$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6672c1f7-100b-38e7-b621-0a62898ff089.roa File: 6672c1f7-100b-38e7-b621-0a62898ff089.roa (raw, json) Hash identifier: GLN2JMxGPvBa4Tj3RCfiT60EAZsERR3gA6Fn7zGXds8= Subject key identifier: 72:3F:34:03:73:F2:2F:12:E3:6C:BA:A7:DC:EF:E4:5E:92:10:5F:B6 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584940396D08682ED77E3B8CB8F2 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6672c1f7-100b-38e7-b621-0a62898ff089.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 54113 IP address blocks: 2607:8940:4ab0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:6d:08:68:2e:d7:7e:3b:8c:b8:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=b2025bba-7c28-45d5-a36a-e5caa4052574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6a:d6:f0:c6:22:16:9e:19:15:3d:0d:44:7f: f4:84:a8:96:47:17:aa:2c:f8:12:4b:1c:9e:f0:0f: 73:f2:ca:05:a6:5d:94:ae:1e:ca:7c:b8:29:e5:6f: e2:3f:db:65:6f:a2:cd:46:ab:9e:ab:d0:ea:c8:ea: b5:fd:68:a6:8c:a9:ce:68:d3:e6:ce:56:eb:b6:63: 1a:23:28:33:60:00:11:37:53:08:75:79:50:26:56: 59:47:40:19:c6:f6:12:88:40:80:6a:2a:28:71:1b: c3:b4:21:6d:48:ac:e0:2c:cc:d0:c7:69:4c:58:cc: b0:12:13:86:1e:06:ea:18:ee:52:37:98:be:cf:d7: 31:4d:48:1b:fc:f0:e1:84:a5:e8:bf:3b:67:ea:d0: 40:c2:a9:b4:12:26:03:6f:75:31:a1:bc:a4:b7:50: 8e:17:41:9a:83:de:b4:6b:2b:41:8b:d6:b6:4f:d1: 4f:fc:1a:be:a7:89:a7:4f:14:52:e8:fa:70:6f:b3: 53:f3:65:03:d4:6f:32:dd:8f:4b:09:85:1b:88:5e: 24:26:69:ca:9b:9c:73:27:88:7e:d2:e6:fe:bb:86: 7e:a8:ba:50:5e:d0:00:46:5e:07:6e:a2:cc:a9:93: 36:71:77:dd:83:94:23:b1:9a:47:14:64:86:fd:26: c2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:3F:34:03:73:F2:2F:12:E3:6C:BA:A7:DC:EF:E4:5E:92:10:5F:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6672c1f7-100b-38e7-b621-0a62898ff089.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:4ab0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:63:87:15:b3:ae:87:55:31:22:81:e5:21:5a:4b:bd:40:ad: 21:95:be:1f:5b:3d:59:49:b8:62:a7:18:71:ab:06:1b:a3:66: e2:e9:2f:18:a4:e9:97:ba:d2:68:53:6b:49:68:da:56:6e:db: fe:67:7c:ef:fc:7e:bc:cd:93:c3:3d:70:9d:f1:83:ee:85:ba: 49:86:20:69:67:14:b0:25:68:e4:cc:82:99:47:06:97:b1:e9: 82:26:4a:09:b2:ef:56:fd:19:2f:8a:55:c2:79:b9:66:cf:e3: 8a:09:bc:5d:79:e6:34:ea:0c:83:ed:f0:c1:c5:bf:34:13:02: 1f:ab:c9:ce:d7:9e:fb:ce:ef:4f:c1:5d:52:4f:dc:4f:05:28: 18:8b:c3:37:6c:42:55:41:4b:5a:e8:26:f1:cf:b5:01:d1:65: e1:ec:49:84:e8:aa:53:8d:e5:1f:57:29:9a:fe:d5:22:64:85: fb:dd:7c:cb:78:7c:d1:a3:e1:58:34:6b:c9:be:16:e9:53:f3: 3b:d2:e4:d7:d7:88:23:a8:95:43:41:a3:41:30:3e:17:ef:26: b3:b0:da:46:d6:10:cf:a0:40:39:55:f7:66:da:e6:15:b4:b3: 7a:a9:be:80:31:78:8b:3d:72:98:66:51:df:a1:a9:2a:2b:d6: 76:6c:ec:05 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElAOW0IaC7XfjuMuPIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk YjIwMjViYmEtN2MyOC00NWQ1LWEzNmEtZTVjYWE0MDUyNTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGrW8MYiFp4ZFT0NRH/0hKiWRxeqLPgSSxye 8A9z8soFpl2Urh7KfLgp5W/iP9tlb6LNRqueq9DqyOq1/WimjKnOaNPmzlbrtmMa IygzYAARN1MIdXlQJlZZR0AZxvYSiECAaioocRvDtCFtSKzgLMzQx2lMWMywEhOG HgbqGO5SN5i+z9cxTUgb/PDhhKXovztn6tBAwqm0EiYDb3Uxobykt1COF0Gag960 aytBi9a2T9FP/Bq+p4mnTxRS6Ppwb7NT82UD1G8y3Y9LCYUbiF4kJmnKm5xzJ4h+ 0ub+u4Z+qLpQXtAARl4HbqLMqZM2cXfdg5QjsZpHFGSG/SbC6QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHI/NANz8i8S42y6p9zv5F6SEF+2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNjY3MmMxZjctMTAwYi0z OGU3LWI2MjEtMGE2Mjg5OGZmMDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEqw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABBjhxWzrodVMSKB5SFaS71ArSGVvh9bPVlJuGKnGHGrBhujZuLp Lxik6Ze60mhTa0lo2lZu2/5nfO/8frzNk8M9cJ3xg+6FukmGIGlnFLAlaOTMgplH Bpex6YImSgmy71b9GS+KVcJ5uWbP44oJvF155jTqDIPt8MHFvzQTAh+ryc7XnvvO 70/BXVJP3E8FKBiLwzdsQlVBS1roJvHPtQHRZeHsSYToqlON5R9XKZr+1SJkhfvd fMt4fNGj4Vg0a8m+FulT8zvS5NfXiCOolUNBo0EwPhfvJrOw2kbWEM+gQDlV92ba 5hW0s3qpvoAxeIs9cphmUd+hqSor1nZs7AU= -----END CERTIFICATE-----Generated at Thu Apr 3 02:43:30 2025 by rpki-client