$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9b34002c-da18-36e6-8bda-0a39afe2b7b4.roa File: 9b34002c-da18-36e6-8bda-0a39afe2b7b4.roa (raw, json) Hash identifier: 1r/Kb5Qu2h+TBimhidqtXC4IELK0mUbmajiC07Pmn54= Subject key identifier: C4:D5:C1:ED:19:5A:52:0B:DD:A7:19:6C:9F:92:FF:15:51:46:8E:34 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285849403956A29CB520D8A6091BC0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9b34002c-da18-36e6-8bda-0a39afe2b7b4.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 54113 IP address blocks: 2607:8940:44d0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:56:a2:9c:b5:20:d8:a6:09:1b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=af2a7c05-cbab-47ef-8c6d-d3e6a63f98fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:82:12:16:cc:2f:2f:a7:e1:16:08:4f:4f:44: 5d:64:92:cf:27:a0:5c:0c:0f:d5:01:a8:9c:0d:22: de:63:f2:d5:82:02:a8:d9:09:85:78:9f:9b:6a:4d: 99:d9:19:15:be:19:58:ea:27:44:b6:d9:cf:c8:37: b7:6c:fb:cb:e3:68:1a:51:be:e9:14:c6:6e:bb:2d: 25:4c:0d:2b:ff:f0:20:a7:4c:25:fe:30:d1:bb:04: 71:43:a6:cc:f2:c0:b2:16:48:02:32:61:87:ab:a8: 9a:bf:81:b6:f8:10:b1:3e:f9:8e:7a:25:bc:85:3e: 03:72:b1:c2:00:2b:2b:1f:5a:a8:ea:32:21:53:a7: 39:e2:7c:09:74:1b:eb:a6:8a:1f:ba:92:5a:ff:ed: a9:ed:81:82:20:8e:22:1a:9a:83:c0:d7:a2:35:e7: 4d:df:58:e3:14:ba:90:fd:05:33:88:fa:f8:6c:de: 68:be:ca:af:28:c9:79:69:54:4e:0f:6f:90:93:5e: 73:07:7c:7b:71:f0:e6:07:ba:15:e6:ea:b9:e0:89: 4f:70:de:19:04:6a:74:66:9c:92:a6:da:e7:11:d5: 6d:a6:0e:f6:0f:76:6c:a2:74:a7:ba:87:49:48:df: 75:58:6e:19:3c:cc:a6:78:53:0b:79:22:92:86:b8: e5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:D5:C1:ED:19:5A:52:0B:DD:A7:19:6C:9F:92:FF:15:51:46:8E:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9b34002c-da18-36e6-8bda-0a39afe2b7b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:44d0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:0d:25:54:16:13:b2:46:f0:44:e1:71:e6:7e:1d:e5:94:0d: 16:ae:44:b4:48:76:2d:b2:ec:61:0c:f9:34:0f:ab:1e:d2:4a: d3:5b:2f:4c:9a:f6:85:c2:0a:0b:99:0f:2d:d2:71:91:98:18: 1e:5b:24:b6:ea:29:b9:fe:91:f9:90:af:dc:10:a7:07:38:ff: 37:6b:4c:0f:59:86:f3:57:0b:3c:96:44:30:60:b4:21:05:e5: ec:0b:98:48:b2:a8:ea:f8:44:66:98:32:67:c0:6d:3a:5b:13: d3:a0:bf:1a:36:4a:13:58:cd:d1:ab:86:da:8f:a6:22:8a:28: 3f:e7:aa:f2:a3:ca:aa:e2:52:12:80:15:89:40:f5:2f:7d:ca: 0c:31:fd:60:02:34:1c:07:2d:f0:1f:3a:2e:d0:84:32:95:06: 4e:90:5e:b8:b1:fd:07:fb:a2:92:36:33:27:17:eb:25:43:bd: 01:fe:55:4c:42:55:26:b5:a1:14:e7:9b:ef:d9:80:5c:da:6c: 1e:a7:8e:54:1e:d7:c8:8c:26:e0:ae:ba:e3:ec:06:56:30:5b: 5a:1e:70:a1:25:6f:3e:72:55:c5:8a:75:45:79:8b:ef:c7:e7: 3b:6d:c9:df:21:09:2d:f5:51:4d:df:49:ea:40:c8:4f:22:c7: 84:7d:a3:96 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElAOVainLUg2KYJG8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk YWYyYTdjMDUtY2JhYi00N2VmLThjNmQtZDNlNmE2M2Y5OGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIISFswvL6fhFghPT0RdZJLPJ6BcDA/VAaic DSLeY/LVggKo2QmFeJ+bak2Z2RkVvhlY6idEttnPyDe3bPvL42gaUb7pFMZuuy0l TA0r//Agp0wl/jDRuwRxQ6bM8sCyFkgCMmGHq6iav4G2+BCxPvmOeiW8hT4DcrHC ACsrH1qo6jIhU6c54nwJdBvrpoofupJa/+2p7YGCII4iGpqDwNeiNedN31jjFLqQ /QUziPr4bN5ovsqvKMl5aVROD2+Qk15zB3x7cfDmB7oV5uq54IlPcN4ZBGp0ZpyS ptrnEdVtpg72D3ZsonSnuodJSN91WG4ZPMymeFMLeSKShrjlhQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMTVwe0ZWlIL3acZbJ+S/xVRRo40MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvOWIzNDAwMmMtZGExOC0z NmU2LThiZGEtMGEzOWFmZTJiN2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQETQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFgNJVQWE7JG8EThceZ+HeWUDRauRLRIdi2y7GEM+TQPqx7SStNb L0ya9oXCCguZDy3ScZGYGB5bJLbqKbn+kfmQr9wQpwc4/zdrTA9ZhvNXCzyWRDBg tCEF5ewLmEiyqOr4RGaYMmfAbTpbE9Ogvxo2ShNYzdGrhtqPpiKKKD/nqvKjyqri UhKAFYlA9S99ygwx/WACNBwHLfAfOi7QhDKVBk6QXrix/Qf7opI2MycX6yVDvQH+ VUxCVSa1oRTnm+/ZgFzabB6njlQe18iMJuCuuuPsBlYwW1oecKElbz5yVcWKdUV5 i+/H5zttyd8hCS31UU3fSepAyE8ix4R9o5Y= -----END CERTIFICATE-----Generated at Thu Apr 3 02:44:31 2025 by rpki-client