$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ebcb0faf-eaef-307e-8659-454a875f7594.roa File: ebcb0faf-eaef-307e-8659-454a875f7594.roa (raw, json) Hash identifier: ukw+L4GIrFYJDu2GDNawwXF2VDvhYP1iL0ZD6REYFfw= Subject key identifier: 8C:F3:40:80:95:55:80:94:DE:49:CC:CC:3D:DD:AE:55:7F:BA:22:97 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F432858485F9AF5210A36CB2DAD3AA000 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ebcb0faf-eaef-307e-8659-454a875f7594.roa Signing time: Mon 30 Dec 2024 02:00:39 +0000 ROA not before: Mon 30 Dec 2024 02:00:39 +0000 ROA not after: Sun 30 Mar 2025 01:00:39 +0000 asID: 54113 IP address blocks: 2607:8940:4440::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5f:9a:f5:21:0a:36:cb:2d:ad:3a:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Dec 30 02:00:39 2024 GMT Not After : Mar 30 01:00:39 2025 GMT Subject: CN=efd8a040-9ce8-4e78-af4f-6845669da378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a3:96:15:99:b4:2b:ec:3d:b2:45:bb:b5:03: af:6e:42:ae:3c:f5:ae:18:9c:17:ca:b0:49:64:60: ec:aa:5f:17:2e:8a:4b:3f:04:c1:b5:ad:df:eb:6e: 1b:ae:5b:6c:ec:fa:84:d3:92:22:eb:89:fd:75:14: 6f:fd:5b:d5:8d:c6:d7:9c:04:f0:55:f6:37:ac:14: 39:e3:7d:0c:09:e6:3d:aa:6a:7a:16:dd:d8:91:d8: b3:01:f6:5e:0e:89:d2:3c:2b:25:0b:1b:e8:b7:e0: d2:28:dc:1d:c0:a1:94:77:f2:55:93:6b:d1:62:3c: 36:d0:68:3b:c3:bb:8b:0d:5f:53:aa:47:69:c4:4b: 1f:d1:7f:e7:d3:ce:63:7d:68:e1:bf:00:4c:76:cf: 3c:0d:b3:c8:84:52:62:bc:a4:48:ec:96:5f:95:14: a0:77:d6:de:9f:c5:86:e3:de:38:ba:40:2c:33:d5: f2:bc:d3:07:c3:24:41:ab:64:64:22:5e:d2:86:68: 35:ca:fd:4a:7d:13:f9:65:fc:8a:72:b8:c5:07:17: 5b:24:87:66:a8:72:96:7b:88:9e:49:97:50:8f:d3: 41:ca:09:1e:7a:e3:31:19:93:d1:f9:74:ab:7a:fb: 4d:ed:c7:4d:67:8f:d9:4c:09:06:1f:49:67:34:bd: 1e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F3:40:80:95:55:80:94:DE:49:CC:CC:3D:DD:AE:55:7F:BA:22:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ebcb0faf-eaef-307e-8659-454a875f7594.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:4440::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:6a:7e:fc:de:e4:2b:94:ee:44:92:6b:74:d6:be:09:ab:bb: 06:8e:c1:42:05:1e:9f:2b:de:04:b9:d7:02:68:ad:fe:c8:a7: e4:5b:ec:ab:4b:4b:15:9f:45:fb:5b:c6:5a:e0:7b:bc:92:35: 1b:43:c1:78:ae:4a:e9:64:ed:61:77:b2:81:10:00:f6:8a:0c: 0a:30:8f:32:0c:91:9f:1c:38:13:63:40:cf:42:e7:a6:0d:06: 12:84:da:ad:b6:46:7b:1d:ba:43:13:83:fa:a9:f9:fc:6c:33: 74:d2:f6:24:bf:d9:a9:f0:4d:8d:5b:79:e2:62:b2:c4:50:de: 3a:13:d9:99:fb:f8:df:31:fa:0b:93:d4:c6:f4:bd:e4:70:84: 86:aa:8e:9d:7c:cf:cf:d5:23:01:a5:72:7b:ca:99:02:e6:80: b7:64:ad:ee:12:32:f0:f6:9c:b6:f7:7c:de:39:68:82:ab:59: 4e:2d:79:64:7f:3b:e8:82:47:0e:64:59:96:f4:c5:b8:8c:27: 72:13:01:bf:2c:8d:07:a6:88:c8:93:d0:62:1e:3c:39:79:cc: e0:98:fc:78:61:a7:71:15:04:89:0a:f5:25:86:50:e8:d9:eb: a8:14:bf:43:68:50:ec:d4:c2:f0:14:a9:91:4b:57:94:33:2c: 43:f6:f9:24 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhfmvUhCjbLLa06oAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI0MTIzMDAyMDAzOVoXDTI1MDMzMDAxMDAzOVowLzEtMCsGA1UEAxMk ZWZkOGEwNDAtOWNlOC00ZTc4LWFmNGYtNjg0NTY2OWRhMzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKOWFZm0K+w9skW7tQOvbkKuPPWuGJwXyrBJ ZGDsql8XLopLPwTBta3f624brlts7PqE05Ii64n9dRRv/VvVjcbXnATwVfY3rBQ5 430MCeY9qmp6Ft3YkdizAfZeDonSPCslCxvot+DSKNwdwKGUd/JVk2vRYjw20Gg7 w7uLDV9TqkdpxEsf0X/n085jfWjhvwBMds88DbPIhFJivKRI7JZflRSgd9ben8WG 4944ukAsM9XyvNMHwyRBq2RkIl7Shmg1yv1KfRP5ZfyKcrjFBxdbJIdmqHKWe4ie SZdQj9NBygkeeuMxGZPR+XSrevtN7cdNZ4/ZTAkGH0lnNL0eKQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIzzQICVVYCU3knMzD3drlV/uiKXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZWJjYjBmYWYtZWFlZi0z MDdlLTg2NTktNDU0YTg3NWY3NTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQERA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF9qfvze5CuU7kSSa3TWvgmruwaOwUIFHp8r3gS51wJorf7Ip+Rb 7KtLSxWfRftbxlrge7ySNRtDwXiuSulk7WF3soEQAPaKDAowjzIMkZ8cOBNjQM9C 56YNBhKE2q22RnsdukMTg/qp+fxsM3TS9iS/2anwTY1beeJissRQ3joT2Zn7+N8x +guT1Mb0veRwhIaqjp18z8/VIwGlcnvKmQLmgLdkre4SMvD2nLb3fN45aIKrWU4t eWR/O+iCRw5kWZb0xbiMJ3ITAb8sjQemiMiT0GIePDl5zOCY/Hhhp3EVBIkK9SWG UOjZ66gUv0NoUOzUwvAUqZFLV5QzLEP2+SQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:17:15 2025 by rpki-client