$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/d93dda25-13c9-3b65-a1fd-a54bf749998e.roa File: d93dda25-13c9-3b65-a1fd-a54bf749998e.roa (raw, json) Hash identifier: fQF+jLbpQYIzNleVX970RBUC1W+ZaAfK4eYMUdlOl5o= Subject key identifier: 2E:E3:82:CB:D0:56:1E:69:74:57:C1:8A:E9:AD:D0:6E:2E:4F:A1:F3 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F432858498769AE05AFB039F8D3280C00 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/d93dda25-13c9-3b65-a1fd-a54bf749998e.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 9009 IP address blocks: 2607:740:1c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:ae:05:af:b0:39:f8:d3:28:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=e08ab6ed-1b24-4cab-a936-3ef7196a8862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0a:3d:8d:d0:bd:7c:bd:3c:cb:b9:c4:34:53: 69:fb:bb:c1:b4:84:31:3e:2e:1c:35:f8:ea:35:7f: e8:d6:8e:f9:7f:2e:47:8c:aa:4d:bc:88:a1:d6:a7: 2e:34:86:cb:5b:08:86:40:d2:5f:dd:7f:4b:2a:46: ce:93:3c:e2:e1:50:09:db:30:49:93:70:1d:51:e3: 4f:f2:b8:83:22:7c:20:6b:3e:7b:93:77:d3:94:70: 3e:a6:6d:66:d1:17:76:91:f0:76:10:82:ce:41:de: 1d:b8:10:1d:ef:ab:48:58:8e:e3:25:a0:35:3d:a8: 2d:4e:d8:73:7b:de:71:8a:80:89:42:83:6d:6f:98: 46:13:52:6b:13:d6:0c:95:81:58:73:b7:67:a3:df: 46:01:3b:57:c8:04:d6:87:76:91:26:0f:98:2d:ce: 2f:77:4c:1a:af:8c:42:32:c3:fd:51:3f:1d:3c:77: f4:6b:3b:6f:62:f1:19:1a:1e:23:d3:91:6d:d3:9f: bf:13:de:96:f5:ef:36:b1:93:76:4b:19:16:e5:ce: 09:9d:13:b3:a0:f7:bc:b9:6f:13:0d:a9:0d:09:28: e0:d8:b8:a2:fd:c1:01:66:07:5f:c7:4f:a6:eb:f9: 21:8e:ba:a4:e5:bf:5e:76:75:3e:de:b7:4b:64:3a: e2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E3:82:CB:D0:56:1E:69:74:57:C1:8A:E9:AD:D0:6E:2E:4F:A1:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/d93dda25-13c9-3b65-a1fd-a54bf749998e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:1c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:67:d1:81:9c:de:18:3a:22:42:c8:02:5a:84:56:f7:b1:ad: a7:7a:bc:dd:4c:68:0f:d1:ac:1d:15:4d:6d:89:31:38:7f:ea: 75:c7:a9:56:81:74:4d:88:0c:77:e5:86:84:5e:6d:90:e0:72: 85:56:af:04:17:46:d6:0d:3a:2a:98:5b:02:59:8b:ed:0e:42: 57:f6:6f:92:75:62:42:3b:ce:0a:83:f0:3f:3d:49:f5:c4:5c: 02:14:6a:e1:9a:3d:ae:63:db:74:88:68:0f:72:97:9d:b3:89: dc:eb:58:2b:26:83:20:5d:0c:40:84:9b:54:d1:10:7e:82:34: c0:59:06:da:c2:df:58:0f:f1:c6:2e:be:9f:a3:0a:7c:cd:23: 52:3e:b3:23:a0:40:e5:c0:52:bf:85:d8:1b:cd:0d:ee:02:69: b4:cc:7b:99:3c:70:81:fa:55:6d:2f:e1:9e:ba:e4:67:3a:16: b2:0f:8c:32:c8:ff:bc:e2:7a:d0:0a:e5:92:ec:77:4c:73:be: 7f:44:25:0d:7f:9a:59:59:7e:ed:be:3c:5f:28:da:37:57:06: b4:4d:bc:08:93:86:b9:fc:4e:17:e5:e5:d4:74:fc:73:6d:7f: bd:f7:60:35:6c:03:6f:0e:11:5e:b8:4e:e8:a6:1e:36:d2:aa: af:98:ba:a8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmHaa4Fr7A5+NMoDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk ZTA4YWI2ZWQtMWIyNC00Y2FiLWE5MzYtM2VmNzE5NmE4ODYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQo9jdC9fL08y7nENFNp+7vBtIQxPi4cNfjq NX/o1o75fy5HjKpNvIih1qcuNIbLWwiGQNJf3X9LKkbOkzzi4VAJ2zBJk3AdUeNP 8riDInwgaz57k3fTlHA+pm1m0Rd2kfB2EILOQd4duBAd76tIWI7jJaA1PagtTthz e95xioCJQoNtb5hGE1JrE9YMlYFYc7dno99GATtXyATWh3aRJg+YLc4vd0war4xC MsP9UT8dPHf0aztvYvEZGh4j05Ft05+/E96W9e82sZN2SxkW5c4JnROzoPe8uW8T DakNCSjg2Lii/cEBZgdfx0+m6/khjrqk5b9ednU+3rdLZDriHQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC7jgsvQVh5pdFfBiumt0G4uT6HzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvZDkzZGRhMjUtMTNjOS0z YjY1LWExZmQtYTU0YmY3NDk5OThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAAc MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACZn0YGc3hg6IkLIAlqEVvexrad6vN1MaA/RrB0VTW2JMTh/6nXH qVaBdE2IDHflhoRebZDgcoVWrwQXRtYNOiqYWwJZi+0OQlf2b5J1YkI7zgqD8D89 SfXEXAIUauGaPa5j23SIaA9yl52zidzrWCsmgyBdDECEm1TREH6CNMBZBtrC31gP 8cYuvp+jCnzNI1I+syOgQOXAUr+F2BvNDe4CabTMe5k8cIH6VW0v4Z665Gc6FrIP jDLI/7zietAK5ZLsd0xzvn9EJQ1/mllZfu2+PF8o2jdXBrRNvAiThrn8Thfl5dR0 /HNtf733YDVsA28OEV64TuimHjbSqq+Yuqg= -----END CERTIFICATE-----Generated at Sat Apr 26 16:11:27 2025 by rpki-client