$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a4f87b05-483e-3849-9acf-31f521ab9b61.roa File: a4f87b05-483e-3849-9acf-31f521ab9b61.roa (raw, json) Hash identifier: WjhJB031X6RNpQX5n3bq4NvQGtnNOdm+l8SoV0bt0lQ= Subject key identifier: 36:85:A5:F4:5F:5A:33:44:77:5A:C6:75:47:4B:6B:E2:D3:63:FB:2A Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584988CF1B6B4AF464DDE3618320 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a4f87b05-483e-3849-9acf-31f521ab9b61.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 9009 IP address blocks: 2607:740:3c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:1b:6b:4a:f4:64:dd:e3:61:83:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=23d84ae5-39b3-42c3-9064-4d6f355ffaec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:55:b6:e8:49:27:7d:1a:1f:15:41:a5:6b:86: b4:31:80:04:89:42:68:46:da:35:d1:aa:9f:a3:3b: b6:e1:d3:b4:24:e8:e3:c4:6f:8d:4c:9a:20:50:00: fc:6a:62:bf:e5:75:78:6b:a1:a7:3f:12:88:bb:60: 7a:08:55:2a:b5:7a:ba:17:78:b0:9b:13:ee:3c:d4: 9f:ce:c3:54:87:06:74:d6:c5:29:91:9b:4e:3c:80: e9:9e:b1:42:fb:a1:8a:e3:ed:3d:da:b8:02:bf:25: fa:4d:e2:9a:bc:7d:45:02:d4:ab:4f:56:7d:a1:fb: 5f:cf:0e:6e:bc:97:13:50:3e:a0:27:f0:70:5d:3b: c4:fb:ec:2d:ac:89:4f:b6:10:e4:d1:a9:35:80:55: bd:a2:aa:90:aa:11:57:1f:d8:13:2a:84:c0:4d:3c: c1:15:b8:59:e1:e7:24:d0:92:0c:42:94:30:d3:f5: 60:8e:8f:e8:04:38:3f:50:6a:46:ba:3f:9b:54:6e: 92:9d:03:ea:da:71:dd:e0:90:9c:9d:91:03:63:e5: 38:cb:00:ce:02:e7:61:22:3a:00:8b:16:8b:55:f2: 58:f3:6e:f5:8c:e7:cc:c1:a1:1b:ed:b2:db:5a:56: 58:ed:79:b0:6b:54:49:f2:6b:58:97:51:a9:f1:16: 19:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:85:A5:F4:5F:5A:33:44:77:5A:C6:75:47:4B:6B:E2:D3:63:FB:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a4f87b05-483e-3849-9acf-31f521ab9b61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:3c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:8d:8d:41:eb:3a:61:4c:e1:e4:f0:4d:4e:83:6e:24:60:a7: 9b:98:e4:5f:b0:c2:51:1b:1a:d3:9d:a7:fe:b8:d5:f9:d1:5f: 11:8b:66:3d:20:6a:d4:68:95:65:29:46:06:06:66:18:cf:54: 81:3d:3e:25:7d:24:47:7a:1e:72:f4:74:b0:5a:3f:32:fa:93: 89:bb:99:61:c9:4f:33:f7:2d:19:0e:13:e7:8b:cc:ac:2f:22: e1:d0:c9:66:41:33:5e:a1:b0:a1:c8:27:67:69:f2:12:ac:ed: 39:74:c9:3f:db:c5:db:fc:0a:dc:c6:4c:f0:98:cc:b5:cc:74: ee:ef:5e:dc:c2:b7:89:f6:02:0b:51:12:8e:10:9e:4e:10:23: 60:fb:64:a7:13:e8:bd:57:a0:dd:4f:c0:86:6b:ff:2e:49:04: 75:cc:07:dd:36:2c:b5:d5:df:00:8d:ba:82:4a:81:ac:e9:e2: 04:3d:08:74:94:ea:10:3f:16:be:1b:2b:58:47:b3:87:8d:18: 59:ee:66:22:a9:6f:22:c5:f2:1b:cb:63:53:ed:3c:af:8a:b2: f3:97:8f:e5:b2:1b:0e:0a:85:65:cc:38:db:0e:85:42:5d:ea: 1e:ed:9a:11:29:cf:c4:42:98:b4:4a:90:01:f6:62:2e:1d:72: 0b:a1:b4:65 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIzxtrSvRk3eNhgyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk MjNkODRhZTUtMzliMy00MmMzLTkwNjQtNGQ2ZjM1NWZmYWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVW26EknfRofFUGla4a0MYAEiUJoRto10aqf ozu24dO0JOjjxG+NTJogUAD8amK/5XV4a6GnPxKIu2B6CFUqtXq6F3iwmxPuPNSf zsNUhwZ01sUpkZtOPIDpnrFC+6GK4+092rgCvyX6TeKavH1FAtSrT1Z9oftfzw5u vJcTUD6gJ/BwXTvE++wtrIlPthDk0ak1gFW9oqqQqhFXH9gTKoTATTzBFbhZ4eck 0JIMQpQw0/Vgjo/oBDg/UGpGuj+bVG6SnQPq2nHd4JCcnZEDY+U4ywDOAudhIjoA ixaLVfJY8271jOfMwaEb7bLbWlZY7Xmwa1RJ8mtYl1Gp8RYZLQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDaFpfRfWjNEd1rGdUdLa+LTY/sqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvYTRmODdiMDUtNDgzZS0z ODQ5LTlhY2YtMzFmNTIxYWI5YjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAA8 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH2NjUHrOmFM4eTwTU6DbiRgp5uY5F+wwlEbGtOdp/641fnRXxGL Zj0gatRolWUpRgYGZhjPVIE9PiV9JEd6HnL0dLBaPzL6k4m7mWHJTzP3LRkOE+eL zKwvIuHQyWZBM16hsKHIJ2dp8hKs7Tl0yT/bxdv8CtzGTPCYzLXMdO7vXtzCt4n2 AgtREo4Qnk4QI2D7ZKcT6L1XoN1PwIZr/y5JBHXMB902LLXV3wCNuoJKgazp4gQ9 CHSU6hA/Fr4bK1hHs4eNGFnuZiKpbyLF8hvLY1PtPK+KsvOXj+WyGw4KhWXMONsO hUJd6h7tmhEpz8RCmLRKkAH2Yi4dcguhtGU= -----END CERTIFICATE-----Generated at Sat Apr 26 16:09:11 2025 by rpki-client