2:29:03:64:05:7e:7a:f1:c9:9c:1b:21:42:0e:59: 15:d0:69:b7:16:78:27:db:60:14:a3:3b:49:c3:68:61:8d:d4: 15:e8:e9:e5:9c:a5:52:d1:0b:c5:92:46:67:4b:d1:d9:3c:ac: f7:bc:26:a2:c2:36:a7:a2:2a:65:a6:35:b8:a9:c0:16:44:83: d0:72:d1:aa:d3:c1:95:86:11:03:1e:03:25:2e:bc:4c:eb:5d: d8:e7:cf:d9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhfmvbqizsxfUaj9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI0MTIzMDAyMDAzOVoXDTI1MDMzMDAxMDAzOVowLzEtMCsGA1UEAxMk ZDc5NjIyOGEtZjhjMS00MTY3LWIxNTQtMDI4MDEzNmI4MDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvh6j8NyI22kE/J9g6G959Gr75dV3AxDZGCMw gbiIU0H0llgmc+2F0pV0qZjxIDhlcr2pAop+VtCFJDm1poHzYGxbbTYIs163Dev+ ICfXSe9GL5z2kfP2rpL+/lWALTBV5C3DoW/efJv7nBe8Ii5HizAwEZ4BZqLova2L Lc3g3imHT5KPC+RVM6r2d2nrrnGnwlQxGEtSrppmo8NPahwmvcImJTXXHRqcrEci yn2aa6AZIlVQBEBnFQq5hnTOoEefmI7lVBMhY+iGLrT87ltC5e6mE0v0K2bdluhp mr9BmfkNMutdlTVz4xNyl4cLXcIy0uhOW8Idjy6YtGEVSNZZMQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH/OI+yiv0aV8D90i2RvwPofwdaBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNDBhZmY2Y2QtOTZkYS0z MzI5LWJmYmEtNWI4OWNiYTc5MWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFSQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIGmwJm/gu5yO6ZWOsQ9qXWj2WRSBmZyQZLyEKdVpWNDPEQQpC4y JyTZRMLvlGWxVdioQwmZXCGVKuEJ0RjJV4aoxK/LiTFM4a2hy2PgkEsVE8uNPtAl AMTvvHIRteHLrP9sdR6q3YhforqW59OncXySWnIimmESclhTKYbXW7JMT3Yg3jpE uTwnuwKSa73AROS36bVUvQstGD7Fq8giB8CmuWLmm7IpA2QFfnrxyZwbIUIOWRXQ abcWeCfbYBSjO0nDaGGN1BXo6eWcpVLRC8WSRmdL0dk8rPe8JqLCNqeiKmWmNbip wBZEg9By0arTwZWGEQMeAyUuvEzrXdjnz9k= -----END CERTIFICATE-----Generated at Sun Feb 16 15:17:27 2025 by rpki-client