$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/509b01e9-fc55-3e1e-9d69-62c7d521f0bc.roa File: 509b01e9-fc55-3e1e-9d69-62c7d521f0bc.roa (raw, json) Hash identifier: Qhqr/sQa15bWYcyHIejQO2ShQgvF2nKX4dC8ZM06ffw= Subject key identifier: 16:92:3A:29:65:A8:69:ED:EC:48:9E:27:6B:AF:DE:D4:F4:5A:14:09 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584940396B0C7ABD2B0B1920A440 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/509b01e9-fc55-3e1e-9d69-62c7d521f0bc.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 54113 IP address blocks: 2607:8940:4610::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:6b:0c:7a:bd:2b:0b:19:20:a4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=87018f14-ce88-49b2-9997-4d44ba2086b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6a:c1:57:eb:b5:83:43:89:6a:be:30:41:5f: 92:b2:a2:bf:66:92:e8:a8:61:12:c8:63:50:88:c7: ff:b9:68:d3:49:c5:60:a0:a0:8a:ed:e6:d9:19:95: c3:ba:94:44:b0:94:c0:37:e5:21:b0:aa:a0:76:6f: b6:82:7d:73:6d:6d:36:e0:60:88:cb:9e:95:5d:4b: c4:b8:06:0a:ab:32:d3:bc:2f:74:e4:f8:fd:a9:c4: 70:dd:54:63:b9:b0:bf:cd:15:66:ab:f5:d8:ad:56: 10:bb:2d:13:3d:37:f0:74:eb:01:32:fc:21:1c:65: bc:0b:52:ed:b0:cb:2c:13:d9:5e:cb:b6:e4:d2:86: f3:77:85:aa:26:91:0a:45:1e:ac:45:cc:33:c6:c8: 48:5f:dc:24:c4:9f:3a:48:90:ca:c8:dd:85:5f:45: be:68:31:9b:2f:27:b3:b0:f1:f4:d8:e3:a8:1d:2f: e0:6e:60:01:19:b3:45:75:2c:73:0e:d6:b0:83:cd: 28:8c:2d:85:7b:8c:27:bf:b8:68:ac:1f:09:cd:9b: ce:0e:86:1f:e2:cc:5c:66:d5:0a:b0:e2:a3:c8:03: b8:9e:60:99:e0:f9:8a:8d:36:c7:c0:6c:73:4a:b0: 8c:f2:58:83:97:8b:37:b8:f1:84:ea:b5:11:e5:52: 2a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:92:3A:29:65:A8:69:ED:EC:48:9E:27:6B:AF:DE:D4:F4:5A:14:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/509b01e9-fc55-3e1e-9d69-62c7d521f0bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:4610::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:74:d5:e3:d4:68:f7:64:bb:79:54:a6:79:86:5d:bb:58:65: b2:2b:22:79:3a:50:21:30:c8:a3:94:ef:07:82:b2:7c:14:3c: e3:74:93:44:d2:00:e2:8f:85:92:2c:84:18:bf:cf:fe:c1:f9: 3e:ce:b1:2f:88:d3:06:50:84:2b:4d:f0:a0:df:cb:8a:ed:08: a2:14:c1:81:20:34:1a:c1:42:ee:0d:92:83:ec:8f:83:84:b5: 8e:7e:7d:07:35:8f:a1:7b:0c:c1:8c:b0:fa:58:b4:bf:d0:1c: fd:bf:9f:e5:83:92:ec:31:97:68:a2:de:95:a1:1f:bc:9f:23: ec:ef:07:e4:f0:b1:ea:be:e2:0a:8b:ab:29:60:82:f0:2b:35: 90:5a:3a:9d:d6:7a:24:38:7e:47:6e:56:bf:05:bd:b8:d5:42: e5:54:f8:b6:5b:1e:bb:6a:71:f9:0d:3d:8d:19:74:9f:ea:57: da:2a:60:28:71:3f:54:52:1a:fe:86:e5:f6:44:4d:20:ac:2b: 69:67:88:74:01:46:ea:7d:a5:39:9b:bc:15:3d:7f:bf:b4:9d: ce:3a:f1:e1:17:31:1c:93:7b:bd:f6:58:b6:9c:cd:bb:7c:4e: 5c:f9:7a:a7:24:3f:45:2f:da:4d:73:84:a3:51:89:a2:67:e2: 01:2f:c3:40 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElAOWsMer0rCxkgpEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk ODcwMThmMTQtY2U4OC00OWIyLTk5OTctNGQ0NGJhMjA4NmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2rBV+u1g0OJar4wQV+SsqK/ZpLoqGESyGNQ iMf/uWjTScVgoKCK7ebZGZXDupREsJTAN+UhsKqgdm+2gn1zbW024GCIy56VXUvE uAYKqzLTvC905Pj9qcRw3VRjubC/zRVmq/XYrVYQuy0TPTfwdOsBMvwhHGW8C1Lt sMssE9ley7bk0obzd4WqJpEKRR6sRcwzxshIX9wkxJ86SJDKyN2FX0W+aDGbLyez sPH02OOoHS/gbmABGbNFdSxzDtawg80ojC2Fe4wnv7horB8JzZvODoYf4sxcZtUK sOKjyAO4nmCZ4PmKjTbHwGxzSrCM8liDl4s3uPGE6rUR5VIqWQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBaSOillqGnt7EieJ2uv3tT0WhQJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNTA5YjAxZTktZmM1NS0z ZTFlLTlkNjktNjJjN2Q1MjFmMGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEYQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD501ePUaPdku3lUpnmGXbtYZbIrInk6UCEwyKOU7weCsnwUPON0 k0TSAOKPhZIshBi/z/7B+T7OsS+I0wZQhCtN8KDfy4rtCKIUwYEgNBrBQu4NkoPs j4OEtY5+fQc1j6F7DMGMsPpYtL/QHP2/n+WDkuwxl2ii3pWhH7yfI+zvB+Twseq+ 4gqLqylggvArNZBaOp3WeiQ4fkduVr8FvbjVQuVU+LZbHrtqcfkNPY0ZdJ/qV9oq YChxP1RSGv6G5fZETSCsK2lniHQBRup9pTmbvBU9f7+0nc468eEXMRyTe732WLac zbt8Tlz5eqckP0Uv2k1zhKNRiaJn4gEvw0A= -----END CERTIFICATE-----Generated at Thu Apr 3 02:41:09 2025 by rpki-client