$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8a463ca3-0ba4-3d91-b9ae-2aaa9fe28d14.roa File: 8a463ca3-0ba4-3d91-b9ae-2aaa9fe28d14.roa (raw, json) Hash identifier: xJ4dvyJkPsSwrxQMC3NIjKHecTsCiipmw0KDiPQ+lFs= Subject key identifier: FB:AF:10:40:86:11:0B:3A:B0:17:B5:A9:B5:8C:E9:24:08:7D:5B:B1 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F432858485F9AFDE8078C5299F5A02D00 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8a463ca3-0ba4-3d91-b9ae-2aaa9fe28d14.roa Signing time: Mon 30 Dec 2024 02:00:39 +0000 ROA not before: Mon 30 Dec 2024 02:00:39 +0000 ROA not after: Sun 30 Mar 2025 01:00:39 +0000 asID: 54113 IP address blocks: 2607:8940:4080::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5f:9a:fd:e8:07:8c:52:99:f5:a0:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Dec 30 02:00:39 2024 GMT Not After : Mar 30 01:00:39 2025 GMT Subject: CN=d37817bf-6138-444a-bc67-981fa2506a37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c3:d9:5b:09:d8:69:67:67:57:31:6d:5e:fb: b6:b1:2e:fb:e8:28:c1:6b:14:a3:86:00:1b:66:db: f7:ee:47:fc:b9:30:6b:dc:f2:e5:23:bd:a8:aa:aa: 8a:e6:dc:22:ec:45:fc:03:c5:57:a9:fc:86:38:60: 57:a6:92:99:18:23:9c:05:19:67:cd:f2:0a:9f:9f: 16:69:9e:2e:14:a7:5d:78:cc:46:e8:88:44:20:77: 63:17:0c:bb:88:8a:07:59:e2:38:cb:27:0f:90:de: df:24:92:bd:2f:3f:be:49:0f:92:d5:e3:aa:5d:65: c9:9a:ab:ba:ab:1a:90:8e:fe:4d:e8:04:90:db:7c: db:9c:f7:d8:a0:d1:2e:85:6c:ef:45:d4:18:34:00: 94:0f:9c:9a:9b:75:d9:e0:b9:f9:58:b3:48:8e:18: 60:cc:94:95:89:bb:38:3b:0f:51:d6:3f:c7:60:3e: 14:41:fc:ff:01:4a:13:10:bf:79:fb:ad:c2:58:49: 73:79:67:f0:b3:3d:3d:4a:5d:ce:db:d8:03:12:d7: 4a:82:4d:fa:a9:cd:70:03:47:c5:55:7f:d3:aa:a1: 62:93:d3:13:a5:0a:26:fd:c9:90:40:d5:20:ae:d9: 8c:82:5f:c2:45:51:c8:ad:5e:9a:bd:b7:ba:a7:00: b2:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:AF:10:40:86:11:0B:3A:B0:17:B5:A9:B5:8C:E9:24:08:7D:5B:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8a463ca3-0ba4-3d91-b9ae-2aaa9fe28d14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:4080::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:31:c2:6c:50:40:46:8d:86:5f:4d:27:9f:25:60:e7:8e:a5: aa:6a:2c:f1:56:08:3e:95:e2:d5:1f:2f:2b:c8:86:d1:49:b6: 12:bb:d8:04:cd:8f:83:9c:fb:5c:dc:b6:ce:2d:1a:a4:4a:7a: 56:75:ad:c8:38:db:29:40:fb:04:62:56:da:5a:6e:c6:61:e2: 16:5a:f1:9a:76:f4:d2:f8:d2:2d:73:90:f2:3a:37:7a:58:98: fb:fc:9f:76:2c:3b:28:07:45:61:e3:33:20:eb:d3:5f:79:a7: bc:01:c9:80:83:7d:9e:45:58:79:21:ce:4a:d5:51:19:0e:90: 47:f3:17:15:f4:5d:f8:d5:9f:78:ac:82:31:2a:99:34:22:9d: 98:8c:16:59:86:95:03:4c:e0:bc:4c:29:f0:6f:08:d3:c0:c6: e8:72:fd:ba:31:0d:e5:56:64:1a:dc:ae:8a:c9:7b:9f:96:83: 28:27:dc:4b:d9:20:38:28:8d:1a:e2:08:db:19:84:d6:c1:74: bc:da:f9:82:9d:7c:41:c7:bb:32:b2:32:62:53:19:38:9c:56: 90:60:e2:63:85:91:25:dc:39:b1:69:f0:43:19:9b:06:e7:8d: 31:7e:35:fc:5a:6e:f9:36:57:47:b9:01:96:ec:d1:be:d8:da: 50:8a:4b:aa -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhfmv3oB4xSmfWgLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI0MTIzMDAyMDAzOVoXDTI1MDMzMDAxMDAzOVowLzEtMCsGA1UEAxMk ZDM3ODE3YmYtNjEzOC00NDRhLWJjNjctOTgxZmEyNTA2YTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksPZWwnYaWdnVzFtXvu2sS776CjBaxSjhgAb Ztv37kf8uTBr3PLlI72oqqqK5twi7EX8A8VXqfyGOGBXppKZGCOcBRlnzfIKn58W aZ4uFKddeMxG6IhEIHdjFwy7iIoHWeI4yycPkN7fJJK9Lz++SQ+S1eOqXWXJmqu6 qxqQjv5N6ASQ23zbnPfYoNEuhWzvRdQYNACUD5yam3XZ4Ln5WLNIjhhgzJSVibs4 Ow9R1j/HYD4UQfz/AUoTEL95+63CWElzeWfwsz09Sl3O29gDEtdKgk36qc1wA0fF VX/TqqFik9MTpQom/cmQQNUgrtmMgl/CRVHIrV6avbe6pwCyowIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPuvEECGEQs6sBe1qbWM6SQIfVuxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvOGE0NjNjYTMtMGJhNC0z ZDkxLWI5YWUtMmFhYTlmZTI4ZDE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQECA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAwxwmxQQEaNhl9NJ58lYOeOpapqLPFWCD6V4tUfLyvIhtFJthK7 2ATNj4Oc+1zcts4tGqRKelZ1rcg42ylA+wRiVtpabsZh4hZa8Zp29NL40i1zkPI6 N3pYmPv8n3YsOygHRWHjMyDr0195p7wByYCDfZ5FWHkhzkrVURkOkEfzFxX0XfjV n3isgjEqmTQinZiMFlmGlQNM4LxMKfBvCNPAxuhy/boxDeVWZBrcrorJe5+Wgygn 3EvZIDgojRriCNsZhNbBdLza+YKdfEHHuzKyMmJTGTicVpBg4mOFkSXcObFp8EMZ mwbnjTF+Nfxabvk2V0e5AZbs0b7Y2lCKS6o= -----END CERTIFICATE-----Generated at Sun Feb 16 15:39:49 2025 by rpki-client