$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/797f2580-b7b0-3468-a5f0-1d5ef78d9240.roa File: 797f2580-b7b0-3468-a5f0-1d5ef78d9240.roa (raw, json) Hash identifier: CW3tfLPFavVhcGjjwsUPLT3550sK3EkVPB+jFTKTDtA= Subject key identifier: E8:32:1E:87:C7:71:F2:DD:A1:1F:A9:23:DA:F9:D0:70:93:B3:9A:62 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F432858498769AE77895B3D826EF2C400 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/797f2580-b7b0-3468-a5f0-1d5ef78d9240.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 9009 IP address blocks: 2607:740:28::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:ae:77:89:5b:3d:82:6e:f2:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=563bd152-2547-449e-b9a7-1e4c904c9d49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b7:f8:36:33:9c:3c:33:4e:b0:e1:da:2a:4a: d4:02:37:66:94:e0:ed:0d:49:d6:58:15:78:3b:f1: 6c:b1:cb:0c:2b:f9:6e:94:53:e9:79:6f:48:ed:c1: 37:d1:60:fc:d9:96:8b:d8:c9:5e:d7:06:be:ca:24: 23:96:a6:b9:7e:3e:79:29:d0:78:4d:7c:83:78:b3: d3:0e:97:7e:69:0b:66:e1:00:52:fb:21:14:08:73: 04:f6:37:36:ca:01:bb:2a:1c:c6:a6:ab:59:85:e6: 56:79:2b:9f:df:a0:df:d7:45:ba:33:ae:9f:9f:0d: 7e:c5:e2:b9:b2:69:17:87:83:11:0a:49:95:85:e0: 19:e9:51:7c:92:53:be:ed:d8:23:f1:0a:0d:62:d6: 3a:07:78:0a:70:f6:8e:69:4d:2b:75:26:0c:53:81: fc:c0:1f:2b:b4:af:17:34:c3:7c:56:42:d6:db:ea: b2:fc:22:2c:a1:d4:85:18:a7:f3:18:d7:95:89:44: 3c:5a:a2:76:a3:78:11:ec:27:0b:01:ad:2f:4c:f4: 5b:4a:ea:b5:78:99:1c:c0:9b:d8:cc:df:4a:82:ff: 9d:21:5c:59:19:fe:a7:0e:29:ae:cf:18:00:a1:b2: d6:74:24:2b:74:9f:b3:18:d2:d6:ff:49:fc:d4:f6: 32:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:32:1E:87:C7:71:F2:DD:A1:1F:A9:23:DA:F9:D0:70:93:B3:9A:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/797f2580-b7b0-3468-a5f0-1d5ef78d9240.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:28::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:0e:1b:73:48:c1:4e:db:a4:44:00:79:cc:b9:a0:fd:5d:72: c6:28:3d:60:b7:f8:68:32:fe:d0:e7:ea:ad:7e:ad:8e:34:ea: 67:89:6a:83:80:e6:3f:96:48:95:3b:a9:7f:9d:c9:af:1e:fa: 16:2e:f0:b4:42:b8:38:d9:58:f0:9c:f4:01:70:50:f1:e2:df: fc:47:15:25:a2:ea:26:cd:e7:61:5e:39:43:17:ac:4d:5b:b8: b5:49:65:87:ee:e8:25:02:a2:7e:5f:e4:67:24:26:75:e1:15: 99:40:46:c9:44:82:46:39:b5:4e:a2:c0:ed:d3:9c:14:46:eb: 2e:60:91:ce:fc:c3:46:27:87:22:bb:9b:97:8d:0e:54:dd:65: 81:7b:ce:3d:44:c4:b4:80:67:61:f0:97:0d:60:4b:c2:56:f1: 85:5d:cf:c8:34:13:47:8f:82:33:f3:09:97:49:42:52:c4:a7: 55:b5:4d:0a:e0:8b:f4:dd:7c:0a:8f:0c:00:7d:5d:1a:1a:df: dd:61:ca:84:82:02:9a:7e:72:c4:73:36:5f:2d:69:ab:66:f2: ee:f0:9c:77:07:34:a1:79:eb:98:79:03:d2:ec:af:1e:b2:54: 1b:86:c7:22:0f:a6:f2:c1:72:93:bc:a9:5f:e1:af:6e:e7:95: 95:77:a3:b5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmHaa53iVs9gm7yxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk NTYzYmQxNTItMjU0Ny00NDllLWI5YTctMWU0YzkwNGM5ZDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrf4NjOcPDNOsOHaKkrUAjdmlODtDUnWWBV4 O/FsscsMK/lulFPpeW9I7cE30WD82ZaL2Mle1wa+yiQjlqa5fj55KdB4TXyDeLPT Dpd+aQtm4QBS+yEUCHME9jc2ygG7KhzGpqtZheZWeSuf36Df10W6M66fnw1+xeK5 smkXh4MRCkmVheAZ6VF8klO+7dgj8QoNYtY6B3gKcPaOaU0rdSYMU4H8wB8rtK8X NMN8VkLW2+qy/CIsodSFGKfzGNeViUQ8WqJ2o3gR7CcLAa0vTPRbSuq1eJkcwJvY zN9Kgv+dIVxZGf6nDimuzxgAobLWdCQrdJ+zGNLW/0n81PYyGQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOgyHofHcfLdoR+pI9r50HCTs5piMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNzk3ZjI1ODAtYjdiMC0z NDY4LWE1ZjAtMWQ1ZWY3OGQ5MjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAAo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACYOG3NIwU7bpEQAecy5oP1dcsYoPWC3+Ggy/tDn6q1+rY406meJ aoOA5j+WSJU7qX+dya8e+hYu8LRCuDjZWPCc9AFwUPHi3/xHFSWi6ibN52FeOUMX rE1buLVJZYfu6CUCon5f5GckJnXhFZlARslEgkY5tU6iwO3TnBRG6y5gkc78w0Yn hyK7m5eNDlTdZYF7zj1ExLSAZ2Hwlw1gS8JW8YVdz8g0E0ePgjPzCZdJQlLEp1W1 TQrgi/TdfAqPDAB9XRoa391hyoSCApp+csRzNl8taatm8u7wnHcHNKF565h5A9Ls rx6yVBuGxyIPpvLBcpO8qV/hr27nlZV3o7U= -----END CERTIFICATE-----Generated at Sat Apr 26 18:11:05 2025 by rpki-client