$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/47bf5d33-51dd-3c34-a11c-252123b2256a.roa File: 47bf5d33-51dd-3c34-a11c-252123b2256a.roa (raw, json) Hash identifier: TwM5UGY19O3m9aoGqngWr2oHzHVQwPxKoICH9nWxSUk= Subject key identifier: 09:7A:B4:DB:E4:91:73:63:C1:4E:22:DC:50:3A:F9:DC:79:D2:C2:25 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285849674EF7A47237FB25BFC279C0 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/47bf5d33-51dd-3c34-a11c-252123b2256a.roa Signing time: Thu 03 Apr 2025 13:01:02 +0000 ROA not before: Thu 03 Apr 2025 13:01:02 +0000 ROA not after: Wed 02 Jul 2025 13:01:02 +0000 asID: 9009 IP address blocks: 2607:740:5e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:67:4e:f7:a4:72:37:fb:25:bf:c2:79:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Apr 3 13:01:02 2025 GMT Not After : Jul 2 13:01:02 2025 GMT Subject: CN=9f252c6f-9266-4bff-892a-fadcb547949b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:27:a8:78:71:88:1a:c7:28:c7:7e:0b:a3:fe: e9:d4:75:53:1c:c5:b8:fd:98:8e:2b:69:88:cf:73: 2f:5c:08:c1:c7:3e:e3:2e:84:11:f2:42:da:95:ee: 78:9a:e5:3a:57:cc:95:b6:90:d7:cb:73:19:77:0f: 0b:fa:00:87:ac:02:53:09:44:38:4c:dc:ac:5e:8e: 84:50:55:94:06:d1:41:2c:90:03:e8:a2:78:46:21: c7:37:88:93:fb:0c:1d:ef:b8:ba:f3:e7:06:5c:2d: e1:54:68:44:b7:da:fe:fd:b7:77:22:a8:18:f3:de: f1:93:ec:95:0e:b4:9f:06:0c:be:67:bc:61:f3:03: d8:e6:2d:0c:42:2c:43:bd:20:9d:e4:31:13:23:a2: 24:02:61:65:68:60:73:36:43:a9:73:78:94:f8:fb: 91:9a:61:df:1d:2a:0e:cd:be:da:e5:49:5c:5d:39: a3:67:9b:d2:d8:2e:b2:d4:1c:e9:60:20:48:2a:58: a5:bc:c5:cb:fe:ee:1f:32:ef:44:5c:04:b2:2a:e1: fc:63:f0:8f:e7:32:89:2a:8d:d5:29:54:91:35:c7: d6:82:2c:1e:1b:e5:11:82:6c:10:d8:8a:06:1e:12: 52:d9:87:c5:4e:11:f4:5f:6c:e5:0c:e4:11:f6:58: d6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:7A:B4:DB:E4:91:73:63:C1:4E:22:DC:50:3A:F9:DC:79:D2:C2:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/47bf5d33-51dd-3c34-a11c-252123b2256a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:5e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:27:cf:9f:24:8e:2a:8a:58:f8:73:6d:26:5b:eb:b5:17:35: c5:e9:2f:7e:a7:cd:2e:b5:a0:7b:ec:f2:a5:d7:68:24:c4:d5: 7d:87:3e:02:39:21:24:02:c9:ed:28:82:3a:6d:79:7e:a9:26: d9:04:ea:a9:21:4d:15:e6:d1:46:17:75:be:b5:69:48:64:57: ac:e3:a1:2d:c2:52:74:1c:c8:ed:21:93:3c:02:de:25:09:d5: 16:66:af:6c:25:16:a4:c1:b9:b2:b2:29:53:e5:70:98:ed:03: 4f:3c:b8:3d:60:ec:ee:e3:b0:6e:77:7f:1c:1f:0c:6f:ca:4c: 83:fe:42:ae:1d:67:2e:d8:15:b3:46:58:97:71:5d:99:e3:e6: b7:c8:eb:a2:99:37:a5:73:93:88:9f:61:b1:3d:6d:65:8f:68: b0:66:b4:0a:d4:50:60:bf:0c:7f:fa:56:bb:6b:e8:42:a5:8e: 8e:27:32:91:58:f3:64:07:3a:d9:c0:8a:04:45:59:00:0a:da: 54:a5:28:44:73:8d:2a:97:06:b4:fd:0b:dd:ce:ff:f2:c8:aa: 66:22:43:71:b0:4f:44:60:af:01:42:fd:a1:c9:b7:62:9f:8d: 0b:b2:ca:c2:63:ec:bb:0b:42:84:29:60:e0:97:1f:ee:d0:61: 65:f2:99:d2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElnTvekcjf7Jb/CecAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDQwMzEzMDEwMloXDTI1MDcwMjEzMDEwMlowLzEtMCsGA1UEAxMk OWYyNTJjNmYtOTI2Ni00YmZmLTg5MmEtZmFkY2I1NDc5NDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSeoeHGIGscox34Lo/7p1HVTHMW4/ZiOK2mI z3MvXAjBxz7jLoQR8kLale54muU6V8yVtpDXy3MZdw8L+gCHrAJTCUQ4TNysXo6E UFWUBtFBLJAD6KJ4RiHHN4iT+wwd77i68+cGXC3hVGhEt9r+/bd3IqgY897xk+yV DrSfBgy+Z7xh8wPY5i0MQixDvSCd5DETI6IkAmFlaGBzNkOpc3iU+PuRmmHfHSoO zb7a5UlcXTmjZ5vS2C6y1BzpYCBIKlilvMXL/u4fMu9EXASyKuH8Y/CP5zKJKo3V KVSRNcfWgiweG+URgmwQ2IoGHhJS2YfFThH0X2zlDOQR9ljWKQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAl6tNvkkXNjwU4i3FA6+dx50sIlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNDdiZjVkMzMtNTFkZC0z YzM0LWExMWMtMjUyMTIzYjIyNTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQABe MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACUnz58kjiqKWPhzbSZb67UXNcXpL36nzS61oHvs8qXXaCTE1X2H PgI5ISQCye0ogjpteX6pJtkE6qkhTRXm0UYXdb61aUhkV6zjoS3CUnQcyO0hkzwC 3iUJ1RZmr2wlFqTBubKyKVPlcJjtA088uD1g7O7jsG53fxwfDG/KTIP+Qq4dZy7Y FbNGWJdxXZnj5rfI66KZN6Vzk4ifYbE9bWWPaLBmtArUUGC/DH/6Vrtr6EKljo4n MpFY82QHOtnAigRFWQAK2lSlKERzjSqXBrT9C93O//LIqmYiQ3GwT0RgrwFC/aHJ t2KfjQuyysJj7LsLQoQpYOCXH+7QYWXymdI= -----END CERTIFICATE-----Generated at Sat Apr 26 16:16:06 2025 by rpki-client