$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/25d5fb20-00ff-338f-af57-8b01fa608dee.roa File: 25d5fb20-00ff-338f-af57-8b01fa608dee.roa (raw, json) Hash identifier: kMoQdcOu01n7JLXd1aEzK0GuWoKWm0XSRZx2X/WVSNA= Subject key identifier: C1:C9:27:64:6F:65:5B:EA:A2:73:8C:CC:D9:2A:C8:63:47:5D:04:E3 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584A66C06CF20B6D592991F41C00 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/25d5fb20-00ff-338f-af57-8b01fa608dee.roa Signing time: Fri 04 Jul 2025 01:00:49 +0000 ROA not before: Fri 04 Jul 2025 01:00:49 +0000 ROA not after: Thu 02 Oct 2025 01:00:49 +0000 asID: 9009 IP address blocks: 2607:740:26::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:66:c0:6c:f2:0b:6d:59:29:91:f4:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jul 4 01:00:49 2025 GMT Not After : Oct 2 01:00:49 2025 GMT Subject: CN=7aefa400-18f1-4c4b-b4ec-032163c6b283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:83:6d:ee:69:2b:84:17:59:92:70:8f:c7:d1: 7a:c3:d8:6a:85:49:a6:14:f8:e2:2e:db:81:38:53: ad:b5:72:19:85:c8:17:a6:12:19:2d:9d:35:59:84: f9:94:14:83:94:75:7c:54:2a:70:16:72:50:67:1b: 51:2e:e5:d1:58:92:f3:ce:29:66:91:f0:e8:c3:ee: cf:d8:6a:3f:75:27:2d:ff:eb:18:bd:5f:fd:8d:1c: 50:19:3a:82:8a:8a:a4:a9:50:c4:46:c1:6a:09:eb: 9a:8f:27:32:7c:20:88:72:9b:77:69:f5:cd:45:2e: cd:9c:aa:ad:28:73:9b:77:97:35:30:7e:a1:93:13: 77:3a:30:8b:46:7a:27:fa:39:4b:b2:b4:b8:99:40: ff:43:b3:ca:df:ca:27:7d:33:47:2a:30:4c:bd:74: 63:ad:41:e5:0a:80:51:e0:1a:37:34:8a:8f:d5:04: c3:db:a0:fc:ff:6e:95:9f:be:81:76:a5:01:28:d0: 92:70:7c:bf:f8:db:c1:7a:07:0a:97:ed:a2:a3:6e: 86:94:05:97:6d:07:4a:cb:83:63:7f:5a:17:25:1e: d3:95:69:db:10:73:6a:88:b0:95:cb:90:c7:f6:e9: 20:b5:8c:fa:60:61:3e:13:d9:68:9f:0b:ec:74:9b: 2d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:C9:27:64:6F:65:5B:EA:A2:73:8C:CC:D9:2A:C8:63:47:5D:04:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/25d5fb20-00ff-338f-af57-8b01fa608dee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:26::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:63:6f:c0:ed:d2:e4:79:aa:0d:41:54:ac:0c:1d:bd:87:5a: 94:23:d4:48:46:3a:d0:f9:d2:2e:25:a4:b0:d0:f0:73:ff:62: 71:f3:c5:10:c7:e3:ee:60:35:b7:10:72:d1:88:4a:e8:2d:37: a9:b3:4d:f1:6a:e0:19:0c:c7:46:f6:5d:f4:b2:e6:d3:aa:87: 51:c2:cd:e6:82:08:74:a0:6f:86:04:33:dd:de:96:66:d0:16: f5:5f:70:74:f6:65:91:35:0c:b9:3f:d5:b1:e8:42:96:12:fa: b1:82:45:25:5f:cb:c0:c2:7d:10:0f:5a:6e:1f:50:49:00:ef: 4e:40:a4:e5:bc:c0:17:81:61:87:88:c2:48:d1:b9:17:53:13: 7a:05:8d:a5:f8:ed:1e:0f:4a:aa:52:dd:72:22:84:04:c9:e5: 21:14:f8:0d:bf:c6:1b:89:6e:f0:d0:b3:86:e6:57:00:eb:0d: f8:cb:ac:9f:77:e9:95:ab:c6:61:72:67:ec:6b:8f:25:ce:ce: ab:f4:10:5f:fd:81:da:c2:1e:45:d3:5c:ee:96:30:70:b0:9e: b5:e8:86:63:23:5e:77:ce:27:84:9c:23:b7:e0:7e:34:a8:2b: 23:1a:ae:96:04:b7:85:56:9a:b8:48:6d:21:e3:ab:56:03:53: 02:24:d8:aa -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpmwGzyC21ZKZH0HAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk N2FlZmE0MDAtMThmMS00YzRiLWI0ZWMtMDMyMTYzYzZiMjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4Nt7mkrhBdZknCPx9F6w9hqhUmmFPjiLtuB OFOttXIZhcgXphIZLZ01WYT5lBSDlHV8VCpwFnJQZxtRLuXRWJLzzilmkfDow+7P 2Go/dSct/+sYvV/9jRxQGTqCioqkqVDERsFqCeuajycyfCCIcpt3afXNRS7NnKqt KHObd5c1MH6hkxN3OjCLRnon+jlLsrS4mUD/Q7PK38onfTNHKjBMvXRjrUHlCoBR 4Bo3NIqP1QTD26D8/26Vn76BdqUBKNCScHy/+NvBegcKl+2io26GlAWXbQdKy4Nj f1oXJR7TlWnbEHNqiLCVy5DH9ukgtYz6YGE+E9lonwvsdJstbQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMHJJ2RvZVvqonOMzNkqyGNHXQTjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvMjVkNWZiMjAtMDBmZi0z MzhmLWFmNTctOGIwMWZhNjA4ZGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAAm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEBjb8Dt0uR5qg1BVKwMHb2HWpQj1EhGOtD50i4lpLDQ8HP/YnHz xRDH4+5gNbcQctGISugtN6mzTfFq4BkMx0b2XfSy5tOqh1HCzeaCCHSgb4YEM93e lmbQFvVfcHT2ZZE1DLk/1bHoQpYS+rGCRSVfy8DCfRAPWm4fUEkA705ApOW8wBeB YYeIwkjRuRdTE3oFjaX47R4PSqpS3XIihATJ5SEU+A2/xhuJbvDQs4bmVwDrDfjL rJ936ZWrxmFyZ+xrjyXOzqv0EF/9gdrCHkXTXO6WMHCwnrXohmMjXnfOJ4ScI7fg fjSoKyMarpYEt4VWmrhIbSHjq1YDUwIk2Ko= -----END CERTIFICATE-----Generated at Sat Jul 12 13:52:34 2025 by rpki-client