$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/c9742980-b03c-3933-a5f7-2e8db38a20b9.roa File: c9742980-b03c-3933-a5f7-2e8db38a20b9.roa (raw, json) Hash identifier: mo1etOXfrv0V2KqY0bvNdxyDtsRXrW4VY0OYOB/oMxU= Subject key identifier: B0:2D:37:86:F1:9B:1C:8D:B1:ED:0D:0E:54:0C:DE:33:FF:22:73:C1 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584A3A157DE81A952AD4B525A020 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/c9742980-b03c-3933-a5f7-2e8db38a20b9.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 9009 IP address blocks: 2607:740:57::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:7d:e8:1a:95:2a:d4:b5:25:a0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=4f20d445-c584-47e2-82b3-a322296758d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:13:3f:77:fe:74:28:c5:c4:12:52:3c:cd:5d: fc:7a:e5:b1:6d:fc:92:b3:00:91:e2:66:28:0f:d1: 45:6a:22:ac:7d:46:30:03:6b:f8:2e:9c:07:d9:e8: a8:6e:30:8e:df:93:02:c9:1b:a9:de:c5:fd:84:79: ca:56:4e:07:5a:a6:7c:7a:5e:ea:46:f1:72:d7:21: 6b:92:dc:a2:cc:8f:5f:42:13:95:c9:ad:de:4c:ba: 31:82:87:7b:1b:e1:d5:5b:ef:67:ff:2d:c2:e0:4d: 22:bf:b6:bf:db:2f:4b:0d:08:eb:e2:28:6d:f3:36: 2c:0b:ed:6a:03:be:84:f0:75:ae:99:74:56:02:f2: 0e:79:75:58:f3:c5:d9:f2:01:8c:13:a5:89:02:a1: ab:43:f9:e2:e1:13:20:6d:ce:d0:ed:69:2a:d5:44: a9:62:89:90:d5:f7:37:c1:c2:01:9f:e3:ae:71:da: 6f:b5:9e:8c:e7:df:88:3a:5d:75:5e:cc:f9:56:c0: 69:3e:60:c1:71:c2:2e:1a:42:23:95:72:0a:68:c0: 69:2d:99:a3:80:1f:c3:bb:a3:38:cf:c5:9a:2e:81: 16:08:38:05:22:e5:65:b8:b7:5d:65:f8:c1:dc:36: 3e:bd:b5:54:ee:04:51:ec:2b:61:fa:d2:f9:d1:fa: ae:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:2D:37:86:F1:9B:1C:8D:B1:ED:0D:0E:54:0C:DE:33:FF:22:73:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/c9742980-b03c-3933-a5f7-2e8db38a20b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:57::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:9d:e5:ef:8c:0f:16:8f:07:62:8c:29:f6:53:05:4c:c7:a1: e9:6f:5d:06:e7:49:e5:b5:f7:ac:29:32:0a:27:62:a2:89:ce: 3b:e7:65:b5:73:c2:55:96:da:81:e8:a4:bc:17:93:70:fe:6d: 3c:b5:9e:10:6e:ba:dd:a7:b7:55:3e:bd:99:45:14:ff:65:fd: fa:d4:df:c0:80:22:7c:b6:cf:c9:e7:89:94:86:60:b3:fe:37: 46:eb:9c:13:c4:b2:ab:53:c9:c9:9f:3c:f3:29:f3:96:af:02: ce:66:ac:4c:5f:ac:06:08:3c:50:8e:d7:df:b8:9c:85:b7:a9: 82:9c:06:16:10:ad:42:0a:c4:75:47:b8:a2:2b:a3:af:e3:31: 5d:b5:88:9d:a0:47:6c:39:03:b5:8c:c9:68:0e:48:63:75:e9: cf:a9:90:df:e1:2e:ce:9a:c7:00:e6:6a:73:23:ed:9e:66:52: 01:4a:aa:8e:84:25:ce:d3:59:d9:21:98:79:d9:c3:ac:c6:45: 53:98:da:53:2e:f6:9d:a0:b8:3e:6c:60:75:7d:4e:0b:7a:dd: a1:d7:2a:3c:93:39:df:7f:57:47:53:9a:b2:dc:85:eb:35:82: 71:5a:e4:31:8f:8d:57:b1:fc:68:be:03:b6:5a:37:10:f1:b6: d5:50:ee:b0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo6FX3oGpUq1LUloCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk NGYyMGQ0NDUtYzU4NC00N2UyLTgyYjMtYTMyMjI5Njc1OGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBM/d/50KMXEElI8zV38euWxbfySswCR4mYo D9FFaiKsfUYwA2v4LpwH2eiobjCO35MCyRup3sX9hHnKVk4HWqZ8el7qRvFy1yFr ktyizI9fQhOVya3eTLoxgod7G+HVW+9n/y3C4E0iv7a/2y9LDQjr4iht8zYsC+1q A76E8HWumXRWAvIOeXVY88XZ8gGME6WJAqGrQ/ni4RMgbc7Q7Wkq1USpYomQ1fc3 wcIBn+OucdpvtZ6M59+IOl11Xsz5VsBpPmDBccIuGkIjlXIKaMBpLZmjgB/Du6M4 z8WaLoEWCDgFIuVluLddZfjB3DY+vbVU7gRR7Cth+tL50fqu0wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLAtN4bxmxyNse0NDlQM3jP/InPBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvYzk3NDI5ODAtYjAzYy0z OTMzLWE1ZjctMmU4ZGIzOGEyMGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQABX MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABad5e+MDxaPB2KMKfZTBUzHoelvXQbnSeW196wpMgonYqKJzjvn ZbVzwlWW2oHopLwXk3D+bTy1nhBuut2nt1U+vZlFFP9l/frU38CAIny2z8nniZSG YLP+N0brnBPEsqtTycmfPPMp85avAs5mrExfrAYIPFCO19+4nIW3qYKcBhYQrUIK xHVHuKIro6/jMV21iJ2gR2w5A7WMyWgOSGN16c+pkN/hLs6axwDmanMj7Z5mUgFK qo6EJc7TWdkhmHnZw6zGRVOY2lMu9p2guD5sYHV9Tgt63aHXKjyTOd9/V0dTmrLc hes1gnFa5DGPjVex/Gi+A7ZaNxDxttVQ7rA= -----END CERTIFICATE-----Generated at Sun Jun 29 06:59:45 2025 by rpki-client