$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d84204e2-a221-33fb-8599-41f51e481a47.roa File: d84204e2-a221-33fb-8599-41f51e481a47.roa (raw, json) Hash identifier: 7jYyE5ICfKoZ2kquY12xCE841p+sM85TRX6IVf9gWug= Subject key identifier: 57:71:6D:62:29:F1:5C:60:88:A5:A3:84:8D:7B:D9:0D:47:31:A3:DE Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F432858485F9AFE1955CD57BE571342E0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d84204e2-a221-33fb-8599-41f51e481a47.roa Signing time: Mon 30 Dec 2024 02:00:39 +0000 ROA not before: Mon 30 Dec 2024 02:00:39 +0000 ROA not after: Sun 30 Mar 2025 01:00:39 +0000 asID: 54113 IP address blocks: 2607:8940:46e0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5f:9a:fe:19:55:cd:57:be:57:13:42:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Dec 30 02:00:39 2024 GMT Not After : Mar 30 01:00:39 2025 GMT Subject: CN=bf82eebb-6061-4deb-9c74-dc5f8fbced65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:3c:6f:39:db:85:ee:e3:f7:87:df:3c:41:ab: df:92:e1:b2:65:3f:61:24:5e:81:9e:4d:97:68:01: 3a:64:82:a8:cc:52:f5:6e:8d:c6:e8:32:1b:ce:60: 39:d9:24:49:32:2b:b5:ea:8f:fd:ad:48:a3:e3:37: d7:30:4d:51:2f:23:fe:e2:c2:c9:7b:90:1f:7b:21: b9:4f:a0:79:4e:ae:df:0e:68:5c:e6:ab:92:e7:f1: ac:aa:19:bb:e5:40:47:95:55:63:83:a2:31:a2:e9: b3:75:0b:46:a0:9c:25:2d:a5:3e:cf:1d:1f:7a:13: 48:d0:42:1a:89:99:3b:11:61:39:dd:01:84:5d:4e: 53:4b:c1:c7:97:73:a9:b7:09:e6:77:d2:40:fe:c3: a8:a5:75:32:d8:90:07:6f:4a:ba:d9:40:57:02:cf: 07:ea:e5:c5:af:9e:05:86:d4:c8:5c:52:e5:88:de: 52:b5:1d:2e:27:8f:7d:9d:2d:da:26:23:3e:fd:54: 43:cf:22:8c:8d:a0:19:15:19:30:ec:56:bc:65:c2: 9c:8b:6f:3f:8e:b5:ce:fd:45:62:fb:24:51:c7:2f: 74:cf:19:53:11:2a:89:1c:95:50:cb:a6:66:cd:c4: 2c:bf:5e:69:37:a8:c7:56:c8:4c:ba:45:dd:eb:ca: 22:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:71:6D:62:29:F1:5C:60:88:A5:A3:84:8D:7B:D9:0D:47:31:A3:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d84204e2-a221-33fb-8599-41f51e481a47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:46e0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:db:01:27:0d:5c:7d:01:38:a5:6d:13:6d:ef:f0:9b:d9:96: 16:8f:64:4d:08:03:cc:80:c7:8a:c4:ee:b0:e0:e2:3f:5a:88: 5e:8f:85:10:23:78:1a:18:9e:52:f8:93:77:26:0e:31:fc:ce: 62:65:b7:78:41:9d:e5:6a:e0:b8:60:38:9d:0a:34:a2:ff:13: f7:e0:fe:a3:c1:70:d7:3e:18:0c:2d:38:42:9c:be:66:0a:69: 16:a8:b0:17:90:4b:fe:44:65:d5:dd:84:08:7b:67:f8:8b:1a: 54:a3:fa:8e:2b:8e:1a:54:49:d1:7e:17:bc:fe:48:16:8f:09: f1:4f:55:52:84:69:bc:6e:f8:b5:0a:74:53:8a:99:20:db:46: 55:9b:f8:4e:fe:e0:da:e4:35:f3:d6:08:1f:45:87:af:5f:07: f3:f3:2e:96:37:bb:c2:b0:85:ce:48:b3:23:dd:d4:17:15:a5: 09:e5:76:ea:1b:06:6b:0c:31:f5:8e:b7:f6:bd:a6:67:03:e9: af:dc:ed:bd:d3:5b:da:4a:4e:d5:aa:96:a3:54:1f:8e:27:b9: d8:c3:71:84:ae:45:1b:0e:fb:0e:d4:71:11:9b:7b:49:37:c0: a5:4d:5f:89:dd:29:f9:0c:e9:39:a9:c7:b3:ca:cd:de:a8:a1: 59:60:29:14 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhfmv4ZVc1XvlcTQuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI0MTIzMDAyMDAzOVoXDTI1MDMzMDAxMDAzOVowLzEtMCsGA1UEAxMk YmY4MmVlYmItNjA2MS00ZGViLTljNzQtZGM1ZjhmYmNlZDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTxvOduF7uP3h988QavfkuGyZT9hJF6Bnk2X aAE6ZIKozFL1bo3G6DIbzmA52SRJMiu16o/9rUij4zfXME1RLyP+4sLJe5AfeyG5 T6B5Tq7fDmhc5quS5/Gsqhm75UBHlVVjg6IxoumzdQtGoJwlLaU+zx0fehNI0EIa iZk7EWE53QGEXU5TS8HHl3Optwnmd9JA/sOopXUy2JAHb0q62UBXAs8H6uXFr54F htTIXFLliN5StR0uJ499nS3aJiM+/VRDzyKMjaAZFRkw7Fa8ZcKci28/jrXO/UVi +yRRxy90zxlTESqJHJVQy6ZmzcQsv15pN6jHVshMukXd68oi9wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFdxbWIp8VxgiKWjhI172Q1HMaPeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZDg0MjA0ZTItYTIyMS0z M2ZiLTg1OTktNDFmNTFlNDgxYTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEbg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA3bAScNXH0BOKVtE23v8JvZlhaPZE0IA8yAx4rE7rDg4j9aiF6P hRAjeBoYnlL4k3cmDjH8zmJlt3hBneVq4LhgOJ0KNKL/E/fg/qPBcNc+GAwtOEKc vmYKaRaosBeQS/5EZdXdhAh7Z/iLGlSj+o4rjhpUSdF+F7z+SBaPCfFPVVKEabxu +LUKdFOKmSDbRlWb+E7+4NrkNfPWCB9Fh69fB/PzLpY3u8Kwhc5IsyPd1BcVpQnl duobBmsMMfWOt/a9pmcD6a/c7b3TW9pKTtWqlqNUH44nudjDcYSuRRsO+w7UcRGb e0k3wKVNX4ndKfkM6Tmpx7PKzd6ooVlgKRQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:48:16 2025 by rpki-client