$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/0bfb4f24-691b-3b97-8078-a89a8a850b40.roa File: 0bfb4f24-691b-3b97-8078-a89a8a850b40.roa (raw, json) Hash identifier: er0SG8vOKO9vpvDuSNbWfhXXZYbrdOSWQpKtFcDtzVw= Subject key identifier: 99:03:32:96:93:AC:1B:19:35:9A:4F:E0:3C:B9:CD:42:60:51:47:DC Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285848A830AA55FD72EC261AA34200 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/0bfb4f24-691b-3b97-8078-a89a8a850b40.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 9009 IP address blocks: 2607:740:25::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:aa:55:fd:72:ec:26:1a:a3:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=f18751f2-75c9-4f59-b582-28d0b3ab258a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e4:81:41:e4:b6:b0:22:ee:94:2c:73:a1:61: 13:5b:b4:d1:d0:37:b2:cc:f5:f3:5c:eb:80:66:bf: b1:9e:79:e1:7c:75:1c:1c:04:1b:db:56:da:48:87: ed:3e:e7:5b:13:8f:66:46:8f:f6:be:30:c4:8a:a2: d2:31:63:7c:fc:cc:7a:8e:5d:52:0d:78:86:41:a2: 8a:99:1b:c9:18:07:ac:c2:22:02:80:58:76:be:86: a9:07:a5:b1:b2:a5:d9:8c:1d:66:2a:74:f3:7f:15: 05:37:47:47:d4:0c:4b:c7:31:79:1f:ee:3c:a5:c1: 76:58:f1:eb:0b:a7:e2:90:6b:e1:2a:ab:49:88:52: d5:37:8e:99:ee:e4:5b:a9:32:f1:23:e6:2c:b2:ca: 66:ee:a8:dd:a7:2f:cf:6a:67:38:5c:01:51:01:f6: 13:c9:f9:ff:f8:df:6b:9d:e1:80:f2:96:4d:d1:4d: 30:16:81:0c:d1:9f:05:cb:e8:76:57:c3:c6:c2:49: a4:e2:6d:e9:d7:9a:1b:75:7e:ab:89:00:d3:e1:6c: cf:51:d5:23:04:e0:91:a9:fe:da:46:0a:1e:25:07: 36:e9:a0:1b:72:fe:e4:78:e7:bb:cd:8a:d9:a5:46: 94:d5:81:33:9b:51:54:23:0d:5d:f8:e9:de:10:fc: a0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:03:32:96:93:AC:1B:19:35:9A:4F:E0:3C:B9:CD:42:60:51:47:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/0bfb4f24-691b-3b97-8078-a89a8a850b40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:25::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:c0:1e:39:72:47:32:8b:be:60:69:a7:d6:53:a1:c0:90:8d: 74:6b:bc:2b:88:fa:80:d9:0d:37:e8:d3:4d:28:38:75:c5:df: d8:4f:9b:40:06:3f:61:f7:92:06:04:0b:21:43:16:35:53:0b: 27:0e:af:fe:3a:0c:bd:dc:0f:f5:f0:09:3d:7f:de:a6:6b:cb: 6a:72:47:fc:86:3c:01:d1:c7:35:ca:96:9c:2c:bb:fe:89:7c: e0:98:9e:04:c5:8a:18:9d:4a:40:a5:e1:a2:f3:c7:8f:55:7d: ac:9c:3e:42:eb:6a:e4:a0:4b:75:ff:30:2a:7f:79:14:19:ec: 6c:af:79:fd:73:eb:c9:6a:62:08:a9:be:25:82:6d:6b:38:99: 97:62:f8:2f:f3:19:f6:32:b2:7c:ab:05:14:f6:e9:e3:61:62: 44:34:07:12:ae:a4:af:97:f7:87:02:52:39:7a:bc:16:f3:35: 3b:8a:77:3b:b3:c4:24:da:2b:56:00:07:3f:fd:c1:40:6e:58: c7:ee:da:41:9b:c9:67:3a:90:4c:fd:ee:66:1d:5a:32:03:08: 3d:72:27:0f:ab:1e:d1:74:49:5a:9f:6b:c6:55:7e:ab:f8:be: 56:e0:cf:23:47:c5:ca:b0:de:5a:7a:64:bc:78:89:60:23:f3: 5a:e0:b1:d5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEioMKpV/XLsJhqjQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk ZjE4NzUxZjItNzVjOS00ZjU5LWI1ODItMjhkMGIzYWIyNThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+SBQeS2sCLulCxzoWETW7TR0DeyzPXzXOuA Zr+xnnnhfHUcHAQb21baSIftPudbE49mRo/2vjDEiqLSMWN8/Mx6jl1SDXiGQaKK mRvJGAeswiICgFh2voapB6WxsqXZjB1mKnTzfxUFN0dH1AxLxzF5H+48pcF2WPHr C6fikGvhKqtJiFLVN46Z7uRbqTLxI+Yssspm7qjdpy/Pamc4XAFRAfYTyfn/+N9r neGA8pZN0U0wFoEM0Z8Fy+h2V8PGwkmk4m3p15obdX6riQDT4WzPUdUjBOCRqf7a RgoeJQc26aAbcv7keOe7zYrZpUaU1YEzm1FUIw1d+OneEPygVwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJkDMpaTrBsZNZpP4Dy5zUJgUUfcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvMGJmYjRmMjQtNjkxYi0z Yjk3LTgwNzgtYTg5YThhODUwYjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAAl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFvAHjlyRzKLvmBpp9ZTocCQjXRrvCuI+oDZDTfo000oOHXF39hP m0AGP2H3kgYECyFDFjVTCycOr/46DL3cD/XwCT1/3qZry2pyR/yGPAHRxzXKlpws u/6JfOCYngTFihidSkCl4aLzx49VfaycPkLrauSgS3X/MCp/eRQZ7Gyvef1z68lq YgipviWCbWs4mZdi+C/zGfYysnyrBRT26eNhYkQ0BxKupK+X94cCUjl6vBbzNTuK dzuzxCTaK1YABz/9wUBuWMfu2kGbyWc6kEz97mYdWjIDCD1yJw+rHtF0SVqfa8ZV fqv4vlbgzyNHxcqw3lp6ZLx4iWAj81rgsdU= -----END CERTIFICATE-----Generated at Mon Apr 7 12:06:31 2025 by rpki-client