$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/53e8a298-6e33-32bc-8504-916a18ed40ab.roa File: 53e8a298-6e33-32bc-8504-916a18ed40ab.roa (raw, json) Hash identifier: avGngf46o7UMJRKZcJTp00gZ6Qt6Mjj9WO11+aave6A= Subject key identifier: 07:73:3E:AE:32:97:2B:92:A4:87:0E:E6:D3:0C:D1:B1:C5:58:97:46 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285848DEA113992C9166CB51103800 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/53e8a298-6e33-32bc-8504-916a18ed40ab.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 11990 IP address blocks: 2607:740:56::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:13:99:2c:91:66:cb:51:10:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=b1bc15c2-9717-4c02-99b7-93aed1b0c64b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9e:e5:61:ea:8e:26:fa:50:a3:d1:ea:b2:df: ff:bd:fc:22:a7:d2:10:c4:0a:3f:44:48:85:aa:87: 4e:46:04:ce:01:0a:88:9b:96:d8:a5:17:22:1e:6b: 68:e3:97:6f:91:d5:94:28:3e:e7:45:6d:2e:63:dd: a6:6f:32:c6:79:af:97:e2:ad:40:3a:d7:4b:8a:f2: 51:db:9c:b2:30:e3:b8:c6:68:5e:c5:f1:a6:5e:d9: 0d:72:af:e5:e3:09:6e:e4:22:56:b0:3a:04:9d:3a: 64:8f:d8:8b:f1:86:9b:a4:e3:77:a9:15:d2:65:5a: 3e:52:9d:6e:bf:f8:51:f9:5e:18:26:29:73:95:3b: 11:34:e7:35:45:69:f8:f1:73:67:1e:4c:6b:18:d5: b0:92:b3:a6:3c:10:5c:bf:98:5d:55:b1:58:a2:67: bf:0f:23:eb:4e:63:46:58:bd:37:43:b2:8e:f3:cd: 46:f4:88:25:1a:c9:f8:18:38:01:5b:29:ce:11:da: 1e:5a:1a:d9:82:bf:84:d7:a2:19:81:89:35:c4:a1: 3a:6c:9b:6a:b0:7b:96:df:4f:17:42:4c:75:20:7c: 8f:8b:2a:04:6c:89:76:f4:3a:03:ca:76:56:00:08: d4:e4:a7:b5:a8:05:8b:91:ac:0e:ad:6d:0e:df:d9: 37:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:73:3E:AE:32:97:2B:92:A4:87:0E:E6:D3:0C:D1:B1:C5:58:97:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/53e8a298-6e33-32bc-8504-916a18ed40ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:56::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:e9:4e:52:1d:fb:86:8c:00:cb:81:df:b1:37:90:25:66:76: d5:28:ac:e3:42:87:56:d9:9b:07:23:74:91:0c:75:9d:0e:48: 85:bf:16:75:8b:3e:97:07:ce:95:9a:11:7a:fc:d9:45:7e:e9: 06:af:e1:3e:e1:7e:4b:79:9a:30:1e:1c:29:79:c9:f1:74:88: 9e:ab:1d:65:24:7b:96:73:5d:f3:f8:a8:54:3b:3a:c8:20:96: 30:1c:fb:7f:8d:37:56:ee:cf:8f:db:2a:4a:84:5a:2e:6d:76: 4d:24:60:be:97:39:42:28:46:86:b0:2e:b6:da:6e:21:33:08: 3d:f5:fe:1f:93:4f:56:6c:1f:97:76:5a:76:60:05:bf:42:46: 6a:4d:38:77:b6:4b:82:11:45:15:16:c9:b1:06:cc:5e:96:f2: 89:29:46:57:6d:b4:c7:7e:e4:8f:50:55:86:2d:0b:d4:17:d1: 73:88:22:ea:c1:3d:35:f9:bb:25:74:55:32:d6:0f:5c:da:79: c8:1a:39:a5:ac:db:ac:98:fd:3a:a3:b5:cb:ac:b7:b2:6c:56: 85:c2:62:75:c1:98:84:df:ac:74:ed:ae:85:a1:f9:f2:ca:9d: 33:e6:06:42:90:83:57:1a:5b:ce:49:ef:c7:d1:33:13:c4:2d: 63:2c:92:46 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjeoROZLJFmy1EQOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk YjFiYzE1YzItOTcxNy00YzAyLTk5YjctOTNhZWQxYjBjNjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZ7lYeqOJvpQo9Hqst//vfwip9IQxAo/REiF qodORgTOAQqIm5bYpRciHmto45dvkdWUKD7nRW0uY92mbzLGea+X4q1AOtdLivJR 25yyMOO4xmhexfGmXtkNcq/l4wlu5CJWsDoEnTpkj9iL8YabpON3qRXSZVo+Up1u v/hR+V4YJilzlTsRNOc1RWn48XNnHkxrGNWwkrOmPBBcv5hdVbFYome/DyPrTmNG WL03Q7KO881G9IglGsn4GDgBWynOEdoeWhrZgr+E16IZgYk1xKE6bJtqsHuW308X Qkx1IHyPiyoEbIl29DoDynZWAAjU5Ke1qAWLkawOrW0O39k3VQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAdzPq4ylyuSpIcO5tMM0bHFWJdGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNTNlOGEyOTgtNmUzMy0z MmJjLTg1MDQtOTE2YTE4ZWQ0MGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQABW MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAHpTlId+4aMAMuB37E3kCVmdtUorONCh1bZmwcjdJEMdZ0OSIW/ FnWLPpcHzpWaEXr82UV+6Qav4T7hfkt5mjAeHCl5yfF0iJ6rHWUke5ZzXfP4qFQ7 OsggljAc+3+NN1buz4/bKkqEWi5tdk0kYL6XOUIoRoawLrbabiEzCD31/h+TT1Zs H5d2WnZgBb9CRmpNOHe2S4IRRRUWybEGzF6W8okpRldttMd+5I9QVYYtC9QX0XOI IurBPTX5uyV0VTLWD1zaecgaOaWs26yY/Tqjtcust7JsVoXCYnXBmITfrHTtroWh +fLKnTPmBkKQg1caW85J78fRMxPELWMskkY= -----END CERTIFICATE-----Generated at Mon Apr 7 12:13:59 2025 by rpki-client