$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/0e9fadf4-f7bc-3ae0-9d69-9145fe04e17b.roa File: 0e9fadf4-f7bc-3ae0-9d69-9145fe04e17b.roa (raw, json) Hash identifier: YmdI1qFjZVbxBUxjVOMiv8pPajb+gja3jZjIBVx/vKQ= Subject key identifier: 80:A4:77:50:12:11:D4:CE:1C:F5:64:67:8E:E7:3E:49:77:83:50:DD Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285848A99622CA796A6142E3064180 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/0e9fadf4-f7bc-3ae0-9d69-9145fe04e17b.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 9009 IP address blocks: 2607:740:3b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:22:ca:79:6a:61:42:e3:06:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=1e0331b0-42a2-403c-9d60-a5ac4abe4f0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:45:55:87:33:fb:50:d0:27:fb:3a:68:cd:bc: d2:16:4f:fa:ea:74:ae:84:46:d3:6f:30:a1:f2:8a: e2:70:a5:27:cc:45:51:24:93:b2:7d:dc:62:d7:e2: 99:1d:8d:47:25:6b:48:49:1e:17:55:89:be:5f:d4: 53:28:09:32:d5:5e:c6:5d:a2:ab:f1:3f:b1:76:af: 23:80:86:ca:29:1b:e6:66:51:05:f5:54:ac:01:39: 55:19:ec:2e:a2:ba:59:0d:02:cf:34:c2:3d:c7:72: 8c:83:13:4e:83:9f:31:9c:96:4f:54:2e:d5:9b:ba: a3:42:ee:6d:d3:c0:88:13:e9:0d:08:21:34:f6:aa: a1:f4:be:bd:5c:c4:00:5d:0c:f7:0f:f7:2b:df:4d: 81:73:23:93:11:92:b4:ab:59:9c:f5:ea:06:70:b3: 8f:11:d8:c4:52:84:ca:95:b2:c9:d3:71:84:43:64: fa:ea:f2:f0:3b:88:da:66:64:74:27:ee:9c:83:55: 95:96:cd:19:cc:89:f1:26:c4:26:cd:da:02:9e:76: 81:70:d6:e8:5a:d2:1e:a7:5d:97:a2:86:00:08:94: 12:c1:e4:51:19:e6:1e:35:3e:eb:c6:8a:3c:a2:35: 30:b1:28:b3:78:25:12:e4:b2:a3:b1:f5:12:aa:95: 73:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:A4:77:50:12:11:D4:CE:1C:F5:64:67:8E:E7:3E:49:77:83:50:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/0e9fadf4-f7bc-3ae0-9d69-9145fe04e17b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:3b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:f8:f3:44:e8:e0:3d:40:06:1a:12:e3:f9:7e:f5:10:78:b2: c4:46:d9:f4:40:e5:03:49:58:8f:83:d4:fb:0e:b8:eb:9a:55: 1e:27:23:70:a7:3e:d2:7a:8e:e2:65:92:bc:67:6b:08:0c:26: f2:51:67:ca:8a:ec:35:d8:29:1f:a3:03:81:c8:a4:47:94:d4: 2e:4c:f0:9b:02:f2:8a:7c:94:7d:e5:2d:de:ed:0f:4e:6f:90: 9c:be:af:aa:be:d6:e3:53:75:5d:1d:25:26:91:cf:c7:a8:8e: bd:3c:bc:6b:41:63:4e:1c:70:4c:63:8c:ae:9e:b7:c4:25:ce: f7:23:8f:17:1f:ff:f2:18:10:89:38:84:56:85:48:89:24:2e: ec:f8:c4:9c:c8:a8:87:d0:01:2d:e4:91:aa:b8:c3:a9:63:cc: 7e:ea:1f:e1:41:ef:67:98:06:e1:5d:2b:7a:3f:72:a5:66:d8: 5b:85:44:f9:3d:b6:85:1f:e7:70:12:1e:f0:b7:e9:64:5d:9a: 45:ef:01:32:66:e1:16:f9:32:d6:3f:e2:2c:e1:fa:17:92:d3: 4c:73:7f:1c:f5:79:08:52:7a:1f:55:1d:8a:1a:bf:9c:ae:4b: f0:81:07:92:eb:5a:0b:10:14:8a:d1:4d:9e:b7:ce:31:2d:4e: 9c:3b:86:13 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEipliLKeWphQuMGQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk MWUwMzMxYjAtNDJhMi00MDNjLTlkNjAtYTVhYzRhYmU0ZjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0VVhzP7UNAn+zpozbzSFk/66nSuhEbTbzCh 8oricKUnzEVRJJOyfdxi1+KZHY1HJWtISR4XVYm+X9RTKAky1V7GXaKr8T+xdq8j gIbKKRvmZlEF9VSsATlVGewuorpZDQLPNMI9x3KMgxNOg58xnJZPVC7Vm7qjQu5t 08CIE+kNCCE09qqh9L69XMQAXQz3D/cr302BcyOTEZK0q1mc9eoGcLOPEdjEUoTK lbLJ03GEQ2T66vLwO4jaZmR0J+6cg1WVls0ZzInxJsQmzdoCnnaBcNboWtIep12X ooYACJQSweRRGeYeNT7rxoo8ojUwsSizeCUS5LKjsfUSqpVzAQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFICkd1ASEdTOHPVkZ47nPkl3g1DdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvMGU5ZmFkZjQtZjdiYy0z YWUwLTlkNjktOTE0NWZlMDRlMTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAA7 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHf480To4D1ABhoS4/l+9RB4ssRG2fRA5QNJWI+D1PsOuOuaVR4n I3CnPtJ6juJlkrxnawgMJvJRZ8qK7DXYKR+jA4HIpEeU1C5M8JsC8op8lH3lLd7t D05vkJy+r6q+1uNTdV0dJSaRz8eojr08vGtBY04ccExjjK6et8Qlzvcjjxcf//IY EIk4hFaFSIkkLuz4xJzIqIfQAS3kkaq4w6ljzH7qH+FB72eYBuFdK3o/cqVm2FuF RPk9toUf53ASHvC36WRdmkXvATJm4Rb5MtY/4izh+heS00xzfxz1eQhSeh9VHYoa v5yuS/CBB5LrWgsQFIrRTZ63zjEtTpw7hhM= -----END CERTIFICATE-----Generated at Mon Apr 7 12:01:05 2025 by rpki-client