$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a3aac4bf-cf8a-3c90-8d60-602474efa9e2.roa File: a3aac4bf-cf8a-3c90-8d60-602474efa9e2.roa (raw, json) Hash identifier: IOWEF1zh7jw9VvkvILA/KndWXMG2WZv0X12cr/atYg8= Subject key identifier: 11:30:3B:23:36:67:AF:49:57:F0:4A:CA:6A:2A:2C:55:17:1B:8D:96 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F432858485F9AFB614B30B666F3836180 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a3aac4bf-cf8a-3c90-8d60-602474efa9e2.roa Signing time: Mon 30 Dec 2024 02:00:39 +0000 ROA not before: Mon 30 Dec 2024 02:00:39 +0000 ROA not after: Sun 30 Mar 2025 01:00:39 +0000 asID: 54113 IP address blocks: 2607:8940:5450::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5f:9a:fb:61:4b:30:b6:66:f3:83:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Dec 30 02:00:39 2024 GMT Not After : Mar 30 01:00:39 2025 GMT Subject: CN=73c55e34-7717-4be2-99bc-29f862025e79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:dc:9f:d8:8f:d6:1a:0c:7f:15:15:73:f2:72: bb:ac:4e:18:d8:7d:bd:92:b6:b0:4e:3e:95:86:ed: d0:18:9b:32:ff:83:9b:e0:4b:cf:5e:b3:42:6a:53: fb:7c:22:08:ba:a0:72:f4:e1:74:b2:fc:bb:f1:09: 0f:82:ef:ad:76:51:3e:06:a7:52:18:0c:ce:6b:ac: 40:ea:67:2b:9f:6a:81:28:b8:b9:be:73:52:d3:d5: 27:1c:46:f7:cb:02:3c:e1:11:d0:fa:a5:6f:4f:67: 83:aa:86:33:04:51:08:bd:f9:6f:a5:38:60:3a:d9: a3:a1:18:c4:ba:eb:83:32:03:38:35:fa:32:f9:b7: a8:34:ea:d1:66:28:0e:7b:14:c3:64:44:d7:b7:92: 03:ae:e2:a7:8a:f6:2e:47:eb:da:97:80:47:f2:6d: 7b:ce:90:f6:f4:35:ea:4e:55:f8:58:5d:d8:cc:a8: 42:65:a9:c2:c8:5f:64:39:27:26:da:fd:f8:8a:9a: bd:f4:3c:b3:54:12:02:41:35:7b:20:40:56:d4:0f: ca:f7:c8:99:ae:2e:52:12:29:de:fb:7c:bc:71:bc: f0:c9:08:93:bd:07:fa:5c:d5:d7:8d:1c:1f:24:e3: 58:73:74:d8:22:f0:eb:8a:09:58:0b:e2:bb:4a:3e: f5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:30:3B:23:36:67:AF:49:57:F0:4A:CA:6A:2A:2C:55:17:1B:8D:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a3aac4bf-cf8a-3c90-8d60-602474efa9e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:5450::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:23:7a:ae:d4:f7:85:96:62:2c:d5:5e:15:68:e2:dc:55:62: 17:66:00:da:b1:ba:e6:b3:b5:6c:36:79:f3:95:11:e5:98:24: 96:56:c3:92:36:7c:5f:74:04:db:04:29:1b:df:cf:ef:8d:8d: ff:9d:be:33:8b:89:a8:15:f8:65:44:99:d5:aa:06:63:48:b1: 1e:fd:72:2d:b8:09:fa:be:5c:ff:c0:e3:10:f6:a4:04:85:2a: 43:2e:41:7e:f8:4b:c2:64:d1:df:10:76:c7:0f:f5:b8:8d:fe: 5d:31:5a:db:31:13:b4:fc:a7:dc:f7:66:3c:96:93:6c:35:7a: bb:90:e1:b8:65:55:6e:6f:3b:4e:80:a6:62:3d:86:7d:2c:ed: d5:8f:63:d9:42:ca:52:de:be:8d:14:fe:37:ae:74:93:0d:cc: e6:7b:89:82:2a:e6:28:77:22:ec:59:53:99:7d:a5:80:69:66: 8c:07:a3:87:8e:da:f3:e8:72:13:02:7f:51:50:39:40:4f:ed: 7b:58:14:76:2c:f2:60:aa:fd:98:c2:b3:2b:4f:3d:48:36:26: 62:14:dd:30:16:c8:17:f2:e7:db:2b:cf:15:3e:75:fc:eb:bc: e5:34:16:68:b4:b5:08:2b:a4:ee:e0:04:2c:5f:70:f6:fd:89: 20:c4:a2:06 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhfmvthSzC2ZvODYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI0MTIzMDAyMDAzOVoXDTI1MDMzMDAxMDAzOVowLzEtMCsGA1UEAxMk NzNjNTVlMzQtNzcxNy00YmUyLTk5YmMtMjlmODYyMDI1ZTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tyf2I/WGgx/FRVz8nK7rE4Y2H29krawTj6V hu3QGJsy/4Ob4EvPXrNCalP7fCIIuqBy9OF0svy78QkPgu+tdlE+BqdSGAzOa6xA 6mcrn2qBKLi5vnNS09UnHEb3ywI84RHQ+qVvT2eDqoYzBFEIvflvpThgOtmjoRjE uuuDMgM4Nfoy+beoNOrRZigOexTDZETXt5IDruKnivYuR+val4BH8m17zpD29DXq TlX4WF3YzKhCZanCyF9kOScm2v34ipq99DyzVBICQTV7IEBW1A/K98iZri5SEine +3y8cbzwyQiTvQf6XNXXjRwfJONYc3TYIvDriglYC+K7Sj714wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBEwOyM2Z69JV/BKymoqLFUXG42WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYTNhYWM0YmYtY2Y4YS0z YzkwLThkNjAtNjAyNDc0ZWZhOWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFRQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEYjeq7U94WWYizVXhVo4txVYhdmANqxuuaztWw2efOVEeWYJJZW w5I2fF90BNsEKRvfz++Njf+dvjOLiagV+GVEmdWqBmNIsR79ci24Cfq+XP/A4xD2 pASFKkMuQX74S8Jk0d8QdscP9biN/l0xWtsxE7T8p9z3ZjyWk2w1eruQ4bhlVW5v O06ApmI9hn0s7dWPY9lCylLevo0U/jeudJMNzOZ7iYIq5ih3IuxZU5l9pYBpZowH o4eO2vPochMCf1FQOUBP7XtYFHYs8mCq/ZjCsytPPUg2JmIU3TAWyBfy59srzxU+ dfzrvOU0Fmi0tQgrpO7gBCxfcPb9iSDEogY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:24:46 2025 by rpki-client