$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/85bf144f-6c40-3903-b64c-0164473d33e1.roa File: 85bf144f-6c40-3903-b64c-0164473d33e1.roa (raw, json) Hash identifier: Np7R/IrSVz74CZd65gOnnASuI8h/goXD83Svx7iBC1E= Subject key identifier: 16:1C:C2:A3:5E:8C:85:74:33:04:EF:D1:61:77:72:0E:36:AE:23:5E Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584940396611FB1A86F934541848 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/85bf144f-6c40-3903-b64c-0164473d33e1.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 54113 IP address blocks: 2607:8940:5e20::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:66:11:fb:1a:86:f9:34:54:18:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=2a0fac99-25aa-469d-a833-124aa1d5b590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e5:eb:12:40:4c:4d:5a:43:d4:7f:8b:ef:f5: f8:c2:4f:f5:bd:2c:e0:3f:49:cc:23:0a:8a:f8:ea: 28:80:57:d7:53:3f:de:e9:59:c7:df:a6:2c:55:c5: 0e:38:3f:4c:3a:e6:c8:94:b3:c8:24:f7:b3:08:3d: 25:f2:d3:d6:3c:d3:ec:ff:a3:ef:2b:5c:bc:ef:5b: b0:2e:03:71:73:f6:f2:97:51:d8:88:a3:eb:2c:3f: 82:da:43:fc:6e:a2:b2:0f:dc:ab:d0:96:38:31:ca: 47:42:2a:fe:4a:45:d7:ce:4a:78:8c:ed:eb:79:3b: a7:81:e1:68:ef:c6:ad:7b:61:5a:71:ee:ac:ee:92: a9:4f:20:27:53:cd:8d:8b:55:98:0e:82:0b:75:f1: 79:3d:50:4b:72:49:33:96:99:c4:6b:fc:40:82:12: 7e:aa:c9:d0:46:51:15:a9:bb:13:4c:ec:9c:51:38: db:81:24:88:39:f5:9a:20:b9:bb:fa:36:a3:c6:55: df:a4:c6:b5:2a:d6:91:25:c8:64:9a:38:67:6b:c1: 5e:d8:d9:19:63:8b:33:a2:e6:21:04:1b:ea:20:0b: b6:ae:24:7e:84:72:ff:9d:12:bc:a7:4f:6a:35:8e: 96:75:e1:69:0a:a9:9f:cc:24:05:f6:69:8a:99:6f: 2d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:1C:C2:A3:5E:8C:85:74:33:04:EF:D1:61:77:72:0E:36:AE:23:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/85bf144f-6c40-3903-b64c-0164473d33e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:5e20::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:6d:89:ff:d5:d0:85:ae:c6:d3:2b:f5:0a:ef:a6:bc:85:3e: ee:e9:09:00:5d:3e:21:4b:a6:7c:2f:1c:ea:2f:4f:fa:6f:80: 5b:6a:42:01:f8:29:b0:92:e5:4b:2a:94:01:a5:72:a5:85:d7: 5f:25:93:c7:55:af:9d:78:5a:56:49:81:15:ef:30:fe:10:4a: 9a:3d:a0:58:25:31:b6:11:48:16:0f:92:83:e1:75:fa:6f:08: ff:06:99:b1:e4:25:41:9b:c6:fd:b2:c3:a6:6f:d0:02:0e:b4: d4:33:09:21:84:a4:71:17:cc:bf:33:92:b4:a8:4a:83:4f:0e: 57:60:64:4a:22:24:79:97:1c:90:3b:b9:95:75:ac:59:c4:1b: 93:39:13:79:f3:a8:3e:97:f1:32:a2:c3:66:89:4e:a5:87:15: 73:ac:6d:1e:1a:9c:d6:b0:e8:33:7f:32:a0:96:85:34:79:8a: 37:2f:6d:20:89:87:68:08:2a:2a:2c:50:d9:25:52:17:ad:70: 4d:85:1c:95:e3:84:a8:c3:ba:e7:5c:2e:c9:22:b1:a4:46:47: 2d:57:9e:55:8f:a7:15:91:ce:e8:c3:6d:4a:6f:66:00:97:9c: 5f:ca:55:a9:37:3b:c0:6e:4f:d8:bc:af:7c:d6:9d:93:74:4d: 67:be:1f:ac -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElAOWYR+xqG+TRUGEgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk MmEwZmFjOTktMjVhYS00NjlkLWE4MzMtMTI0YWExZDViNTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+XrEkBMTVpD1H+L7/X4wk/1vSzgP0nMIwqK +OoogFfXUz/e6VnH36YsVcUOOD9MOubIlLPIJPezCD0l8tPWPNPs/6PvK1y871uw LgNxc/byl1HYiKPrLD+C2kP8bqKyD9yr0JY4McpHQir+SkXXzkp4jO3reTungeFo 78ate2Face6s7pKpTyAnU82Ni1WYDoILdfF5PVBLckkzlpnEa/xAghJ+qsnQRlEV qbsTTOycUTjbgSSIOfWaILm7+jajxlXfpMa1KtaRJchkmjhna8Fe2NkZY4szouYh BBvqIAu2riR+hHL/nRK8p09qNY6WdeFpCqmfzCQF9mmKmW8tmwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBYcwqNejIV0MwTv0WF3cg42riNeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvODViZjE0NGYtNmM0MC0z OTAzLWI2NGMtMDE2NDQ3M2QzM2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQF4g MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAChtif/V0IWuxtMr9QrvpryFPu7pCQBdPiFLpnwvHOovT/pvgFtq QgH4KbCS5UsqlAGlcqWF118lk8dVr514WlZJgRXvMP4QSpo9oFglMbYRSBYPkoPh dfpvCP8GmbHkJUGbxv2yw6Zv0AIOtNQzCSGEpHEXzL8zkrSoSoNPDldgZEoiJHmX HJA7uZV1rFnEG5M5E3nzqD6X8TKiw2aJTqWHFXOsbR4anNaw6DN/MqCWhTR5ijcv bSCJh2gIKiosUNklUhetcE2FHJXjhKjDuudcLskisaRGRy1XnlWPpxWRzujDbUpv ZgCXnF/KVak3O8BuT9i8r3zWnZN0TWe+H6w= -----END CERTIFICATE-----Generated at Thu Apr 3 02:41:54 2025 by rpki-client