$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/53e8a298-6e33-32bc-8504-916a18ed40ab.roa File: 53e8a298-6e33-32bc-8504-916a18ed40ab.roa (raw, json) Hash identifier: O91/Ev3IpMXUYaIOK5F6/Da+ebzwWRJxS7gJ2aYB67I= Subject key identifier: A7:4B:74:9D:28:11:05:2D:19:E0:A1:51:7A:34:23:CD:29:E0:A2:72 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285849BDDA1EB9D2CEA993F0416D80 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/53e8a298-6e33-32bc-8504-916a18ed40ab.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 11990 IP address blocks: 2607:740:56::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:1e:b9:d2:ce:a9:93:f0:41:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=264c2b2b-dc2d-452b-9a4a-f4107dc94be6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7b:a5:6e:67:13:6f:a8:4b:21:cf:b8:bf:49: a3:b3:94:93:de:30:d1:da:0e:43:24:ff:27:ca:ba: 23:81:ab:c6:2f:e5:7e:a4:5e:6e:d3:c8:88:2a:55: 56:c2:8a:25:da:77:34:e6:4e:ef:6a:05:16:4e:cb: 9d:52:1c:08:d3:ca:db:60:98:ee:9c:e6:02:46:ea: 13:03:4a:cc:e9:66:cf:5a:0a:4b:ad:c3:d1:ec:ad: 1a:a5:0f:8f:d3:4a:e2:87:09:a8:f6:32:d4:77:a8: 0d:c7:6d:f5:e8:35:74:0a:ff:0e:30:4e:00:8c:47: bd:11:8f:15:c2:65:05:a2:fa:ff:0a:ca:85:98:02: 7e:93:83:4c:a8:18:09:d1:43:52:99:06:82:a6:d5: 5c:a7:2a:20:17:75:12:d5:a1:d9:d0:2d:08:fd:a8: 02:61:c2:52:24:c4:92:c6:db:0b:25:bc:2e:a6:36: d3:d8:bc:73:6f:d1:f4:96:d4:c4:39:92:b2:67:34: 61:a5:d3:74:f6:15:f4:71:0c:99:3f:70:06:30:59: bf:15:cf:36:ea:93:5d:59:5e:f6:dd:74:35:6b:20: b4:2c:40:09:e5:9b:f9:7e:a6:a6:4f:46:62:ae:c4: ba:e6:60:5b:10:23:44:ec:5d:f8:b6:ec:fb:ac:a0: 59:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:4B:74:9D:28:11:05:2D:19:E0:A1:51:7A:34:23:CD:29:E0:A2:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/53e8a298-6e33-32bc-8504-916a18ed40ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:56::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:ec:07:2c:83:e7:06:15:e8:b6:6b:e3:6b:71:8e:63:7f:53: cb:9a:87:1b:01:29:fb:74:17:4c:16:af:ee:3e:b0:b7:e2:f0: e4:80:5f:7c:2e:80:7e:a8:2b:69:4f:10:e8:94:d0:9d:aa:49: 33:06:53:71:2c:67:53:5e:a8:de:b2:b9:5e:bd:1d:24:e2:21: 69:b5:43:b5:26:65:27:c3:33:5b:44:13:e4:4b:0d:ca:d5:33: cf:f3:3c:21:42:84:1a:bb:29:18:6c:b5:28:3a:e9:51:3f:68: 24:fe:13:ab:c1:99:98:db:c1:77:78:27:c4:d1:97:96:4a:f2: a4:7f:7e:c4:a7:97:57:7e:fa:93:72:21:35:38:ab:5d:ac:41: 3d:17:22:ef:10:77:99:1f:41:67:e5:6f:60:a7:a9:2f:a0:37: 7f:5c:81:4b:d9:f9:f1:e9:01:a8:8e:85:9e:df:96:78:04:df: ee:0d:de:38:69:50:ff:3e:9a:22:1b:f3:5a:6f:1f:6e:6b:a7: 94:e0:12:fb:e1:77:81:2d:6e:db:10:5d:19:79:74:ff:9e:0e: 1b:42:86:ef:ca:9b:3c:02:29:30:2b:98:e7:e8:a9:81:12:84: 7e:5e:c3:eb:a4:d1:7b:80:31:e1:07:e4:77:ef:68:74:46:43: b0:dc:ad:e6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm92h650s6pk/BBbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk MjY0YzJiMmItZGMyZC00NTJiLTlhNGEtZjQxMDdkYzk0YmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnulbmcTb6hLIc+4v0mjs5ST3jDR2g5DJP8n yrojgavGL+V+pF5u08iIKlVWwool2nc05k7vagUWTsudUhwI08rbYJjunOYCRuoT A0rM6WbPWgpLrcPR7K0apQ+P00rihwmo9jLUd6gNx2316DV0Cv8OME4AjEe9EY8V wmUFovr/CsqFmAJ+k4NMqBgJ0UNSmQaCptVcpyogF3US1aHZ0C0I/agCYcJSJMSS xtsLJbwupjbT2Lxzb9H0ltTEOZKyZzRhpdN09hX0cQyZP3AGMFm/Fc826pNdWV72 3XQ1ayC0LEAJ5Zv5fqamT0ZirsS65mBbECNE7F34tuz7rKBZJQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKdLdJ0oEQUtGeChUXo0I80p4KJyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNTNlOGEyOTgtNmUzMy0z MmJjLTg1MDQtOTE2YTE4ZWQ0MGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQABW MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABDsByyD5wYV6LZr42txjmN/U8uahxsBKft0F0wWr+4+sLfi8OSA X3wugH6oK2lPEOiU0J2qSTMGU3EsZ1NeqN6yuV69HSTiIWm1Q7UmZSfDM1tEE+RL DcrVM8/zPCFChBq7KRhstSg66VE/aCT+E6vBmZjbwXd4J8TRl5ZK8qR/fsSnl1d+ +pNyITU4q12sQT0XIu8Qd5kfQWflb2CnqS+gN39cgUvZ+fHpAaiOhZ7flngE3+4N 3jhpUP8+miIb81pvH25rp5TgEvvhd4EtbtsQXRl5dP+eDhtChu/KmzwCKTArmOfo qYEShH5ew+uk0XuAMeEH5HfvaHRGQ7DcreY= -----END CERTIFICATE-----Generated at Sun May 11 15:42:40 2025 by rpki-client