$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/b115bbc1-c061-3fca-9ca6-440a61fb4a7a.roa File: b115bbc1-c061-3fca-9ca6-440a61fb4a7a.roa (raw, json) Hash identifier: Si1jw0zv7X7yLx+RE9S/OjCeVFFgTsSmPUBD8tH6At8= Subject key identifier: 00:72:AD:BE:DF:33:A9:5D:7B:DD:53:08:23:71:20:2C:9C:4D:5B:79 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584902EC2C500E58A523CA869500 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/b115bbc1-c061-3fca-9ca6-440a61fb4a7a.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 9009 IP address blocks: 2607:740:6d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:2c:50:0e:58:a5:23:ca:86:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=c9b5dd0c-a65d-4aae-ab71-635537b7d3e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:cd:0c:05:ec:13:8a:fc:5b:ae:c5:55:48:ab: 59:1b:ba:8a:33:52:52:d3:6c:83:03:99:45:8f:9e: 0e:7a:f5:54:9d:a9:c3:e1:4a:86:03:fc:c2:13:1e: 6d:3f:a0:e3:33:b9:5c:91:52:a2:ca:b3:ce:1b:2f: a5:35:07:16:bc:49:c6:a7:e0:1c:3e:5f:3a:e3:9e: 1e:04:ae:09:b3:b1:1a:d0:8c:21:fe:db:0f:1a:99: 6f:46:6a:ff:3f:ab:20:e3:4e:9f:b2:42:31:46:d0: 75:f7:35:67:a9:e2:65:5d:87:ca:1a:a8:5c:fd:a8: 7d:25:a4:db:9e:ed:6a:3f:ab:8b:a6:0f:d1:cd:c4: d0:9e:7d:00:94:0a:0c:0d:a5:6e:a3:82:5d:28:5d: f9:9d:04:e2:53:db:29:3c:60:2b:02:d5:e9:60:42: 7d:06:41:4a:1f:a2:f0:7b:0b:93:1c:31:f5:77:4d: d0:ec:0a:5d:81:d1:6b:e8:ac:1a:3a:a7:bd:a2:e8: b3:85:90:b2:84:45:b3:be:5e:c1:0f:57:ca:73:e9: fd:f5:95:9b:50:af:c1:30:1b:7a:5a:1d:46:53:df: e5:85:76:1d:16:d7:79:c1:55:60:d9:a1:50:06:25: e8:88:f9:73:ba:c0:0a:ba:fa:77:5e:8b:7b:8e:98: 9f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:72:AD:BE:DF:33:A9:5D:7B:DD:53:08:23:71:20:2C:9C:4D:5B:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/b115bbc1-c061-3fca-9ca6-440a61fb4a7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:6d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:c2:88:c4:29:50:f0:4d:89:37:14:01:5c:56:e6:75:d9:cb: ed:0d:98:75:44:b1:bb:25:7a:f7:ff:06:92:4a:60:6f:93:31: 93:17:71:ca:0d:6e:ed:73:18:79:92:3b:c7:69:90:18:ff:48: fa:84:37:fe:99:af:5a:dc:d0:09:a7:89:e2:18:62:f4:bd:9f: 1f:4d:7a:7f:d8:83:59:e2:19:74:bb:8c:44:14:af:fa:89:4c: d6:08:bf:0d:2e:af:e5:40:36:8c:6d:bc:8a:72:d4:2b:e4:81: 3b:cf:3d:e1:47:04:56:0a:50:fe:be:d6:9b:1b:5a:05:af:34: 8c:a0:ce:6f:e5:eb:4c:a0:6a:4d:c4:94:b8:2e:93:ec:22:ec: d8:14:e6:04:fd:01:29:ec:0d:2b:76:44:18:5d:3c:2b:8c:dd: cf:15:0d:83:65:60:2a:39:a3:ca:09:45:58:9b:01:49:8a:b4: d2:b7:fd:e4:22:f6:b6:6c:c3:fe:a7:30:09:d0:26:e8:cd:12: 4c:bb:92:2d:cc:e8:32:96:6b:70:3b:ec:a4:61:df:a4:06:a0: dc:07:73:cd:44:f2:ee:3c:12:87:b6:c1:fc:f1:30:9c:08:cb: 78:22:09:bd:31:1f:a8:a6:3b:82:dc:22:7c:c7:cb:e7:10:9d: 18:f8:54:a8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkC7CxQDlilI8qGlQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk YzliNWRkMGMtYTY1ZC00YWFlLWFiNzEtNjM1NTM3YjdkM2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjs0MBewTivxbrsVVSKtZG7qKM1JS02yDA5lF j54OevVUnanD4UqGA/zCEx5tP6DjM7lckVKiyrPOGy+lNQcWvEnGp+AcPl86454e BK4Js7Ea0Iwh/tsPGplvRmr/P6sg406fskIxRtB19zVnqeJlXYfKGqhc/ah9JaTb nu1qP6uLpg/RzcTQnn0AlAoMDaVuo4JdKF35nQTiU9spPGArAtXpYEJ9BkFKH6Lw ewuTHDH1d03Q7ApdgdFr6KwaOqe9ouizhZCyhEWzvl7BD1fKc+n99ZWbUK/BMBt6 Wh1GU9/lhXYdFtd5wVVg2aFQBiXoiPlzusAKuvp3Xot7jpiflwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAByrb7fM6lde91TCCNxICycTVt5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvYjExNWJiYzEtYzA2MS0z ZmNhLTljYTYtNDQwYTYxZmI0YTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQABt MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABHCiMQpUPBNiTcUAVxW5nXZy+0NmHVEsbslevf/BpJKYG+TMZMX ccoNbu1zGHmSO8dpkBj/SPqEN/6Zr1rc0AmnieIYYvS9nx9Nen/Yg1niGXS7jEQU r/qJTNYIvw0ur+VANoxtvIpy1CvkgTvPPeFHBFYKUP6+1psbWgWvNIygzm/l60yg ak3ElLguk+wi7NgU5gT9ASnsDSt2RBhdPCuM3c8VDYNlYCo5o8oJRVibAUmKtNK3 /eQi9rZsw/6nMAnQJujNEky7ki3M6DKWa3A77KRh36QGoNwHc81E8u48Eoe2wfzx MJwIy3giCb0xH6imO4LcInzHy+cQnRj4VKg= -----END CERTIFICATE-----Generated at Sat Apr 26 16:16:59 2025 by rpki-client