$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/7e70c2fa-0c7d-33af-85d6-b8d06ca7deb9.roa File: 7e70c2fa-0c7d-33af-85d6-b8d06ca7deb9.roa (raw, json) Hash identifier: tsWFjn28nfx5CoWOLp5H2cRqfFBqe6aoXsbrmI9GS/c= Subject key identifier: C0:60:64:5D:75:92:44:FB:42:6C:19:14:25:E5:28:16:68:85:07:C8 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F432858498769B51C1A2E1B52026DEA80 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/7e70c2fa-0c7d-33af-85d6-b8d06ca7deb9.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 9009 IP address blocks: 2607:740:22::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:b5:1c:1a:2e:1b:52:02:6d:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=560b5bd0-0019-4ef2-8c85-20fae0771eab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5e:4d:80:a5:af:cc:6a:60:4e:0b:b5:c7:34: 12:d0:36:9b:f7:f5:51:2a:f7:5e:84:86:d6:92:38: 90:cb:8f:4a:89:f3:68:45:ba:d3:07:d1:e1:a2:90: ae:48:e7:cb:d2:dc:bd:33:9f:e3:b1:24:b3:68:67: f7:30:8b:c8:49:66:7b:e0:27:eb:83:8c:82:67:ee: 71:d1:5e:1f:31:63:77:da:da:9b:7b:42:e7:8d:31: 88:ed:0a:25:ae:50:6f:dd:43:45:2d:37:15:b3:a6: 45:4b:44:15:b9:57:38:6e:d5:ad:31:d6:00:5c:17: be:85:01:4a:e4:28:c7:95:06:c3:c1:74:a2:f6:51: 95:54:bd:39:86:4c:46:63:a6:eb:54:d9:04:b5:69: 5f:b4:49:2c:bd:25:fb:e3:d7:f8:85:b4:50:a6:9b: aa:4b:76:33:ce:09:e0:eb:99:72:87:7f:79:bd:21: ce:c3:3d:73:2a:5e:f5:75:d0:18:c1:e0:de:36:5b: ab:a7:dd:26:5b:7f:76:51:a4:30:fb:0d:a1:1d:8d: 5f:1d:61:dd:00:91:9c:8d:d9:6f:9e:ab:42:3a:07: 95:0b:ff:7e:c6:ba:20:24:fb:30:85:70:aa:19:8e: eb:0c:2f:b7:c7:58:67:ba:8e:32:4c:eb:dd:1f:77: 17:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:60:64:5D:75:92:44:FB:42:6C:19:14:25:E5:28:16:68:85:07:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/7e70c2fa-0c7d-33af-85d6-b8d06ca7deb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:22::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:5d:5e:e2:27:78:c2:25:8c:60:bd:87:ad:84:64:2e:db:16: 39:87:d4:d4:56:97:7b:24:b5:42:8c:aa:a0:bb:10:0c:7b:73: 34:69:3c:15:72:d2:91:1e:5d:ef:92:9b:8d:9d:f9:f6:b6:c1: eb:d9:d4:19:c0:8f:ba:19:87:85:3a:9a:4b:d3:39:a3:c2:7e: 54:6f:72:5d:9b:03:1a:09:3f:2b:9c:1b:fb:03:c0:62:67:d8: 67:f3:6f:5b:a6:c8:f9:ef:e5:e9:de:cc:3f:08:08:9d:fb:0e: c0:92:df:4c:45:bb:af:79:41:57:bb:22:11:68:82:75:4a:80: 2e:14:e9:60:36:9f:c0:bc:79:11:eb:9b:18:09:f5:d7:81:02: 96:cc:77:af:fa:a7:61:73:af:e3:bc:43:7a:8f:51:e1:1a:b7: 9f:2d:e6:3e:f5:cb:58:16:02:3d:f5:b1:2d:d1:b1:4e:04:aa: 84:86:2b:3e:59:44:53:a2:6c:2f:bd:c2:1f:58:75:e7:ab:5e: d6:9b:fd:aa:5c:5f:22:11:a7:5c:ea:3d:ab:a9:6f:e0:1c:c3: 8e:07:5d:52:13:85:3e:ca:41:e9:dc:38:54:d4:05:77:d6:47: 8a:13:4d:77:88:66:10:ce:a1:24:8a:a0:a2:e0:2c:ea:43:2f: 20:38:3c:42 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmHabUcGi4bUgJt6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk NTYwYjViZDAtMDAxOS00ZWYyLThjODUtMjBmYWUwNzcxZWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwV5NgKWvzGpgTgu1xzQS0Dab9/VRKvdehIbW kjiQy49KifNoRbrTB9HhopCuSOfL0ty9M5/jsSSzaGf3MIvISWZ74Cfrg4yCZ+5x 0V4fMWN32tqbe0LnjTGI7QolrlBv3UNFLTcVs6ZFS0QVuVc4btWtMdYAXBe+hQFK 5CjHlQbDwXSi9lGVVL05hkxGY6brVNkEtWlftEksvSX749f4hbRQppuqS3Yzzgng 65lyh395vSHOwz1zKl71ddAYweDeNlurp90mW392UaQw+w2hHY1fHWHdAJGcjdlv nqtCOgeVC/9+xrogJPswhXCqGY7rDC+3x1hnuo4yTOvdH3cXOwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMBgZF11kkT7QmwZFCXlKBZohQfIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvN2U3MGMyZmEtMGM3ZC0z M2FmLTg1ZDYtYjhkMDZjYTdkZWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAAi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB9dXuIneMIljGC9h62EZC7bFjmH1NRWl3sktUKMqqC7EAx7czRp PBVy0pEeXe+Sm42d+fa2wevZ1BnAj7oZh4U6mkvTOaPCflRvcl2bAxoJPyucG/sD wGJn2Gfzb1umyPnv5enezD8ICJ37DsCS30xFu695QVe7IhFognVKgC4U6WA2n8C8 eRHrmxgJ9deBApbMd6/6p2Fzr+O8Q3qPUeEat58t5j71y1gWAj31sS3RsU4EqoSG Kz5ZRFOibC+9wh9YdeerXtab/apcXyIRp1zqPaupb+Acw44HXVIThT7KQencOFTU BXfWR4oTTXeIZhDOoSSKoKLgLOpDLyA4PEI= -----END CERTIFICATE-----Generated at Sat May 10 04:48:13 2025 by rpki-client