$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/0e9fadf4-f7bc-3ae0-9d69-9145fe04e17b.roa File: 0e9fadf4-f7bc-3ae0-9d69-9145fe04e17b.roa (raw, json) Hash identifier: EdBk2pgYC0h4nLrmCxfKN/F2/JeBSNeumamtpEN9OLw= Subject key identifier: D8:C5:08:21:F3:C5:AF:5A:9B:BD:1B:00:FE:3F:32:66:3F:BF:8A:FC Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584988CF22F9897E076CBCBFD380 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/0e9fadf4-f7bc-3ae0-9d69-9145fe04e17b.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 9009 IP address blocks: 2607:740:3b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:22:f9:89:7e:07:6c:bc:bf:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=1a8d7bf0-59e5-4235-af08-3affff2ecd6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3c:ac:8b:ee:1b:17:cf:9b:f0:1c:c8:c7:0f: aa:6d:e8:77:cf:a1:5c:85:b1:2c:1a:2b:90:9e:d1: bb:72:ad:a2:4a:41:00:cd:e6:f5:23:bc:79:85:4d: 68:ad:82:d7:1c:17:20:90:45:75:dd:90:58:41:2b: b2:52:56:04:3a:b1:1a:ff:c2:75:95:fd:d5:ad:34: 83:27:b2:94:07:d8:e7:88:56:4a:47:69:e0:c2:5b: ce:1b:3e:42:26:a0:ef:98:44:b3:0e:70:20:f6:80: 6a:14:ac:44:3a:fe:42:6e:97:6c:26:b2:f5:0f:fc: 11:97:42:a0:db:67:5e:b3:66:e2:06:c8:09:36:b1: cf:fe:b4:14:56:7b:9b:3b:89:4a:e5:41:80:ba:db: a1:d8:9c:81:ae:92:f9:38:45:25:8c:80:b8:5b:f2: 6c:98:9b:b4:57:33:69:e8:fc:1c:e8:72:b8:f6:ef: 03:ba:06:95:aa:fb:d9:e7:00:56:9f:de:e2:cd:05: bc:cd:e4:a4:7e:3f:c9:31:1f:5f:64:37:9a:2b:70: 87:24:f0:04:69:6e:78:dd:0f:c7:4a:bf:d1:a5:28: 4e:f3:36:29:34:ea:6c:af:a8:8a:d1:10:18:e3:3b: 02:5b:eb:80:ff:2f:41:68:49:8e:ea:64:b3:7e:1e: a8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C5:08:21:F3:C5:AF:5A:9B:BD:1B:00:FE:3F:32:66:3F:BF:8A:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/0e9fadf4-f7bc-3ae0-9d69-9145fe04e17b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:3b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:ab:c5:9e:ec:4e:d9:80:7a:0c:c7:d7:59:c7:16:82:24:9a: 4b:e9:cd:f3:d2:5e:e8:4d:57:d2:a3:a0:cc:0b:44:89:7a:c1: 7e:65:b2:55:13:1d:1e:99:5d:e9:24:cf:ff:81:a2:9b:12:39: 18:cf:b9:6c:3c:7d:d8:3b:60:12:fc:84:3d:d5:a4:d1:2b:d5: 36:3c:a0:48:60:6a:d1:8c:cb:f3:4d:63:6a:62:dc:59:ff:12: 4c:4c:0c:07:6c:29:33:2f:ae:9c:c9:71:ab:d9:d0:19:d6:f4: 8f:4b:72:32:eb:18:f0:fb:d5:8e:84:f0:2c:cb:ac:cd:ed:a4: 9b:9f:b3:e6:dd:d9:62:42:6c:c2:5f:ab:b1:fa:39:d9:2e:82: b7:dc:5f:71:98:50:40:33:92:a4:5f:b0:3b:d9:dd:93:7c:49: a9:03:b5:9b:8d:69:d2:aa:25:01:8b:f9:be:ce:4e:4a:6d:5a: 88:e4:87:2b:19:67:20:34:43:1e:40:5d:64:03:f2:30:6f:9f: 33:41:95:53:a8:43:81:9f:0c:4b:8a:99:65:9a:41:22:9b:a7: bb:12:4b:f0:4a:42:6e:fe:cb:a9:52:7d:3c:d0:a8:c0:56:02: 34:b9:57:82:bd:34:e3:48:e3:91:bb:a5:cd:8d:24:62:d5:c0: 40:dc:6b:d4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIzyL5iX4HbLy/04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk MWE4ZDdiZjAtNTllNS00MjM1LWFmMDgtM2FmZmZmMmVjZDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjysi+4bF8+b8BzIxw+qbeh3z6FchbEsGiuQ ntG7cq2iSkEAzeb1I7x5hU1orYLXHBcgkEV13ZBYQSuyUlYEOrEa/8J1lf3VrTSD J7KUB9jniFZKR2ngwlvOGz5CJqDvmESzDnAg9oBqFKxEOv5CbpdsJrL1D/wRl0Kg 22des2biBsgJNrHP/rQUVnubO4lK5UGAutuh2JyBrpL5OEUljIC4W/JsmJu0VzNp 6Pwc6HK49u8DugaVqvvZ5wBWn97izQW8zeSkfj/JMR9fZDeaK3CHJPAEaW543Q/H Sr/RpShO8zYpNOpsr6iK0RAY4zsCW+uA/y9BaEmO6mSzfh6oewIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNjFCCHzxa9am70bAP4/MmY/v4r8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvMGU5ZmFkZjQtZjdiYy0z YWUwLTlkNjktOTE0NWZlMDRlMTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAA7 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG2rxZ7sTtmAegzH11nHFoIkmkvpzfPSXuhNV9KjoMwLRIl6wX5l slUTHR6ZXekkz/+BopsSORjPuWw8fdg7YBL8hD3VpNEr1TY8oEhgatGMy/NNY2pi 3Fn/EkxMDAdsKTMvrpzJcavZ0BnW9I9LcjLrGPD71Y6E8CzLrM3tpJufs+bd2WJC bMJfq7H6OdkugrfcX3GYUEAzkqRfsDvZ3ZN8SakDtZuNadKqJQGL+b7OTkptWojk hysZZyA0Qx5AXWQD8jBvnzNBlVOoQ4GfDEuKmWWaQSKbp7sSS/BKQm7+y6lSfTzQ qMBWAjS5V4K9NONI45G7pc2NJGLVwEDca9Q= -----END CERTIFICATE-----Generated at Sat Apr 26 19:20:47 2025 by rpki-client