$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/0add0c68-6307-3a1c-9a64-fd4561e55abd.roa File: 0add0c68-6307-3a1c-9a64-fd4561e55abd.roa (raw, json) Hash identifier: J5JqZ/2CupOijky8c1H/JbOu3qKRW9BnhAX2dByJmd0= Subject key identifier: 95:CF:A2:52:44:3B:78:AA:B5:3F:E7:1E:61:06:C3:88:05:02:52:49 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285849CE9A637A8BD83615A365A200 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/0add0c68-6307-3a1c-9a64-fd4561e55abd.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 52000 IP address blocks: 2607:740:5f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:63:7a:8b:d8:36:15:a3:65:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=e27f425b-c814-4d0f-bb1c-be73fdbc8ea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3b:7b:f4:1b:b6:87:13:64:7e:18:57:1c:05: 88:28:e0:c1:74:14:c2:54:5d:29:17:2a:da:e5:97: f3:8b:9f:51:7e:65:83:1b:b1:82:86:94:51:a9:e9: e2:09:aa:9a:a8:96:12:2c:7b:e5:cf:ee:e4:61:52: 5c:18:69:d6:5c:30:8e:7c:b3:2e:62:10:14:26:2d: 1b:c7:55:ad:6f:f1:f4:b9:d6:72:83:46:f9:32:07: 6b:4e:f2:26:25:ce:ad:b9:02:71:eb:7b:83:cc:a8: 4a:85:6a:43:c1:d1:b7:31:49:a9:f8:aa:7d:38:73: 94:33:bf:da:8a:a8:73:02:e7:cf:82:f4:0f:7f:bf: f9:3a:10:81:3a:05:43:15:72:b0:c3:dc:c7:f9:e3: 49:74:58:9a:95:27:d5:14:0f:79:8e:03:7a:7c:29: c0:74:19:29:7f:da:95:f6:b5:f2:02:93:fe:2c:c5: 87:8e:99:59:b5:0d:09:60:ab:58:45:e1:1a:69:de: 94:0e:fc:49:05:2b:7a:7e:5e:de:bd:98:af:8a:5a: 6d:a8:7b:95:21:eb:c0:3e:9b:b7:71:21:93:92:94: ed:18:99:90:61:e0:32:f2:d9:9f:91:71:83:c5:b9: a8:f1:a6:ff:81:14:b7:7d:35:27:bb:b7:2c:9e:be: 24:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:CF:A2:52:44:3B:78:AA:B5:3F:E7:1E:61:06:C3:88:05:02:52:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/0add0c68-6307-3a1c-9a64-fd4561e55abd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:5f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:ca:c4:43:13:ad:79:07:d7:19:d3:da:bd:6e:7f:6b:72:ad: e4:b4:42:35:c4:f8:7e:40:3d:ae:75:e1:7c:5c:16:86:48:c4: 9b:62:c2:5c:3e:b0:0e:67:97:d6:c6:04:1f:4b:55:57:ce:d1: 0e:7a:e2:e9:ad:55:1a:40:48:03:f9:40:31:89:9f:de:22:2a: 42:c0:3a:0b:9a:e3:8b:83:2a:b7:21:42:60:f4:62:80:09:ad: e9:d6:dc:7b:6b:16:05:ce:d5:14:27:5a:90:15:4f:5c:58:89: 36:5b:53:ee:cf:fc:31:b0:a2:4e:4d:c6:21:e4:b7:79:7f:9b: cf:db:c0:df:5a:51:2c:03:11:bf:a4:b5:e2:a3:3e:33:72:97: d5:8d:0b:8b:96:7a:69:c7:67:f8:36:1c:60:9f:1b:ba:7a:cd: 58:2a:ec:7a:6f:05:be:34:d4:44:06:10:0e:78:06:84:a9:53: 46:6c:4e:d8:95:91:85:81:43:97:29:e1:7d:bc:90:d7:68:ec: 28:53:0f:20:fa:1d:b8:01:40:85:0e:09:55:99:7d:fd:1d:fc: b4:19:e9:f7:f4:94:e7:08:03:26:b9:0f:30:1a:ab:9b:65:7b: e9:b6:80:83:ed:c7:17:2d:04:ea:da:92:eb:0c:81:b5:ab:37: 02:4b:a0:9b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnOmmN6i9g2FaNlogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk ZTI3ZjQyNWItYzgxNC00ZDBmLWJiMWMtYmU3M2ZkYmM4ZWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozt79Bu2hxNkfhhXHAWIKODBdBTCVF0pFyra 5Zfzi59RfmWDG7GChpRRqeniCaqaqJYSLHvlz+7kYVJcGGnWXDCOfLMuYhAUJi0b x1Wtb/H0udZyg0b5MgdrTvImJc6tuQJx63uDzKhKhWpDwdG3MUmp+Kp9OHOUM7/a iqhzAufPgvQPf7/5OhCBOgVDFXKww9zH+eNJdFialSfVFA95jgN6fCnAdBkpf9qV 9rXyApP+LMWHjplZtQ0JYKtYReEaad6UDvxJBSt6fl7evZivilptqHuVIevAPpu3 cSGTkpTtGJmQYeAy8tmfkXGDxbmo8ab/gRS3fTUnu7csnr4kgwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJXPolJEO3iqtT/nHmEGw4gFAlJJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvMGFkZDBjNjgtNjMwNy0z YTFjLTlhNjQtZmQ0NTYxZTU1YWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQABf MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAHKxEMTrXkH1xnT2r1uf2tyreS0QjXE+H5APa514XxcFoZIxJti wlw+sA5nl9bGBB9LVVfO0Q564umtVRpASAP5QDGJn94iKkLAOgua44uDKrchQmD0 YoAJrenW3HtrFgXO1RQnWpAVT1xYiTZbU+7P/DGwok5NxiHkt3l/m8/bwN9aUSwD Eb+kteKjPjNyl9WNC4uWemnHZ/g2HGCfG7p6zVgq7HpvBb401EQGEA54BoSpU0Zs TtiVkYWBQ5cp4X28kNdo7ChTDyD6HbgBQIUOCVWZff0d/LQZ6ff0lOcIAya5DzAa q5tle+m2gIPtxxctBOrakusMgbWrNwJLoJs= -----END CERTIFICATE-----Generated at Sun Jun 15 11:42:42 2025 by rpki-client