$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a9024459-2ba3-3a8f-8f47-1fa1389baf3c.roa File: a9024459-2ba3-3a8f-8f47-1fa1389baf3c.roa (raw, json) Hash identifier: IRy4o2vArIMlENCpY4niI+l8EbdLKpL9TbYEnL+kCxE= Subject key identifier: BC:DE:15:8A:DE:D7:50:F0:03:C9:EC:AD:BF:50:8A:05:1A:09:AD:F4 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F432858485F9AF35BD59C96EBF4887C80 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a9024459-2ba3-3a8f-8f47-1fa1389baf3c.roa Signing time: Mon 30 Dec 2024 02:00:39 +0000 ROA not before: Mon 30 Dec 2024 02:00:39 +0000 ROA not after: Sun 30 Mar 2025 01:00:39 +0000 asID: 54113 IP address blocks: 2607:8940:4060::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5f:9a:f3:5b:d5:9c:96:eb:f4:88:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Dec 30 02:00:39 2024 GMT Not After : Mar 30 01:00:39 2025 GMT Subject: CN=9955911f-bce1-4e30-83c4-d012cacb803a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7a:bf:78:9f:7d:03:e7:6c:5d:76:f5:6c:ba: 7f:c3:2c:14:3b:a2:f1:91:bb:fa:77:47:f1:4a:3d: 21:e5:c5:98:98:06:58:c4:9d:4c:9c:2e:f8:bf:3f: d3:65:04:2a:a7:e3:f1:3e:a9:89:a4:a8:06:c9:61: c7:22:84:61:a2:4b:2d:6e:65:73:a2:2d:6f:de:48: 38:26:a5:a1:eb:0f:08:42:77:23:16:6e:a8:f5:2e: c6:e8:dd:ed:c3:2a:e1:28:7e:1e:dc:66:0e:c2:03: a7:37:b9:52:9a:dd:3a:a4:06:42:dd:9e:62:dd:39: 4c:57:c8:c7:9b:f8:6e:7c:b9:ae:4e:63:c9:0a:9f: a1:51:01:83:47:c9:7d:cb:88:5c:88:4b:61:8a:9e: 0d:25:ef:42:01:3c:4a:1c:62:b1:5a:f7:9e:ee:82: 01:4b:dd:82:53:99:e3:a2:e6:76:70:2c:e8:e3:01: b7:2a:29:a5:f9:25:5f:7a:f5:e1:30:ed:cc:69:db: 10:b7:96:ec:9c:09:fb:2e:8d:65:82:49:2f:d6:7d: c4:c9:4a:64:49:b4:fb:0e:d6:fe:1d:e1:40:2e:de: 08:a1:86:d7:fe:fa:1b:cc:43:a1:c0:2c:d2:5e:66: 71:ca:05:a5:10:55:b4:16:e2:36:19:2b:f3:fc:63: 6a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:DE:15:8A:DE:D7:50:F0:03:C9:EC:AD:BF:50:8A:05:1A:09:AD:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a9024459-2ba3-3a8f-8f47-1fa1389baf3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:4060::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:a5:e9:8d:0f:92:00:c4:86:10:87:82:2c:7c:cd:61:cd:f1: 33:b3:a5:96:98:76:04:55:da:95:d1:82:c5:97:ee:1e:50:ed: e2:61:ab:80:b7:94:10:59:25:63:20:e8:9b:0d:04:ff:14:67: 2a:4b:07:3d:1e:b1:fd:6f:89:21:00:c9:5b:c8:f2:58:3a:ec: 42:5d:d8:ed:35:99:14:67:2e:14:6d:ee:49:45:92:cf:3f:9f: e3:07:15:e6:88:0f:05:7c:37:9b:f0:4d:09:1a:8c:a3:0c:fe: 3e:e0:45:02:1f:e9:c6:b5:76:de:47:dc:2f:a0:ef:59:96:03: 78:b5:31:41:1a:d8:b7:f8:d7:57:98:ee:9a:3b:f2:89:c2:58: 73:f9:d5:36:77:36:5d:64:96:8d:2d:62:50:4d:e2:36:a2:f5: 80:78:8f:1c:17:25:f8:9a:18:b7:09:e1:51:fe:f4:47:69:32: 01:df:ba:6c:26:25:89:53:e9:dc:f2:41:96:da:2f:44:eb:e8: 7f:2f:1b:53:3f:85:7c:c7:61:33:1a:10:02:03:a7:1f:0e:ff: 71:98:ea:91:64:47:d4:9a:c2:dd:bf:ab:2e:c1:7f:05:c8:9a: c9:4f:2a:8e:9e:99:1d:8b:e4:2c:fb:b4:06:1b:02:c2:46:87: c1:3b:fd:62 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhfmvNb1ZyW6/SIfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI0MTIzMDAyMDAzOVoXDTI1MDMzMDAxMDAzOVowLzEtMCsGA1UEAxMk OTk1NTkxMWYtYmNlMS00ZTMwLTgzYzQtZDAxMmNhY2I4MDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnq/eJ99A+dsXXb1bLp/wywUO6Lxkbv6d0fx Sj0h5cWYmAZYxJ1MnC74vz/TZQQqp+PxPqmJpKgGyWHHIoRhokstbmVzoi1v3kg4 JqWh6w8IQncjFm6o9S7G6N3twyrhKH4e3GYOwgOnN7lSmt06pAZC3Z5i3TlMV8jH m/hufLmuTmPJCp+hUQGDR8l9y4hciEthip4NJe9CATxKHGKxWvee7oIBS92CU5nj ouZ2cCzo4wG3Kiml+SVfevXhMO3MadsQt5bsnAn7Lo1lgkkv1n3EyUpkSbT7Dtb+ HeFALt4IoYbX/vobzEOhwCzSXmZxygWlEFW0FuI2GSvz/GNqPQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLzeFYre11DwA8nsrb9QigUaCa30MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYTkwMjQ0NTktMmJhMy0z YThmLThmNDctMWZhMTM4OWJhZjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEBg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG2l6Y0PkgDEhhCHgix8zWHN8TOzpZaYdgRV2pXRgsWX7h5Q7eJh q4C3lBBZJWMg6JsNBP8UZypLBz0esf1viSEAyVvI8lg67EJd2O01mRRnLhRt7klF ks8/n+MHFeaIDwV8N5vwTQkajKMM/j7gRQIf6ca1dt5H3C+g71mWA3i1MUEa2Lf4 11eY7po78onCWHP51TZ3Nl1klo0tYlBN4jai9YB4jxwXJfiaGLcJ4VH+9EdpMgHf umwmJYlT6dzyQZbaL0Tr6H8vG1M/hXzHYTMaEAIDpx8O/3GY6pFkR9Sawt2/qy7B fwXImslPKo6emR2L5Cz7tAYbAsJGh8E7/WI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:22:10 2025 by rpki-client