$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1f267b9f-4eb6-3e46-9931-27afe99a04ee.roa File: 1f267b9f-4eb6-3e46-9931-27afe99a04ee.roa (raw, json) Hash identifier: tkDTIt93PUVlU10gOrhieqiku0GccpfHu2iXQJuVGYQ= Subject key identifier: 0C:17:4E:04:49:5A:ED:12:43:81:74:51:61:38:85:E7:18:B4:DE:A4 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F432858498769B4D97312ED6ABB8A7400 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1f267b9f-4eb6-3e46-9931-27afe99a04ee.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 9009 IP address blocks: 2607:740:1d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:b4:d9:73:12:ed:6a:bb:8a:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=3f54c175-2e19-425b-bcb1-89a001fae891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2b:cb:f1:e8:d8:31:11:0d:17:9d:5f:fe:34: f1:d9:dd:ec:ab:a7:fe:9f:4a:dd:15:2a:61:d0:71: 38:44:78:7c:86:d3:67:df:57:86:37:7a:2d:1f:4d: ca:4d:5f:7c:64:74:95:e4:96:95:27:14:3e:e7:9b: a9:e9:33:61:d5:d1:6d:e3:89:e6:2f:46:1d:9d:06: 03:78:7e:43:fc:83:ef:39:1c:65:2c:00:7e:a0:5b: 4e:f7:60:30:4d:73:65:42:9e:b5:fa:d3:c7:62:84: 34:65:b0:78:6b:d5:f7:e3:e0:89:6c:b5:fb:04:12: 87:20:83:08:33:1f:68:d6:1e:81:d6:79:27:75:31: f7:fe:62:d8:da:96:69:52:38:23:f6:dc:cc:f6:f5: 17:55:fc:3b:24:58:07:ba:7f:f8:20:91:46:24:7b: 2d:0d:22:ce:d1:a4:96:64:e2:0a:33:d0:5f:9d:86: 8a:8c:3c:aa:03:1f:61:56:cb:53:bd:74:e1:4a:d4: e2:ef:da:0c:44:7b:3e:21:a8:ca:5d:4e:a8:2d:b3: 1f:4a:96:03:51:be:11:10:2c:fa:14:4a:6e:17:3e: 52:1d:57:b1:32:d0:15:41:f0:20:ca:52:23:81:85: d7:bd:ef:37:67:7c:04:fc:0f:b7:b3:1c:a0:dc:cd: 21:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:17:4E:04:49:5A:ED:12:43:81:74:51:61:38:85:E7:18:B4:DE:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1f267b9f-4eb6-3e46-9931-27afe99a04ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:1d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:21:a1:00:5c:f3:3a:c6:d0:af:00:95:69:a7:ff:ae:d7:ef: 75:15:f2:1c:34:4f:39:ce:dd:0e:67:fb:6a:47:d6:08:7f:eb: c1:8b:7e:d2:32:77:f4:37:ee:dd:d9:17:19:48:20:b9:db:39: b4:f7:63:7d:2e:b3:73:39:dd:44:31:54:11:4a:e9:20:54:7d: 07:03:b4:1f:ef:5a:b2:a5:78:8d:85:8b:70:12:bb:64:f5:a3: ef:63:69:f0:86:53:1e:43:2c:ee:62:72:35:2e:86:c4:cc:af: be:a6:1a:60:12:ac:1f:de:68:2a:98:88:63:83:d4:87:3e:a8: 71:26:3f:be:63:5b:a4:65:7b:42:e9:fa:0f:b1:7a:02:30:16: d9:99:ef:ef:3c:4c:31:34:3e:7f:9b:f1:01:a9:d4:67:71:8d: 80:30:c4:ec:a5:10:c7:2c:2d:54:dd:0d:1d:d2:c2:df:06:2c: 3d:61:24:f2:90:a1:60:45:29:92:49:73:e8:28:96:ca:c2:05: 2f:ae:c4:99:dc:69:68:8c:54:53:8d:8e:f1:b2:67:2b:a7:75: 53:d6:3a:31:2d:2d:a0:0b:0c:57:3a:ee:09:91:34:74:c7:0a: ba:1a:a4:1c:70:8d:9d:c6:e2:91:76:48:4a:12:2b:f3:b0:39: 45:d6:b1:f9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmHabTZcxLtaruKdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk M2Y1NGMxNzUtMmUxOS00MjViLWJjYjEtODlhMDAxZmFlODkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSvL8ejYMRENF51f/jTx2d3sq6f+n0rdFSph 0HE4RHh8htNn31eGN3otH03KTV98ZHSV5JaVJxQ+55up6TNh1dFt44nmL0YdnQYD eH5D/IPvORxlLAB+oFtO92AwTXNlQp61+tPHYoQ0ZbB4a9X34+CJbLX7BBKHIIMI Mx9o1h6B1nkndTH3/mLY2pZpUjgj9tzM9vUXVfw7JFgHun/4IJFGJHstDSLO0aSW ZOIKM9BfnYaKjDyqAx9hVstTvXThStTi79oMRHs+IajKXU6oLbMfSpYDUb4RECz6 FEpuFz5SHVexMtAVQfAgylIjgYXXve83Z3wE/A+3sxyg3M0h0QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAwXTgRJWu0SQ4F0UWE4hecYtN6kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvMWYyNjdiOWYtNGViNi0z ZTQ2LTk5MzEtMjdhZmU5OWEwNGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAAd MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIchoQBc8zrG0K8AlWmn/67X73UV8hw0TznO3Q5n+2pH1gh/68GL ftIyd/Q37t3ZFxlIILnbObT3Y30us3M53UQxVBFK6SBUfQcDtB/vWrKleI2Fi3AS u2T1o+9jafCGUx5DLO5icjUuhsTMr76mGmASrB/eaCqYiGOD1Ic+qHEmP75jW6Rl e0Lp+g+xegIwFtmZ7+88TDE0Pn+b8QGp1GdxjYAwxOylEMcsLVTdDR3Swt8GLD1h JPKQoWBFKZJJc+golsrCBS+uxJncaWiMVFONjvGyZyundVPWOjEtLaALDFc67gmR NHTHCroapBxwjZ3G4pF2SEoSK/OwOUXWsfk= -----END CERTIFICATE-----Generated at Sat Apr 26 19:23:09 2025 by rpki-client