$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/0e9fadf4-f7bc-3ae0-9d69-9145fe04e17b.roa File: 0e9fadf4-f7bc-3ae0-9d69-9145fe04e17b.roa (raw, json) Hash identifier: ygkm/jQsmZ0ZSBISLMmyvZEKlVKcl46Bhd+BtV5plu4= Subject key identifier: 71:53:9A:84:9C:80:1C:C4:D6:07:26:AD:3A:A8:3C:B8:3F:DA:F0:A1 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584A6825FD58970CCA8656E00380 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/0e9fadf4-f7bc-3ae0-9d69-9145fe04e17b.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 9009 IP address blocks: 2607:740:3b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:25:fd:58:97:0c:ca:86:56:e0:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=c3a465f6-16ed-4ba9-80c4-aa0a4fe4f325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fd:ba:9f:29:44:f9:d0:2c:df:12:02:50:65: dd:e9:d7:9c:54:06:f3:17:4e:9c:2f:fa:b9:0c:cc: 9b:ae:a6:09:2c:81:9f:6e:a0:60:08:26:08:8b:45: db:43:93:7d:82:c0:97:af:8b:b0:77:fb:ed:dd:c2: ba:66:ef:11:d3:b2:21:ba:09:1d:93:45:1e:0a:f6: b8:d5:b9:bf:04:7b:c8:0c:88:e2:a5:95:36:11:0f: a2:31:78:02:b6:58:ee:39:f0:63:7c:f6:5a:74:f7: b7:82:da:5f:74:f2:47:1d:51:fc:d0:7e:f1:80:25: 13:74:1f:a4:01:9b:8f:cd:f3:56:4b:69:32:b2:76: 76:5c:32:b0:96:c1:a7:46:fb:f9:7e:ca:bb:20:75: 08:ac:07:93:13:5c:ea:6d:f4:3d:77:be:d3:19:31: 80:64:c4:b8:00:e0:64:7c:6d:5a:fd:e0:ce:39:bb: a7:45:99:71:d9:19:83:4e:e1:59:71:cd:36:52:12: 7f:ae:26:78:5f:78:db:5f:b3:8d:6e:94:6d:87:96: 6f:eb:4b:6a:7d:01:9c:3d:57:33:b4:aa:ca:5a:38: 52:0f:80:40:8d:37:74:14:ac:94:b3:4e:28:79:d2: c0:74:66:ce:db:04:a7:8f:af:79:dc:90:c2:ac:5a: 1e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:53:9A:84:9C:80:1C:C4:D6:07:26:AD:3A:A8:3C:B8:3F:DA:F0:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/0e9fadf4-f7bc-3ae0-9d69-9145fe04e17b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:3b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:f3:c3:c2:b2:29:b4:37:58:99:be:c3:80:94:4a:21:c0:e5: d3:7d:ca:7f:13:49:19:4d:44:8a:00:b2:7e:55:46:32:5d:ef: 90:b7:8d:44:87:96:e3:c5:7a:41:f9:16:53:4f:8b:df:f3:8a: c6:9c:a6:8f:e1:ce:53:83:e9:fb:94:25:1a:ad:ec:8c:f5:45: 5e:64:76:3e:cc:fb:cd:c6:4b:ee:d6:f3:18:f3:88:c6:aa:91: ac:90:95:2d:4e:f0:ba:02:e7:e2:98:13:89:1e:26:e9:56:4e: 50:0f:0f:e2:f8:3d:7e:8b:5a:70:2c:bf:d4:c2:eb:f9:ba:4f: 93:b8:78:6c:ee:e6:69:ea:29:cf:e1:b2:ea:e6:1a:54:37:cb: 7b:cd:49:00:11:b3:89:20:5f:bf:fd:1f:d6:2c:36:b5:0c:be: 4e:e7:21:b5:34:6a:54:63:0e:14:4e:95:45:76:37:49:7e:4d: 44:9f:34:4e:c5:94:27:b2:6b:90:90:d8:c2:c7:f3:2f:7b:b6: 68:e3:5f:3d:1d:08:e1:45:ab:44:02:39:a1:96:6f:2b:54:ec: 2d:dc:a4:73:1b:8e:49:ed:88:ab:2c:33:88:e1:a6:eb:dc:a0: b9:17:50:7d:5b:8d:9d:0a:37:2d:27:57:c0:18:d4:bc:b6:6b: 70:34:ad:40 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpoJf1YlwzKhlbgA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk YzNhNDY1ZjYtMTZlZC00YmE5LTgwYzQtYWEwYTRmZTRmMzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqP26nylE+dAs3xICUGXd6decVAbzF06cL/q5 DMybrqYJLIGfbqBgCCYIi0XbQ5N9gsCXr4uwd/vt3cK6Zu8R07Ihugkdk0UeCva4 1bm/BHvIDIjipZU2EQ+iMXgCtljuOfBjfPZadPe3gtpfdPJHHVH80H7xgCUTdB+k AZuPzfNWS2kysnZ2XDKwlsGnRvv5fsq7IHUIrAeTE1zqbfQ9d77TGTGAZMS4AOBk fG1a/eDOObunRZlx2RmDTuFZcc02UhJ/riZ4X3jbX7ONbpRth5Zv60tqfQGcPVcz tKrKWjhSD4BAjTd0FKyUs04oedLAdGbO2wSnj6953JDCrFoe5QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHFTmoScgBzE1gcmrTqoPLg/2vChMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvMGU5ZmFkZjQtZjdiYy0z YWUwLTlkNjktOTE0NWZlMDRlMTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAA7 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADXzw8KyKbQ3WJm+w4CUSiHA5dN9yn8TSRlNRIoAsn5VRjJd75C3 jUSHluPFekH5FlNPi9/zisacpo/hzlOD6fuUJRqt7Iz1RV5kdj7M+83GS+7W8xjz iMaqkayQlS1O8LoC5+KYE4keJulWTlAPD+L4PX6LWnAsv9TC6/m6T5O4eGzu5mnq Kc/hsurmGlQ3y3vNSQARs4kgX7/9H9YsNrUMvk7nIbU0alRjDhROlUV2N0l+TUSf NE7FlCeya5CQ2MLH8y97tmjjXz0dCOFFq0QCOaGWbytU7C3cpHMbjkntiKssM4jh puvcoLkXUH1bjZ0KNy0nV8AY1Ly2a3A0rUA= -----END CERTIFICATE-----Generated at Sat Jul 12 13:45:05 2025 by rpki-client