$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1cd80803-3adb-3bb5-8b52-40b3aa17f948.roa File: 1cd80803-3adb-3bb5-8b52-40b3aa17f948.roa (raw, json) Hash identifier: RV5aC+0jAXR1lhisY2BIIcgZFW7ap0Sy054AnTNHO1k= Subject key identifier: B6:14:81:51:05:16:A3:7C:3A:A0:CC:A5:CA:EF:D7:15:87:6E:1A:C1 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285848A99622E733BE6CC0E22E0B00 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1cd80803-3adb-3bb5-8b52-40b3aa17f948.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 9009 IP address blocks: 2607:740:3f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:22:e7:33:be:6c:c0:e2:2e:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=4f5bc45d-ab8f-4242-a11e-1ca5ff9747ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:45:75:6f:59:9c:fe:97:a6:07:dd:f7:e8:a7: bc:2c:ea:91:6f:a9:c0:c3:d9:13:c3:e1:92:d9:0b: 03:44:ac:c8:e9:6f:5c:ec:36:42:4a:5f:34:3a:d8: b5:15:52:48:1a:41:b0:c7:d2:3c:52:48:d5:2c:e2: 20:5d:45:bc:de:42:4e:dd:55:db:f0:57:9b:a1:18: 00:2b:a1:17:39:f0:cb:ad:91:12:5b:72:fb:36:af: 05:54:ad:23:36:c7:02:dc:61:41:cd:08:39:44:ca: 7a:55:a8:52:33:e0:63:14:70:4f:1c:46:d4:4a:14: 96:6b:cb:96:07:0e:33:a4:d1:b4:6c:f2:97:5b:cf: bb:45:e3:75:b1:ae:23:31:64:50:97:4f:bd:86:b1: 51:35:45:6a:2d:d6:49:9e:f1:b5:68:4b:9a:c5:03: 98:98:59:e3:5a:fe:07:b6:a1:73:d8:d0:6d:43:9d: 63:13:42:6f:a5:be:d6:e3:a3:3e:3d:c1:cb:6a:1d: e1:09:fc:17:6b:f0:d6:6f:2b:26:51:91:e9:4e:b6: 23:9f:8d:a8:f3:5e:c7:c9:59:5d:aa:bd:79:20:cd: 58:4a:58:82:03:e1:30:d1:31:4e:c8:8b:92:7c:d2: 69:af:d5:b9:51:8f:fa:a7:50:3f:0d:2d:4b:41:4a: bc:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:14:81:51:05:16:A3:7C:3A:A0:CC:A5:CA:EF:D7:15:87:6E:1A:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1cd80803-3adb-3bb5-8b52-40b3aa17f948.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:3f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:13:b7:0b:5b:c4:c4:77:80:c1:ef:3b:b5:36:3e:c9:94:de: 3f:ca:9a:b5:59:a6:07:18:8f:eb:3d:5a:cf:99:16:53:fd:61: 46:bf:02:a2:0c:99:24:e8:9c:ec:df:aa:b0:b3:35:1e:d4:3f: 78:99:b3:1e:a8:1d:e8:f4:7f:7e:7d:22:70:dd:a7:f3:de:9a: 54:ea:43:59:bf:28:79:27:64:64:7f:f8:a0:a8:c0:f2:dc:94: dc:29:08:58:89:b3:aa:c9:a6:b3:73:d5:e2:15:b5:bb:84:a9: ff:9a:1d:c6:f5:f7:62:8f:fd:3c:92:53:ea:83:ed:b2:a0:be: 72:e5:29:ed:c1:0e:2b:44:70:30:21:9f:f5:f1:7c:4e:db:23: 25:d6:4c:fa:03:46:78:10:dc:1c:c6:a7:10:4c:f9:49:ab:37: 17:a5:e1:b1:8c:de:6d:fe:ed:40:ed:4c:93:7a:fa:38:73:e4: 4b:22:cf:c5:c9:a9:2a:ef:6d:25:0b:71:9f:1d:a9:3d:ca:c6: ee:e3:1c:ea:e4:fb:10:8b:0e:4a:e3:d6:3f:04:d8:4b:30:f2: a7:ee:ca:0f:d5:4f:4e:b9:26:3d:4e:66:ae:eb:30:4d:00:8a: cf:d0:51:10:2c:57:22:85:a4:b8:c1:e2:c3:57:13:ea:b8:a4: d2:72:9b:b3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEipliLnM75swOIuCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk NGY1YmM0NWQtYWI4Zi00MjQyLWExMWUtMWNhNWZmOTc0N2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0V1b1mc/pemB9336Ke8LOqRb6nAw9kTw+GS 2QsDRKzI6W9c7DZCSl80Oti1FVJIGkGwx9I8UkjVLOIgXUW83kJO3VXb8FeboRgA K6EXOfDLrZESW3L7Nq8FVK0jNscC3GFBzQg5RMp6VahSM+BjFHBPHEbUShSWa8uW Bw4zpNG0bPKXW8+7ReN1sa4jMWRQl0+9hrFRNUVqLdZJnvG1aEuaxQOYmFnjWv4H tqFz2NBtQ51jE0Jvpb7W46M+PcHLah3hCfwXa/DWbysmUZHpTrYjn42o817HyVld qr15IM1YSliCA+Ew0TFOyIuSfNJpr9W5UY/6p1A/DS1LQUq8rQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLYUgVEFFqN8OqDMpcrv1xWHbhrBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvMWNkODA4MDMtM2FkYi0z YmI1LThiNTItNDBiM2FhMTdmOTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAA/ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGUTtwtbxMR3gMHvO7U2PsmU3j/KmrVZpgcYj+s9Ws+ZFlP9YUa/ AqIMmSTonOzfqrCzNR7UP3iZsx6oHej0f359InDdp/PemlTqQ1m/KHknZGR/+KCo wPLclNwpCFiJs6rJprNz1eIVtbuEqf+aHcb192KP/TySU+qD7bKgvnLlKe3BDitE cDAhn/XxfE7bIyXWTPoDRngQ3BzGpxBM+UmrNxel4bGM3m3+7UDtTJN6+jhz5Esi z8XJqSrvbSULcZ8dqT3Kxu7jHOrk+xCLDkrj1j8E2Esw8qfuyg/VT065Jj1OZq7r ME0Ais/QURAsVyKFpLjB4sNXE+q4pNJym7M= -----END CERTIFICATE-----Generated at Mon Apr 7 11:52:58 2025 by rpki-client