$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/714b2ae0-acf5-387d-ae44-8dc694303606.roa File: 714b2ae0-acf5-387d-ae44-8dc694303606.roa (raw, json) Hash identifier: ML+9aCBTQAFDyVCT3ZjSxSypLvinCOey/UWBdDqkq/s= Subject key identifier: FE:91:B9:F8:6E:35:69:B5:6F:01:DF:28:A2:A5:5D:7F:08:C5:5C:ED Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584988CF1B843FA461F83F5B30C0 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/714b2ae0-acf5-387d-ae44-8dc694303606.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 9009 IP address blocks: 2607:740:3d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:1b:84:3f:a4:61:f8:3f:5b:30:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=248aba8f-2445-4b34-87c4-c2bbb428676f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d7:76:da:cf:17:80:87:1a:01:d8:de:77:50: c5:32:4c:ea:e0:16:a4:0e:8b:62:cc:ce:5a:76:4b: ed:90:22:43:5c:f6:08:71:e4:86:5a:ce:54:d4:b2: 58:5b:cd:93:c9:83:5b:90:39:6d:c0:b3:59:15:f0: 9e:83:2c:55:72:ac:45:a7:78:f3:f1:e0:11:a2:f2: 62:70:3c:05:df:17:14:f7:00:ce:23:cf:ea:89:96: 6b:12:0a:c8:32:14:b3:5d:60:69:a2:0d:26:de:7d: 12:31:18:75:eb:31:05:ac:77:ad:92:51:d3:ce:02: ce:d0:87:e6:e8:a5:bd:c8:75:95:45:fe:5a:6a:4d: 64:a3:d0:37:99:4d:84:20:9f:87:40:0f:57:3e:32: be:f5:54:68:85:af:59:94:a6:73:84:a0:a4:1a:59: bd:09:88:2c:f6:6b:b4:59:19:e2:d1:e0:72:8a:32: 81:fd:7b:4d:08:2c:97:99:a2:83:cb:5a:b6:d9:9f: d0:fd:86:96:51:9e:f6:7b:5c:c0:59:25:4c:ae:a3: ad:d4:24:f5:dd:a1:7a:07:2d:4a:48:88:1d:14:82: 7c:7c:e6:c0:ed:b6:57:7f:30:23:6a:62:a4:6f:13: 01:18:88:ec:bb:ec:b5:e9:b0:03:41:06:74:c7:da: 97:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:91:B9:F8:6E:35:69:B5:6F:01:DF:28:A2:A5:5D:7F:08:C5:5C:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/714b2ae0-acf5-387d-ae44-8dc694303606.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:3d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:5e:ae:ae:b3:19:84:0f:ca:73:04:80:5e:4e:1e:59:c0:47: 29:5f:a0:f6:d9:bd:3b:a1:11:68:72:7e:9b:e6:3d:75:b0:0d: 99:98:cb:99:f1:cf:f2:e3:84:46:95:52:1f:52:f2:63:2e:ab: 80:d6:fc:b2:95:73:3f:f7:68:76:c3:b3:88:4c:42:f1:c9:29: d9:1e:77:5c:55:98:6d:a4:df:fd:c0:ff:cf:4c:31:62:4b:cc: dc:83:bf:f4:ad:8a:19:cc:8c:21:19:75:94:4f:93:69:5f:d0: 51:17:8b:b7:38:6e:9f:81:71:ad:dd:6d:37:82:c3:45:42:74: 89:6a:97:bc:c3:43:6f:2e:1e:f7:14:15:be:f3:69:5e:da:60: 6b:b1:03:5f:66:6e:7f:fd:c2:68:80:c9:b4:a6:4d:8b:f4:22: 50:ad:c2:fa:af:c3:7a:87:2c:80:fc:f0:c5:db:59:a6:34:6e: 7e:5e:0e:f8:0f:ee:3b:4e:2d:20:93:53:b3:c8:59:83:26:c1: 0b:71:16:62:f7:43:ac:d5:5b:9e:78:51:64:52:5b:31:04:fe: aa:92:23:21:36:3a:ab:d8:74:e3:af:37:db:02:4b:9e:c4:b3: 68:a1:89:28:e4:98:f8:c8:4f:3f:ec:60:51:40:3b:68:93:43: 0e:c4:b0:28 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIzxuEP6Rh+D9bMMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk MjQ4YWJhOGYtMjQ0NS00YjM0LTg3YzQtYzJiYmI0Mjg2NzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytd22s8XgIcaAdjed1DFMkzq4BakDotizM5a dkvtkCJDXPYIceSGWs5U1LJYW82TyYNbkDltwLNZFfCegyxVcqxFp3jz8eARovJi cDwF3xcU9wDOI8/qiZZrEgrIMhSzXWBpog0m3n0SMRh16zEFrHetklHTzgLO0Ifm 6KW9yHWVRf5aak1ko9A3mU2EIJ+HQA9XPjK+9VRoha9ZlKZzhKCkGlm9CYgs9mu0 WRni0eByijKB/XtNCCyXmaKDy1q22Z/Q/YaWUZ72e1zAWSVMrqOt1CT13aF6By1K SIgdFIJ8fObA7bZXfzAjamKkbxMBGIjsu+y16bADQQZ0x9qXGQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP6RufhuNWm1bwHfKKKlXX8IxVztMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNzE0YjJhZTAtYWNmNS0z ODdkLWFlNDQtOGRjNjk0MzAzNjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAA9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABperq6zGYQPynMEgF5OHlnARylfoPbZvTuhEWhyfpvmPXWwDZmY y5nxz/LjhEaVUh9S8mMuq4DW/LKVcz/3aHbDs4hMQvHJKdked1xVmG2k3/3A/89M MWJLzNyDv/StihnMjCEZdZRPk2lf0FEXi7c4bp+Bca3dbTeCw0VCdIlql7zDQ28u HvcUFb7zaV7aYGuxA19mbn/9wmiAybSmTYv0IlCtwvqvw3qHLID88MXbWaY0bn5e DvgP7jtOLSCTU7PIWYMmwQtxFmL3Q6zVW554UWRSWzEE/qqSIyE2OqvYdOOvN9sC S57Es2ihiSjkmPjITz/sYFFAO2iTQw7EsCg= -----END CERTIFICATE-----Generated at Sat Apr 26 16:41:59 2025 by rpki-client