$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/5aa51862-3d2c-39bf-be77-93452e666607.roa File: 5aa51862-3d2c-39bf-be77-93452e666607.roa (raw, json) Hash identifier: 5eQ12LmQ2Xiubomy4LKuHopPp6hRvD1AYj1DmQOc10o= Subject key identifier: 09:05:C0:D5:31:8C:37:D5:ED:14:24:29:3E:D9:29:CC:82:A8:DD:5C Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584A3E45A7BCE00E927DB8924A00 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/5aa51862-3d2c-39bf-be77-93452e666607.roa Signing time: Thu 19 Jun 2025 13:01:02 +0000 ROA not before: Thu 19 Jun 2025 13:01:02 +0000 ROA not after: Wed 17 Sep 2025 13:01:02 +0000 asID: 133480 IP address blocks: 2607:740:41::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:45:a7:bc:e0:0e:92:7d:b8:92:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jun 19 13:01:02 2025 GMT Not After : Sep 17 13:01:02 2025 GMT Subject: CN=b13a59bd-164e-485f-8ed0-d4184d2a11e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:47:e9:83:09:ac:a5:21:25:bb:c0:ca:83:93: 8b:81:1e:ea:d7:27:5d:f3:2f:2a:12:a2:bb:65:16: 12:d5:3a:be:68:a0:e8:67:a6:63:d2:60:0f:98:6a: 86:4e:b8:6e:64:d9:a8:25:e6:ab:e5:a4:87:28:ef: ab:d3:b1:aa:4f:f5:3a:74:7a:d6:d6:ea:a2:69:dc: 91:e5:78:fe:b3:de:05:59:3f:68:f6:77:72:bc:a8: b8:cd:d2:0f:43:10:4c:46:41:ed:33:af:b1:95:e9: d6:7f:20:a3:1a:2a:fd:f1:97:d5:32:4c:65:3e:73: 8d:70:c0:00:98:28:03:3f:55:84:ad:86:5e:90:b1: 62:28:6a:5b:d1:95:96:4d:ab:48:0e:9a:ae:f3:88: db:ee:cc:f7:01:4a:ad:3b:99:71:96:34:5b:b7:dd: f8:d0:61:5f:f8:aa:21:b6:51:f4:6e:89:52:5e:3f: 00:dc:66:cf:32:c1:2e:be:cd:e8:cc:12:cd:62:b4: 9f:a1:83:81:a4:a3:5a:43:39:ba:7e:96:8b:45:17: 76:de:3c:fe:cf:32:d3:f2:72:5f:c6:1d:ff:a0:1c: c8:4b:a8:1c:0c:3b:11:d5:09:13:38:a9:42:6e:40: a5:07:1e:fe:f1:c7:8f:2a:6a:b8:44:2c:14:29:f7: 8c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:05:C0:D5:31:8C:37:D5:ED:14:24:29:3E:D9:29:CC:82:A8:DD:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/5aa51862-3d2c-39bf-be77-93452e666607.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:41::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:44:2d:ad:a5:d0:23:e3:c6:8c:2b:1e:5a:4f:54:cd:ba:8f: 7f:4e:69:97:7c:8f:93:11:a2:54:47:40:51:b1:69:f6:8b:a1: 61:25:80:b2:cf:1f:dc:1b:34:5f:1b:89:32:da:33:cd:ff:f1: 9b:a7:00:22:62:f0:db:53:4d:ef:61:ff:ff:a8:af:6f:94:49: f8:e6:cc:7a:6f:e8:1e:57:6c:c7:17:3d:a7:2f:6b:e8:49:bf: a2:73:d2:7a:df:04:b0:72:f1:e8:f8:7e:e0:8d:e7:94:23:68: c5:c8:41:e0:1d:96:6d:ac:0a:4e:6f:a1:5f:94:61:e9:7d:ef: 5b:c0:40:7e:b7:da:ee:63:01:b1:dc:8f:f0:15:aa:32:04:79: 11:80:d5:3b:19:cf:19:31:af:4e:a6:5c:7d:44:03:3d:50:0f: 8e:4b:ab:e3:88:6c:8d:d4:79:65:87:6a:d5:49:c5:81:4e:3b: c3:c0:14:56:47:c0:8d:83:51:06:82:5d:c3:13:39:48:0b:b0: e2:8e:25:b4:b7:ed:72:9e:1b:07:4b:3c:08:2e:5a:4a:bc:ab: ab:57:47:0e:5c:b2:07:40:cc:56:d5:36:29:77:02:34:0b:8b: a5:ce:c1:db:58:8e:3b:5f:57:a5:85:04:b2:da:02:71:c5:35: ac:2f:85:ad -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo+Rae84A6SfbiSSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDYxOTEzMDEwMloXDTI1MDkxNzEzMDEwMlowLzEtMCsGA1UEAxMk YjEzYTU5YmQtMTY0ZS00ODVmLThlZDAtZDQxODRkMmExMWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUfpgwmspSElu8DKg5OLgR7q1ydd8y8qEqK7 ZRYS1Tq+aKDoZ6Zj0mAPmGqGTrhuZNmoJear5aSHKO+r07GqT/U6dHrW1uqiadyR 5Xj+s94FWT9o9ndyvKi4zdIPQxBMRkHtM6+xlenWfyCjGir98ZfVMkxlPnONcMAA mCgDP1WErYZekLFiKGpb0ZWWTatIDpqu84jb7sz3AUqtO5lxljRbt9340GFf+Koh tlH0bolSXj8A3GbPMsEuvs3ozBLNYrSfoYOBpKNaQzm6fpaLRRd23jz+zzLT8nJf xh3/oBzIS6gcDDsR1QkTOKlCbkClBx7+8cePKmq4RCwUKfeMSQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAkFwNUxjDfV7RQkKT7ZKcyCqN1cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNWFhNTE4NjItM2QyYy0z OWJmLWJlNzctOTM0NTJlNjY2NjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQABB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADRELa2l0CPjxowrHlpPVM26j39OaZd8j5MRolRHQFGxafaLoWEl gLLPH9wbNF8biTLaM83/8ZunACJi8NtTTe9h//+or2+USfjmzHpv6B5XbMcXPacv a+hJv6Jz0nrfBLBy8ej4fuCN55QjaMXIQeAdlm2sCk5voV+UYel971vAQH632u5j AbHcj/AVqjIEeRGA1TsZzxkxr06mXH1EAz1QD45Lq+OIbI3UeWWHatVJxYFOO8PA FFZHwI2DUQaCXcMTOUgLsOKOJbS37XKeGwdLPAguWkq8q6tXRw5csgdAzFbVNil3 AjQLi6XOwdtYjjtfV6WFBLLaAnHFNawvha0= -----END CERTIFICATE-----Generated at Sat Jul 12 15:07:29 2025 by rpki-client