$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/714b2ae0-acf5-387d-ae44-8dc694303606.roa File: 714b2ae0-acf5-387d-ae44-8dc694303606.roa (raw, json) Hash identifier: rWN2lZOGN3YZ0ZKDT37UtO2LLZ/rwbaxPxOVBe8IrTs= Subject key identifier: 14:8E:72:E6:FA:57:A2:23:EE:B6:BC:A0:3D:4F:36:15:B1:8C:66:00 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285848A9961B44E93E158D8A89F180 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/714b2ae0-acf5-387d-ae44-8dc694303606.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 9009 IP address blocks: 2607:740:3d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:1b:44:e9:3e:15:8d:8a:89:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=bb10b38d-7053-410a-9915-4a272c212c2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:67:67:e8:4a:b4:09:ad:16:d9:68:57:7d:ba: c9:0a:ce:aa:4b:ff:b3:49:a9:86:35:5c:03:aa:58: 94:a0:d1:38:aa:0c:8c:cb:ef:f5:22:0a:e0:f6:9b: 01:1f:02:49:55:a7:cf:e0:01:01:39:18:a1:e2:f8: 0f:6e:30:f9:3c:df:98:34:70:ff:6a:18:1f:b0:f5: 78:43:e7:8d:b5:62:1d:15:9c:89:ec:58:21:7e:96: dd:1e:ce:b1:c6:0c:fe:02:0e:11:c6:ed:77:c1:19: e8:6a:67:d7:14:b0:29:cc:1e:96:16:e8:31:b2:c4: 30:7e:d6:b1:e0:07:05:d0:2d:46:44:93:8a:33:b6: 49:c2:07:99:24:3f:28:87:57:d9:77:9f:65:92:eb: c2:f6:d6:3f:85:f0:f3:a0:70:86:90:9f:23:ae:0d: 64:ba:9c:d4:a1:c4:6f:5e:54:eb:a9:02:25:66:5c: 31:75:ac:d6:0f:b1:dd:44:b0:a2:c4:6f:97:34:66: e3:1f:0e:f7:e8:94:90:64:f4:a5:01:aa:34:47:8a: 6c:49:81:11:f7:8d:18:0a:d0:67:23:e4:47:9a:e7: 7e:8b:41:e6:60:1f:98:4d:3f:c9:5c:64:fa:f2:1d: 04:12:49:c2:af:9a:6b:09:19:a5:e6:16:6c:c1:a3: 1f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:8E:72:E6:FA:57:A2:23:EE:B6:BC:A0:3D:4F:36:15:B1:8C:66:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/714b2ae0-acf5-387d-ae44-8dc694303606.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:3d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:eb:42:dd:1d:62:24:87:3f:d6:73:6e:4b:f7:70:45:b7:87: e9:f6:32:a9:d1:ab:68:a8:63:2f:fd:cf:9d:38:b1:92:8c:9b: ed:db:c0:3f:d1:4b:2e:34:d8:60:3f:6b:af:6e:ed:10:2f:07: 41:b9:39:74:94:04:65:09:5b:79:13:61:17:93:5d:d1:78:92: 0d:30:01:95:71:71:4f:8f:d9:1c:f7:3c:22:76:2a:fb:37:26: 17:66:b9:bc:a8:8e:7a:45:6d:ac:2d:86:09:cd:7d:2e:a3:fc: 41:57:79:e6:bd:e1:79:67:f3:b2:1e:6f:cc:30:a3:af:91:f6: 0a:9e:8d:8e:7a:d2:1e:c0:3d:3a:47:17:06:e8:f5:c8:38:54: 1e:40:b5:e7:33:dc:50:f4:99:cf:87:93:99:08:f0:3b:b7:f7: e8:4b:49:c0:dc:06:a9:f6:52:0a:91:d1:d1:4d:d4:ae:5c:05: 90:df:8a:74:eb:22:5d:07:6b:17:12:0b:ae:50:f7:f3:44:0d: 71:57:5e:37:ef:95:f4:50:f5:1c:ed:b6:d5:9f:5e:29:8b:c2: cc:5c:21:e7:1a:da:45:37:10:99:ee:cb:86:de:0a:57:80:8b: fb:ae:20:2c:d5:8d:f8:ce:51:78:3a:84:bb:f2:7f:db:0a:3a: 1c:90:90:24 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiplhtE6T4VjYqJ8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk YmIxMGIzOGQtNzA1My00MTBhLTk5MTUtNGEyNzJjMjEyYzJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimdn6Eq0Ca0W2WhXfbrJCs6qS/+zSamGNVwD qliUoNE4qgyMy+/1Igrg9psBHwJJVafP4AEBORih4vgPbjD5PN+YNHD/ahgfsPV4 Q+eNtWIdFZyJ7FghfpbdHs6xxgz+Ag4Rxu13wRnoamfXFLApzB6WFugxssQwftax 4AcF0C1GRJOKM7ZJwgeZJD8oh1fZd59lkuvC9tY/hfDzoHCGkJ8jrg1kupzUocRv XlTrqQIlZlwxdazWD7HdRLCixG+XNGbjHw736JSQZPSlAao0R4psSYER940YCtBn I+RHmud+i0HmYB+YTT/JXGT68h0EEknCr5prCRml5hZswaMfUwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBSOcub6V6Ij7ra8oD1PNhWxjGYAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNzE0YjJhZTAtYWNmNS0z ODdkLWFlNDQtOGRjNjk0MzAzNjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAA9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGHrQt0dYiSHP9Zzbkv3cEW3h+n2MqnRq2ioYy/9z504sZKMm+3b wD/RSy402GA/a69u7RAvB0G5OXSUBGUJW3kTYReTXdF4kg0wAZVxcU+P2Rz3PCJ2 Kvs3JhdmubyojnpFbawthgnNfS6j/EFXeea94Xln87Ieb8wwo6+R9gqejY560h7A PTpHFwbo9cg4VB5Atecz3FD0mc+Hk5kI8Du39+hLScDcBqn2UgqR0dFN1K5cBZDf inTrIl0HaxcSC65Q9/NEDXFXXjfvlfRQ9RztttWfXimLwsxcIeca2kU3EJnuy4be CleAi/uuICzVjfjOUXg6hLvyf9sKOhyQkCQ= -----END CERTIFICATE-----Generated at Mon Apr 7 12:16:45 2025 by rpki-client