$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e830c152-d6a4-346c-a43f-a69dffaca003.roa File: e830c152-d6a4-346c-a43f-a69dffaca003.roa (raw, json) Hash identifier: rRZo0mEyETjDbMILkQ/8rYl6UEXtQDAHC4vwotOur30= Subject key identifier: CB:53:35:28:AC:59:A6:79:1F:DC:C5:32:84:2B:75:8D:0F:AF:51:94 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F432858485F9B0713E20C5F61FB893180 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e830c152-d6a4-346c-a43f-a69dffaca003.roa Signing time: Mon 30 Dec 2024 02:00:39 +0000 ROA not before: Mon 30 Dec 2024 02:00:39 +0000 ROA not after: Sun 30 Mar 2025 01:00:39 +0000 asID: 54113 IP address blocks: 2607:8940:4b40::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5f:9b:07:13:e2:0c:5f:61:fb:89:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Dec 30 02:00:39 2024 GMT Not After : Mar 30 01:00:39 2025 GMT Subject: CN=8c399bf2-f0ae-4550-845e-2930a498dd30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:37:d2:0c:31:bb:8d:3f:fc:8d:a7:7c:22:b5: ac:3b:13:fc:94:18:1f:7c:26:08:79:03:b2:5e:3f: 78:c7:81:5b:a5:29:ef:ec:6a:05:c9:e3:41:5e:dc: 16:b6:6d:d5:04:03:cc:e5:c6:d9:d0:f1:44:27:a7: b0:df:c8:bd:db:4c:b0:f1:6a:34:75:70:31:2a:33: 8c:6e:20:a2:54:2b:11:2a:8d:02:67:ca:b4:d7:35: b8:27:26:5e:82:5c:41:97:06:35:c4:d8:6c:2c:22: 46:f9:58:23:54:dc:8d:b5:a6:f5:80:f4:79:bc:88: 1e:a7:d3:c6:1c:33:3c:71:3a:2d:ac:d5:a5:cf:85: e6:80:aa:07:ed:4e:96:0b:a2:15:35:7d:45:e0:21: 29:e7:80:53:7c:5d:3e:52:46:12:c0:a5:7a:47:02: 9c:f9:62:01:db:c8:ce:f5:14:e4:51:59:19:a5:11: f8:8d:dd:35:ac:84:b4:21:47:42:4a:12:1e:22:74: ed:88:ae:c3:93:de:ab:5f:96:7b:02:52:fa:ff:b3: 45:43:dc:25:68:58:7e:ec:f9:0e:bf:74:bd:ea:b1: f0:70:10:41:86:d2:f6:d6:7c:d3:b9:67:1a:58:f8: 36:26:cc:00:c8:70:29:d6:a2:5d:91:da:98:40:52: d4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:53:35:28:AC:59:A6:79:1F:DC:C5:32:84:2B:75:8D:0F:AF:51:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e830c152-d6a4-346c-a43f-a69dffaca003.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:4b40::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:9b:c6:21:11:a8:b9:31:bc:3d:77:e0:bc:6f:80:6b:3b:b5: 10:cf:f0:54:22:68:56:f8:a3:fc:a7:e9:72:e4:19:4a:21:f4: 49:30:cf:90:9c:f4:f4:65:0e:37:2a:07:b6:9d:86:52:90:21: f9:9f:74:f7:d8:5f:e9:14:93:b6:cc:33:99:98:81:64:4f:0d: 90:a2:a7:70:8d:49:78:45:52:5c:78:ae:89:5a:f4:5c:eb:33: d2:ef:8b:a9:55:d3:dd:79:b7:ed:5e:7b:ff:db:04:e5:2e:2e: bd:16:89:4b:7b:f6:a8:07:0f:b6:3e:8e:dd:06:60:cf:91:39: c2:bd:a7:62:73:76:6f:e7:50:00:d6:bb:87:4b:e3:99:03:28: bb:6f:d6:87:cc:0d:71:33:e8:b2:4f:c8:d6:34:32:03:24:83: 05:02:77:f4:07:07:be:1b:63:79:ce:02:f8:1a:bc:23:2e:e9: f2:ee:12:b2:39:44:dc:b7:1e:e0:41:97:05:51:6b:1d:db:b4: 51:b7:08:d8:f1:bc:96:00:6f:15:e2:29:d0:fb:50:0d:92:0d: 90:9f:c6:67:41:40:a3:c4:fd:85:99:ce:99:fa:79:c6:5e:fb: dd:6f:6b:50:6e:a3:1f:2d:3d:a3:e5:87:b5:84:b9:f6:84:7f: e9:f6:14:e9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhfmwcT4gxfYfuJMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI0MTIzMDAyMDAzOVoXDTI1MDMzMDAxMDAzOVowLzEtMCsGA1UEAxMk OGMzOTliZjItZjBhZS00NTUwLTg0NWUtMjkzMGE0OThkZDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDfSDDG7jT/8jad8IrWsOxP8lBgffCYIeQOy Xj94x4FbpSnv7GoFyeNBXtwWtm3VBAPM5cbZ0PFEJ6ew38i920yw8Wo0dXAxKjOM biCiVCsRKo0CZ8q01zW4JyZeglxBlwY1xNhsLCJG+VgjVNyNtab1gPR5vIgep9PG HDM8cTotrNWlz4XmgKoH7U6WC6IVNX1F4CEp54BTfF0+UkYSwKV6RwKc+WIB28jO 9RTkUVkZpRH4jd01rIS0IUdCShIeInTtiK7Dk96rX5Z7AlL6/7NFQ9wlaFh+7PkO v3S96rHwcBBBhtL21nzTuWcaWPg2JswAyHAp1qJdkdqYQFLU4QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMtTNSisWaZ5H9zFMoQrdY0Pr1GUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZTgzMGMxNTItZDZhNC0z NDZjLWE0M2YtYTY5ZGZmYWNhMDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEtA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAqbxiERqLkxvD134LxvgGs7tRDP8FQiaFb4o/yn6XLkGUoh9Ekw z5Cc9PRlDjcqB7adhlKQIfmfdPfYX+kUk7bMM5mYgWRPDZCip3CNSXhFUlx4rola 9FzrM9Lvi6lV0915t+1ee//bBOUuLr0WiUt79qgHD7Y+jt0GYM+ROcK9p2Jzdm/n UADWu4dL45kDKLtv1ofMDXEz6LJPyNY0MgMkgwUCd/QHB74bY3nOAvgavCMu6fLu ErI5RNy3HuBBlwVRax3btFG3CNjxvJYAbxXiKdD7UA2SDZCfxmdBQKPE/YWZzpn6 ecZe+91va1Buox8tPaPlh7WEufaEf+n2FOk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:40:38 2025 by rpki-client