$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/0add0c68-6307-3a1c-9a64-fd4561e55abd.roa File: 0add0c68-6307-3a1c-9a64-fd4561e55abd.roa (raw, json) Hash identifier: 4qclfKbnmrSLNlhqMWSI/kfby9U/9x47Na/GIQ644Sk= Subject key identifier: 88:23:78:ED:CE:E0:EA:C7:81:E0:86:4F:98:C8:E4:EA:F4:2F:A0:6D Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285848EF613FC27BD680D66D25F980 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/0add0c68-6307-3a1c-9a64-fd4561e55abd.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 52000 IP address blocks: 2607:740:5f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:3f:c2:7b:d6:80:d6:6d:25:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=8ec5fe2e-f3e4-46f9-b6db-904ba31deeed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1a:df:de:0f:47:22:a9:34:6b:0b:fb:90:3c: 6a:43:a2:61:2b:30:37:89:d3:c1:a0:f6:1e:cc:2a: ac:c9:bd:7f:b7:bb:60:50:6c:b3:b8:a9:2e:c0:c9: c3:88:5e:bd:c3:a0:c7:88:d5:4b:e4:71:77:ff:55: a7:5d:22:90:54:bc:0f:db:e3:81:c2:54:79:35:a5: c1:13:e5:04:7c:aa:bc:d8:d5:c9:1d:da:66:24:2b: b0:b4:32:dc:60:05:3f:18:8b:fd:fa:ce:cf:fe:7f: 39:4f:26:bf:e5:28:f7:81:16:8a:0e:1d:1c:94:8d: 1a:3e:6a:40:3e:52:8a:e1:51:b1:43:66:fc:7e:fd: 8a:c1:a6:4c:97:6c:35:89:6c:3f:15:7a:1e:b9:7e: b1:e2:43:8e:c8:27:57:1c:33:99:e5:1a:8f:84:12: 9a:5b:18:75:c5:62:f4:1b:71:bb:09:f2:dc:3e:c5: 18:8b:e5:63:09:56:da:83:6b:f5:bb:6e:60:57:11: f0:a2:7e:97:83:a9:d3:29:00:f6:07:2a:2f:4d:7b: 0d:fa:f5:06:df:95:c0:19:1e:72:ad:c1:8f:e5:1d: 72:ea:cd:f1:59:67:21:70:a7:9c:4d:1d:df:b0:58: e9:0a:04:9b:4c:a8:b0:e7:74:4c:6e:0b:29:03:c8: f2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:23:78:ED:CE:E0:EA:C7:81:E0:86:4F:98:C8:E4:EA:F4:2F:A0:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/0add0c68-6307-3a1c-9a64-fd4561e55abd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:5f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:22:2a:d7:dd:11:82:06:d7:22:b0:60:69:8d:b0:b4:8b:5e: 75:5b:fe:b9:4e:03:bb:0f:0f:53:c8:68:9e:eb:9d:43:b4:d9: 3d:95:8b:67:83:c9:16:7b:f1:81:54:ae:cf:7d:59:03:6e:be: 76:95:d2:10:91:a7:ff:6d:3f:1f:fd:50:cb:84:37:57:4d:e1: ff:9f:fd:47:26:4b:d5:31:1a:29:78:d5:d3:3c:80:4d:3c:6f: df:c9:a7:b2:af:05:77:b5:c7:d6:24:63:d9:11:be:63:ce:3f: a1:46:52:6c:81:57:d9:7f:95:d5:c3:62:f5:e9:3c:eb:47:bf: 4f:0b:db:a8:8a:24:cb:f2:45:ea:a5:e8:08:ad:d8:4a:10:a0: 68:b2:9f:c1:36:7a:4e:b5:70:33:98:cc:4a:dd:39:d8:05:28: 84:4b:55:40:a3:5a:1a:59:82:c8:1c:42:aa:1a:ba:08:1c:03: 89:9f:54:82:10:4e:40:f8:29:fd:1a:27:86:89:b1:b6:22:c3: ad:eb:20:36:f1:de:59:e5:ab:c7:67:c9:42:0e:7a:0b:ba:32: 47:28:5f:3a:07:bb:36:c4:85:1b:d3:5c:3a:a9:39:26:97:31: 66:de:d6:6c:41:09:ae:a8:08:88:b8:37:60:10:68:e0:71:64: 16:5f:a5:a0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjvYT/Ce9aA1m0l+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk OGVjNWZlMmUtZjNlNC00NmY5LWI2ZGItOTA0YmEzMWRlZWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxrf3g9HIqk0awv7kDxqQ6JhKzA3idPBoPYe zCqsyb1/t7tgUGyzuKkuwMnDiF69w6DHiNVL5HF3/1WnXSKQVLwP2+OBwlR5NaXB E+UEfKq82NXJHdpmJCuwtDLcYAU/GIv9+s7P/n85Tya/5Sj3gRaKDh0clI0aPmpA PlKK4VGxQ2b8fv2KwaZMl2w1iWw/FXoeuX6x4kOOyCdXHDOZ5RqPhBKaWxh1xWL0 G3G7CfLcPsUYi+VjCVbag2v1u25gVxHwon6Xg6nTKQD2ByovTXsN+vUG35XAGR5y rcGP5R1y6s3xWWchcKecTR3fsFjpCgSbTKiw53RMbgspA8jyNwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIgjeO3O4OrHgeCGT5jI5Or0L6BtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvMGFkZDBjNjgtNjMwNy0z YTFjLTlhNjQtZmQ0NTYxZTU1YWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQABf MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABwiKtfdEYIG1yKwYGmNsLSLXnVb/rlOA7sPD1PIaJ7rnUO02T2V i2eDyRZ78YFUrs99WQNuvnaV0hCRp/9tPx/9UMuEN1dN4f+f/UcmS9UxGil41dM8 gE08b9/Jp7KvBXe1x9YkY9kRvmPOP6FGUmyBV9l/ldXDYvXpPOtHv08L26iKJMvy Reql6Ait2EoQoGiyn8E2ek61cDOYzErdOdgFKIRLVUCjWhpZgsgcQqoauggcA4mf VIIQTkD4Kf0aJ4aJsbYiw63rIDbx3lnlq8dnyUIOegu6MkcoXzoHuzbEhRvTXDqp OSaXMWbe1mxBCa6oCIi4N2AQaOBxZBZfpaA= -----END CERTIFICATE-----Generated at Thu May 8 19:05:27 2025 by rpki-client