$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8be78f32-6795-38a8-a107-c194971bf485.roa File: 8be78f32-6795-38a8-a107-c194971bf485.roa (raw, json) Hash identifier: 6ml8LCJ4GGlLcDbtiYsLvDn1Pol2FooHCVGNlW9JMlE= Subject key identifier: 1B:FE:8E:A6:1E:01:4B:63:72:DC:FE:32:C9:C9:9E:2E:EC:67:F0:C9 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F432858485F9B05D26B7446882916D080 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8be78f32-6795-38a8-a107-c194971bf485.roa Signing time: Mon 30 Dec 2024 02:00:39 +0000 ROA not before: Mon 30 Dec 2024 02:00:39 +0000 ROA not after: Sun 30 Mar 2025 01:00:39 +0000 asID: 54113 IP address blocks: 2607:8940:5060::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5f:9b:05:d2:6b:74:46:88:29:16:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Dec 30 02:00:39 2024 GMT Not After : Mar 30 01:00:39 2025 GMT Subject: CN=863cc1cc-31ea-4580-875c-aa6cce70bb25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d0:f3:b6:5f:fc:5e:de:ee:65:19:5a:e1:ea: 2e:27:bc:fe:8e:a7:1c:9e:a4:d0:69:87:22:d3:f5: 82:d6:ca:c5:0e:5b:fe:9a:22:c6:99:b8:30:3c:2b: 1b:32:a1:90:61:5b:05:03:16:79:7f:8e:85:6b:68: 12:23:35:0b:96:33:ac:0c:3d:65:29:10:89:8a:ea: 52:bf:71:22:ff:3b:1a:86:21:15:db:ac:6d:51:13: 0f:13:54:ab:d7:da:0b:dd:1f:00:c5:95:18:65:5e: 7b:15:31:db:33:fd:c6:b1:8d:3d:6a:a8:d6:6c:e3: 95:d6:37:17:ee:4b:a0:f8:f0:2b:77:25:49:e6:cc: 46:b0:8b:ec:8d:e4:f2:71:b3:62:3a:af:e9:70:c9: 87:85:b0:6d:20:8c:a2:ce:d5:3e:f4:65:2e:99:f6: 97:f0:3e:26:8a:2a:56:b4:71:79:58:d8:8e:00:c4: 25:a9:11:a4:b0:eb:4c:05:27:76:20:14:a5:50:b7: db:b9:52:0f:49:c1:65:df:01:a0:d5:82:78:ec:94: 18:c9:72:92:c0:0f:e7:24:2a:b8:95:42:71:9b:79: ee:7e:01:7e:70:f2:75:18:a0:27:8f:6d:02:04:bd: 03:da:bd:a0:a7:3a:03:30:dd:bb:b2:10:c9:cf:7c: 37:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:FE:8E:A6:1E:01:4B:63:72:DC:FE:32:C9:C9:9E:2E:EC:67:F0:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8be78f32-6795-38a8-a107-c194971bf485.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:5060::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:97:00:90:67:19:94:d8:8a:c0:39:99:50:99:e5:47:37:d0: b4:6a:de:3d:97:7c:81:cc:86:fe:4b:f4:fd:fc:e6:3c:04:60: ac:60:0b:e8:d8:3d:a6:00:c2:b4:23:b4:ae:22:91:ea:ef:fa: 95:5a:5f:15:b8:f0:8d:83:ca:55:60:8b:85:58:ff:f9:49:d1: e2:ac:19:97:3b:64:5c:af:d5:a5:06:ae:5a:ed:17:43:83:f1: b5:3c:e1:17:84:97:ea:cb:7f:0f:2d:38:3e:67:ee:c2:05:27: ea:0d:bf:0d:a6:df:ad:f9:a0:e1:1c:28:ae:0f:a2:24:35:9f: 4b:b6:f2:a9:90:6a:a1:b5:a1:4d:aa:fd:43:7d:22:f6:b8:30: 32:dc:68:90:97:26:b1:dc:d3:b4:81:5e:af:23:da:e4:fd:51: 5a:75:de:78:58:fd:73:4c:59:cc:95:fc:91:3b:f3:69:32:79: fe:a3:12:60:1f:41:c9:f5:d1:e6:c1:c3:bf:e9:eb:1a:91:6e: 68:58:3c:a0:3f:b2:b8:a2:c3:1d:a7:14:c1:04:70:a8:28:6b: 63:13:a4:5d:61:96:83:b9:74:99:c9:01:af:1f:63:f5:9d:8b: 99:39:b6:f3:75:9c:7a:1d:05:73:7e:28:f7:f3:fb:86:44:82: d2:de:3e:ed -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhfmwXSa3RGiCkW0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI0MTIzMDAyMDAzOVoXDTI1MDMzMDAxMDAzOVowLzEtMCsGA1UEAxMk ODYzY2MxY2MtMzFlYS00NTgwLTg3NWMtYWE2Y2NlNzBiYjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtDztl/8Xt7uZRla4eouJ7z+jqccnqTQaYci 0/WC1srFDlv+miLGmbgwPCsbMqGQYVsFAxZ5f46Fa2gSIzULljOsDD1lKRCJiupS v3Ei/zsahiEV26xtURMPE1Sr19oL3R8AxZUYZV57FTHbM/3GsY09aqjWbOOV1jcX 7kug+PArdyVJ5sxGsIvsjeTycbNiOq/pcMmHhbBtIIyiztU+9GUumfaX8D4miipW tHF5WNiOAMQlqRGksOtMBSd2IBSlULfbuVIPScFl3wGg1YJ47JQYyXKSwA/nJCq4 lUJxm3nufgF+cPJ1GKAnj20CBL0D2r2gpzoDMN27shDJz3w3pwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBv+jqYeAUtjctz+MsnJni7sZ/DJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvOGJlNzhmMzItNjc5NS0z OGE4LWExMDctYzE5NDk3MWJmNDg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFBg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEiXAJBnGZTYisA5mVCZ5Uc30LRq3j2XfIHMhv5L9P385jwEYKxg C+jYPaYAwrQjtK4ikerv+pVaXxW48I2DylVgi4VY//lJ0eKsGZc7ZFyv1aUGrlrt F0OD8bU84ReEl+rLfw8tOD5n7sIFJ+oNvw2m3635oOEcKK4PoiQ1n0u28qmQaqG1 oU2q/UN9Iva4MDLcaJCXJrHc07SBXq8j2uT9UVp13nhY/XNMWcyV/JE782kyef6j EmAfQcn10ebBw7/p6xqRbmhYPKA/sriiwx2nFMEEcKgoa2MTpF1hloO5dJnJAa8f Y/Wdi5k5tvN1nHodBXN+KPfz+4ZEgtLePu0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:53:38 2025 by rpki-client