$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e9803b89-a895-3610-aa40-3a46a9950264.roa File: e9803b89-a895-3610-aa40-3a46a9950264.roa (raw, json) Hash identifier: O+KrL7Fj74jGA5kMZkxQ8YQerrdisruyP1fbEONwm6g= Subject key identifier: 76:AA:33:51:55:5A:79:18:6E:68:BE:D6:0B:B9:4B:A3:FE:CC:F1:0C Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285849403951258475B033B81E3E00 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e9803b89-a895-3610-aa40-3a46a9950264.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 54113 IP address blocks: 2607:8940:5ad0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:51:25:84:75:b0:33:b8:1e:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=76f2eefa-4e4b-40d4-b093-f54bd745316e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e3:9d:b7:3b:5e:95:2c:fa:de:49:c2:ab:9c: b9:d9:45:66:f8:ee:2f:cd:56:41:38:6e:91:27:19: 1e:d0:2c:a4:46:6a:c6:d4:79:cb:ed:e7:cb:b9:80: b8:23:96:05:1f:35:43:18:38:05:4d:05:e0:79:fd: e5:5d:97:70:fd:2b:51:42:80:44:3c:03:ba:52:3b: d5:35:1d:f4:36:05:b3:df:39:32:cb:72:84:57:78: 4f:7f:e6:55:04:98:28:e8:e1:fa:2a:f2:12:06:1a: e1:ad:60:6e:a1:5b:74:91:8b:fa:b0:aa:4e:f2:26: 33:5e:9c:ee:61:6f:47:76:b0:59:72:40:f3:73:24: 47:6f:78:83:56:82:34:6d:b5:7a:01:15:5c:29:09: f5:c7:d1:c6:4d:ec:16:99:14:61:08:34:3d:55:47: df:00:d6:36:ef:23:fc:46:4f:8f:d5:a0:73:f0:dc: f2:c2:92:c0:0a:f8:fc:bb:85:a3:b5:e7:85:3b:8a: 46:e2:b6:3d:cb:26:ee:77:07:ed:e0:b5:4f:d8:9d: 10:f7:d6:f3:df:30:64:85:f2:9f:54:8d:56:93:f7: 3a:36:d9:3a:e6:ce:aa:4a:ef:0b:8f:21:43:7c:73: b9:da:07:fd:44:d6:fc:99:48:ee:db:65:a9:3f:2e: e2:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:AA:33:51:55:5A:79:18:6E:68:BE:D6:0B:B9:4B:A3:FE:CC:F1:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e9803b89-a895-3610-aa40-3a46a9950264.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:5ad0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:e2:c2:18:fb:15:e4:4b:ca:70:e3:0f:b2:04:12:eb:96:dd: b8:d7:95:7a:35:c2:9c:f6:9b:11:8f:3a:9f:fa:4e:6f:31:76: fb:96:70:2c:34:b4:c7:d7:80:8f:cd:49:61:bf:d0:c8:62:ef: a5:da:8c:68:1a:f5:2c:ad:b2:5b:10:c6:62:4e:c5:21:07:15: 6d:ce:b1:68:d5:1a:a7:f9:b3:4d:67:cd:0f:34:87:00:ac:47: 46:68:de:46:90:b6:85:0c:b4:63:8d:c3:91:20:eb:6a:cb:4a: b6:27:ae:97:7e:cb:2f:b6:dc:40:8d:c6:dd:c3:75:02:8c:2a: e7:ca:14:bd:cc:0e:1f:93:62:44:53:8a:1b:13:c4:cd:00:f1: 32:47:f4:c0:a5:08:59:3b:3b:0b:91:a3:2b:af:34:1b:aa:93: 23:cf:da:3c:3d:2f:17:d6:1b:80:e8:b2:e8:0d:e8:08:09:b5: e0:d4:39:06:db:1f:e8:35:15:13:94:76:35:8f:8b:81:90:7d: 87:82:9d:6a:47:c0:28:79:76:91:e2:a3:6b:a8:88:02:2f:b9: aa:ff:db:94:e3:be:90:2d:b2:5b:c1:1c:e9:75:2f:52:08:eb: 79:04:2d:57:85:6c:92:c1:44:65:1c:99:52:b2:a3:c3:28:a8: 80:5e:05:11 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElAOVElhHWwM7gePgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk NzZmMmVlZmEtNGU0Yi00MGQ0LWIwOTMtZjU0YmQ3NDUzMTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouOdtztelSz63knCq5y52UVm+O4vzVZBOG6R Jxke0CykRmrG1HnL7efLuYC4I5YFHzVDGDgFTQXgef3lXZdw/StRQoBEPAO6UjvV NR30NgWz3zkyy3KEV3hPf+ZVBJgo6OH6KvISBhrhrWBuoVt0kYv6sKpO8iYzXpzu YW9HdrBZckDzcyRHb3iDVoI0bbV6ARVcKQn1x9HGTewWmRRhCDQ9VUffANY27yP8 Rk+P1aBz8NzywpLACvj8u4WjteeFO4pG4rY9yybudwft4LVP2J0Q99bz3zBkhfKf VI1Wk/c6Ntk65s6qSu8LjyFDfHO52gf9RNb8mUju22WpPy7i/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHaqM1FVWnkYbmi+1gu5S6P+zPEMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZTk4MDNiODktYTg5NS0z NjEwLWFhNDAtM2E0NmE5OTUwMjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFrQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIriwhj7FeRLynDjD7IEEuuW3bjXlXo1wpz2mxGPOp/6Tm8xdvuW cCw0tMfXgI/NSWG/0Mhi76XajGga9SytslsQxmJOxSEHFW3OsWjVGqf5s01nzQ80 hwCsR0Zo3kaQtoUMtGONw5Eg62rLSrYnrpd+yy+23ECNxt3DdQKMKufKFL3MDh+T YkRTihsTxM0A8TJH9MClCFk7OwuRoyuvNBuqkyPP2jw9LxfWG4DosugN6AgJteDU OQbbH+g1FROUdjWPi4GQfYeCnWpHwCh5dpHio2uoiAIvuar/25TjvpAtslvBHOl1 L1II63kELVeFbJLBRGUcmVKyo8MoqIBeBRE= -----END CERTIFICATE-----Generated at Thu Apr 3 02:51:15 2025 by rpki-client