$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1cd80803-3adb-3bb5-8b52-40b3aa17f948.roa File: 1cd80803-3adb-3bb5-8b52-40b3aa17f948.roa (raw, json) Hash identifier: a0V9KM4aBFkDuD87JSArgX72EWOky3cMy30gsPhNhQo= Subject key identifier: 77:60:69:B9:3B:1B:13:9F:A3:B3:94:35:C7:20:3D:B3:6B:78:EA:EF Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584988CF2316CE827133C4182980 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1cd80803-3adb-3bb5-8b52-40b3aa17f948.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 9009 IP address blocks: 2607:740:3f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:23:16:ce:82:71:33:c4:18:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=4ba9f35c-041b-45f7-8e57-d219e51e84a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7d:f7:de:97:69:5c:5b:08:ca:8d:d0:40:8e: 02:96:fe:b2:97:b4:a0:a6:32:ed:1f:a4:4f:a1:f3: 48:2a:94:12:61:a0:82:d8:15:84:6f:0a:a6:5c:24: 4a:9f:8b:0c:34:80:8b:2e:8d:44:27:50:af:b6:f2: 09:61:fd:73:5b:43:b2:2f:cd:dc:35:60:e9:5c:6f: db:80:6d:a0:30:19:a0:bc:41:ea:96:75:c3:3d:ef: 43:d8:90:2d:b4:c3:a6:74:7d:6c:22:d6:74:6f:61: 5d:e4:0e:33:bb:a1:5f:ba:cb:8a:3a:d6:f2:01:15: 79:07:58:a3:8a:aa:18:0e:96:58:14:79:ea:e6:5d: 25:3b:eb:7e:f7:8e:7d:62:75:65:de:bb:a4:0b:b0: 77:25:76:88:d6:16:26:cd:70:ae:e4:65:0b:ba:a1: 68:00:5b:7c:9d:d4:dd:9c:09:16:9b:cf:10:79:f7: 61:70:9f:f7:d1:26:fd:aa:2d:2d:97:21:ba:8c:b9: 11:fa:25:5b:e1:59:86:bb:d7:35:b9:ba:24:f0:d0: 3e:e8:8e:5b:41:9e:99:f1:ec:bc:73:ec:5d:c0:21: b3:69:f8:a6:1f:8c:80:11:99:b8:40:35:82:4a:41: 7c:eb:ac:f8:e3:21:7c:b5:d0:6e:80:08:a2:54:18: c5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:60:69:B9:3B:1B:13:9F:A3:B3:94:35:C7:20:3D:B3:6B:78:EA:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1cd80803-3adb-3bb5-8b52-40b3aa17f948.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:3f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:60:8b:50:41:da:e5:ab:f1:b4:7c:2c:4a:dd:87:96:8b:b9: 82:f7:33:ec:dc:03:65:b7:f0:ec:6d:27:65:11:9f:d1:3b:83: 8d:09:b8:62:dc:26:fe:35:88:27:1b:bd:13:96:6f:b9:df:b5: 68:b2:f7:95:74:e3:39:27:7d:8e:02:81:2a:75:48:ec:b3:a0: 25:b7:3f:1e:a7:92:dc:8b:8a:37:1f:8a:93:cd:8d:19:e7:60: ea:88:c6:c6:9d:55:84:15:a3:3e:cb:3d:2f:8c:9d:d8:6f:ad: d6:e2:1e:3b:f0:d6:8c:85:8b:d6:46:bd:50:7f:8d:38:87:ed: 51:1f:7b:21:54:6a:8d:e0:be:5a:aa:96:3a:f8:66:11:b7:37: 10:26:03:10:af:ef:45:bd:d9:f4:08:07:c6:0c:64:3a:6d:83: 0e:a8:c4:b3:d7:21:c0:76:8d:6c:60:b4:3c:e6:44:04:cc:81: fb:2f:9b:b7:9d:72:9d:60:60:bf:05:0b:5e:0a:83:45:ff:bb: a2:2d:42:6d:70:b5:8f:d6:92:07:53:44:0f:68:63:53:81:b9: fe:1c:6d:e8:c7:77:22:85:04:a3:44:16:9e:ed:74:61:db:86: bf:3b:20:56:74:73:db:7b:8b:e3:ac:f7:52:d3:f5:86:63:f5: e0:ce:9e:9f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIzyMWzoJxM8QYKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk NGJhOWYzNWMtMDQxYi00NWY3LThlNTctZDIxOWU1MWU4NGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0X333pdpXFsIyo3QQI4Clv6yl7SgpjLtH6RP ofNIKpQSYaCC2BWEbwqmXCRKn4sMNICLLo1EJ1CvtvIJYf1zW0OyL83cNWDpXG/b gG2gMBmgvEHqlnXDPe9D2JAttMOmdH1sItZ0b2Fd5A4zu6FfusuKOtbyARV5B1ij iqoYDpZYFHnq5l0lO+t+9459YnVl3rukC7B3JXaI1hYmzXCu5GULuqFoAFt8ndTd nAkWm88QefdhcJ/30Sb9qi0tlyG6jLkR+iVb4VmGu9c1ubok8NA+6I5bQZ6Z8ey8 c+xdwCGzafimH4yAEZm4QDWCSkF866z44yF8tdBugAiiVBjFRQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHdgabk7GxOfo7OUNccgPbNreOrvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvMWNkODA4MDMtM2FkYi0z YmI1LThiNTItNDBiM2FhMTdmOTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAA/ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF5gi1BB2uWr8bR8LErdh5aLuYL3M+zcA2W38OxtJ2URn9E7g40J uGLcJv41iCcbvROWb7nftWiy95V04zknfY4CgSp1SOyzoCW3Px6nktyLijcfipPN jRnnYOqIxsadVYQVoz7LPS+MndhvrdbiHjvw1oyFi9ZGvVB/jTiH7VEfeyFUao3g vlqqljr4ZhG3NxAmAxCv70W92fQIB8YMZDptgw6oxLPXIcB2jWxgtDzmRATMgfsv m7edcp1gYL8FC14Kg0X/u6ItQm1wtY/WkgdTRA9oY1OBuf4cbejHdyKFBKNEFp7t dGHbhr87IFZ0c9t7i+Os91LT9YZj9eDOnp8= -----END CERTIFICATE-----Generated at Sat Apr 26 19:14:23 2025 by rpki-client