$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/96dbe87f-b87a-3539-94ac-e63876136093.roa File: 96dbe87f-b87a-3539-94ac-e63876136093.roa (raw, json) Hash identifier: pLgcpve/cAFB+jk8TK3NTCx9gGA38A0oUdTQaxG1/Vc= Subject key identifier: E3:EE:41:71:7F:64:87:17:15:94:3B:34:86:C3:96:92:0F:11:40:29 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F432858485F9B0B6A19998830B85FD180 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/96dbe87f-b87a-3539-94ac-e63876136093.roa Signing time: Mon 30 Dec 2024 02:00:39 +0000 ROA not before: Mon 30 Dec 2024 02:00:39 +0000 ROA not after: Sun 30 Mar 2025 01:00:39 +0000 asID: 54113 IP address blocks: 2607:8940:4b00::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5f:9b:0b:6a:19:99:88:30:b8:5f:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Dec 30 02:00:39 2024 GMT Not After : Mar 30 01:00:39 2025 GMT Subject: CN=5b80382a-0cf5-4a1f-9b65-34d14b498c6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:2a:c0:8c:f8:7e:0c:92:10:e2:6f:8d:2f:fa: bf:d9:a1:fa:37:08:8c:1c:85:b1:88:3b:05:69:d3: 5e:19:89:61:5d:c9:90:df:f5:39:0d:d4:a2:8b:a6: 29:3c:6f:48:9d:2c:35:7a:24:16:5c:62:97:d8:2e: 55:01:17:b8:5b:d0:64:1e:34:09:c0:7b:91:62:bc: 0c:cf:ef:5b:b9:60:82:be:a1:e2:df:78:fc:c8:dd: 45:ca:79:71:98:51:b1:7d:4c:32:2f:1a:79:b6:1f: 3a:a8:e1:1d:36:60:c2:02:c7:72:bb:63:86:87:8c: 12:d2:86:50:22:2a:8c:c0:a4:69:45:ff:53:d8:b6: 17:a9:52:39:4c:1a:3c:1c:66:80:46:8b:42:45:7b: 52:98:ce:87:85:26:e3:1f:2f:5f:14:89:cf:8b:c3: 6f:8a:31:3e:50:b6:0f:e4:74:6d:5b:80:50:06:45: e9:37:68:d4:d2:04:0c:0b:37:f2:c5:e3:1c:0a:11: 09:6d:39:cf:39:c0:3c:4e:63:ca:e1:af:41:f2:84: ba:20:95:1f:03:4e:e4:22:2a:c1:62:7b:bb:b0:63: a9:19:29:66:8b:6c:4a:17:d4:45:8b:b5:f0:63:aa: 29:b1:28:9b:ec:7b:ee:06:e2:28:0f:37:7c:07:98: 1f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:EE:41:71:7F:64:87:17:15:94:3B:34:86:C3:96:92:0F:11:40:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/96dbe87f-b87a-3539-94ac-e63876136093.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:4b00::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:0c:64:05:32:01:2d:46:0a:93:c8:af:dc:89:e1:3b:e7:11: 4d:4e:a2:18:65:25:94:b5:5d:20:ed:6a:64:97:01:bc:aa:62: 81:fd:49:50:b9:cf:67:a9:a5:e8:3b:bc:4c:15:06:2c:01:80: e2:89:47:2a:d6:98:2b:ee:35:9f:01:02:24:5e:66:61:8b:be: f0:9a:ab:87:38:5b:5b:be:da:65:16:8e:5d:12:c2:b9:4f:d3: 88:32:d4:20:d6:07:bb:f3:5d:4b:d4:6b:04:ec:aa:5c:e2:ea: 4e:2c:b2:7e:50:ee:6d:4b:8b:61:c2:24:00:1d:b7:f4:84:c7: 76:f7:37:db:ec:79:89:ee:2f:16:82:f2:f0:86:5c:2f:c7:b8: b9:bc:68:2a:4c:df:34:95:d4:7d:ee:0a:26:5f:4e:35:39:3b: 35:cd:9b:59:fc:6b:bd:38:b7:70:df:b8:2d:49:d0:a9:1f:39: 45:65:99:d6:42:d5:ff:14:bd:23:aa:0a:af:ac:6f:8a:da:a0: 0d:2f:7a:e8:80:89:69:b2:33:f3:b7:6b:a2:9d:f4:f5:e9:75: 40:42:40:b9:b5:1d:b1:f2:10:cd:49:00:62:50:47:5c:6e:1d: 79:8f:58:ee:10:da:e6:47:40:42:1e:4a:c9:1c:f0:66:67:3b: e6:bb:ef:cd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhfmwtqGZmIMLhf0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI0MTIzMDAyMDAzOVoXDTI1MDMzMDAxMDAzOVowLzEtMCsGA1UEAxMk NWI4MDM4MmEtMGNmNS00YTFmLTliNjUtMzRkMTRiNDk4YzZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjirAjPh+DJIQ4m+NL/q/2aH6NwiMHIWxiDsF adNeGYlhXcmQ3/U5DdSii6YpPG9InSw1eiQWXGKX2C5VARe4W9BkHjQJwHuRYrwM z+9buWCCvqHi33j8yN1FynlxmFGxfUwyLxp5th86qOEdNmDCAsdyu2OGh4wS0oZQ IiqMwKRpRf9T2LYXqVI5TBo8HGaARotCRXtSmM6HhSbjHy9fFInPi8NvijE+ULYP 5HRtW4BQBkXpN2jU0gQMCzfyxeMcChEJbTnPOcA8TmPK4a9B8oS6IJUfA07kIirB Ynu7sGOpGSlmi2xKF9RFi7XwY6opsSib7HvuBuIoDzd8B5gfuwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOPuQXF/ZIcXFZQ7NIbDlpIPEUApMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvOTZkYmU4N2YtYjg3YS0z NTM5LTk0YWMtZTYzODc2MTM2MDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEsA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGkMZAUyAS1GCpPIr9yJ4TvnEU1OohhlJZS1XSDtamSXAbyqYoH9 SVC5z2eppeg7vEwVBiwBgOKJRyrWmCvuNZ8BAiReZmGLvvCaq4c4W1u+2mUWjl0S wrlP04gy1CDWB7vzXUvUawTsqlzi6k4ssn5Q7m1Li2HCJAAdt/SEx3b3N9vseYnu LxaC8vCGXC/HuLm8aCpM3zSV1H3uCiZfTjU5OzXNm1n8a704t3DfuC1J0KkfOUVl mdZC1f8UvSOqCq+sb4raoA0veuiAiWmyM/O3a6Kd9PXpdUBCQLm1HbHyEM1JAGJQ R1xuHXmPWO4Q2uZHQEIeSskc8GZnO+a7780= -----END CERTIFICATE-----Generated at Sun Feb 16 15:05:32 2025 by rpki-client