$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/25d5fb20-00ff-338f-af57-8b01fa608dee.roa File: 25d5fb20-00ff-338f-af57-8b01fa608dee.roa (raw, json) Hash identifier: 4kXElVR4t3t+pHbajBjj42MjwWk9hX+4dfW+RlLxauc= Subject key identifier: A2:9E:3B:F5:49:E7:FF:CB:68:84:C1:95:F8:7D:CC:72:13:88:99:41 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F432858498769AE685BB1C097273F54C0 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/25d5fb20-00ff-338f-af57-8b01fa608dee.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 9009 IP address blocks: 2607:740:26::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:ae:68:5b:b1:c0:97:27:3f:54:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=c8112ed5-b210-4314-99c7-5bc43ec502c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:c5:74:50:2d:0c:ca:c8:d1:66:7d:fe:0b:16: b8:bc:d4:07:57:54:5a:7f:9c:d8:1e:8c:8d:a5:ad: 1a:74:c3:98:2c:04:3a:87:34:5a:73:43:6c:0c:0a: f8:79:a9:05:cf:9a:27:e0:83:a3:6f:a9:3f:60:58: 62:54:2c:50:49:01:51:7f:40:29:69:ba:4a:d5:bf: b4:fa:3b:f4:52:d4:2c:69:2a:01:22:22:e8:46:dd: 1d:ba:9a:69:cd:c1:54:05:5b:cf:7c:dc:1a:3c:88: 2d:ec:41:82:0e:85:79:7a:ec:eb:93:97:99:1f:8f: a4:7c:28:cf:d9:63:0a:4a:ea:af:f0:f6:9f:4a:a3: 81:d9:c4:9c:32:1e:05:0e:2c:60:d3:a3:ae:83:72: a1:ed:c9:af:f0:e3:89:a7:0b:d0:45:4a:47:69:ed: 63:bf:f5:80:bd:b4:cd:12:8c:42:17:7d:fb:08:58: 57:10:96:a9:76:7d:f3:e1:e3:a2:8c:8f:f4:fd:bf: e2:81:33:fc:96:d0:0c:34:0e:3f:05:dd:45:2e:66: dc:dc:5e:46:ab:3a:e7:9c:2c:99:2c:d1:cd:9e:aa: 41:17:43:76:20:41:bd:82:59:39:03:bb:30:57:89: 82:85:c0:65:ad:86:77:d1:47:88:b3:14:e0:0a:5f: 53:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:9E:3B:F5:49:E7:FF:CB:68:84:C1:95:F8:7D:CC:72:13:88:99:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/25d5fb20-00ff-338f-af57-8b01fa608dee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:26::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:68:77:71:4f:8c:4d:ce:c6:12:27:cd:80:66:24:cc:9f:92: 54:6f:ac:43:4a:d3:e9:b3:f1:54:6d:17:8a:48:2d:b3:95:0d: 73:47:c9:64:c1:2e:ad:bf:15:86:59:6c:61:ac:24:ce:74:8e: 74:68:d0:9d:0d:0f:b6:d2:b6:c8:4f:87:c0:7e:2b:d3:a0:73: 23:ee:06:14:46:51:51:90:33:07:f7:9f:7a:42:6e:ab:09:44: ce:73:18:56:0e:09:94:98:1c:a8:97:66:04:dd:fd:1e:06:06: e5:31:2e:02:44:b0:28:a5:76:53:83:fc:81:dc:89:bf:bb:a5: 81:27:27:22:4b:a0:30:21:a5:81:d3:10:30:47:08:b6:4b:1d: fd:0e:04:71:95:22:8d:fc:79:d4:7f:4e:22:b5:94:cf:db:c1: e3:06:3b:2a:d5:6c:55:75:eb:c4:8e:d9:53:2b:f9:c0:22:3c: 73:c3:d8:0b:c8:01:6a:e4:e4:6e:db:fe:31:89:f2:51:3a:38: 3a:10:45:a1:9a:fb:67:f6:2e:25:b2:e3:0a:a8:ec:49:31:f3: f5:c6:2e:14:c5:a2:4d:87:a9:4f:41:37:18:05:f3:f7:70:bc: e2:28:b3:c6:75:f2:94:e3:ad:13:b3:fe:f4:b0:40:10:01:e1: df:c9:0c:98 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmHaa5oW7HAlyc/VMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk YzgxMTJlZDUtYjIxMC00MzE0LTk5YzctNWJjNDNlYzUwMmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8V0UC0MysjRZn3+Cxa4vNQHV1Raf5zYHoyN pa0adMOYLAQ6hzRac0NsDAr4eakFz5on4IOjb6k/YFhiVCxQSQFRf0ApabpK1b+0 +jv0UtQsaSoBIiLoRt0dupppzcFUBVvPfNwaPIgt7EGCDoV5euzrk5eZH4+kfCjP 2WMKSuqv8PafSqOB2cScMh4FDixg06Oug3Kh7cmv8OOJpwvQRUpHae1jv/WAvbTN EoxCF337CFhXEJapdn3z4eOijI/0/b/igTP8ltAMNA4/Bd1FLmbc3F5GqzrnnCyZ LNHNnqpBF0N2IEG9glk5A7swV4mChcBlrYZ30UeIsxTgCl9T5wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKKeO/VJ5//LaITBlfh9zHITiJlBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvMjVkNWZiMjAtMDBmZi0z MzhmLWFmNTctOGIwMWZhNjA4ZGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAAm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACdod3FPjE3OxhInzYBmJMyfklRvrENK0+mz8VRtF4pILbOVDXNH yWTBLq2/FYZZbGGsJM50jnRo0J0ND7bStshPh8B+K9OgcyPuBhRGUVGQMwf3n3pC bqsJRM5zGFYOCZSYHKiXZgTd/R4GBuUxLgJEsCildlOD/IHcib+7pYEnJyJLoDAh pYHTEDBHCLZLHf0OBHGVIo38edR/TiK1lM/bweMGOyrVbFV168SO2VMr+cAiPHPD 2AvIAWrk5G7b/jGJ8lE6ODoQRaGa+2f2LiWy4wqo7Ekx8/XGLhTFok2HqU9BNxgF 8/dwvOIos8Z18pTjrROz/vSwQBAB4d/JDJg= -----END CERTIFICATE-----Generated at Sat Apr 26 16:15:47 2025 by rpki-client