$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/5337b138-0fe9-3b6d-ae21-5ff6ff44773e.roa File: 5337b138-0fe9-3b6d-ae21-5ff6ff44773e.roa (raw, json) Hash identifier: 7QgOJgtQw+IfpqUuUOPbcg6a0cUIqb7yJv3iVzV2XVY= Subject key identifier: B2:DD:8E:0A:A0:A5:F9:CA:17:0B:9A:1A:7C:1E:99:34:CC:DF:28:F4 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285848A9962293309D545DA46D0800 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/5337b138-0fe9-3b6d-ae21-5ff6ff44773e.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 9009 IP address blocks: 2607:740:38::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:22:93:30:9d:54:5d:a4:6d:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=035a9118-5225-41ef-98ca-d4b16f7d1fc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:7a:ea:a9:b0:c8:75:48:98:28:be:bd:75:d8: a6:25:8b:4c:b3:55:8e:5e:a1:f2:fa:94:b8:e6:07: a0:72:55:59:33:64:75:25:fa:fb:f9:1f:e5:03:ca: ec:57:74:63:3b:b0:53:6c:d5:a9:df:ad:ba:19:ce: 6c:e8:4f:7d:11:85:0b:c6:c0:c2:5e:06:00:af:7a: 2a:fa:5f:42:52:a2:dd:09:17:a7:03:ff:77:d7:fa: a0:0d:20:5d:13:1a:d4:19:c4:5d:f8:e7:40:cd:a5: f6:86:7b:db:6d:15:0c:36:cf:d8:ad:9e:42:a9:48: 42:c9:14:f4:18:bd:d8:bd:61:a2:4b:42:1e:21:dc: 9c:d1:88:b2:11:09:59:10:99:56:11:a4:0a:70:c4: fd:72:de:45:60:2b:04:a0:ad:07:2d:24:1c:c3:f8: 04:62:19:cd:06:c3:50:68:44:ea:50:03:41:df:86: 0c:af:9d:e5:b9:14:fc:22:65:df:58:a0:ae:49:8b: d2:58:d5:1b:46:84:1e:e2:c7:85:1b:dc:cd:33:30: a7:89:84:12:6c:90:a4:21:80:80:d2:d1:d3:87:4a: 17:e8:11:31:39:82:e2:56:e8:7a:c8:73:8e:4b:37: c8:d2:89:54:7e:02:55:ef:87:54:ff:a7:37:35:93: 36:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:DD:8E:0A:A0:A5:F9:CA:17:0B:9A:1A:7C:1E:99:34:CC:DF:28:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/5337b138-0fe9-3b6d-ae21-5ff6ff44773e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:38::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:ae:0b:b4:9c:58:5b:f2:03:c8:3c:57:70:bb:d1:fb:6f:08: 9e:f7:f4:2a:c6:ff:2b:45:7d:2d:f1:8f:19:88:ad:65:5b:c0: 2e:72:b3:06:79:87:dc:5f:89:7e:49:48:6d:24:f9:76:c5:fe: e6:e8:7d:66:9c:3b:f4:bf:27:17:a2:48:21:8c:03:33:b8:3b: e1:61:72:34:98:c5:97:33:a2:2d:95:a0:dc:f5:f3:d9:fa:7b: 49:6e:95:da:09:16:63:46:69:16:e4:39:41:d3:c8:8a:bd:30: d4:2c:ce:5f:bb:c2:89:b7:e9:d2:89:f2:2a:50:08:3d:d4:32: 92:b2:2b:87:2d:0e:14:8b:52:84:8e:71:51:88:53:06:41:e9: a5:38:97:d5:5f:c4:14:3a:38:55:03:20:1b:85:1f:75:dd:de: 9e:d1:4e:48:07:4b:c9:1f:16:ff:30:99:20:7d:f9:d7:cd:ae: 15:74:e1:c6:aa:41:c6:4f:a8:02:95:c9:5c:83:98:01:6f:65: 7e:b9:2d:4d:d1:7a:4b:89:6f:5d:87:ea:08:0c:dc:7a:eb:12: fa:33:53:b7:ca:ae:a9:e5:3a:f4:b4:93:b7:8f:4f:85:f7:9c: 28:16:e2:56:6b:0e:12:f7:e4:e5:ab:fd:4a:a5:87:a6:ac:d0: 98:1a:99:82 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEipliKTMJ1UXaRtCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk MDM1YTkxMTgtNTIyNS00MWVmLTk4Y2EtZDRiMTZmN2QxZmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknrqqbDIdUiYKL69ddimJYtMs1WOXqHy+pS4 5gegclVZM2R1Jfr7+R/lA8rsV3RjO7BTbNWp3626Gc5s6E99EYULxsDCXgYAr3oq +l9CUqLdCRenA/931/qgDSBdExrUGcRd+OdAzaX2hnvbbRUMNs/YrZ5CqUhCyRT0 GL3YvWGiS0IeIdyc0YiyEQlZEJlWEaQKcMT9ct5FYCsEoK0HLSQcw/gEYhnNBsNQ aETqUANB34YMr53luRT8ImXfWKCuSYvSWNUbRoQe4seFG9zNMzCniYQSbJCkIYCA 0tHTh0oX6BExOYLiVuh6yHOOSzfI0olUfgJV74dU/6c3NZM2HQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLLdjgqgpfnKFwuaGnwemTTM3yj0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNTMzN2IxMzgtMGZlOS0z YjZkLWFlMjEtNWZmNmZmNDQ3NzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAA4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEGuC7ScWFvyA8g8V3C70ftvCJ739CrG/ytFfS3xjxmIrWVbwC5y swZ5h9xfiX5JSG0k+XbF/ubofWacO/S/JxeiSCGMAzO4O+FhcjSYxZczoi2VoNz1 89n6e0luldoJFmNGaRbkOUHTyIq9MNQszl+7wom36dKJ8ipQCD3UMpKyK4ctDhSL UoSOcVGIUwZB6aU4l9VfxBQ6OFUDIBuFH3Xd3p7RTkgHS8kfFv8wmSB9+dfNrhV0 4caqQcZPqAKVyVyDmAFvZX65LU3RekuJb12H6ggM3HrrEvozU7fKrqnlOvS0k7eP T4X3nCgW4lZrDhL35OWr/Uqlh6as0JgamYI= -----END CERTIFICATE-----Generated at Mon Apr 7 12:06:29 2025 by rpki-client