$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/47bf5d33-51dd-3c34-a11c-252123b2256a.roa File: 47bf5d33-51dd-3c34-a11c-252123b2256a.roa (raw, json) Hash identifier: zNxRn800Qn9wBHAs/ZtfQXncjUuRE9v5pFtu5+/R6t0= Subject key identifier: 94:23:B4:50:34:34:D5:CD:E9:4B:DD:35:8A:36:FB:CA:47:A6:DA:B0 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584A46A5AFCE642920BB34477C58 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/47bf5d33-51dd-3c34-a11c-252123b2256a.roa Signing time: Sun 22 Jun 2025 13:01:03 +0000 ROA not before: Sun 22 Jun 2025 13:01:03 +0000 ROA not after: Sat 20 Sep 2025 13:01:03 +0000 asID: 9009 IP address blocks: 2607:740:5e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:46:a5:af:ce:64:29:20:bb:34:47:7c:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jun 22 13:01:03 2025 GMT Not After : Sep 20 13:01:03 2025 GMT Subject: CN=c9020b9d-0033-4d28-bc70-3218eb11ac55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:af:68:53:7e:66:f6:83:5f:28:5b:5c:31:0c: da:57:cc:01:7e:d2:42:46:ae:7f:62:1e:84:39:88: 7f:38:92:1d:08:18:44:6a:90:49:c4:05:ab:98:97: 68:31:34:aa:b6:a0:f8:ae:24:ef:03:56:5e:7d:29: 48:ae:69:94:10:28:b6:67:c9:1b:4a:8d:08:79:80: 4f:65:a6:60:00:14:c3:78:b2:4c:2c:af:0f:8a:46: a6:2f:50:72:9d:65:98:e3:ef:ac:13:ab:d0:01:73: c5:63:83:55:8b:3f:e4:0a:15:0c:d1:df:b9:34:7b: fa:1e:be:a3:d2:52:04:7e:75:2a:8e:db:12:e3:45: 94:31:fb:f0:50:f3:df:07:e9:50:e7:bf:b4:6d:da: 09:e1:5f:88:ed:e9:0f:9d:db:2f:7c:45:62:52:ee: 35:ae:6c:51:8f:a2:84:5d:4a:00:5f:44:52:ba:26: e5:4f:ec:51:f7:2e:24:2d:92:92:7f:30:cf:ec:e8: 6e:76:a8:ad:e5:67:ab:e0:19:9e:a5:8e:4f:55:96: 19:6f:3b:70:63:bc:75:ab:c7:55:58:e7:54:62:19: c9:de:f8:79:80:5c:5d:9c:fd:7a:1b:67:88:f7:30: 97:bc:cc:0c:79:e8:2a:61:fc:53:d5:ab:ad:fb:9c: 2e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:23:B4:50:34:34:D5:CD:E9:4B:DD:35:8A:36:FB:CA:47:A6:DA:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/47bf5d33-51dd-3c34-a11c-252123b2256a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:5e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:ed:c7:38:28:e3:00:dd:05:8a:d3:41:28:ff:78:62:74:a9: a3:a5:88:c1:f1:92:5a:58:5d:b9:9d:b6:e9:c6:ac:3d:73:57: b2:62:b5:56:31:e6:36:42:69:25:da:69:3e:f1:b1:26:9a:c1: 53:8d:3b:a0:eb:40:8d:7b:5d:b5:48:82:b8:d6:d8:95:25:d5: c2:72:34:c5:b6:57:06:c1:dd:08:16:ab:27:1c:a2:e1:b0:f3: 83:09:a7:82:e2:ee:a3:d3:71:5c:fd:3f:b0:69:3e:a2:6c:4b: 01:ba:01:57:bd:95:26:86:d9:a2:3f:07:43:9f:82:b0:51:58: 5d:a9:e8:a6:40:01:e1:9a:04:36:80:36:19:f0:71:d2:71:1c: 44:b9:5b:06:ec:02:70:aa:26:03:be:16:85:95:f1:f1:4f:b4: 33:b2:d8:41:ab:95:53:58:84:5a:26:78:4b:47:24:10:7c:8b: 55:81:0f:3b:1e:15:9f:c8:aa:e4:e9:f6:1a:7b:12:a0:d1:7a: 07:bd:d0:9b:00:39:6e:22:57:cf:a9:91:51:66:e8:a4:d7:8d: bd:4e:80:3d:03:1b:b5:61:84:5a:96:b8:2a:eb:82:00:6a:75: 64:58:cc:3a:18:d8:03:2c:96:4a:30:95:8f:5c:d8:cf:31:5c: 32:15:87:27 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpGpa/OZCkguzRHfFgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDYyMjEzMDEwM1oXDTI1MDkyMDEzMDEwM1owLzEtMCsGA1UEAxMk YzkwMjBiOWQtMDAzMy00ZDI4LWJjNzAtMzIxOGViMTFhYzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmq9oU35m9oNfKFtcMQzaV8wBftJCRq5/Yh6E OYh/OJIdCBhEapBJxAWrmJdoMTSqtqD4riTvA1ZefSlIrmmUECi2Z8kbSo0IeYBP ZaZgABTDeLJMLK8PikamL1BynWWY4++sE6vQAXPFY4NViz/kChUM0d+5NHv6Hr6j 0lIEfnUqjtsS40WUMfvwUPPfB+lQ57+0bdoJ4V+I7ekPndsvfEViUu41rmxRj6KE XUoAX0RSuiblT+xR9y4kLZKSfzDP7Ohudqit5Wer4BmepY5PVZYZbztwY7x1q8dV WOdUYhnJ3vh5gFxdnP16G2eI9zCXvMwMeegqYfxT1aut+5wu3wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJQjtFA0NNXN6UvdNYo2+8pHptqwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNDdiZjVkMzMtNTFkZC0z YzM0LWExMWMtMjUyMTIzYjIyNTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQABe MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE7txzgo4wDdBYrTQSj/eGJ0qaOliMHxklpYXbmdtunGrD1zV7Ji tVYx5jZCaSXaaT7xsSaawVONO6DrQI17XbVIgrjW2JUl1cJyNMW2VwbB3QgWqycc ouGw84MJp4Li7qPTcVz9P7BpPqJsSwG6AVe9lSaG2aI/B0OfgrBRWF2p6KZAAeGa BDaANhnwcdJxHES5WwbsAnCqJgO+FoWV8fFPtDOy2EGrlVNYhFomeEtHJBB8i1WB DzseFZ/IquTp9hp7EqDRege90JsAOW4iV8+pkVFm6KTXjb1OgD0DG7VhhFqWuCrr ggBqdWRYzDoY2AMslkowlY9c2M8xXDIVhyc= -----END CERTIFICATE-----Generated at Mon Jun 30 15:11:31 2025 by rpki-client