$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/47d5e13a-1b5f-39e2-96b0-ae573d50e618.roa File: 47d5e13a-1b5f-39e2-96b0-ae573d50e618.roa (raw, json) Hash identifier: kq/WDNfEGA7VmtiqEE+xzYYUvZsGMWmnHrCrq5ix19o= Subject key identifier: 1B:37:B7:DB:7B:5C:82:5D:32:21:EE:01:85:18:F5:D3:53:CB:90:2E Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584988CF22DDE62D3EAA7BD57E00 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/47d5e13a-1b5f-39e2-96b0-ae573d50e618.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 9009 IP address blocks: 2607:740:3a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:22:dd:e6:2d:3e:aa:7b:d5:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=66327555-dc19-4075-b3d6-3a07896596ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:78:2d:77:fc:c0:37:3f:8b:e7:29:f1:99:25: 38:a8:ba:b7:47:ff:9c:bb:fe:ef:e6:87:f0:e2:ae: 35:04:69:65:c3:8c:04:02:4a:16:87:f3:f4:f7:33: e1:47:0e:8c:89:94:cf:71:0e:ce:31:1d:4f:89:7d: 07:28:b2:0d:fb:b4:3b:03:2d:15:20:27:ca:6d:55: 8c:16:57:8e:76:6f:b6:f7:8b:a0:14:42:65:d1:0b: f0:90:22:b9:13:36:4a:0d:67:16:31:44:55:62:10: cb:f0:b7:96:0b:e0:3b:55:39:19:04:b1:09:6a:a3: da:4f:e3:38:1f:c7:d1:50:d7:26:70:58:0f:16:f9: 8a:8d:7f:a9:f2:e2:1d:0d:38:2d:f4:c9:ab:18:19: d5:0c:e8:17:5a:eb:ba:bc:81:21:6c:b1:12:d1:88: b8:c6:6b:b1:a4:7a:9c:88:6b:17:97:0d:ba:90:91: 43:f5:fd:1d:08:e9:90:64:dd:1c:83:f4:c6:52:a1: fa:ac:13:fc:9c:e3:60:01:b6:11:ba:30:48:6c:28: c2:f2:b6:d9:89:3d:28:b8:b8:1a:51:37:24:79:20: aa:25:89:61:7f:c7:27:3f:2d:2d:6e:e2:62:4f:de: 97:f4:f2:d0:e9:6d:9b:8b:9f:bb:44:c7:da:e0:46: be:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:37:B7:DB:7B:5C:82:5D:32:21:EE:01:85:18:F5:D3:53:CB:90:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/47d5e13a-1b5f-39e2-96b0-ae573d50e618.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:3a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:21:a2:c8:67:fe:61:e2:56:af:cd:39:15:98:22:d1:fb:c3: 12:ec:09:d9:ae:92:94:83:5b:74:a0:60:11:b2:0e:65:42:7b: 9d:9f:04:f8:72:dc:8f:3f:46:28:46:6f:ba:b6:af:72:76:c8: b0:13:fd:53:9d:45:3f:ed:dc:00:84:af:c9:97:95:5f:7b:fe: 7e:3e:22:94:ec:61:e7:2e:47:3a:a2:d4:f7:7d:c1:e5:fd:84: ab:09:d0:ff:9f:32:38:61:86:96:69:8c:d5:ec:55:61:59:25: 59:0e:cb:9a:6b:b8:7b:3c:ed:1b:78:ac:cf:1e:33:84:ba:15: 1f:99:2a:9c:c1:fd:12:87:3b:dd:4a:14:c2:7b:ea:ba:d1:51: 36:5a:38:9d:ad:ba:5b:0c:b2:fa:56:f1:5e:eb:1e:7d:b7:b5: 92:36:8d:6e:20:09:3e:c9:f9:94:85:23:68:bf:d2:0a:33:bd: 4f:50:cb:c6:a0:ec:c7:67:79:f2:36:6f:54:b4:45:df:cd:15: 6b:e7:15:8f:18:5e:85:13:87:98:50:a5:61:b7:98:68:49:99: 4b:73:eb:1e:90:a9:65:b9:02:76:05:48:89:e1:4c:d8:31:6d: ec:85:e4:69:df:52:23:e9:ee:85:cc:14:b6:b9:f0:e4:95:49: 65:0f:1c:c3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIzyLd5i0+qnvVfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk NjYzMjc1NTUtZGMxOS00MDc1LWIzZDYtM2EwNzg5NjU5NmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHgtd/zANz+L5ynxmSU4qLq3R/+cu/7v5ofw 4q41BGllw4wEAkoWh/P09zPhRw6MiZTPcQ7OMR1PiX0HKLIN+7Q7Ay0VICfKbVWM FleOdm+294ugFEJl0QvwkCK5EzZKDWcWMURVYhDL8LeWC+A7VTkZBLEJaqPaT+M4 H8fRUNcmcFgPFvmKjX+p8uIdDTgt9MmrGBnVDOgXWuu6vIEhbLES0Yi4xmuxpHqc iGsXlw26kJFD9f0dCOmQZN0cg/TGUqH6rBP8nONgAbYRujBIbCjC8rbZiT0ouLga UTckeSCqJYlhf8cnPy0tbuJiT96X9PLQ6W2bi5+7RMfa4Ea+XwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBs3t9t7XIJdMiHuAYUY9dNTy5AuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNDdkNWUxM2EtMWI1Zi0z OWUyLTk2YjAtYWU1NzNkNTBlNjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAA6 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEwhoshn/mHiVq/NORWYItH7wxLsCdmukpSDW3SgYBGyDmVCe52f BPhy3I8/RihGb7q2r3J2yLAT/VOdRT/t3ACEr8mXlV97/n4+IpTsYecuRzqi1Pd9 weX9hKsJ0P+fMjhhhpZpjNXsVWFZJVkOy5pruHs87Rt4rM8eM4S6FR+ZKpzB/RKH O91KFMJ76rrRUTZaOJ2tulsMsvpW8V7rHn23tZI2jW4gCT7J+ZSFI2i/0gozvU9Q y8ag7MdnefI2b1S0Rd/NFWvnFY8YXoUTh5hQpWG3mGhJmUtz6x6QqWW5AnYFSInh TNgxbeyF5GnfUiPp7oXMFLa58OSVSWUPHMM= -----END CERTIFICATE-----Generated at Sat Apr 26 18:01:53 2025 by rpki-client