$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f6098bff-6a85-3edc-a847-c0ac431a4108.roa File: f6098bff-6a85-3edc-a847-c0ac431a4108.roa (raw, json) Hash identifier: umrZ0hCNa0OZlb/pyKj3cB5P+jITbK9d9EJ6xDvAod8= Subject key identifier: 23:C4:DB:E4:9D:D6:19:A4:67:92:3C:7D:4E:67:D2:E2:63:C7:31:F9 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F432858485F9B0928389603B1D00AEA80 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f6098bff-6a85-3edc-a847-c0ac431a4108.roa Signing time: Mon 30 Dec 2024 02:00:39 +0000 ROA not before: Mon 30 Dec 2024 02:00:39 +0000 ROA not after: Sun 30 Mar 2025 01:00:39 +0000 asID: 54113 IP address blocks: 2607:8940:5300::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5f:9b:09:28:38:96:03:b1:d0:0a:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Dec 30 02:00:39 2024 GMT Not After : Mar 30 01:00:39 2025 GMT Subject: CN=cac3db6d-7554-487c-b322-80674f374c09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:67:58:3a:ff:c8:62:9e:71:2d:ca:ba:cb:7d: b4:6d:82:9b:be:43:63:33:05:4e:a3:1f:e6:d2:fc: 79:bc:21:5c:e8:ce:a0:08:e4:17:0f:98:bf:39:81: aa:6c:a2:a5:b5:1f:ea:75:38:ac:07:71:ef:fb:36: 72:1a:76:fc:8e:33:7a:c9:ba:1f:31:e0:56:33:8a: 91:84:dc:2e:68:d2:ca:aa:70:20:3e:b9:d1:b6:bb: 4c:8e:f4:e6:b8:91:93:24:3a:9a:c6:00:9d:a9:01: ef:c3:08:0f:6e:73:eb:25:3a:d9:31:ee:5b:08:b2: 92:63:0e:4c:54:62:13:ba:46:b0:fc:30:c5:99:d8: a5:8b:7b:22:13:75:63:45:e2:e8:a2:db:9f:fa:8f: c8:6c:18:97:13:0b:e6:57:4b:d9:11:ab:c8:e3:08: df:3c:04:25:db:32:d9:33:4a:6c:df:a6:ec:c7:17: c5:7c:e9:1d:ec:e3:30:59:f0:b7:04:b8:0c:8d:9c: 35:ec:5b:fb:25:3e:0a:61:2a:e9:f0:4f:0f:f4:6b: 28:33:b7:79:bb:d5:41:45:27:96:ac:a9:3a:21:73: 96:a1:ca:8d:60:8b:29:a6:41:da:b2:d4:9b:8b:9f: 35:6f:69:6d:c5:41:b6:d0:55:ea:3d:f5:59:8d:05: 45:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:C4:DB:E4:9D:D6:19:A4:67:92:3C:7D:4E:67:D2:E2:63:C7:31:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f6098bff-6a85-3edc-a847-c0ac431a4108.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:5300::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:c0:cf:7c:56:d9:a8:c8:f9:3f:c6:83:c4:6c:ce:46:de:10: 33:1f:4d:a0:e7:96:fa:87:16:19:61:2a:9f:72:5e:b7:3b:7f: 23:e0:06:f4:89:db:ee:d5:87:e4:5d:41:49:80:e8:cd:b8:9b: fd:87:1c:a8:8a:53:86:ed:e2:21:13:72:66:5e:e1:b5:27:34: 5b:43:e7:ef:cf:53:54:e5:32:b6:d8:9b:8b:ab:7f:3c:98:b0: eb:53:49:3a:7a:44:a7:1b:b5:88:51:19:78:cd:7a:61:5c:19: bd:80:bb:7f:3d:e3:56:c2:0c:dc:34:42:e7:7b:53:e1:f4:c3: 29:20:5c:86:2a:e0:44:fe:42:72:ca:10:99:10:ab:d5:4c:e7: 5c:e5:f3:f9:96:9d:a5:6c:5b:56:15:31:31:f6:e9:5e:b0:68: a3:ce:7d:ed:eb:99:c8:09:7b:36:14:b4:12:f1:a9:52:fd:14: ce:9c:81:ed:7b:b9:51:dd:71:66:c3:4e:88:33:4d:0c:d2:70: 81:63:75:74:29:74:9b:d3:72:8f:48:28:7f:fe:e3:bf:df:ae: 6e:c5:f9:18:73:96:b6:17:8b:3f:6d:1f:ef:45:67:59:92:8e: fe:33:85:f2:69:92:19:44:46:23:88:de:45:cf:ce:c3:a4:54: ad:f0:bd:b5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhfmwkoOJYDsdAK6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI0MTIzMDAyMDAzOVoXDTI1MDMzMDAxMDAzOVowLzEtMCsGA1UEAxMk Y2FjM2RiNmQtNzU1NC00ODdjLWIzMjItODA2NzRmMzc0YzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWdYOv/IYp5xLcq6y320bYKbvkNjMwVOox/m 0vx5vCFc6M6gCOQXD5i/OYGqbKKltR/qdTisB3Hv+zZyGnb8jjN6ybofMeBWM4qR hNwuaNLKqnAgPrnRtrtMjvTmuJGTJDqaxgCdqQHvwwgPbnPrJTrZMe5bCLKSYw5M VGITukaw/DDFmdili3siE3VjReLootuf+o/IbBiXEwvmV0vZEavI4wjfPAQl2zLZ M0ps36bsxxfFfOkd7OMwWfC3BLgMjZw17Fv7JT4KYSrp8E8P9GsoM7d5u9VBRSeW rKk6IXOWocqNYIsppkHastSbi581b2ltxUG20FXqPfVZjQVFuQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCPE2+Sd1hmkZ5I8fU5n0uJjxzH5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZjYwOThiZmYtNmE4NS0z ZWRjLWE4NDctYzBhYzQzMWE0MTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFMA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAzAz3xW2ajI+T/Gg8RszkbeEDMfTaDnlvqHFhlhKp9yXrc7fyPg BvSJ2+7Vh+RdQUmA6M24m/2HHKiKU4bt4iETcmZe4bUnNFtD5+/PU1TlMrbYm4ur fzyYsOtTSTp6RKcbtYhRGXjNemFcGb2Au38941bCDNw0Qud7U+H0wykgXIYq4ET+ QnLKEJkQq9VM51zl8/mWnaVsW1YVMTH26V6waKPOfe3rmcgJezYUtBLxqVL9FM6c ge17uVHdcWbDTogzTQzScIFjdXQpdJvTco9IKH/+47/frm7F+RhzlrYXiz9tH+9F Z1mSjv4zhfJpkhlERiOI3kXPzsOkVK3wvbU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:24:25 2025 by rpki-client