$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/44a946db-4f2d-3b9a-b314-8c3cd1ca4b34.roa File: 44a946db-4f2d-3b9a-b314-8c3cd1ca4b34.roa (raw, json) Hash identifier: O5XnxwGVPfVqBD/nMuhrvQCvk5pv4zu8BOa8ZQJ3dHk= Subject key identifier: 25:31:36:B4:4E:30:FB:89:58:3E:2C:67:9D:F2:63:76:C7:C2:F5:9B Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584A6825F6740EF3C94A2C31EB00 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/44a946db-4f2d-3b9a-b314-8c3cd1ca4b34.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 9009 IP address blocks: 2607:740:2e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:25:f6:74:0e:f3:c9:4a:2c:31:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=ff20421a-1019-474c-bfa1-eb8d2e1a1bf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a3:fd:e7:cd:8a:2b:1a:b0:1a:34:ab:f6:83: aa:2a:c8:57:94:11:7f:da:f8:29:56:2d:25:f1:77: b2:b9:e7:e3:21:02:5c:d8:de:c3:d6:b4:7e:18:bd: 75:bd:51:43:56:0a:81:a0:5b:97:1d:cc:ed:5c:09: 82:c6:09:6d:1e:fe:07:4f:b1:eb:21:c2:1d:51:8d: 8a:ea:06:08:38:cd:38:0e:5b:c1:25:ee:62:93:93: 03:c8:81:5c:18:ed:0a:f6:c7:ba:ca:3c:0a:f9:8b: 34:d3:a4:92:f0:6d:90:fe:59:c2:97:56:fa:cf:f1: bf:1f:19:45:f1:42:f6:f9:44:20:64:ac:92:1c:42: db:79:55:70:12:ca:a9:13:4c:fb:b5:17:35:88:bb: 56:b5:2d:47:c2:64:9e:73:55:20:78:f4:a8:d2:a9: a3:3e:40:dc:05:ec:63:e8:bc:69:c1:8c:0f:15:7f: 2b:b1:19:3b:dd:69:db:1c:d9:9d:20:9f:09:45:d1: 43:af:82:bd:66:0e:74:e1:15:ff:9f:0f:9b:21:27: 85:86:10:f7:bc:9d:c0:f8:83:ed:43:b3:b9:fe:85: d1:88:a5:6f:22:1b:b9:49:4e:74:7c:e5:56:f0:37: 21:2e:d5:60:c8:5e:3a:1f:b5:45:cc:88:8c:c1:f2: a0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:31:36:B4:4E:30:FB:89:58:3E:2C:67:9D:F2:63:76:C7:C2:F5:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/44a946db-4f2d-3b9a-b314-8c3cd1ca4b34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:2e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:49:d5:c0:85:e2:ae:b5:5f:b1:1b:27:56:32:f5:8d:e4:5f: 98:87:63:a7:a1:ca:09:a2:45:db:de:b3:e6:fe:fa:6d:16:b2: 92:cb:bc:42:6d:03:55:31:8e:ea:a0:7d:4e:a7:17:d8:e8:8f: 4c:1c:b9:82:c4:1d:ba:c2:08:86:63:5a:5e:43:24:0a:f1:e0: 05:0c:bc:ca:c4:be:6c:e0:5b:9f:d8:a0:b6:27:4e:e1:53:0f: e7:7b:cd:61:d1:cd:22:42:d4:34:86:be:ce:f3:73:02:6e:56: 09:63:1e:07:ae:48:76:fb:4c:f6:c4:4f:74:17:08:01:af:b4: 69:7b:de:b6:f5:3e:6c:b7:9f:01:d5:2b:82:7a:ad:1f:96:34: 53:fa:f1:53:57:da:6a:1f:e7:33:cc:89:ba:77:84:6d:b5:4a: 75:97:5a:aa:5c:f1:c6:bf:71:3f:ac:dd:93:e2:f0:e9:3d:98: 45:0b:6c:0f:23:f6:ed:8e:fe:94:36:f6:61:50:b2:49:df:dd: 22:0b:57:a3:d8:cd:43:ff:8c:04:71:6b:7b:c8:df:68:9b:5d: d7:06:e3:fc:9a:0e:5f:99:d9:99:d3:85:10:ee:0f:46:f1:f3: ae:52:c8:d0:2a:12:45:13:76:12:3d:b7:77:4f:41:8d:70:5c: 79:f1:33:6a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpoJfZ0DvPJSiwx6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk ZmYyMDQyMWEtMTAxOS00NzRjLWJmYTEtZWI4ZDJlMWExYmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqP9582KKxqwGjSr9oOqKshXlBF/2vgpVi0l 8XeyuefjIQJc2N7D1rR+GL11vVFDVgqBoFuXHcztXAmCxgltHv4HT7HrIcIdUY2K 6gYIOM04DlvBJe5ik5MDyIFcGO0K9se6yjwK+Ys006SS8G2Q/lnCl1b6z/G/HxlF 8UL2+UQgZKySHELbeVVwEsqpE0z7tRc1iLtWtS1HwmSec1UgePSo0qmjPkDcBexj 6LxpwYwPFX8rsRk73WnbHNmdIJ8JRdFDr4K9Zg504RX/nw+bISeFhhD3vJ3A+IPt Q7O5/oXRiKVvIhu5SU50fOVW8DchLtVgyF46H7VFzIiMwfKgqwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCUxNrROMPuJWD4sZ53yY3bHwvWbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNDRhOTQ2ZGItNGYyZC0z YjlhLWIzMTQtOGMzY2QxY2E0YjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAAu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHFJ1cCF4q61X7EbJ1Yy9Y3kX5iHY6ehygmiRdves+b++m0WspLL vEJtA1UxjuqgfU6nF9joj0wcuYLEHbrCCIZjWl5DJArx4AUMvMrEvmzgW5/YoLYn TuFTD+d7zWHRzSJC1DSGvs7zcwJuVgljHgeuSHb7TPbET3QXCAGvtGl73rb1Pmy3 nwHVK4J6rR+WNFP68VNX2mof5zPMibp3hG21SnWXWqpc8ca/cT+s3ZPi8Ok9mEUL bA8j9u2O/pQ29mFQsknf3SILV6PYzUP/jARxa3vI32ibXdcG4/yaDl+Z2ZnThRDu D0bx865SyNAqEkUTdhI9t3dPQY1wXHnxM2o= -----END CERTIFICATE-----Generated at Sat Jul 12 13:56:45 2025 by rpki-client