$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a3ca3291-19bd-3ac0-91ce-a688a6015051.roa File: a3ca3291-19bd-3ac0-91ce-a688a6015051.roa (raw, json) Hash identifier: 9KcUHj67wiCkFnnDnOHX0TYrB/ucqnW4xUv8Fp+VlmM= Subject key identifier: 5B:CA:B6:23:00:54:6E:CB:02:16:C6:94:3A:72:38:10:4B:7D:3B:23 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F432858485F9AF462B7714E943EADC920 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a3ca3291-19bd-3ac0-91ce-a688a6015051.roa Signing time: Mon 30 Dec 2024 02:00:39 +0000 ROA not before: Mon 30 Dec 2024 02:00:39 +0000 ROA not after: Sun 30 Mar 2025 01:00:39 +0000 asID: 54113 IP address blocks: 2607:8940:5ea0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5f:9a:f4:62:b7:71:4e:94:3e:ad:c9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Dec 30 02:00:39 2024 GMT Not After : Mar 30 01:00:39 2025 GMT Subject: CN=6087f993-c99d-4746-bba4-281ec7324f1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:db:c8:df:04:e4:36:4e:b1:0a:1f:7f:5c:8c: 5e:f9:12:32:ad:fe:54:56:1e:94:d6:3c:4d:fa:75: 5d:bd:72:50:97:df:65:c8:36:59:2e:38:76:d4:de: 97:30:80:76:16:31:3b:55:ea:43:1d:8b:d1:5a:5b: d7:b4:0a:e5:31:8a:2e:7b:e8:3d:96:f0:61:cd:47: 2d:e2:99:96:94:30:86:49:4b:d3:f9:bc:4d:c4:3d: ba:37:33:b2:97:66:0d:d7:18:0c:54:90:12:ee:66: 64:37:65:cd:bc:88:b1:21:b7:e3:33:4a:35:93:4d: 6c:0a:31:f0:62:9c:ec:17:fc:6b:c2:89:d8:37:c5: a2:bb:6f:19:ea:68:be:2d:93:26:e0:c3:28:12:30: 09:3c:40:94:06:a9:f5:0c:12:e7:26:46:40:5f:7c: 2f:50:33:92:e4:ef:8e:97:9e:c4:19:0b:36:fb:04: 35:ad:fd:43:05:37:6c:f1:3e:1d:76:71:50:34:72: f3:bb:11:9d:bf:3d:fc:61:77:0e:17:80:1d:24:cf: ea:aa:ec:43:f9:9b:90:76:86:aa:94:bb:a1:b0:91: c2:b6:f0:47:0a:b0:3c:93:bd:42:a8:da:07:7e:27: 88:10:17:a3:63:7a:c5:08:43:9a:0f:0d:b7:f0:52: 74:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:CA:B6:23:00:54:6E:CB:02:16:C6:94:3A:72:38:10:4B:7D:3B:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a3ca3291-19bd-3ac0-91ce-a688a6015051.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:5ea0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:c3:e6:ca:24:e9:20:02:74:c4:ea:a4:d4:cf:93:4a:8e:1a: bb:19:9f:3a:4a:5e:f6:b4:73:af:6f:55:51:e6:e0:71:f3:bc: fa:fd:5a:62:9e:3a:2f:8c:36:03:09:e6:98:ac:b9:13:84:1c: 16:59:c2:ca:d4:31:35:80:89:a4:b7:07:e2:eb:49:e1:60:77: fb:18:53:cd:d5:47:b7:9f:f0:f0:79:8e:03:49:2b:b9:39:31: 21:18:7b:0e:1f:72:cf:80:4b:7f:c0:f9:30:b4:f2:98:6f:5e: d2:cc:59:06:c0:69:c4:5f:c9:37:7e:5e:8f:23:b1:a1:7c:9b: d1:1a:9a:05:d9:76:df:63:b4:17:e9:e9:bb:5f:71:9d:de:45: 71:5c:d3:e7:0e:f7:f4:26:70:31:31:1c:c9:61:d8:0d:3b:b3: f8:c6:51:33:77:dc:3a:db:d3:51:5c:6a:6e:2b:5e:df:51:2e: 7a:7a:f8:84:90:8a:86:7d:31:ea:62:20:a5:56:c5:42:32:fd: e7:51:ed:ae:68:97:82:99:dd:91:7b:f5:d5:02:af:43:70:de: 2a:7f:55:ea:fb:ef:2d:cd:ce:c5:38:21:d4:dc:25:25:cd:f0: f9:c1:aa:b4:53:38:06:7e:3e:2c:3c:e8:c8:a0:18:3a:28:c9: 2c:f6:ab:87 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhfmvRit3FOlD6tySAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI0MTIzMDAyMDAzOVoXDTI1MDMzMDAxMDAzOVowLzEtMCsGA1UEAxMk NjA4N2Y5OTMtYzk5ZC00NzQ2LWJiYTQtMjgxZWM3MzI0ZjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttvI3wTkNk6xCh9/XIxe+RIyrf5UVh6U1jxN +nVdvXJQl99lyDZZLjh21N6XMIB2FjE7VepDHYvRWlvXtArlMYoue+g9lvBhzUct 4pmWlDCGSUvT+bxNxD26NzOyl2YN1xgMVJAS7mZkN2XNvIixIbfjM0o1k01sCjHw YpzsF/xrwonYN8Wiu28Z6mi+LZMm4MMoEjAJPECUBqn1DBLnJkZAX3wvUDOS5O+O l57EGQs2+wQ1rf1DBTds8T4ddnFQNHLzuxGdvz38YXcOF4AdJM/qquxD+ZuQdoaq lLuhsJHCtvBHCrA8k71CqNoHfieIEBejY3rFCEOaDw238FJ0lwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFvKtiMAVG7LAhbGlDpyOBBLfTsjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYTNjYTMyOTEtMTliZC0z YWMwLTkxY2UtYTY4OGE2MDE1MDUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQF6g MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFzD5sok6SACdMTqpNTPk0qOGrsZnzpKXva0c69vVVHm4HHzvPr9 WmKeOi+MNgMJ5pisuROEHBZZwsrUMTWAiaS3B+LrSeFgd/sYU83VR7ef8PB5jgNJ K7k5MSEYew4fcs+AS3/A+TC08phvXtLMWQbAacRfyTd+Xo8jsaF8m9EamgXZdt9j tBfp6btfcZ3eRXFc0+cO9/QmcDExHMlh2A07s/jGUTN33Drb01Fcam4rXt9RLnp6 +ISQioZ9MepiIKVWxUIy/edR7a5ol4KZ3ZF79dUCr0Nw3ip/Ver77y3NzsU4IdTc JSXN8PnBqrRTOAZ+Piw86MigGDooySz2q4c= -----END CERTIFICATE-----Generated at Fri Mar 14 08:11:09 2025 by rpki-client