$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bfe7aad6-45ee-357a-b2c2-a35535fa6947.roa File: bfe7aad6-45ee-357a-b2c2-a35535fa6947.roa (raw, json) Hash identifier: Y99dgH4GCKbD9Q7k3aGxFLrLXXePY78woyWJVbTNyGM= Subject key identifier: 71:B5:EE:56:00:A4:B6:06:2D:BF:03:BE:1B:D0:63:83:E2:27:35:56 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F432858494039749B8BA43DDB0F2E1E80 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bfe7aad6-45ee-357a-b2c2-a35535fa6947.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 54113 IP address blocks: 2607:8940:5560::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:74:9b:8b:a4:3d:db:0f:2e:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=6cd9a97c-647a-452e-9f73-70e8082a4b72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:55:a2:ad:58:f9:90:88:39:64:66:cd:9e:c2: 91:b5:f6:36:4a:0b:e0:71:62:d7:eb:7a:17:81:69: 77:3a:b6:e3:5f:17:07:36:8a:00:37:f9:cd:ef:f8: 66:c2:38:ae:78:43:c4:db:a0:03:64:df:3d:7a:9a: 11:f9:ae:c3:f0:7f:5b:8e:bc:1e:bb:40:35:b3:fe: ed:c0:1a:c4:c3:70:d7:57:71:34:20:db:bf:4c:c0: f5:60:18:61:72:f2:70:32:b2:df:5c:22:9e:2e:d0: 32:1e:8a:f3:bb:4e:63:6c:d6:28:db:63:01:1f:d4: 57:46:a9:e5:fb:06:5e:66:68:6e:f3:0c:cf:54:1d: 95:d6:9b:21:c3:47:6b:2f:7f:f7:b1:4b:83:85:c3: 3e:e6:fb:61:4c:43:59:78:99:9a:22:2e:98:56:72: 5e:ee:29:4a:47:2c:1b:7a:4d:7e:b3:9d:71:f0:f0: b0:46:2d:b6:3c:fb:56:0c:1a:ba:07:85:c8:0b:04: 48:b2:b5:a9:4c:15:fb:23:6b:70:50:27:ec:dd:3d: 65:8f:36:c3:b5:60:85:11:a9:27:40:d0:38:ca:1c: a1:61:6e:84:63:9c:9c:ad:44:9f:61:90:da:2c:28: 67:ff:41:95:7d:e4:7e:20:62:af:87:40:c3:77:2d: 18:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:B5:EE:56:00:A4:B6:06:2D:BF:03:BE:1B:D0:63:83:E2:27:35:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bfe7aad6-45ee-357a-b2c2-a35535fa6947.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:5560::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:48:c6:7c:09:3d:3c:51:8c:75:2b:f1:18:74:cf:de:f8:81: 42:38:ce:93:61:5f:6f:19:f9:87:1f:f4:fb:e7:5f:01:33:95: cd:69:18:3a:6c:0b:a5:aa:98:ef:f0:21:0f:5c:5e:6f:f9:a3: 89:3f:9a:f4:a7:cb:7c:5d:a0:6f:62:de:de:fe:9e:96:1a:a4: 8c:c0:1f:00:ec:fd:a5:69:dd:01:3f:90:a6:df:87:09:b4:88: 46:91:c7:1b:55:b2:ca:21:ff:a1:f6:e2:8b:44:e9:6e:43:8f: d3:ae:4a:0d:e3:8f:9c:23:b7:24:cb:ab:38:13:db:da:d2:e0: e8:17:7c:8f:65:c0:6e:39:ed:05:56:cb:6b:d1:a6:bf:d7:75: 57:78:0b:0c:1a:db:a1:fc:a2:c1:1b:ae:e6:6c:0b:23:2e:e9: bb:43:61:4f:b2:78:c3:7d:37:bd:01:20:9c:34:cd:12:04:67: a6:ce:03:82:4b:c2:51:f9:6d:cb:ca:31:85:48:14:97:c2:b0: f1:49:b5:ca:46:2d:49:0a:bc:10:86:7d:d2:73:de:e1:cc:2a: 5a:2f:c3:f0:00:90:4f:b8:b0:79:cb:9d:e4:24:44:63:11:3d: 17:a9:fc:e5:a0:c5:c0:00:3b:a9:5d:17:20:e4:ac:46:8e:ed: df:00:c8:22 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElAOXSbi6Q92w8uHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk NmNkOWE5N2MtNjQ3YS00NTJlLTlmNzMtNzBlODA4MmE0YjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VWirVj5kIg5ZGbNnsKRtfY2SgvgcWLX63oX gWl3OrbjXxcHNooAN/nN7/hmwjiueEPE26ADZN89epoR+a7D8H9bjrweu0A1s/7t wBrEw3DXV3E0INu/TMD1YBhhcvJwMrLfXCKeLtAyHorzu05jbNYo22MBH9RXRqnl +wZeZmhu8wzPVB2V1pshw0drL3/3sUuDhcM+5vthTENZeJmaIi6YVnJe7ilKRywb ek1+s51x8PCwRi22PPtWDBq6B4XICwRIsrWpTBX7I2twUCfs3T1ljzbDtWCFEakn QNA4yhyhYW6EY5ycrUSfYZDaLChn/0GVfeR+IGKvh0DDdy0YtwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHG17lYApLYGLb8DvhvQY4PiJzVWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYmZlN2FhZDYtNDVlZS0z NTdhLWIyYzItYTM1NTM1ZmE2OTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFVg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHRIxnwJPTxRjHUr8Rh0z974gUI4zpNhX28Z+Ycf9PvnXwEzlc1p GDpsC6WqmO/wIQ9cXm/5o4k/mvSny3xdoG9i3t7+npYapIzAHwDs/aVp3QE/kKbf hwm0iEaRxxtVssoh/6H24otE6W5Dj9OuSg3jj5wjtyTLqzgT29rS4OgXfI9lwG45 7QVWy2vRpr/XdVd4Cwwa26H8osEbruZsCyMu6btDYU+yeMN9N70BIJw0zRIEZ6bO A4JLwlH5bcvKMYVIFJfCsPFJtcpGLUkKvBCGfdJz3uHMKlovw/AAkE+4sHnLneQk RGMRPRep/OWgxcAAO6ldFyDkrEaO7d8AyCI= -----END CERTIFICATE-----Generated at Thu Apr 3 02:45:13 2025 by rpki-client