$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/0bfb4f24-691b-3b97-8078-a89a8a850b40.roa File: 0bfb4f24-691b-3b97-8078-a89a8a850b40.roa (raw, json) Hash identifier: TORAyswVapH1WIDyNzZ1n1Wj+uy9eEhcK02dWnM6nzE= Subject key identifier: 92:B6:C3:BE:D9:54:8E:4A:A0:FA:D6:91:F3:51:7C:A4:90:CA:D4:89 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F432858498769AE5817EB94C67D505700 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/0bfb4f24-691b-3b97-8078-a89a8a850b40.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 9009 IP address blocks: 2607:740:25::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:ae:58:17:eb:94:c6:7d:50:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=a59e5175-b0b6-43d3-9ce0-ced5d7a158f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:dd:7b:60:c7:69:8c:84:af:44:51:cd:47:ee: 1a:b8:50:f2:2c:28:32:07:33:25:b2:4c:62:f4:a0: 44:95:09:98:55:a6:96:bc:4d:84:d9:3c:a1:d8:dd: a1:c3:09:65:c1:19:1c:41:fe:86:3d:ab:88:f4:ae: 3b:f6:e7:66:fa:51:0f:50:68:72:eb:99:cf:a6:d2: be:ca:a9:4a:33:57:12:be:bc:c1:46:bd:8a:f5:41: 7e:6a:ec:2d:13:02:1a:cb:af:69:df:03:52:ae:b6: 59:c6:ed:ac:ff:bf:6b:d2:3d:3b:6d:ea:63:92:32: 5b:1c:88:02:1c:50:46:02:ae:b1:a3:81:23:0e:2b: 82:54:97:dd:a9:b5:a3:f2:0c:9b:73:37:c8:b7:12: 9a:40:e0:0c:d7:0f:d1:82:1f:44:c2:2f:38:6a:99: 7e:65:79:69:e7:f4:e4:47:f8:a5:bf:50:ed:db:b6: 5c:11:6d:b0:29:d4:5d:3c:cd:2b:dd:bd:fa:5c:6b: cc:61:e4:87:4a:96:7a:57:ee:56:0e:98:09:9a:a3: 27:69:a3:80:69:be:e7:f3:2b:41:2f:10:94:7d:d7: df:38:bf:06:6d:32:27:cd:37:7e:2b:49:6e:dd:38: c4:d3:97:18:6c:af:d3:5a:cc:47:6b:a1:46:03:48: 84:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:B6:C3:BE:D9:54:8E:4A:A0:FA:D6:91:F3:51:7C:A4:90:CA:D4:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/0bfb4f24-691b-3b97-8078-a89a8a850b40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:25::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:59:54:86:35:1e:cf:86:c5:c6:ba:d0:3b:4b:f4:21:28:c6: 93:41:06:03:ae:a0:20:1f:37:a6:13:74:89:6d:47:cc:d2:0d: 6b:05:95:63:16:23:dc:6f:75:04:9c:f9:4f:38:66:7b:f4:be: 90:78:29:5f:63:0d:4c:fb:a2:81:8f:0d:5e:1e:e9:d8:33:d9: 5c:ac:15:87:3d:22:fa:9c:0d:98:e7:7f:71:cf:df:01:46:a8: 34:9b:3e:21:20:53:00:45:9e:ff:06:72:69:43:be:f7:26:d6: 40:b1:63:39:ad:8b:99:a2:e0:4a:b5:d6:4a:a5:d7:5f:e0:ce: ea:67:86:82:0f:e6:b5:89:97:ea:8d:c0:43:bd:2b:6c:e6:21: d4:74:5f:38:03:e3:6f:81:96:ce:3a:e5:80:ad:4b:bf:05:7a: a4:17:64:6c:10:81:6f:e1:e1:66:6e:55:a6:15:a6:66:e6:a3: f6:11:3c:b8:31:8c:4a:e4:76:00:70:cc:69:02:ea:ac:6a:15: 47:b2:9c:c1:20:02:a2:ac:da:23:eb:a4:e1:86:09:23:10:69: 9e:63:c0:bd:ea:4e:98:09:02:6b:a9:25:52:cc:4b:1b:3c:d5: 0e:b7:e2:88:8a:e3:61:8b:50:ea:93:a6:25:69:f5:cf:c8:18: 2e:3c:9d:1c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmHaa5YF+uUxn1QVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk YTU5ZTUxNzUtYjBiNi00M2QzLTljZTAtY2VkNWQ3YTE1OGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyd17YMdpjISvRFHNR+4auFDyLCgyBzMlskxi 9KBElQmYVaaWvE2E2Tyh2N2hwwllwRkcQf6GPauI9K479udm+lEPUGhy65nPptK+ yqlKM1cSvrzBRr2K9UF+auwtEwIay69p3wNSrrZZxu2s/79r0j07bepjkjJbHIgC HFBGAq6xo4EjDiuCVJfdqbWj8gybczfItxKaQOAM1w/Rgh9Ewi84apl+ZXlp5/Tk R/ilv1Dt27ZcEW2wKdRdPM0r3b36XGvMYeSHSpZ6V+5WDpgJmqMnaaOAab7n8ytB LxCUfdffOL8GbTInzTd+K0lu3TjE05cYbK/TWsxHa6FGA0iEowIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJK2w77ZVI5KoPrWkfNRfKSQytSJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvMGJmYjRmMjQtNjkxYi0z Yjk3LTgwNzgtYTg5YThhODUwYjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAAl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIBZVIY1Hs+Gxca60DtL9CEoxpNBBgOuoCAfN6YTdIltR8zSDWsF lWMWI9xvdQSc+U84Znv0vpB4KV9jDUz7ooGPDV4e6dgz2VysFYc9IvqcDZjnf3HP 3wFGqDSbPiEgUwBFnv8GcmlDvvcm1kCxYzmti5mi4Eq11kql11/gzupnhoIP5rWJ l+qNwEO9K2zmIdR0XzgD42+Bls465YCtS78FeqQXZGwQgW/h4WZuVaYVpmbmo/YR PLgxjErkdgBwzGkC6qxqFUeynMEgAqKs2iPrpOGGCSMQaZ5jwL3qTpgJAmupJVLM Sxs81Q634oiK42GLUOqTpiVp9c/IGC48nRw= -----END CERTIFICATE-----Generated at Sun Apr 27 00:17:54 2025 by rpki-client