$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/47d5e13a-1b5f-39e2-96b0-ae573d50e618.roa File: 47d5e13a-1b5f-39e2-96b0-ae573d50e618.roa (raw, json) Hash identifier: Uyk0mjOww8l0V2eEN6/sIXPKPjSkwLU0DRpEFgcFvmw= Subject key identifier: 12:17:F2:10:AB:75:8C:AD:A4:C4:34:DD:D2:44:91:7E:A0:8C:FA:3C Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285848A99622B215C5C61BB9E45F00 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/47d5e13a-1b5f-39e2-96b0-ae573d50e618.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 9009 IP address blocks: 2607:740:3a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:22:b2:15:c5:c6:1b:b9:e4:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=49df8420-fb1b-45fa-b61d-dd34ca9e3c59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c1:d9:00:32:4b:2d:12:b9:2d:a9:2a:53:57: 52:16:f3:4d:b8:6b:81:72:2a:78:19:5c:29:7f:ae: c1:55:2d:8d:3b:d8:24:bc:9d:9a:19:9b:58:38:37: 77:21:da:66:a3:c2:03:78:d4:0a:9d:f9:6e:03:dd: 4b:ee:e4:57:72:14:ad:79:f3:3d:85:0c:cf:d1:03: 46:37:33:4b:c6:b3:aa:93:3a:c0:5c:9c:4a:7a:65: 50:d5:63:74:01:65:08:23:6c:73:f8:ae:54:db:97: 30:5a:c0:f0:19:0a:15:a0:ca:4e:bf:8a:73:08:d4: 7a:3c:0d:6c:e8:3f:62:c1:14:c7:4e:90:5d:29:30: 27:c8:ff:a0:fe:65:7f:a5:5f:1a:b8:d0:d8:5f:dc: 39:9a:e8:30:ed:64:20:f1:30:be:8e:e3:96:b8:c0: 7d:a9:26:de:ad:8e:56:9f:2f:2e:0f:ee:c4:8f:88: 38:62:bb:cc:00:7f:86:82:57:0a:68:4c:87:78:d6: ee:ff:70:97:49:e2:c7:45:80:a4:13:5e:08:de:86: b2:5d:dc:3d:32:51:67:d8:09:d2:4e:f9:e9:24:6d: 73:b4:7c:86:b2:87:85:64:13:db:2b:cd:17:ad:dc: 4f:0f:12:43:87:bc:72:b9:67:95:e3:e2:3c:da:a1: e3:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:17:F2:10:AB:75:8C:AD:A4:C4:34:DD:D2:44:91:7E:A0:8C:FA:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/47d5e13a-1b5f-39e2-96b0-ae573d50e618.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:3a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:3b:f0:14:d3:01:8a:57:df:07:c4:b0:fb:c1:2c:e9:35:af: 41:f5:28:cc:83:f6:12:9d:e5:94:dd:6c:f0:09:0b:2d:75:9b: d6:31:49:56:47:57:8f:8c:ea:ec:07:23:55:c1:38:19:ec:77: e0:be:b6:e1:38:74:d2:b0:c6:82:9b:23:b8:a6:80:38:35:98: 07:65:2f:ef:43:37:9c:a1:0d:b7:a6:18:ca:12:2f:60:a1:16: 1d:3d:39:70:7f:89:13:03:34:28:ce:f8:19:d0:12:cb:78:16: da:9d:a1:b4:07:b7:ac:d9:bf:da:3d:21:ba:05:9f:2e:c2:13: dd:b9:fa:92:e2:ff:28:56:59:54:ab:79:70:4a:ef:e2:31:fd: 32:72:ce:c1:a4:7c:4b:bc:6e:0d:9d:21:d4:1a:50:c3:15:52: dd:0f:a0:4f:bd:0a:f6:af:9d:63:41:f1:36:94:a0:07:ba:47: 39:cb:b9:78:2f:a3:aa:7e:94:3a:2b:65:59:02:25:de:c5:07: ad:41:a8:4f:61:ad:9d:38:10:0b:a4:d1:56:28:e7:17:5b:56: 14:eb:ab:2a:f4:35:be:85:df:e9:99:b2:f2:d1:40:9a:7c:79: a1:8b:6c:e3:e7:41:f4:fb:9d:43:c6:7f:b3:94:79:f5:88:da: 3a:18:e5:45 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEipliKyFcXGG7nkXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk NDlkZjg0MjAtZmIxYi00NWZhLWI2MWQtZGQzNGNhOWUzYzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMHZADJLLRK5LakqU1dSFvNNuGuBcip4GVwp f67BVS2NO9gkvJ2aGZtYODd3Idpmo8IDeNQKnfluA91L7uRXchStefM9hQzP0QNG NzNLxrOqkzrAXJxKemVQ1WN0AWUII2xz+K5U25cwWsDwGQoVoMpOv4pzCNR6PA1s 6D9iwRTHTpBdKTAnyP+g/mV/pV8auNDYX9w5mugw7WQg8TC+juOWuMB9qSberY5W ny8uD+7Ej4g4YrvMAH+GglcKaEyHeNbu/3CXSeLHRYCkE14I3oayXdw9MlFn2AnS TvnpJG1ztHyGsoeFZBPbK80XrdxPDxJDh7xyuWeV4+I82qHjCwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBIX8hCrdYytpMQ03dJEkX6gjPo8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNDdkNWUxM2EtMWI1Zi0z OWUyLTk2YjAtYWU1NzNkNTBlNjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAA6 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFU78BTTAYpX3wfEsPvBLOk1r0H1KMyD9hKd5ZTdbPAJCy11m9Yx SVZHV4+M6uwHI1XBOBnsd+C+tuE4dNKwxoKbI7imgDg1mAdlL+9DN5yhDbemGMoS L2ChFh09OXB/iRMDNCjO+BnQEst4FtqdobQHt6zZv9o9IboFny7CE925+pLi/yhW WVSreXBK7+Ix/TJyzsGkfEu8bg2dIdQaUMMVUt0PoE+9CvavnWNB8TaUoAe6RznL uXgvo6p+lDorZVkCJd7FB61BqE9hrZ04EAuk0VYo5xdbVhTrqyr0Nb6F3+mZsvLR QJp8eaGLbOPnQfT7nUPGf7OUefWI2joY5UU= -----END CERTIFICATE-----Generated at Mon Apr 7 11:50:11 2025 by rpki-client