$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/0add0c68-6307-3a1c-9a64-fd4561e55abd.roa File: 0add0c68-6307-3a1c-9a64-fd4561e55abd.roa (raw, json) Hash identifier: jAyM7Ls6nA2ckNUzGpUgxGloUEy7OWfdVptz6TK1lWE= Subject key identifier: 91:A5:CE:8B:9D:CF:E2:A5:01:C8:9B:AD:1B:3E:39:73:7A:D9:96:58 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584AADF11E8649973E1D9045C980 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/0add0c68-6307-3a1c-9a64-fd4561e55abd.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 52000 IP address blocks: 2607:740:5f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:1e:86:49:97:3e:1d:90:45:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=ae0da8cf-005d-4ec1-8518-f9d12d816522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fb:19:75:38:61:3f:36:27:15:dd:83:82:bb: 2a:bc:25:8c:38:66:4e:34:bb:06:d2:64:11:7f:1a: c1:a6:7d:71:d0:92:55:04:25:bb:50:5a:1f:de:9a: a5:9b:9b:55:98:1c:a0:e0:08:0c:b5:f3:24:96:05: a1:19:e4:e9:5b:b4:d7:76:19:99:ff:e1:0b:14:18: b5:ce:27:1a:76:00:05:f4:7b:71:a8:35:62:9f:3b: 2d:78:0f:40:32:91:2e:d1:ad:af:b1:e9:91:3f:d9: 57:3d:77:09:47:5d:12:55:56:1c:cd:6c:75:d3:7e: 85:bb:e3:e6:76:28:e4:3e:19:14:fd:56:03:c1:e3: cc:33:23:19:c7:73:50:67:0b:06:96:9a:87:9c:ed: 1e:a4:65:12:7c:90:c7:50:8d:82:11:d0:87:39:f3: dc:a0:44:55:b2:b7:f4:12:de:9d:23:34:53:0b:8f: f9:62:39:1e:6e:a6:9d:4d:8f:16:cd:9f:98:39:51: fa:34:8e:a4:22:ef:f8:ad:72:2f:16:8c:ff:7a:5b: 3c:74:2b:0e:f5:48:4c:59:c3:b5:f6:9c:cc:de:ff: c1:e5:fe:5e:cf:9c:f5:79:39:8c:53:16:e6:16:18: e0:d9:06:17:ac:e4:70:c2:50:96:3b:e2:a8:79:05: 51:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A5:CE:8B:9D:CF:E2:A5:01:C8:9B:AD:1B:3E:39:73:7A:D9:96:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/0add0c68-6307-3a1c-9a64-fd4561e55abd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:5f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:72:bb:c8:d9:43:b5:e4:04:e5:f8:e1:5b:8c:61:71:7c:d1: 09:3c:ce:53:e2:4f:67:a1:a8:f8:1f:52:ff:07:a2:9d:72:82: df:83:e2:6c:05:d3:9b:d5:cf:0a:a2:8b:eb:ce:9f:95:09:2e: 5f:d6:b9:b9:65:a9:a2:35:95:89:64:0c:0c:94:fb:a6:66:95: fb:32:6d:45:cc:2c:51:9b:76:eb:1c:6b:55:f8:4a:f5:4c:6d: 0a:bd:93:6f:a3:e0:c5:40:2e:6e:51:c9:54:96:60:52:af:7a: 34:3b:c3:67:03:d7:e6:f8:91:22:8d:91:db:68:00:f0:e0:e1: d0:66:f6:39:02:fd:11:53:c0:e4:83:8a:10:6b:70:e0:b9:6d: f5:8b:93:66:a2:8d:15:da:6f:64:b7:fe:fc:5f:9a:7c:1a:d5: 45:df:12:05:15:53:29:01:aa:7a:1a:3d:2c:eb:8a:fa:99:6c: f9:91:a3:81:78:71:54:fe:02:e9:3b:2c:06:94:c5:cc:6b:78: 59:83:1b:66:d1:32:4e:1c:fe:a0:25:30:46:37:b0:bd:0d:28: 42:61:d4:ba:f3:6b:f6:8f:9d:d0:9e:21:af:fa:32:1e:0a:c8: a2:aa:3f:14:8d:85:6a:96:e5:3f:b9:ad:c2:bb:8d:05:c7:61: 12:4d:0a:51 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqt8R6GSZc+HZBFyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk YWUwZGE4Y2YtMDA1ZC00ZWMxLTg1MTgtZjlkMTJkODE2NTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfsZdThhPzYnFd2DgrsqvCWMOGZONLsG0mQR fxrBpn1x0JJVBCW7UFof3pqlm5tVmByg4AgMtfMklgWhGeTpW7TXdhmZ/+ELFBi1 zicadgAF9HtxqDVinzsteA9AMpEu0a2vsemRP9lXPXcJR10SVVYczWx1036Fu+Pm dijkPhkU/VYDwePMMyMZx3NQZwsGlpqHnO0epGUSfJDHUI2CEdCHOfPcoERVsrf0 Et6dIzRTC4/5YjkebqadTY8WzZ+YOVH6NI6kIu/4rXIvFoz/els8dCsO9UhMWcO1 9pzM3v/B5f5ez5z1eTmMUxbmFhjg2QYXrORwwlCWO+KoeQVRNQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJGlzoudz+KlAcibrRs+OXN62ZZYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvMGFkZDBjNjgtNjMwNy0z YTFjLTlhNjQtZmQ0NTYxZTU1YWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQABf MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEtyu8jZQ7XkBOX44VuMYXF80Qk8zlPiT2ehqPgfUv8Hop1ygt+D 4mwF05vVzwqii+vOn5UJLl/WubllqaI1lYlkDAyU+6ZmlfsybUXMLFGbdusca1X4 SvVMbQq9k2+j4MVALm5RyVSWYFKvejQ7w2cD1+b4kSKNkdtoAPDg4dBm9jkC/RFT wOSDihBrcOC5bfWLk2aijRXab2S3/vxfmnwa1UXfEgUVUykBqnoaPSzrivqZbPmR o4F4cVT+Auk7LAaUxcxreFmDG2bRMk4c/qAlMEY3sL0NKEJh1Lrza/aPndCeIa/6 Mh4KyKKqPxSNhWqW5T+5rcK7jQXHYRJNClE= -----END CERTIFICATE-----Generated at Tue Aug 5 17:08:43 2025 by rpki-client