$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/85327b21-941f-3e4d-b13b-7e28774ba9ad.roa File: 85327b21-941f-3e4d-b13b-7e28774ba9ad.roa (raw, json) Hash identifier: kRjjf7BG45YHWFFj+j50kdkBRLawJBxsjus7k+mpXQs= Subject key identifier: D7:35:3B:35:5D:BE:56:1C:1C:A5:97:2F:71:DB:86:84:BA:53:D5:D6 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584988CF1AB526062D18FDC9C500 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/85327b21-941f-3e4d-b13b-7e28774ba9ad.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 9009 IP address blocks: 2607:740:2f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:1a:b5:26:06:2d:18:fd:c9:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=a6ff0a2f-eba4-4378-aba9-19e7ffccb5b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:54:d6:c2:46:66:49:ce:62:12:f6:be:2e:77: 9c:84:99:62:a7:f7:25:4a:a0:29:7c:c3:b3:d2:3a: 6a:9c:50:ce:f2:65:1e:a0:8a:49:4f:90:f7:74:9d: f1:43:49:15:20:1c:2d:ee:93:2d:76:87:6e:ee:21: 04:20:63:ba:a3:aa:b0:2f:c2:69:46:59:a4:3b:1b: 6a:50:29:e0:62:51:0c:de:e9:1c:9b:de:dc:90:78: 4a:b3:81:e9:4b:f8:e9:72:35:fe:d5:eb:e1:c5:47: 04:8d:d9:17:55:5d:4e:f4:76:b3:aa:d3:a0:8b:ed: 9d:da:11:75:82:82:3b:f5:4f:61:dc:de:96:4f:16: da:78:52:8e:3f:ed:b2:73:f9:63:3f:8f:5b:74:d7: ea:e2:2e:37:31:ee:d7:4c:05:2e:a0:6e:3a:b5:f0: 17:e7:d6:ea:ae:ea:a7:70:2b:67:0e:77:15:ff:b8: 8a:ba:80:24:d1:96:e8:ed:b1:1b:f9:46:20:d5:50: 86:19:8a:b8:66:00:40:fd:6d:5e:56:c9:9e:79:68: b9:12:8e:b9:4a:ad:68:7b:bf:7c:2c:6b:85:30:e1: 4a:ce:d1:ab:35:62:7a:4c:51:0f:49:3c:8c:80:65: 5a:3d:2b:ca:8b:e9:5c:eb:c9:4a:a9:a9:be:ec:61: 62:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:35:3B:35:5D:BE:56:1C:1C:A5:97:2F:71:DB:86:84:BA:53:D5:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/85327b21-941f-3e4d-b13b-7e28774ba9ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:2f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:70:f5:9b:3a:bb:7e:43:f2:76:40:c3:63:58:00:e0:c8:b9: ef:8f:bf:d0:86:8d:81:38:fe:99:a1:8d:06:c9:6b:96:8d:00: e8:7e:0e:88:de:8d:a6:da:8b:65:86:be:64:16:d4:69:eb:30: 6a:54:35:36:1a:6b:4a:1b:23:10:e8:8a:82:5c:84:71:0e:43: 45:bf:ed:5c:d4:7f:c2:c5:98:92:15:c6:15:f6:54:d2:e2:e4: cc:c0:c7:0e:8e:b1:04:fa:bb:47:b5:b7:aa:2c:76:cd:ec:ab: 32:31:87:73:38:aa:3c:dc:82:88:b5:0a:41:e0:05:39:04:29: 19:62:a8:ff:74:2b:ef:91:85:fa:4c:31:10:1a:db:e9:c4:72: 95:87:1e:d2:f2:e7:6f:9c:ea:a5:4e:2e:ec:18:32:93:01:aa: 42:9d:43:d2:2d:ed:73:57:3d:09:a1:2b:31:f9:c9:d3:a9:35: af:5c:3b:78:95:8c:a2:b8:b8:d9:af:83:71:d0:c6:a5:b8:56: 1c:dd:da:4d:d2:15:ad:cc:70:95:96:a4:f5:98:7d:9f:b5:74: 8a:f7:27:60:af:74:a7:73:e9:9f:df:5f:17:8c:95:cf:6b:90: 21:19:e4:65:a5:a7:f3:42:65:1a:0f:e7:44:f6:c5:cd:ab:3d: 62:ce:69:a0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIzxq1JgYtGP3JxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk YTZmZjBhMmYtZWJhNC00Mzc4LWFiYTktMTllN2ZmY2NiNWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFTWwkZmSc5iEva+LnechJlip/clSqApfMOz 0jpqnFDO8mUeoIpJT5D3dJ3xQ0kVIBwt7pMtdodu7iEEIGO6o6qwL8JpRlmkOxtq UCngYlEM3ukcm97ckHhKs4HpS/jpcjX+1evhxUcEjdkXVV1O9HazqtOgi+2d2hF1 goI79U9h3N6WTxbaeFKOP+2yc/ljP49bdNfq4i43Me7XTAUuoG46tfAX59bqruqn cCtnDncV/7iKuoAk0Zbo7bEb+UYg1VCGGYq4ZgBA/W1eVsmeeWi5Eo65Sq1oe798 LGuFMOFKztGrNWJ6TFEPSTyMgGVaPSvKi+lc68lKqam+7GFi+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNc1OzVdvlYcHKWXL3HbhoS6U9XWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvODUzMjdiMjEtOTQxZi0z ZTRkLWIxM2ItN2UyODc3NGJhOWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAAv MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACdw9Zs6u35D8nZAw2NYAODIue+Pv9CGjYE4/pmhjQbJa5aNAOh+ Dojejabai2WGvmQW1GnrMGpUNTYaa0obIxDoioJchHEOQ0W/7VzUf8LFmJIVxhX2 VNLi5MzAxw6OsQT6u0e1t6osds3sqzIxh3M4qjzcgoi1CkHgBTkEKRliqP90K++R hfpMMRAa2+nEcpWHHtLy52+c6qVOLuwYMpMBqkKdQ9It7XNXPQmhKzH5ydOpNa9c O3iVjKK4uNmvg3HQxqW4Vhzd2k3SFa3McJWWpPWYfZ+1dIr3J2CvdKdz6Z/fXxeM lc9rkCEZ5GWlp/NCZRoP50T2xc2rPWLOaaA= -----END CERTIFICATE-----Generated at Sat Apr 26 18:06:29 2025 by rpki-client