$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/af1fb947-e10a-391d-86d4-69d3c8d8c2b9.roa File: af1fb947-e10a-391d-86d4-69d3c8d8c2b9.roa (raw, json) Hash identifier: 9G2FNxrZ9GGpe2d7yRg01HcuHBC+Dh3DyC2x8k4qzW8= Subject key identifier: 72:3D:18:8C:C8:B9:66:88:F3:25:91:88:B0:26:81:71:18:00:B1:AF Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F432858485F9AE8ABD0AB30FD731E0980 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/af1fb947-e10a-391d-86d4-69d3c8d8c2b9.roa Signing time: Mon 30 Dec 2024 02:00:39 +0000 ROA not before: Mon 30 Dec 2024 02:00:39 +0000 ROA not after: Sun 30 Mar 2025 01:00:39 +0000 asID: 54113 IP address blocks: 2607:8940:5380::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5f:9a:e8:ab:d0:ab:30:fd:73:1e:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Dec 30 02:00:39 2024 GMT Not After : Mar 30 01:00:39 2025 GMT Subject: CN=b47630fc-40c0-4c8a-907d-67a748c79aa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b5:03:30:b9:24:be:ef:31:ac:fb:06:d4:ec: 9e:5f:2f:97:18:e7:36:71:30:99:1f:ee:f7:88:df: 6b:ae:70:10:d8:ef:99:48:e7:a4:af:0e:7e:7c:c6: 07:7a:e9:8d:90:3c:71:6b:0b:97:69:8a:e8:28:a2: 2e:ba:80:1c:cc:53:cf:bf:3f:70:2d:72:15:59:88: c5:e7:86:24:ad:28:46:fd:c3:06:b3:fc:06:14:d7: 83:71:8c:ed:6b:65:c1:73:7d:30:43:32:19:64:19: 2f:dd:fa:d7:a1:8e:54:17:be:6b:77:f5:ff:54:d0: c4:50:af:04:c3:c6:b4:80:a4:ba:b3:5f:03:3d:a6: 08:13:77:39:91:cd:c1:29:10:57:dd:6a:32:4a:61: 40:58:b7:c0:74:ea:40:02:8c:5f:ae:e6:4a:a6:5d: e6:81:85:09:d2:8c:56:52:1b:45:c8:92:45:03:21: 5f:68:ad:4d:54:d8:b9:76:63:4d:17:fe:b6:6e:f5: 35:35:25:83:df:56:7b:9d:fd:18:a1:75:6f:45:35: c4:77:7c:17:b9:0c:49:75:68:f7:f6:b6:1e:e7:9c: 39:3a:1d:31:60:95:d4:11:f9:d5:b2:fa:a8:a2:97: 21:33:2a:34:4e:cc:94:11:14:41:1a:b5:f4:ef:7c: e6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:3D:18:8C:C8:B9:66:88:F3:25:91:88:B0:26:81:71:18:00:B1:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/af1fb947-e10a-391d-86d4-69d3c8d8c2b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:5380::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:16:6d:b5:8f:e6:6b:91:9f:a6:fb:3d:cf:a0:cd:bd:94:a4: 0c:94:5e:75:97:41:c4:4f:4c:41:cd:a8:96:9f:98:b3:c1:f1: aa:da:79:eb:50:3c:71:61:55:f0:0e:83:71:b1:8b:ff:7b:72: b9:46:29:72:3d:58:8f:05:8f:99:41:51:00:8c:2f:a2:a1:c8: 06:ab:2e:96:25:e5:cb:1c:2a:c1:4a:8f:dd:55:73:b7:76:57: e3:c8:90:ce:00:b6:40:5c:c2:b4:d3:61:9c:fa:24:47:c2:2f: 94:05:57:08:e6:92:f5:4e:18:bc:08:23:dc:02:6e:16:7e:01: cb:e8:6f:c6:b1:12:d1:f9:0a:57:72:36:92:08:5d:5b:8d:b0: d9:36:43:44:de:0a:44:83:93:83:3f:03:1a:fc:f5:88:aa:56: 69:c7:3f:ac:ae:2f:d9:a0:8b:20:a8:bd:06:3d:ac:2e:ff:7f: e1:52:c9:d4:a8:2b:26:ca:54:8d:06:47:60:77:86:0f:5d:2e: 0b:f7:81:1b:99:e6:c1:98:79:8c:2e:ba:5d:3f:b2:73:ae:85: 28:8a:94:f6:58:b7:08:77:ca:3f:d6:ac:4a:34:c9:c9:83:8f: 7c:bd:fa:43:7d:64:b0:bc:78:45:01:a0:a5:fd:b0:36:3f:00: 9c:66:b7:7e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhfmuir0Ksw/XMeCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI0MTIzMDAyMDAzOVoXDTI1MDMzMDAxMDAzOVowLzEtMCsGA1UEAxMk YjQ3NjMwZmMtNDBjMC00YzhhLTkwN2QtNjdhNzQ4Yzc5YWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LUDMLkkvu8xrPsG1OyeXy+XGOc2cTCZH+73 iN9rrnAQ2O+ZSOekrw5+fMYHeumNkDxxawuXaYroKKIuuoAczFPPvz9wLXIVWYjF 54YkrShG/cMGs/wGFNeDcYzta2XBc30wQzIZZBkv3frXoY5UF75rd/X/VNDEUK8E w8a0gKS6s18DPaYIE3c5kc3BKRBX3WoySmFAWLfAdOpAAoxfruZKpl3mgYUJ0oxW UhtFyJJFAyFfaK1NVNi5dmNNF/62bvU1NSWD31Z7nf0YoXVvRTXEd3wXuQxJdWj3 9rYe55w5Oh0xYJXUEfnVsvqoopchMyo0TsyUERRBGrX073zm6wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHI9GIzIuWaI8yWRiLAmgXEYALGvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYWYxZmI5NDctZTEwYS0z OTFkLTg2ZDQtNjlkM2M4ZDhjMmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFOA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGYWbbWP5muRn6b7Pc+gzb2UpAyUXnWXQcRPTEHNqJafmLPB8ara eetQPHFhVfAOg3Gxi/97crlGKXI9WI8Fj5lBUQCML6KhyAarLpYl5cscKsFKj91V c7d2V+PIkM4AtkBcwrTTYZz6JEfCL5QFVwjmkvVOGLwII9wCbhZ+Acvob8axEtH5 CldyNpIIXVuNsNk2Q0TeCkSDk4M/Axr89YiqVmnHP6yuL9mgiyCovQY9rC7/f+FS ydSoKybKVI0GR2B3hg9dLgv3gRuZ5sGYeYwuul0/snOuhSiKlPZYtwh3yj/WrEo0 ycmDj3y9+kN9ZLC8eEUBoKX9sDY/AJxmt34= -----END CERTIFICATE-----Generated at Fri Mar 14 10:56:04 2025 by rpki-client