$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1f267b9f-4eb6-3e46-9931-27afe99a04ee.roa File: 1f267b9f-4eb6-3e46-9931-27afe99a04ee.roa (raw, json) Hash identifier: +CYsbzZsULywxc88nWx9C1evX4KxcX0wvmebx5DXjEw= Subject key identifier: 61:1F:7E:9F:34:6F:F6:6D:D4:BD:C3:B1:B1:14:F4:93:35:6E:46:0A Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285848A830AFD322AC038BC8A83080 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1f267b9f-4eb6-3e46-9931-27afe99a04ee.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 9009 IP address blocks: 2607:740:1d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:af:d3:22:ac:03:8b:c8:a8:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=189e8537-8697-49d2-a298-faf93f812b0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:39:3e:31:ca:3b:af:2f:fb:b2:45:7f:8e:d3: ae:29:43:e5:10:4c:09:19:c1:98:06:b1:96:14:00: cc:9f:f3:4b:8b:46:3b:07:c3:58:5c:b3:8d:08:d4: 6b:41:c0:b6:9d:18:a3:85:21:07:1c:da:a0:0f:41: 87:7f:c8:ca:d0:19:fd:ed:0d:de:21:5b:5f:12:2a: fe:f6:f1:10:f6:7a:ea:bd:75:17:8b:a3:ee:28:55: 5e:1e:52:af:d3:5b:bf:3c:48:e9:66:9a:ce:5c:74: 1f:42:52:b8:11:44:ec:83:34:96:f0:03:d0:4d:78: 8e:39:23:b3:01:fe:d5:c6:74:89:c0:24:ca:6a:64: 22:64:0f:c3:d3:96:a5:3f:0f:49:32:18:31:7f:fd: 61:b6:8f:c3:86:d1:a2:cb:31:64:75:01:32:ad:94: 59:9f:91:8f:ed:72:2c:f4:03:48:09:ed:3b:b0:57: 76:21:44:33:e4:5e:3f:5a:49:96:f4:74:56:6b:14: 96:79:f9:fd:8e:e6:12:27:86:72:2d:47:10:b1:7c: 4c:af:56:11:cb:7b:6a:b1:3b:64:c8:71:c6:9d:82: 9d:7f:c5:4d:61:44:58:e3:c4:20:ff:68:a8:bd:b6: e6:14:5e:56:0a:ce:57:7b:b1:27:96:7e:4d:b2:e7: e2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:1F:7E:9F:34:6F:F6:6D:D4:BD:C3:B1:B1:14:F4:93:35:6E:46:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1f267b9f-4eb6-3e46-9931-27afe99a04ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:1d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:32:4b:6e:80:8f:df:04:a7:16:db:9a:7c:63:49:b0:49:06: 59:65:75:ed:a2:41:7e:4d:10:31:98:37:74:bf:7f:b4:55:4f: 6a:38:f0:ae:f7:a3:53:12:80:05:4c:9f:3c:5c:10:7b:ad:bf: 71:b7:4e:62:15:eb:bd:7d:7a:56:aa:c3:cf:70:93:6c:a3:aa: e5:9c:71:e0:b1:06:47:df:68:cf:2b:b1:9f:cd:9f:22:5f:cb: fa:b9:c9:91:3a:8e:74:10:a3:d4:08:2d:27:d3:1b:73:07:65: 55:30:19:ca:73:02:30:36:8b:13:88:4c:6b:9a:c1:6f:48:ab: cc:b2:5e:ca:1d:bc:1f:34:86:26:61:c1:bc:d5:70:92:74:fe: e7:0a:e9:ca:b0:cf:82:2f:57:ec:1d:55:dc:2c:d1:b8:b8:ff: 5d:00:2c:ef:a4:df:3d:6c:48:74:62:45:bb:9b:bf:6f:2e:b7: c2:37:81:a5:78:9e:e8:f6:88:3b:63:28:02:ea:87:75:89:ca: 91:91:6b:81:dd:4b:76:2a:98:88:19:6a:ef:a3:b9:a2:04:0d: fc:b1:d0:86:4f:20:78:5c:1e:14:ff:a6:58:1d:75:b2:d3:92: df:d1:ad:58:9b:bd:bf:15:dd:28:bc:28:6c:13:55:be:0e:01: f8:83:a4:d1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEioMK/TIqwDi8ioMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk MTg5ZTg1MzctODY5Ny00OWQyLWEyOTgtZmFmOTNmODEyYjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zk+Mco7ry/7skV/jtOuKUPlEEwJGcGYBrGW FADMn/NLi0Y7B8NYXLONCNRrQcC2nRijhSEHHNqgD0GHf8jK0Bn97Q3eIVtfEir+ 9vEQ9nrqvXUXi6PuKFVeHlKv01u/PEjpZprOXHQfQlK4EUTsgzSW8APQTXiOOSOz Af7VxnSJwCTKamQiZA/D05alPw9JMhgxf/1hto/DhtGiyzFkdQEyrZRZn5GP7XIs 9ANICe07sFd2IUQz5F4/WkmW9HRWaxSWefn9juYSJ4ZyLUcQsXxMr1YRy3tqsTtk yHHGnYKdf8VNYURY48Qg/2iovbbmFF5WCs5Xe7Enln5NsufiYQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGEffp80b/Zt1L3DsbEU9JM1bkYKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvMWYyNjdiOWYtNGViNi0z ZTQ2LTk5MzEtMjdhZmU5OWEwNGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAAd MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHoyS26Aj98EpxbbmnxjSbBJBlllde2iQX5NEDGYN3S/f7RVT2o4 8K73o1MSgAVMnzxcEHutv3G3TmIV6719elaqw89wk2yjquWcceCxBkffaM8rsZ/N nyJfy/q5yZE6jnQQo9QILSfTG3MHZVUwGcpzAjA2ixOITGuawW9Iq8yyXsodvB80 hiZhwbzVcJJ0/ucK6cqwz4IvV+wdVdws0bi4/10ALO+k3z1sSHRiRbubv28ut8I3 gaV4nuj2iDtjKALqh3WJypGRa4HdS3YqmIgZau+juaIEDfyx0IZPIHhcHhT/plgd dbLTkt/RrVibvb8V3Si8KGwTVb4OAfiDpNE= -----END CERTIFICATE-----Generated at Mon Apr 7 12:03:48 2025 by rpki-client