$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/99e80352-28e0-3280-b087-90da68e9840c.roa File: 99e80352-28e0-3280-b087-90da68e9840c.roa (raw, json) Hash identifier: M7ADEpoYta6PsAwAarl/LIQIMbAGQY7fdhQow5ye114= Subject key identifier: 26:98:42:24:12:E8:22:55:B7:0D:E4:79:B3:32:DE:23:B6:5C:A3:D3 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584988CF1B174B8242B228A75900 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/99e80352-28e0-3280-b087-90da68e9840c.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 9009 IP address blocks: 2607:740:36::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:1b:17:4b:82:42:b2:28:a7:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=bd4a657d-9d6d-4c6d-8800-6106294c75d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:27:d7:4a:4d:d7:34:82:70:c2:f9:ff:25:f3: fe:1f:16:96:ab:a8:8c:df:94:a7:3c:01:da:3e:8f: bf:98:73:b1:e8:e6:91:41:48:ea:42:89:54:09:d4: 92:ec:f2:bb:86:29:80:1b:06:2f:20:57:6e:1f:3d: 5e:06:ae:63:ab:c2:c3:33:0e:45:cb:4d:67:89:bc: c6:31:9d:84:fe:bb:8f:b2:6d:7e:94:23:43:6c:63: 9b:9c:95:00:65:53:da:3a:18:29:3e:d9:f7:22:4c: 03:49:43:d0:e2:87:2f:b5:5f:0e:9d:c6:9a:f5:ed: e1:d8:07:f5:e5:a6:bd:5a:2a:c9:d6:67:c2:fc:51: 45:e2:54:c8:a3:a5:9b:4d:fc:b8:57:75:a7:88:83: b6:41:cd:b6:71:85:34:f2:ad:cc:49:1a:a9:8b:d0: 8e:c4:52:60:d2:c7:3e:81:88:ac:83:d0:dc:3f:ba: 5d:1e:27:d5:6d:ae:7f:d3:eb:b8:7d:ed:67:71:54: 76:03:3a:1b:e1:a1:a2:2d:f7:3c:24:69:3f:69:23: dc:91:e3:ab:d0:c4:81:cc:c1:ec:2e:b4:27:b4:1f: ed:e2:f3:d8:62:7f:2b:19:2d:78:4f:5f:a0:ef:c6: b9:e1:70:c0:06:e5:2e:6e:d9:14:d9:18:32:4d:7a: 36:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:98:42:24:12:E8:22:55:B7:0D:E4:79:B3:32:DE:23:B6:5C:A3:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/99e80352-28e0-3280-b087-90da68e9840c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:36::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:b1:41:fe:e2:4d:6b:a4:30:dd:4b:e2:8a:ce:b9:40:5b:3c: 80:93:6d:1b:6f:b6:9b:d7:7a:08:25:a7:31:bc:94:1c:68:d8: 51:9f:7e:8a:ac:17:c3:82:a3:59:3c:cc:5e:db:ea:88:06:df: 50:9d:69:d5:f6:e5:70:ac:12:8c:67:34:8f:61:f9:a2:be:85: dc:c6:46:5b:c3:20:cc:74:0b:8a:17:01:8f:9c:14:f9:28:a9: 07:45:4a:be:e4:65:57:fb:3f:de:51:96:cd:90:88:84:78:47: 3c:ae:75:3b:19:65:1f:1b:38:16:f5:93:60:f0:0f:81:25:fc: 0b:f0:7c:7e:f3:7b:ff:c7:ac:0d:67:69:7e:ea:f1:e6:f5:66: 4e:91:49:d3:33:b6:62:6c:24:53:fd:84:b5:0b:97:15:77:5c: 25:37:11:8f:4a:78:6a:7a:12:83:8a:01:e7:fb:19:79:81:2e: ee:62:2a:39:b2:2d:fa:2e:7e:07:dc:cc:e2:77:53:a4:77:e4: 15:59:88:67:2b:3e:f3:2c:ff:07:fd:00:4f:3b:57:b4:28:62: 76:70:00:97:ec:04:0f:8a:bb:c3:79:6c:c7:82:0f:3b:17:f2: 7d:48:76:4a:a8:73:ee:df:a6:cf:f0:93:b7:d0:3c:01:2f:97: fa:c0:ba:9a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIzxsXS4JCsiinWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk YmQ0YTY1N2QtOWQ2ZC00YzZkLTg4MDAtNjEwNjI5NGM3NWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCfXSk3XNIJwwvn/JfP+HxaWq6iM35SnPAHa Po+/mHOx6OaRQUjqQolUCdSS7PK7himAGwYvIFduHz1eBq5jq8LDMw5Fy01nibzG MZ2E/ruPsm1+lCNDbGObnJUAZVPaOhgpPtn3IkwDSUPQ4ocvtV8Oncaa9e3h2Af1 5aa9WirJ1mfC/FFF4lTIo6WbTfy4V3WniIO2Qc22cYU08q3MSRqpi9COxFJg0sc+ gYisg9DcP7pdHifVba5/0+u4fe1ncVR2Azob4aGiLfc8JGk/aSPckeOr0MSBzMHs LrQntB/t4vPYYn8rGS14T1+g78a54XDABuUubtkU2RgyTXo2JQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCaYQiQS6CJVtw3kebMy3iO2XKPTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvOTllODAzNTItMjhlMC0z MjgwLWIwODctOTBkYTY4ZTk4NDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAA2 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABSxQf7iTWukMN1L4orOuUBbPICTbRtvtpvXegglpzG8lBxo2FGf foqsF8OCo1k8zF7b6ogG31CdadX25XCsEoxnNI9h+aK+hdzGRlvDIMx0C4oXAY+c FPkoqQdFSr7kZVf7P95Rls2QiIR4RzyudTsZZR8bOBb1k2DwD4El/AvwfH7ze//H rA1naX7q8eb1Zk6RSdMztmJsJFP9hLULlxV3XCU3EY9KeGp6EoOKAef7GXmBLu5i KjmyLfoufgfczOJ3U6R35BVZiGcrPvMs/wf9AE87V7QoYnZwAJfsBA+Ku8N5bMeC DzsX8n1Idkqoc+7fps/wk7fQPAEvl/rAupo= -----END CERTIFICATE-----Generated at Sat Apr 26 16:31:06 2025 by rpki-client