$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/e2f6556d-7cd4-395e-9a5d-8c7c9aee8a50.roa File: e2f6556d-7cd4-395e-9a5d-8c7c9aee8a50.roa (raw, json) Hash identifier: dCTWONxJoQJ0YRn+6LrLv9jR9132ZiEXNdBJZwhr/TA= Subject key identifier: EF:03:5A:11:93:C3:8E:DA:32:CF:9A:CF:3C:4B:AF:A7:D6:AC:68:DD Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584988CF1A3E711833731FEDA740 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/e2f6556d-7cd4-395e-9a5d-8c7c9aee8a50.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 9009 IP address blocks: 2607:740:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:1a:3e:71:18:33:73:1f:ed:a7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=095bb515-3980-4f52-aadd-50604781dccf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6a:4a:6e:6b:ab:20:a4:e0:df:d4:76:97:50: 6e:8e:09:20:66:39:f5:0f:95:b7:0b:fb:c9:0d:9c: f7:70:7e:3f:a5:9a:25:27:da:00:ce:0a:8b:cb:8e: 65:14:89:e0:98:65:39:8e:5d:ce:a9:cf:df:31:a6: 6b:9f:0c:ad:46:2c:f7:71:31:55:7d:3e:ce:90:db: c9:8b:39:2d:66:43:55:bf:c3:e3:b7:a1:8e:74:cc: a8:09:bc:db:8e:68:26:92:f4:63:d7:a5:a4:cf:1b: a9:42:4e:4c:a1:37:a2:66:e9:9a:a5:dc:22:d0:b8: 15:d8:98:cd:dd:1a:da:26:f4:67:29:99:b7:61:30: f2:b3:0f:28:63:3d:5b:ed:31:45:73:2c:6c:64:66: 19:5d:19:0a:a6:da:55:4f:ef:d7:13:6e:fe:d5:02: 34:0d:02:fd:7a:09:85:89:df:15:1b:21:aa:bd:e6: 13:f7:63:13:23:a7:36:05:d9:0e:d0:55:58:39:a9: d9:05:b8:4d:14:ef:c0:29:71:56:c8:27:28:af:e5: a7:3a:35:31:68:f5:19:f8:71:fa:9f:d4:b4:b7:0a: 18:f1:3b:c0:96:06:41:81:b4:be:33:a8:2b:70:a4: d2:28:0b:cf:73:68:82:49:c2:2f:c3:9f:7c:b9:ba: dc:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:03:5A:11:93:C3:8E:DA:32:CF:9A:CF:3C:4B:AF:A7:D6:AC:68:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/e2f6556d-7cd4-395e-9a5d-8c7c9aee8a50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:ba:24:6f:27:d2:d7:e1:05:97:f4:bc:d7:ea:18:19:a8:ae: 43:ce:36:6a:39:10:21:0d:9a:2b:d8:34:3d:93:95:6b:d8:5c: b1:f7:9b:80:2b:57:66:a5:ae:69:24:c3:80:e8:39:00:70:99: 68:40:17:12:90:c3:23:9c:ce:62:b8:e8:d9:fa:de:c7:34:e3: 85:b7:d5:70:c9:51:84:cd:82:cb:2b:bb:0b:3e:16:dc:66:bc: fe:d7:ec:d5:6b:92:5a:49:9b:a7:02:56:62:ab:f1:bc:48:34: 09:71:e6:8e:15:ef:2f:5b:25:e4:1a:88:d2:38:83:3e:b7:3c: 50:bd:5f:87:79:2a:2e:ab:02:7b:3c:de:97:7d:eb:98:4a:1d: d4:40:10:3c:71:72:fd:13:13:fc:64:de:22:f2:75:43:9c:75: 9e:33:14:eb:2d:91:5b:81:f2:60:4f:a6:ca:f7:97:6b:7f:d1: ee:66:9c:0e:26:3c:1a:45:46:d4:a5:79:60:53:4e:8f:28:2d: 6b:ef:7b:17:6e:32:07:22:00:1a:b2:63:4a:aa:d0:f6:4f:5a: df:18:13:59:42:4d:44:b6:02:f2:d5:7e:9f:24:d3:55:73:8b: 48:40:6c:43:35:b3:60:eb:3b:35:32:fc:bf:e1:e9:94:42:58: 40:a5:77:61 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIzxo+cRgzcx/tp0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk MDk1YmI1MTUtMzk4MC00ZjUyLWFhZGQtNTA2MDQ3ODFkY2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGpKbmurIKTg39R2l1BujgkgZjn1D5W3C/vJ DZz3cH4/pZolJ9oAzgqLy45lFIngmGU5jl3Oqc/fMaZrnwytRiz3cTFVfT7OkNvJ izktZkNVv8Pjt6GOdMyoCbzbjmgmkvRj16WkzxupQk5MoTeiZumapdwi0LgV2JjN 3RraJvRnKZm3YTDysw8oYz1b7TFFcyxsZGYZXRkKptpVT+/XE27+1QI0DQL9egmF id8VGyGqveYT92MTI6c2BdkO0FVYOanZBbhNFO/AKXFWyCcor+WnOjUxaPUZ+HH6 n9S0twoY8TvAlgZBgbS+M6grcKTSKAvPc2iCScIvw598ubrcGwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO8DWhGTw47aMs+azzxLr6fWrGjdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvZTJmNjU1NmQtN2NkNC0z OTVlLTlhNWQtOGM3YzlhZWU4YTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGW6JG8n0tfhBZf0vNfqGBmorkPONmo5ECENmivYND2TlWvYXLH3 m4ArV2alrmkkw4DoOQBwmWhAFxKQwyOczmK46Nn63sc044W31XDJUYTNgssruws+ FtxmvP7X7NVrklpJm6cCVmKr8bxINAlx5o4V7y9bJeQaiNI4gz63PFC9X4d5Ki6r Ans83pd965hKHdRAEDxxcv0TE/xk3iLydUOcdZ4zFOstkVuB8mBPpsr3l2t/0e5m nA4mPBpFRtSleWBTTo8oLWvvexduMgciABqyY0qq0PZPWt8YE1lCTUS2AvLVfp8k 01Vzi0hAbEM1s2DrOzUy/L/h6ZRCWECld2E= -----END CERTIFICATE-----Generated at Sat Apr 26 19:25:25 2025 by rpki-client