$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/cbea6ca1-b2fa-33ec-8803-152a05d8f338.roa File: cbea6ca1-b2fa-33ec-8803-152a05d8f338.roa (raw, json) Hash identifier: vFm7ZI2L4AIz9ESHpDOYrUAyQAljk//EPjKJl0EIG5g= Subject key identifier: 79:02:38:27:E2:B7:8E:4A:B6:56:2A:60:D6:41:7E:73:D8:3D:C3:CC Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584988CF1AEE9E38E13C50364EC0 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/cbea6ca1-b2fa-33ec-8803-152a05d8f338.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 9009 IP address blocks: 2607:740:33::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:1a:ee:9e:38:e1:3c:50:36:4e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=1160d832-fce8-48a3-9179-49e4273d333b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:24:00:e2:52:82:09:89:86:a3:34:fb:51:02: 0d:e7:dd:7d:a4:ce:47:72:7a:ab:08:c5:5c:e7:c4: 5c:ed:64:09:ec:09:1f:1b:6a:a8:23:0b:6f:c2:fd: ab:1b:6e:03:7d:f6:8f:47:26:be:fd:4f:f8:ef:ad: a5:80:99:35:48:d1:02:63:48:9f:29:0e:6d:72:c1: 6a:8e:2b:eb:d9:fe:7c:e3:c2:09:7e:8c:ae:d7:3a: 1f:2b:08:d3:13:5d:d7:1a:64:55:a5:77:49:15:47: 70:64:74:0d:d1:c8:3d:a7:e3:f6:a0:3a:a4:e8:92: a8:a7:6c:14:1e:68:d4:6a:19:60:70:59:ea:88:3a: 83:17:ae:d0:98:2c:07:6c:51:cf:1b:00:cf:1c:f6: 42:e1:4b:4f:23:5c:80:6b:95:fe:43:81:44:b9:43: ed:63:52:6c:09:7e:03:ef:e1:41:1f:de:cb:ca:63: e2:4b:20:dc:a1:66:11:a8:af:5b:37:34:5f:91:a9: 89:bc:57:66:24:bc:ac:6c:43:2b:46:1f:4f:a0:0e: dc:3e:1b:d0:82:a3:44:f7:b0:12:bf:b8:e4:41:f1: 49:ee:89:54:5b:ca:06:63:4a:5f:86:44:bc:b4:08: a1:55:0b:20:fd:39:bd:73:11:f2:d0:ca:9b:62:2b: 6c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:02:38:27:E2:B7:8E:4A:B6:56:2A:60:D6:41:7E:73:D8:3D:C3:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/cbea6ca1-b2fa-33ec-8803-152a05d8f338.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:33::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:88:6a:c6:b7:2b:a9:0c:25:c4:35:41:6f:9e:e4:23:3c:65: ff:ab:ec:14:a7:38:dc:8e:60:a5:3c:a1:58:08:d4:1a:24:8f: 4e:a6:0e:44:a3:97:46:f0:0c:d9:88:2e:0e:70:78:28:fa:cd: 70:48:67:5b:15:99:24:50:e1:cc:e7:4b:bf:d7:a2:88:a1:51: 87:48:31:31:f4:cc:92:83:91:c0:2e:7d:db:1d:8c:d9:d4:19: 27:62:af:e1:a8:72:a0:79:c3:02:55:e5:1e:40:f4:71:f0:40: f9:e8:c5:c1:1a:61:63:4d:88:bc:f8:63:10:e9:be:9a:3f:d0: 94:51:66:ce:67:6c:75:0c:d4:72:94:f6:7a:13:3d:8f:09:1a: d0:99:22:7b:be:d7:3f:e3:8b:de:99:c8:76:8a:4c:50:d6:c6: 1d:f2:f7:9d:f6:2d:69:ec:c1:9f:ef:48:30:41:76:24:bb:94: 2b:dd:71:d4:ae:20:91:52:ff:7b:db:08:5f:ed:74:9a:19:27: 4e:34:2d:0a:6e:db:ed:74:5e:c0:f3:69:62:1f:1f:20:15:ef: 37:61:41:3d:55:18:8e:ed:65:bf:02:3b:89:d8:0c:29:a0:d8: a9:1f:4a:b1:8f:26:e6:ac:8f:91:5b:e3:8e:8b:93:8b:da:b9: 17:1a:1e:b5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIzxrunjjhPFA2TsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk MTE2MGQ4MzItZmNlOC00OGEzLTkxNzktNDllNDI3M2QzMzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiQA4lKCCYmGozT7UQIN5919pM5HcnqrCMVc 58Rc7WQJ7AkfG2qoIwtvwv2rG24DffaPRya+/U/4762lgJk1SNECY0ifKQ5tcsFq jivr2f5848IJfoyu1zofKwjTE13XGmRVpXdJFUdwZHQN0cg9p+P2oDqk6JKop2wU HmjUahlgcFnqiDqDF67QmCwHbFHPGwDPHPZC4UtPI1yAa5X+Q4FEuUPtY1JsCX4D 7+FBH97LymPiSyDcoWYRqK9bNzRfkamJvFdmJLysbEMrRh9PoA7cPhvQgqNE97AS v7jkQfFJ7olUW8oGY0pfhkS8tAihVQsg/Tm9cxHy0MqbYits9QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHkCOCfit45KtlYqYNZBfnPYPcPMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvY2JlYTZjYTEtYjJmYS0z M2VjLTg4MDMtMTUyYTA1ZDhmMzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAAz MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFeIasa3K6kMJcQ1QW+e5CM8Zf+r7BSnONyOYKU8oVgI1Bokj06m DkSjl0bwDNmILg5weCj6zXBIZ1sVmSRQ4cznS7/XooihUYdIMTH0zJKDkcAufdsd jNnUGSdir+GocqB5wwJV5R5A9HHwQPnoxcEaYWNNiLz4YxDpvpo/0JRRZs5nbHUM 1HKU9noTPY8JGtCZInu+1z/ji96ZyHaKTFDWxh3y9532LWnswZ/vSDBBdiS7lCvd cdSuIJFS/3vbCF/tdJoZJ040LQpu2+10XsDzaWIfHyAV7zdhQT1VGI7tZb8CO4nY DCmg2KkfSrGPJuasj5Fb446Lk4vauRcaHrU= -----END CERTIFICATE-----Generated at Sat Apr 26 16:19:15 2025 by rpki-client