$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f7d21d96-d256-3aab-9e7e-57e21046fd47.roa File: f7d21d96-d256-3aab-9e7e-57e21046fd47.roa (raw, json) Hash identifier: 0uwAuB9LABiTVGQi1hzWyV503K1XVa7qan+FeZ82XOk= Subject key identifier: 62:0D:58:DE:15:2D:12:AE:A0:AA:5D:E0:79:DC:7F:43:98:43:CF:98 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584988CF1B044CC4040DCC174980 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f7d21d96-d256-3aab-9e7e-57e21046fd47.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 9009 IP address blocks: 2607:740:35::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:1b:04:4c:c4:04:0d:cc:17:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=c98659d7-dd49-4704-914b-c6180acb6831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:2f:62:f7:4f:49:8a:b0:0d:15:4e:88:a8:e6: 65:6f:c1:a0:17:b2:cf:4a:5a:91:fd:c2:e7:14:88: 32:ba:4f:2c:a5:9c:cd:f7:54:78:a4:01:12:78:c1: f4:36:57:ad:f6:cc:f6:8f:b8:ce:72:dd:ee:8b:e9: 8f:c8:2c:1d:44:a0:36:b8:e2:a5:49:39:64:47:f1: c5:09:6b:04:dd:f7:72:d6:95:54:6f:de:f2:c5:e5: f0:fe:19:a1:16:2b:bd:3c:55:d5:d8:7c:4a:fe:a2: 7d:62:56:ce:68:29:f0:28:30:17:e2:cc:5f:ad:0a: 83:17:4a:88:f6:e0:c6:bf:2a:df:3f:08:0f:ab:cb: 9e:b8:af:99:e1:7d:e9:72:45:40:2c:27:f1:fa:08: 9c:22:bc:a4:a0:61:86:68:57:e2:6a:6f:e8:88:26: cb:f6:34:72:2a:b1:b3:80:42:16:4b:fe:73:c0:ff: 95:d2:97:43:62:43:92:ef:79:ca:f7:8e:42:df:b2: 4d:5d:73:8a:87:df:06:e2:5b:7a:c1:f3:16:f4:29: ad:8c:ac:e8:25:47:18:70:62:d2:13:d2:2c:2d:39: 99:a0:15:0f:59:0a:09:cb:5d:04:37:f2:e7:7e:8d: 62:1a:e3:21:9d:b8:46:a4:76:a7:a2:78:75:0a:4d: 8a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:0D:58:DE:15:2D:12:AE:A0:AA:5D:E0:79:DC:7F:43:98:43:CF:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f7d21d96-d256-3aab-9e7e-57e21046fd47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:35::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:8a:27:85:d3:d6:dc:9b:2f:d8:c9:58:d6:08:12:e2:cf:ef: 68:02:47:41:8a:09:c1:4d:88:2b:9e:15:5b:00:8b:3c:91:b6: a0:a3:3c:63:30:af:c7:69:ec:78:ac:f2:c1:db:4b:18:5f:5a: 63:05:d8:58:62:aa:1c:b6:35:b8:64:e8:13:d0:b9:aa:f1:09: ff:59:9e:29:de:26:0c:96:e2:39:2a:ab:7c:40:e4:94:37:5e: cc:e0:46:a3:79:1c:b3:f2:e9:73:4b:75:68:5e:9a:d9:6d:b9: 71:85:44:82:ac:b1:67:24:2b:fd:64:ee:63:8c:d7:75:51:8e: ce:8d:49:64:46:35:33:2d:8e:99:9c:52:f2:f5:51:cf:cd:c3: 1f:1c:41:7f:30:61:ae:a9:13:a6:10:38:5e:03:33:a2:c8:bf: 42:34:8c:2b:bf:a3:80:b9:ed:b2:58:bc:44:a2:6f:08:67:c3: c7:7d:71:5e:35:76:a0:45:cc:3e:24:bb:d4:03:5e:37:4c:25: a6:a3:f4:c7:11:ee:ef:c0:80:af:74:24:8a:d1:cc:b0:b1:8b: 9a:54:e4:12:80:35:47:45:e9:e2:c6:ed:73:82:5c:29:4a:9e: 5c:90:ac:29:36:3c:4f:1b:98:ab:ce:01:8d:cd:ef:64:47:6a: 77:9b:ad:ee -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIzxsETMQEDcwXSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk Yzk4NjU5ZDctZGQ0OS00NzA0LTkxNGItYzYxODBhY2I2ODMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3i9i909JirANFU6IqOZlb8GgF7LPSlqR/cLn FIgyuk8spZzN91R4pAESeMH0Nlet9sz2j7jOct3ui+mPyCwdRKA2uOKlSTlkR/HF CWsE3fdy1pVUb97yxeXw/hmhFiu9PFXV2HxK/qJ9YlbOaCnwKDAX4sxfrQqDF0qI 9uDGvyrfPwgPq8ueuK+Z4X3pckVALCfx+gicIrykoGGGaFfiam/oiCbL9jRyKrGz gEIWS/5zwP+V0pdDYkOS73nK945C37JNXXOKh98G4lt6wfMW9CmtjKzoJUcYcGLS E9IsLTmZoBUPWQoJy10EN/Lnfo1iGuMhnbhGpHanonh1Ck2KwwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGINWN4VLRKuoKpd4Hncf0OYQ8+YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvZjdkMjFkOTYtZDI1Ni0z YWFiLTllN2UtNTdlMjEwNDZmZDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAA1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAWKJ4XT1tybL9jJWNYIEuLP72gCR0GKCcFNiCueFVsAizyRtqCj PGMwr8dp7His8sHbSxhfWmMF2Fhiqhy2Nbhk6BPQuarxCf9ZnineJgyW4jkqq3xA 5JQ3XszgRqN5HLPy6XNLdWhemtltuXGFRIKssWckK/1k7mOM13VRjs6NSWRGNTMt jpmcUvL1Uc/Nwx8cQX8wYa6pE6YQOF4DM6LIv0I0jCu/o4C57bJYvESibwhnw8d9 cV41dqBFzD4ku9QDXjdMJaaj9McR7u/AgK90JIrRzLCxi5pU5BKANUdF6eLG7XOC XClKnlyQrCk2PE8bmKvOAY3N72RHanebre4= -----END CERTIFICATE-----Generated at Sat Apr 26 19:20:49 2025 by rpki-client