$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f5579bfb-1b8a-3c33-b313-cd33e94a151e.roa File: f5579bfb-1b8a-3c33-b313-cd33e94a151e.roa (raw, json) Hash identifier: +018bAvGL9T32ma7z8FMUgxxDajeNVYRjWnNDo7Sh9o= Subject key identifier: A1:10:10:34:67:EF:21:A4:F8:36:2D:2E:F4:5C:FC:85:AB:50:67:50 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584940395EE9AE20EEDE3FA10768 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f5579bfb-1b8a-3c33-b313-cd33e94a151e.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 54113 IP address blocks: 2607:8940:5bd0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:5e:e9:ae:20:ee:de:3f:a1:07:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=682fd9b1-ccfd-41a6-a764-dff1ff12078d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5f:01:3c:4f:d7:b2:0a:ba:4d:ae:72:e6:b7: e2:88:e4:e0:6b:ef:76:9d:cb:f2:a3:35:30:7d:b0: 49:90:d9:08:85:40:4c:67:33:5b:6c:51:e4:4f:92: 47:08:d7:dc:20:f7:a9:24:95:b8:d0:ee:3c:28:9c: 84:5e:d8:65:f7:25:8c:b6:75:a5:18:98:12:be:af: f6:b7:76:47:a0:99:78:df:bc:b7:e6:ca:0a:55:07: 13:86:e6:9c:f9:50:3a:28:79:ba:8d:f9:bb:af:15: 3e:ee:c9:bc:1a:82:a6:26:70:07:20:8d:2b:1b:95: ca:6b:f0:82:dd:86:46:60:0c:33:52:38:4d:aa:50: c8:33:8a:40:16:a4:45:be:20:fe:21:3b:5b:77:09: df:ff:f9:4d:b7:e2:e6:67:22:e1:ea:53:b1:a1:03: 86:c6:19:bb:f4:ae:44:22:13:58:46:15:32:66:64: 33:8b:94:ed:b1:5d:13:86:8a:5e:9d:e7:4e:1f:24: 66:3a:75:b7:ca:6e:86:69:63:0f:65:43:bc:19:2d: 0a:4c:03:39:a2:7c:a0:e5:49:63:45:79:aa:d9:fe: a9:0d:1a:67:76:67:7f:40:9e:8d:ce:74:6a:69:7b: a6:83:98:a3:18:d9:b8:0e:f1:9e:9b:ad:94:23:ee: 53:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:10:10:34:67:EF:21:A4:F8:36:2D:2E:F4:5C:FC:85:AB:50:67:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f5579bfb-1b8a-3c33-b313-cd33e94a151e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:5bd0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:62:6e:24:08:15:0c:f1:b1:2c:0b:31:27:56:c3:93:00:df: fc:91:18:4c:4b:6a:91:ab:7a:88:ad:be:a7:c9:b9:a9:1e:3c: 60:95:9c:cc:23:a5:1b:b3:ce:99:1c:4a:e5:6e:65:9e:cc:ff: b4:d9:bf:94:4f:38:f3:8b:9e:c3:57:71:56:f8:6c:cf:35:6d: af:d4:35:9e:f3:0f:43:2f:47:b3:96:9d:20:81:6f:12:f0:db: ed:7b:06:d0:ec:3b:e6:ad:fb:6f:39:67:f1:f2:fc:39:44:f6: 6a:86:c9:1d:b3:ee:53:e8:6b:e7:54:7f:51:70:b5:fd:6c:7e: 7b:de:22:c2:5f:a8:52:e0:86:62:10:d9:94:8f:e7:e4:82:d2: 96:11:29:3f:31:60:21:2e:bb:a3:66:5a:dd:ac:4b:be:5b:62: af:39:1b:13:62:81:fc:8f:1f:fb:af:c5:4f:b5:1d:18:ee:e3: f9:74:ad:0a:00:6c:7f:7c:04:0d:69:80:ea:6d:42:f7:c7:03: 4c:f7:f6:6c:ca:6d:f2:7b:b1:29:ea:ce:11:87:c4:d9:4f:31: 7f:56:62:2f:d8:22:52:27:36:f6:60:98:8d:7a:e5:ef:ea:b4: 2f:c1:59:bc:1e:70:2e:fc:47:8f:4c:f8:94:1b:b5:9a:3c:fc: 19:38:e9:8e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElAOV7priDu3j+hB2gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk NjgyZmQ5YjEtY2NmZC00MWE2LWE3NjQtZGZmMWZmMTIwNzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm18BPE/Xsgq6Ta5y5rfiiOTga+92ncvyozUw fbBJkNkIhUBMZzNbbFHkT5JHCNfcIPepJJW40O48KJyEXthl9yWMtnWlGJgSvq/2 t3ZHoJl437y35soKVQcThuac+VA6KHm6jfm7rxU+7sm8GoKmJnAHII0rG5XKa/CC 3YZGYAwzUjhNqlDIM4pAFqRFviD+ITtbdwnf//lNt+LmZyLh6lOxoQOGxhm79K5E IhNYRhUyZmQzi5TtsV0ThopenedOHyRmOnW3ym6GaWMPZUO8GS0KTAM5onyg5Ulj RXmq2f6pDRpndmd/QJ6NznRqaXumg5ijGNm4DvGem62UI+5TtwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKEQEDRn7yGk+DYtLvRc/IWrUGdQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZjU1NzliZmItMWI4YS0z YzMzLWIzMTMtY2QzM2U5NGExNTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFvQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFFibiQIFQzxsSwLMSdWw5MA3/yRGExLapGreoitvqfJuakePGCV nMwjpRuzzpkcSuVuZZ7M/7TZv5RPOPOLnsNXcVb4bM81ba/UNZ7zD0MvR7OWnSCB bxLw2+17BtDsO+at+285Z/Hy/DlE9mqGyR2z7lPoa+dUf1Fwtf1sfnveIsJfqFLg hmIQ2ZSP5+SC0pYRKT8xYCEuu6NmWt2sS75bYq85GxNigfyPH/uvxU+1HRju4/l0 rQoAbH98BA1pgOptQvfHA0z39mzKbfJ7sSnqzhGHxNlPMX9WYi/YIlInNvZgmI16 5e/qtC/BWbwecC78R49M+JQbtZo8/Bk46Y4= -----END CERTIFICATE-----Generated at Thu May 8 11:27:41 2025 by rpki-client