$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/44a946db-4f2d-3b9a-b314-8c3cd1ca4b34.roa File: 44a946db-4f2d-3b9a-b314-8c3cd1ca4b34.roa (raw, json) Hash identifier: yLgRThJ6fSdKYj+v0vv/88fhiULQGMFO4SdwSZUI95I= Subject key identifier: 2D:E8:05:07:D5:A3:6B:64:87:61:82:7B:48:72:70:75:55:3B:B7:CA Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584988CF1A882510E8A187D575B8 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/44a946db-4f2d-3b9a-b314-8c3cd1ca4b34.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 9009 IP address blocks: 2607:740:2e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:1a:88:25:10:e8:a1:87:d5:75:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=602bdd00-0d6a-442c-86fc-edff8965843c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:31:e9:95:7e:f5:d1:49:c8:bc:da:7f:45:3a: 74:8b:c0:f3:e7:23:1e:f3:5a:ff:61:ea:cd:8b:71: 21:d0:f9:f4:3c:15:79:94:26:fd:bc:2b:91:3f:31: 42:56:08:18:3a:89:b3:6b:b2:84:d8:01:e4:6c:d4: 68:bb:62:84:89:2c:5b:d7:03:3e:e3:60:0d:3f:50: 52:99:68:6c:9b:61:0c:bd:e1:19:f0:75:64:60:35: 8e:62:2c:7d:d8:b4:ce:be:a2:31:58:bb:56:7d:51: 0b:32:05:49:37:1c:eb:60:52:4b:24:2b:7b:e1:13: ef:65:ad:5c:0d:15:65:29:71:82:7c:96:7b:ff:0f: 64:bd:69:03:1f:9b:0c:60:1d:26:a1:ef:df:78:09: d4:7a:d6:35:e7:b8:35:f7:c7:2b:fd:37:09:ce:2c: 32:fa:53:2b:11:ad:52:db:1e:92:62:4d:37:e2:d1: 0b:d1:28:32:d7:0e:70:32:5c:30:69:12:2a:34:15: a7:d7:5b:32:1d:e4:7d:49:d7:6c:c6:2c:75:fd:55: 6c:ba:dd:15:b4:43:90:aa:72:19:ab:d1:30:6a:27: 6a:47:dd:d7:9e:81:55:11:63:fa:99:0e:d4:59:c0: d9:ab:ff:f8:a5:26:f4:20:ac:78:96:ec:fc:d9:f8: 95:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E8:05:07:D5:A3:6B:64:87:61:82:7B:48:72:70:75:55:3B:B7:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/44a946db-4f2d-3b9a-b314-8c3cd1ca4b34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:2e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:4e:44:43:47:f2:3e:98:30:78:48:3f:cc:5a:d5:bf:23:2b: f5:fd:d0:15:ba:ac:92:2c:18:03:1d:ac:0b:f3:86:a6:89:9c: 87:a8:1a:12:9e:c7:d1:30:eb:07:91:04:89:c1:63:b5:bc:87: 6e:e2:f6:63:3a:56:88:1a:22:62:e0:89:81:9c:17:72:0c:f9: cf:ba:47:e4:46:e2:c0:97:c6:ea:8c:e1:d6:64:a9:f5:ca:1d: dc:df:cf:8c:54:c4:ec:6d:68:5e:ac:be:bf:fb:a3:f6:1d:0a: 05:68:e4:a1:eb:79:f0:04:c2:bd:76:e8:47:02:ef:79:14:07: 11:d5:9e:f2:02:44:07:52:c8:82:38:6b:a3:53:d0:34:5f:9c: b8:23:19:f7:a5:19:51:a9:24:da:c8:2d:f2:2c:6a:67:51:b1: 89:da:04:5d:84:e3:28:a6:8d:4d:1c:f2:36:3e:65:7b:0d:ee: 08:81:aa:78:7b:1e:5a:c0:33:46:16:bf:6b:d5:33:cf:76:90: 10:2f:eb:7d:6d:6d:a0:bc:c8:9d:bf:da:ce:e2:8b:98:46:90: f4:8f:c4:01:21:da:16:11:76:31:d5:41:3c:4a:1e:32:09:69: 01:2a:12:4f:32:96:e7:be:c8:b9:cc:e7:40:56:0d:3f:42:3c: b1:1d:d1:78 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIzxqIJRDooYfVdbgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk NjAyYmRkMDAtMGQ2YS00NDJjLTg2ZmMtZWRmZjg5NjU4NDNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzHplX710UnIvNp/RTp0i8Dz5yMe81r/YerN i3Eh0Pn0PBV5lCb9vCuRPzFCVggYOomza7KE2AHkbNRou2KEiSxb1wM+42ANP1BS mWhsm2EMveEZ8HVkYDWOYix92LTOvqIxWLtWfVELMgVJNxzrYFJLJCt74RPvZa1c DRVlKXGCfJZ7/w9kvWkDH5sMYB0moe/feAnUetY157g198cr/TcJziwy+lMrEa1S 2x6SYk034tEL0Sgy1w5wMlwwaRIqNBWn11syHeR9Sddsxix1/VVsut0VtEOQqnIZ q9EwaidqR93XnoFVEWP6mQ7UWcDZq//4pSb0IKx4luz82fiVWwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC3oBQfVo2tkh2GCe0hycHVVO7fKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNDRhOTQ2ZGItNGYyZC0z YjlhLWIzMTQtOGMzY2QxY2E0YjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAAu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIVORENH8j6YMHhIP8xa1b8jK/X90BW6rJIsGAMdrAvzhqaJnIeo GhKex9Ew6weRBInBY7W8h27i9mM6VogaImLgiYGcF3IM+c+6R+RG4sCXxuqM4dZk qfXKHdzfz4xUxOxtaF6svr/7o/YdCgVo5KHrefAEwr126EcC73kUBxHVnvICRAdS yII4a6NT0DRfnLgjGfelGVGpJNrILfIsamdRsYnaBF2E4yimjU0c8jY+ZXsN7giB qnh7HlrAM0YWv2vVM892kBAv631tbaC8yJ2/2s7ii5hGkPSPxAEh2hYRdjHVQTxK HjIJaQEqEk8ylue+yLnM50BWDT9CPLEd0Xg= -----END CERTIFICATE-----Generated at Sat Apr 26 16:08:34 2025 by rpki-client