$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/640728a4-61fc-3bad-a206-0d17e12d4e01.roa File: 640728a4-61fc-3bad-a206-0d17e12d4e01.roa (raw, json) Hash identifier: QKWO4hiQPqMkao+CRbluWvxesCw4lIM9hOfUijdKwl0= Subject key identifier: EB:47:C8:EB:60:26:43:65:A2:D0:D0:DF:2C:92:E5:90:44:D9:8B:69 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F432858485F9AF5F57E34D70EE1FF059D Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/640728a4-61fc-3bad-a206-0d17e12d4e01.roa Signing time: Mon 30 Dec 2024 02:00:39 +0000 ROA not before: Mon 30 Dec 2024 02:00:39 +0000 ROA not after: Sun 30 Mar 2025 01:00:39 +0000 asID: 54113 IP address blocks: 2607:8940:4100::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5f:9a:f5:f5:7e:34:d7:0e:e1:ff:05:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Dec 30 02:00:39 2024 GMT Not After : Mar 30 01:00:39 2025 GMT Subject: CN=c05aeee4-b9ab-4a65-a837-f38cc72b8166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:2d:5f:39:70:0f:56:91:6b:53:70:7a:d8:77: e7:ac:81:e3:85:13:ef:0d:6a:ff:65:88:82:f9:bb: 5e:37:ce:e4:7a:78:c4:08:9b:21:f3:27:fd:08:7d: ab:1c:19:08:98:d3:6e:87:46:39:aa:47:c3:48:31: 7d:d8:ea:4f:3c:c6:24:34:0e:97:ee:42:d4:c7:dc: 14:05:94:b5:f3:dc:62:db:66:59:87:ea:69:b1:a1: dc:c7:0d:0f:e6:a2:12:f8:3c:71:8b:51:1f:07:69: 8a:26:fb:f3:3f:b2:68:d8:25:7f:50:46:fa:46:ad: a2:06:15:89:38:2a:7e:e7:1c:f1:38:55:c7:4c:37: c9:93:99:e8:a8:07:c3:90:17:01:22:5c:59:81:7f: 70:d6:c4:24:d7:ce:ca:64:14:7c:96:f0:1f:0b:87: 58:50:45:2f:db:6a:51:66:45:a8:89:78:9c:df:d6: f1:03:b6:c3:5b:b3:03:ce:a3:50:6d:d3:05:71:ff: 63:0c:e5:22:61:ff:98:3f:ff:18:b2:ce:01:ea:58: 8c:f7:e7:74:d5:01:a7:1e:94:24:7b:d0:a3:34:1d: 3b:df:28:d3:7f:ab:f7:a1:43:70:dc:de:23:d8:5f: 35:66:1a:cb:9f:24:8a:16:a7:85:b1:2d:04:52:92: 6c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:47:C8:EB:60:26:43:65:A2:D0:D0:DF:2C:92:E5:90:44:D9:8B:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/640728a4-61fc-3bad-a206-0d17e12d4e01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:4100::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:50:c5:6c:a3:54:48:97:3d:ca:e0:4d:1e:26:b9:44:2e:a6: aa:ec:83:3c:5e:27:e9:17:bc:f2:12:94:ed:f8:38:92:3b:a2: 4d:f3:87:4f:29:9e:45:e0:bc:ef:51:b8:92:89:c4:6d:7a:28: 25:e5:0f:4b:4f:97:04:67:e8:0a:da:90:7f:46:04:1e:ee:83: 9b:25:78:37:58:78:a2:b3:47:81:66:d0:f6:39:3c:b4:20:5a: 2d:85:49:93:81:2a:d8:c9:cb:ed:90:17:61:26:4b:0a:95:2d: 0e:e9:4c:72:99:c4:41:cf:76:56:a9:f0:3a:6a:64:ae:f5:c1: d2:b7:d3:70:24:dd:cc:62:7c:c8:4d:09:ff:ba:54:36:37:16: 06:65:c1:55:85:f0:b5:e5:54:34:7d:6a:89:3f:b7:ef:59:47: b8:ec:32:bb:ad:7f:c4:eb:3b:94:fd:a2:37:b2:f8:db:4a:d1: 6f:53:a0:4c:e0:74:9e:14:da:fd:cf:29:7e:2e:ea:4f:83:35: a1:31:84:df:f2:08:3c:cf:34:4f:b7:3b:45:c6:9f:1f:79:0f: 37:b2:dd:1a:a1:5f:3e:8c:d5:af:69:79:1c:df:78:d8:09:53: 86:36:b7:09:c6:10:6a:8c:1c:d3:bf:07:d4:dd:bb:fd:c3:2b: 67:f1:d3:3b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhfmvX1fjTXDuH/BZ0wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI0MTIzMDAyMDAzOVoXDTI1MDMzMDAxMDAzOVowLzEtMCsGA1UEAxMk YzA1YWVlZTQtYjlhYi00YTY1LWE4MzctZjM4Y2M3MmI4MTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5C1fOXAPVpFrU3B62HfnrIHjhRPvDWr/ZYiC +bteN87kenjECJsh8yf9CH2rHBkImNNuh0Y5qkfDSDF92OpPPMYkNA6X7kLUx9wU BZS189xi22ZZh+ppsaHcxw0P5qIS+Dxxi1EfB2mKJvvzP7Jo2CV/UEb6Rq2iBhWJ OCp+5xzxOFXHTDfJk5noqAfDkBcBIlxZgX9w1sQk187KZBR8lvAfC4dYUEUv22pR ZkWoiXic39bxA7bDW7MDzqNQbdMFcf9jDOUiYf+YP/8Yss4B6liM9+d01QGnHpQk e9CjNB073yjTf6v3oUNw3N4j2F81ZhrLnySKFqeFsS0EUpJsHwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOtHyOtgJkNlotDQ3yyS5ZBE2YtpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNjQwNzI4YTQtNjFmYy0z YmFkLWEyMDYtMGQxN2UxMmQ0ZTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEEA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD5QxWyjVEiXPcrgTR4muUQupqrsgzxeJ+kXvPISlO34OJI7ok3z h08pnkXgvO9RuJKJxG16KCXlD0tPlwRn6ArakH9GBB7ug5sleDdYeKKzR4Fm0PY5 PLQgWi2FSZOBKtjJy+2QF2EmSwqVLQ7pTHKZxEHPdlap8DpqZK71wdK303Ak3cxi fMhNCf+6VDY3FgZlwVWF8LXlVDR9aok/t+9ZR7jsMrutf8TrO5T9ojey+NtK0W9T oEzgdJ4U2v3PKX4u6k+DNaExhN/yCDzPNE+3O0XGnx95Dzey3RqhXz6M1a9peRzf eNgJU4Y2twnGEGqMHNO/B9Tdu/3DK2fx0zs= -----END CERTIFICATE-----Generated at Fri Mar 14 11:19:30 2025 by rpki-client