$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cb1dcb5a-81e9-3292-ac3d-0f2d70066fea.roa File: cb1dcb5a-81e9-3292-ac3d-0f2d70066fea.roa (raw, json) Hash identifier: akGC72XAZtmmjQPhFqQIgasxBuLg3LjrHAROnjrgY5g= Subject key identifier: 90:5B:BA:D4:61:3F:3E:38:24:61:9F:9C:98:AB:41:52:BF:50:4F:CF Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F432858485F9AF5137137C3822E658F90 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cb1dcb5a-81e9-3292-ac3d-0f2d70066fea.roa Signing time: Mon 30 Dec 2024 02:00:39 +0000 ROA not before: Mon 30 Dec 2024 02:00:39 +0000 ROA not after: Sun 30 Mar 2025 01:00:39 +0000 asID: 54113 IP address blocks: 2607:8940:5320::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5f:9a:f5:13:71:37:c3:82:2e:65:8f:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Dec 30 02:00:39 2024 GMT Not After : Mar 30 01:00:39 2025 GMT Subject: CN=1ad88244-c557-4ba3-9575-32bc1fd4d2d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:99:74:8e:20:ed:16:16:66:30:f8:16:dd:a6: f9:ea:1c:c2:c2:ae:2e:c4:91:25:b2:b9:a8:ad:c3: 11:45:27:02:44:c6:fd:c1:9f:86:ef:82:c9:76:c1: 55:ac:88:f2:87:82:b1:58:88:40:34:76:d4:c9:a3: f0:69:50:44:d4:16:6f:99:03:2b:f8:0f:77:78:cc: 71:5d:ed:5f:5c:e4:7b:e6:c6:cd:8c:6a:50:92:86: c7:94:12:6f:88:2c:54:c9:28:ae:cd:ca:b4:87:58: da:e7:69:82:09:cf:b8:51:e0:b4:da:8e:5f:d8:3c: 2e:fe:2c:24:b2:84:18:c7:90:8f:19:90:b4:f1:0d: a4:37:58:49:94:8f:bd:4a:b2:3d:f9:9d:c7:8b:be: 94:0b:5e:16:3f:d3:6f:8b:cc:23:1a:18:76:25:0e: 2f:bf:dd:8b:65:04:3e:08:f9:49:a8:c6:db:30:ac: e2:49:00:05:c2:3c:45:45:00:9e:41:d6:fc:31:cc: 1c:e4:fd:29:3e:2c:cc:61:fc:75:5c:d7:0b:00:fa: 18:12:f8:56:15:4e:8f:88:78:d7:14:c2:5e:21:6f: ee:48:1c:3f:dc:9d:c2:e4:50:32:65:96:c4:82:fe: 14:79:75:97:87:cd:15:78:2f:85:19:a0:6b:71:77: 21:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:5B:BA:D4:61:3F:3E:38:24:61:9F:9C:98:AB:41:52:BF:50:4F:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cb1dcb5a-81e9-3292-ac3d-0f2d70066fea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:5320::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:0f:db:de:0c:56:4c:82:d3:91:43:43:d9:11:93:48:ac:e0: c7:1c:d5:35:ce:43:89:c8:c6:f6:f9:13:41:99:04:e0:3c:b0: d0:14:5d:c1:ad:6a:80:82:99:10:66:a4:85:17:30:d6:84:c7: 64:bd:4b:ce:c5:bf:2d:05:1f:48:84:d1:28:f1:21:c2:d6:82: 27:2f:fb:20:45:fa:69:c1:cf:ae:e0:b7:b3:cd:2b:56:38:22: f5:4c:a0:0b:cd:a7:5b:ff:ff:a4:95:d4:a8:e8:97:e6:ea:70: 0c:3d:2a:98:3a:e9:5c:fc:39:29:8f:45:6a:3d:af:4d:11:a7: 7e:d9:f7:8d:0f:23:2d:52:7a:bf:ef:65:99:c1:3a:ad:8a:75: 04:64:ea:6b:e4:e4:83:6b:1e:cd:46:0a:59:9d:a8:c2:7d:af: eb:84:d8:3b:b3:ba:2c:61:74:ce:29:aa:88:a8:48:85:31:7c: 4e:e0:96:e4:8b:e2:12:b6:46:e4:86:4e:09:12:1a:5f:dd:85: fd:c3:1c:a8:fb:e8:5a:12:13:bf:93:b1:d3:bc:4d:27:0a:ca: 22:be:64:ca:e6:b2:3f:ae:22:a7:90:aa:6b:fa:cb:65:89:93: 65:85:18:dc:f1:0d:5a:31:36:14:c3:0f:2d:d2:87:17:18:20: 97:ef:9a:5b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhfmvUTcTfDgi5lj5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI0MTIzMDAyMDAzOVoXDTI1MDMzMDAxMDAzOVowLzEtMCsGA1UEAxMk MWFkODgyNDQtYzU1Ny00YmEzLTk1NzUtMzJiYzFmZDRkMmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpl0jiDtFhZmMPgW3ab56hzCwq4uxJElsrmo rcMRRScCRMb9wZ+G74LJdsFVrIjyh4KxWIhANHbUyaPwaVBE1BZvmQMr+A93eMxx Xe1fXOR75sbNjGpQkobHlBJviCxUySiuzcq0h1ja52mCCc+4UeC02o5f2Dwu/iwk soQYx5CPGZC08Q2kN1hJlI+9SrI9+Z3Hi76UC14WP9Nvi8wjGhh2JQ4vv92LZQQ+ CPlJqMbbMKziSQAFwjxFRQCeQdb8Mcwc5P0pPizMYfx1XNcLAPoYEvhWFU6PiHjX FMJeIW/uSBw/3J3C5FAyZZbEgv4UeXWXh80VeC+FGaBrcXchOQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJBbutRhPz44JGGfnJirQVK/UE/PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvY2IxZGNiNWEtODFlOS0z MjkyLWFjM2QtMGYyZDcwMDY2ZmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFMg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADQP294MVkyC05FDQ9kRk0is4Mcc1TXOQ4nIxvb5E0GZBOA8sNAU XcGtaoCCmRBmpIUXMNaEx2S9S87Fvy0FH0iE0SjxIcLWgicv+yBF+mnBz67gt7PN K1Y4IvVMoAvNp1v//6SV1Kjol+bqcAw9Kpg66Vz8OSmPRWo9r00Rp37Z940PIy1S er/vZZnBOq2KdQRk6mvk5INrHs1GClmdqMJ9r+uE2DuzuixhdM4pqoioSIUxfE7g luSL4hK2RuSGTgkSGl/dhf3DHKj76FoSE7+TsdO8TScKyiK+ZMrmsj+uIqeQqmv6 y2WJk2WFGNzxDVoxNhTDDy3ShxcYIJfvmls= -----END CERTIFICATE-----Generated at Sun Feb 16 15:29:36 2025 by rpki-client