$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4fbe919f-0a17-3c51-88e7-e6447b2d4e58.roa File: 4fbe919f-0a17-3c51-88e7-e6447b2d4e58.roa (raw, json) Hash identifier: LKP87eSAmWZy//EUfd2Qaa4MFqLdNS2whTU2d8brV5g= Subject key identifier: 99:40:FC:07:99:CE:02:63:B9:D9:54:67:58:48:28:43:07:C8:5F:47 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F432858485F9AEDAA19B64A0460010C40 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4fbe919f-0a17-3c51-88e7-e6447b2d4e58.roa Signing time: Mon 30 Dec 2024 02:00:39 +0000 ROA not before: Mon 30 Dec 2024 02:00:39 +0000 ROA not after: Sun 30 Mar 2025 01:00:39 +0000 asID: 54113 IP address blocks: 2607:8940:4890::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5f:9a:ed:aa:19:b6:4a:04:60:01:0c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Dec 30 02:00:39 2024 GMT Not After : Mar 30 01:00:39 2025 GMT Subject: CN=39bdcbbd-2e2f-4265-bb35-1a980f90ecc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:34:eb:eb:18:22:c6:14:37:d9:73:e0:30:9b: aa:dd:6f:ca:fa:1d:83:f9:4a:8e:75:87:bc:49:24: 83:30:a1:5f:10:47:32:e9:9d:5d:a7:03:e3:22:d5: 57:36:51:5a:a0:d7:8b:f2:0d:d8:91:01:10:39:60: 7c:a2:92:77:d5:be:3e:92:c6:40:88:be:b4:92:e4: 36:84:c1:df:0d:3f:41:a8:55:81:6b:c7:f7:e0:3e: 74:28:3c:12:23:22:48:e8:3a:60:42:42:16:d1:f6: be:1f:40:7d:5d:45:1f:4c:e3:dc:89:66:38:89:3e: 81:82:09:ee:e0:30:17:cd:16:83:66:7f:fc:f8:4d: 03:15:b6:23:74:50:aa:1d:af:c8:dc:4d:d6:7e:5e: 62:06:39:97:af:55:d4:99:cc:b5:6e:f2:fe:df:bd: 48:c4:f1:6f:b5:3e:05:22:5b:aa:ab:f3:4a:d6:05: ff:9a:6c:0e:fa:56:d1:1a:18:da:00:5e:0b:cc:62: c6:be:e5:88:91:17:6d:10:9e:f8:56:e3:24:29:b0: c1:3f:ee:f4:dc:b2:8d:71:5b:4e:b3:10:ea:44:58: 7d:c5:ab:69:59:f5:26:b8:ef:c8:09:16:f2:36:2e: 74:82:27:24:1b:49:1f:8f:c0:76:93:73:88:01:6e: 07:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:40:FC:07:99:CE:02:63:B9:D9:54:67:58:48:28:43:07:C8:5F:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4fbe919f-0a17-3c51-88e7-e6447b2d4e58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:4890::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:f0:e8:b6:de:4a:07:a8:c7:36:f4:45:5c:cd:4b:e4:98:20: 02:38:73:7a:3c:3d:75:e0:81:d7:d5:8f:62:89:f9:0a:95:55: e6:88:d1:8a:af:ce:67:8c:b6:42:8c:cf:a3:e0:62:c5:07:85: 9c:99:10:08:01:79:bc:46:72:d1:3a:57:7c:b3:65:5c:9a:32: 0a:9a:e6:b1:d7:08:5e:ba:6f:b7:94:2a:ae:41:5c:78:e2:7e: 3a:f7:bf:1f:7b:e0:1c:dc:61:f0:33:a3:33:d1:ac:47:e8:c7: 10:5d:3a:81:d7:7c:f5:39:2b:1e:7b:51:22:20:a4:83:93:df: 28:3b:dc:3e:1a:71:e0:ff:45:48:a0:5d:e9:ff:2c:56:f7:cb: a3:97:5d:14:82:28:ed:cd:2a:5a:fa:b4:ea:19:67:0e:20:19: 0d:1d:29:0c:c8:86:a5:2e:ec:40:99:61:1c:66:9b:83:bb:dd: f7:7d:36:d8:f6:94:e9:02:32:e6:fc:5f:e3:5d:6d:b3:92:5e: b1:c7:1c:a7:6b:1d:13:9a:19:45:1a:92:11:22:02:b4:40:d2: 78:e1:97:22:6f:61:6b:19:70:26:0a:30:f6:ef:d6:ca:d7:15: 89:21:8a:5f:3f:3f:f9:20:8f:be:93:74:26:4e:a5:d1:08:15: 84:1a:44:b4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhfmu2qGbZKBGABDEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI0MTIzMDAyMDAzOVoXDTI1MDMzMDAxMDAzOVowLzEtMCsGA1UEAxMk MzliZGNiYmQtMmUyZi00MjY1LWJiMzUtMWE5ODBmOTBlY2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTTr6xgixhQ32XPgMJuq3W/K+h2D+UqOdYe8 SSSDMKFfEEcy6Z1dpwPjItVXNlFaoNeL8g3YkQEQOWB8opJ31b4+ksZAiL60kuQ2 hMHfDT9BqFWBa8f34D50KDwSIyJI6DpgQkIW0fa+H0B9XUUfTOPciWY4iT6Bggnu 4DAXzRaDZn/8+E0DFbYjdFCqHa/I3E3Wfl5iBjmXr1XUmcy1bvL+371IxPFvtT4F Iluqq/NK1gX/mmwO+lbRGhjaAF4LzGLGvuWIkRdtEJ74VuMkKbDBP+703LKNcVtO sxDqRFh9xatpWfUmuO/ICRbyNi50gickG0kfj8B2k3OIAW4H/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJlA/AeZzgJjudlUZ1hIKEMHyF9HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNGZiZTkxOWYtMGExNy0z YzUxLTg4ZTctZTY0NDdiMmQ0ZTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEiQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIDw6LbeSgeoxzb0RVzNS+SYIAI4c3o8PXXggdfVj2KJ+QqVVeaI 0YqvzmeMtkKMz6PgYsUHhZyZEAgBebxGctE6V3yzZVyaMgqa5rHXCF66b7eUKq5B XHjifjr3vx974BzcYfAzozPRrEfoxxBdOoHXfPU5Kx57USIgpIOT3yg73D4aceD/ RUigXen/LFb3y6OXXRSCKO3NKlr6tOoZZw4gGQ0dKQzIhqUu7ECZYRxmm4O73fd9 Ntj2lOkCMub8X+NdbbOSXrHHHKdrHROaGUUakhEiArRA0njhlyJvYWsZcCYKMPbv 1srXFYkhil8/P/kgj76TdCZOpdEIFYQaRLQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:30:16 2025 by rpki-client