$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/96dbe87f-b87a-3539-94ac-e63876136093.roa File: 96dbe87f-b87a-3539-94ac-e63876136093.roa (raw, json) Hash identifier: pIW+Ztkot0WEEBmGSG3TKkWMweox4nguuRxfxqzdd3Y= Subject key identifier: 57:BE:A5:AE:51:9C:B7:65:F0:58:76:62:CC:46:A5:95:13:69:2B:14 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584A1F9048A7E13083C7A5A42E80 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/96dbe87f-b87a-3539-94ac-e63876136093.roa Signing time: Sun 08 Jun 2025 13:01:01 +0000 ROA not before: Sun 08 Jun 2025 13:01:01 +0000 ROA not after: Sat 06 Sep 2025 13:01:01 +0000 asID: 54113 IP address blocks: 2607:8940:4b00::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1f:90:48:a7:e1:30:83:c7:a5:a4:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Jun 8 13:01:01 2025 GMT Not After : Sep 6 13:01:01 2025 GMT Subject: CN=d4307bcb-fd44-4353-899b-1722b46852ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6d:82:36:e6:cf:63:3a:1f:82:c7:58:f2:18: 7d:ef:7e:2f:d1:63:11:49:dc:ce:bb:e6:67:82:5e: a3:f2:ff:a7:0c:89:8e:1e:4c:ad:65:26:f4:d4:2a: d1:92:6c:6a:5d:73:bc:89:c0:11:3b:08:d0:81:ec: 09:cb:71:20:98:b8:8c:e5:70:25:1d:54:bb:12:8d: df:88:f6:c3:e4:f5:f3:25:75:8f:21:e0:01:3c:46: ef:b6:6a:00:dc:1c:0b:b4:df:3e:15:2e:26:c9:4a: 7f:f1:f1:91:8b:e7:2b:57:24:7b:a0:8f:33:41:66: 0a:f9:24:bc:ba:9b:09:95:c2:87:5b:41:36:36:0b: 63:45:8c:1a:a9:50:7e:a1:9e:b6:e7:34:9f:26:78: da:1d:b4:90:ec:90:0c:ce:a3:ce:f2:4b:fe:e1:c3: b4:6e:c6:5d:5f:dc:24:4c:79:6c:e2:aa:bb:47:98: 17:59:db:ba:64:6d:fe:8a:22:06:d8:e3:43:d7:a9: 4e:ea:c8:4d:63:ab:11:30:d8:2c:90:bd:60:46:89: ec:7e:93:47:66:e3:73:aa:20:e5:f4:c8:f3:d6:a9: 8d:1d:63:a4:f2:f1:c4:b1:2c:87:c9:1f:e3:7e:e9: 39:9e:4a:53:0c:44:08:13:51:85:2f:5a:3a:f8:3e: 35:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:BE:A5:AE:51:9C:B7:65:F0:58:76:62:CC:46:A5:95:13:69:2B:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/96dbe87f-b87a-3539-94ac-e63876136093.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:4b00::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:ab:c9:b2:d2:19:b0:4d:00:7f:b0:ba:8d:ad:d6:d6:2a:1a: b2:d5:ec:a1:3e:a1:32:e1:dd:01:df:f9:2b:ec:0d:49:97:da: b9:70:3c:8d:57:b4:5b:24:46:50:c7:7f:aa:50:66:50:5f:81: 60:a9:56:ac:9c:38:65:7e:f9:df:4b:3b:03:e8:36:88:1b:2f: b8:d6:9b:96:05:46:c7:e2:1d:c5:49:65:db:bb:62:d9:ea:0b: 49:a5:a5:39:23:c3:1c:a9:28:7e:dc:38:57:75:e6:4c:c4:f8: 27:a8:dc:4e:61:a9:4f:24:05:65:a0:5e:a0:f1:99:26:52:a1: f7:0e:94:82:d0:c1:6d:b9:98:bf:4d:2a:9d:f6:d6:25:4c:61: e8:38:46:27:1b:0f:1b:30:9a:45:c7:d0:a1:21:e8:ce:0f:5c: 6e:ee:05:4d:3b:64:1b:58:6e:d1:14:34:d4:14:68:78:04:f3: d2:30:1f:9e:f9:c0:d3:56:d8:1e:ca:4b:19:82:0f:45:6c:e4: f1:ff:1a:ea:c7:9c:6e:ee:4e:b8:46:e7:49:f3:66:3f:0b:03: 3f:d4:f9:f2:b1:0b:31:74:97:e5:43:fe:e9:81:d7:a8:17:0e: 90:6a:9c:be:cf:9b:f0:b9:89:8c:ab:80:58:8e:23:71:71:49: 42:2f:c1:b9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEofkEin4TCDx6WkLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDYwODEzMDEwMVoXDTI1MDkwNjEzMDEwMVowLzEtMCsGA1UEAxMk ZDQzMDdiY2ItZmQ0NC00MzUzLTg5OWItMTcyMmI0Njg1MmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuG2CNubPYzofgsdY8hh9734v0WMRSdzOu+Zn gl6j8v+nDImOHkytZSb01CrRkmxqXXO8icAROwjQgewJy3EgmLiM5XAlHVS7Eo3f iPbD5PXzJXWPIeABPEbvtmoA3BwLtN8+FS4myUp/8fGRi+crVyR7oI8zQWYK+SS8 upsJlcKHW0E2NgtjRYwaqVB+oZ625zSfJnjaHbSQ7JAMzqPO8kv+4cO0bsZdX9wk THls4qq7R5gXWdu6ZG3+iiIG2OND16lO6shNY6sRMNgskL1gRonsfpNHZuNzqiDl 9Mjz1qmNHWOk8vHEsSyHyR/jfuk5nkpTDEQIE1GFL1o6+D41cQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFe+pa5RnLdl8Fh2YsxGpZUTaSsUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvOTZkYmU4N2YtYjg3YS0z NTM5LTk0YWMtZTYzODc2MTM2MDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEsA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGCrybLSGbBNAH+wuo2t1tYqGrLV7KE+oTLh3QHf+SvsDUmX2rlw PI1XtFskRlDHf6pQZlBfgWCpVqycOGV++d9LOwPoNogbL7jWm5YFRsfiHcVJZdu7 YtnqC0mlpTkjwxypKH7cOFd15kzE+Ceo3E5hqU8kBWWgXqDxmSZSofcOlILQwW25 mL9NKp321iVMYeg4RicbDxswmkXH0KEh6M4PXG7uBU07ZBtYbtEUNNQUaHgE89Iw H575wNNW2B7KSxmCD0Vs5PH/GurHnG7uTrhG50nzZj8LAz/U+fKxCzF0l+VD/umB 16gXDpBqnL7Pm/C5iYyrgFiOI3FxSUIvwbk= -----END CERTIFICATE-----Generated at Tue Jul 1 05:46:37 2025 by rpki-client