$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/aefb5f97-5ce0-3bb4-b810-7bd8aa414470.roa File: aefb5f97-5ce0-3bb4-b810-7bd8aa414470.roa (raw, json) Hash identifier: jn+xMwSgA/wTo9sm3G2JDjY11uu65ALK2M0IKiX+YyA= Subject key identifier: C2:F6:DF:70:94:49:E8:A5:98:48:F1:C5:75:B3:17:09:67:04:8F:98 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F432858498769AE1683C2AF0B05E14500 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/aefb5f97-5ce0-3bb4-b810-7bd8aa414470.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 209181 IP address blocks: 2607:740:1f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:ae:16:83:c2:af:0b:05:e1:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=4d0994c7-1165-4dff-9d04-bc8e0ead058a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:08:70:65:f3:a6:f1:75:4c:7b:1f:76:54:34: 20:58:20:ce:a1:53:e9:88:bf:01:58:b6:29:44:04: c8:82:f0:d1:53:be:65:74:6b:46:d7:49:df:19:85: f2:af:e4:ba:32:f6:ed:46:ec:0d:82:65:2d:4f:69: fd:3e:2e:b0:9b:14:95:16:90:7b:b9:12:70:1a:0d: 87:c4:98:59:cd:54:ff:4f:59:69:51:5f:29:7e:64: 8a:67:3c:6c:5c:77:70:f8:27:6e:d1:16:4c:78:44: 64:5f:93:c6:bb:32:0a:23:30:90:94:e4:dc:1e:07: 27:64:24:ed:19:c5:bb:f3:3d:23:5c:91:2a:e0:24: c7:11:06:d3:56:d5:6d:31:97:b2:2b:7c:8b:83:b1: aa:ba:f0:58:a2:05:c0:9f:f7:66:bd:f5:dd:de:6b: 88:e9:90:c4:2f:18:a2:ce:23:35:2a:a2:df:ad:86: eb:88:31:b2:cb:26:6d:f0:a4:dc:4d:3f:9e:66:3e: 22:8c:49:59:fd:3b:4e:55:4a:b8:5c:a8:83:8e:88: 39:ba:20:d3:8b:45:27:cf:34:64:af:f6:dc:2f:72: 23:15:1c:b6:45:c6:55:b9:61:9a:39:e6:e9:5d:c3: d0:99:db:56:78:40:40:52:69:67:94:93:8f:3e:a1: ec:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F6:DF:70:94:49:E8:A5:98:48:F1:C5:75:B3:17:09:67:04:8F:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/aefb5f97-5ce0-3bb4-b810-7bd8aa414470.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:1f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:1c:f4:48:74:93:4f:bd:5c:83:9f:57:12:df:c8:1b:12:ae: 8a:4d:24:6b:d9:87:8f:84:17:c6:13:52:ed:e9:47:ed:0b:95: 92:ed:bf:5e:d6:43:8f:38:8f:da:d3:ab:32:4e:a3:24:e2:91: 7f:1f:28:6a:ff:19:f6:89:f2:09:55:33:6e:46:be:d5:7f:db: 9e:da:70:66:e5:1e:61:5a:ff:0a:22:89:a5:9d:57:0b:80:04: da:7b:22:1f:74:42:d5:52:88:01:82:dc:99:3b:66:b4:58:9d: c6:94:af:d6:35:e4:c1:05:fa:a7:fe:e3:1f:b0:92:8f:c0:41: d2:88:72:f6:cc:5a:3f:fc:fb:f0:fd:e4:1e:16:66:11:a0:d2: 7e:d2:fd:b6:1b:b5:c4:fc:01:86:b4:ee:50:9e:d2:31:69:81: 85:47:08:e1:fa:cf:65:2f:10:41:46:71:ca:29:65:e9:f0:0d: 4f:5b:9b:ea:bf:c0:90:9f:f8:e3:70:f5:4c:29:92:eb:0e:f5: 57:34:5e:a8:1e:8f:9a:73:9b:57:b9:25:db:f5:fd:a6:97:d5: 90:c4:7b:7e:59:dd:b8:5d:65:a1:db:a0:34:a8:75:ac:59:21: 1e:23:b7:c8:5e:04:9c:26:0c:0b:88:18:e4:4d:5a:14:0b:03: cb:2e:9f:9e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmHaa4Wg8KvCwXhRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk NGQwOTk0YzctMTE2NS00ZGZmLTlkMDQtYmM4ZTBlYWQwNThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwhwZfOm8XVMex92VDQgWCDOoVPpiL8BWLYp RATIgvDRU75ldGtG10nfGYXyr+S6MvbtRuwNgmUtT2n9Pi6wmxSVFpB7uRJwGg2H xJhZzVT/T1lpUV8pfmSKZzxsXHdw+Cdu0RZMeERkX5PGuzIKIzCQlOTcHgcnZCTt GcW78z0jXJEq4CTHEQbTVtVtMZeyK3yLg7GquvBYogXAn/dmvfXd3muI6ZDELxii ziM1KqLfrYbriDGyyyZt8KTcTT+eZj4ijElZ/TtOVUq4XKiDjog5uiDTi0UnzzRk r/bcL3IjFRy2RcZVuWGaOebpXcPQmdtWeEBAUmlnlJOPPqHsxwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFML233CUSeilmEjxxXWzFwlnBI+YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvYWVmYjVmOTctNWNlMC0z YmI0LWI4MTAtN2JkOGFhNDE0NDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAAf MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHMc9Eh0k0+9XIOfVxLfyBsSropNJGvZh4+EF8YTUu3pR+0LlZLt v17WQ484j9rTqzJOoyTikX8fKGr/GfaJ8glVM25GvtV/257acGblHmFa/woiiaWd VwuABNp7Ih90QtVSiAGC3Jk7ZrRYncaUr9Y15MEF+qf+4x+wko/AQdKIcvbMWj/8 +/D95B4WZhGg0n7S/bYbtcT8AYa07lCe0jFpgYVHCOH6z2UvEEFGccopZenwDU9b m+q/wJCf+ONw9UwpkusO9Vc0Xqgej5pzm1e5Jdv1/aaX1ZDEe35Z3bhdZaHboDSo daxZIR4jt8heBJwmDAuIGORNWhQLA8sun54= -----END CERTIFICATE-----Generated at Sun Apr 27 04:11:37 2025 by rpki-client