$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a42f22e1-dae9-3bbb-aaf1-01c27a2db042.roa File: a42f22e1-dae9-3bbb-aaf1-01c27a2db042.roa (raw, json) Hash identifier: R0jTf/fpw8863RT/z36WEBNmGPo6ibSsJ1hUrz5TZPM= Subject key identifier: CF:AF:BD:C5:27:8D:36:02:94:39:CA:5D:56:29:C9:FF:97:4B:F5:21 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F432858485F9B018B60D8EDB06AC97C80 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a42f22e1-dae9-3bbb-aaf1-01c27a2db042.roa Signing time: Mon 30 Dec 2024 02:00:39 +0000 ROA not before: Mon 30 Dec 2024 02:00:39 +0000 ROA not after: Sun 30 Mar 2025 01:00:39 +0000 asID: 54113 IP address blocks: 2607:8940:5e10::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5f:9b:01:8b:60:d8:ed:b0:6a:c9:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Dec 30 02:00:39 2024 GMT Not After : Mar 30 01:00:39 2025 GMT Subject: CN=fe4983b6-f356-40bc-90bc-dd300f24b39b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2d:79:9a:10:58:b4:05:7b:7e:bb:7c:05:39: 3c:92:09:2b:da:91:7a:eb:ac:de:07:28:f8:bf:e4: a8:55:1f:27:1c:78:aa:30:14:b6:d3:7a:bc:ad:c2: 8f:ec:b6:9b:3b:d9:23:a3:08:04:76:2e:5c:ae:13: b2:c6:5a:b6:4d:bf:a7:0a:05:3e:03:7d:41:eb:69: 9a:35:f1:ce:29:02:9f:26:bd:1c:35:cf:71:e2:10: 42:3a:f3:dc:a4:f6:e3:ab:77:27:32:b3:c4:9d:3c: 94:eb:11:92:55:71:2f:06:52:f5:93:a8:80:1b:44: 36:e5:9a:ea:52:df:d5:f5:1a:f1:0d:73:71:4b:cd: ce:60:98:3b:0b:f5:1a:26:24:d5:1a:55:79:2e:43: 94:4c:1c:28:be:50:58:36:cb:c7:04:1f:85:38:56: 36:cc:0a:51:e8:d6:63:70:03:c5:b1:71:54:bf:ae: 3f:82:1f:6e:d7:05:e3:36:a2:c5:1c:42:8c:ee:0a: ea:24:8c:31:4f:86:1a:8c:d8:30:af:2c:14:b5:da: 0b:66:d4:68:ab:04:60:e6:cd:64:51:ac:4d:f1:3f: fc:6a:81:6a:9d:d9:45:51:f5:76:1a:3a:a0:75:62: ee:68:88:41:63:a5:2e:61:b1:88:b2:1c:7c:e3:19: 8f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:AF:BD:C5:27:8D:36:02:94:39:CA:5D:56:29:C9:FF:97:4B:F5:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a42f22e1-dae9-3bbb-aaf1-01c27a2db042.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:5e10::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:bb:12:7b:e4:e6:f2:da:af:68:59:f9:7e:2f:83:ca:4d:e2: 74:10:20:e7:58:0e:3b:0c:9a:5b:cd:ec:1e:17:06:b6:d0:83: 33:34:dd:a3:38:10:ca:15:ce:69:df:2b:c5:6a:35:4b:cc:1e: 7a:5a:ac:26:7b:ea:b0:21:8d:a8:08:5a:84:24:c5:2e:e6:24: 70:98:ce:aa:ac:dc:70:1f:ee:18:7e:ea:94:51:08:df:b0:09: 1d:2d:65:8c:d8:36:63:3e:c0:04:61:f0:7f:63:b3:ca:5a:38: 55:68:5e:53:15:00:77:db:7f:f1:b3:9c:d0:a4:42:9e:7d:46: 93:b7:56:e3:cb:67:cc:a6:09:1f:2c:aa:99:97:80:cf:e2:8f: d3:9c:17:cd:26:68:54:d8:ea:3e:36:c4:51:e4:0c:b2:01:6c: 73:61:b0:c8:6a:d1:f0:97:98:3c:d8:79:0a:c3:fc:c3:c9:c6: fd:6a:fc:64:f4:d9:e5:70:44:4e:5c:66:c1:b2:05:a7:c9:43: 5b:cb:c3:f1:4e:89:02:3d:e5:d7:b9:20:14:37:25:4a:f3:96: bd:ff:ba:da:d4:df:5a:c3:af:08:ed:55:4c:9a:39:cd:18:fa: c1:ec:83:b2:16:e1:39:f1:44:a7:f9:a7:46:b2:a4:01:5a:49: 5d:80:22:48 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhfmwGLYNjtsGrJfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI0MTIzMDAyMDAzOVoXDTI1MDMzMDAxMDAzOVowLzEtMCsGA1UEAxMk ZmU0OTgzYjYtZjM1Ni00MGJjLTkwYmMtZGQzMDBmMjRiMzliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiC15mhBYtAV7frt8BTk8kgkr2pF666zeByj4 v+SoVR8nHHiqMBS203q8rcKP7LabO9kjowgEdi5crhOyxlq2Tb+nCgU+A31B62ma NfHOKQKfJr0cNc9x4hBCOvPcpPbjq3cnMrPEnTyU6xGSVXEvBlL1k6iAG0Q25Zrq Ut/V9RrxDXNxS83OYJg7C/UaJiTVGlV5LkOUTBwovlBYNsvHBB+FOFY2zApR6NZj cAPFsXFUv64/gh9u1wXjNqLFHEKM7grqJIwxT4YajNgwrywUtdoLZtRoqwRg5s1k UaxN8T/8aoFqndlFUfV2GjqgdWLuaIhBY6UuYbGIshx84xmPCwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM+vvcUnjTYClDnKXVYpyf+XS/UhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYTQyZjIyZTEtZGFlOS0z YmJiLWFhZjEtMDFjMjdhMmRiMDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQF4Q MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAO7Envk5vLar2hZ+X4vg8pN4nQQIOdYDjsMmlvN7B4XBrbQgzM0 3aM4EMoVzmnfK8VqNUvMHnparCZ76rAhjagIWoQkxS7mJHCYzqqs3HAf7hh+6pRR CN+wCR0tZYzYNmM+wARh8H9js8paOFVoXlMVAHfbf/GznNCkQp59RpO3VuPLZ8ym CR8sqpmXgM/ij9OcF80maFTY6j42xFHkDLIBbHNhsMhq0fCXmDzYeQrD/MPJxv1q /GT02eVwRE5cZsGyBafJQ1vLw/FOiQI95de5IBQ3JUrzlr3/utrU31rDrwjtVUya Oc0Y+sHsg7IW4TnxRKf5p0aypAFaSV2AIkg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:16:05 2025 by rpki-client