$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/85327b21-941f-3e4d-b13b-7e28774ba9ad.roa File: 85327b21-941f-3e4d-b13b-7e28774ba9ad.roa (raw, json) Hash identifier: lYqNnNlQvgfCYtFfe7OI7RZU8zcq0MToK12tRncnxUo= Subject key identifier: 85:65:E7:EC:85:28:2C:06:65:4F:56:94:F3:46:F2:74:36:A3:5F:2D Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584A6825F68935613A47483DC000 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/85327b21-941f-3e4d-b13b-7e28774ba9ad.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 9009 IP address blocks: 2607:740:2f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:25:f6:89:35:61:3a:47:48:3d:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=63f58a6d-787b-49c0-aa54-112659354633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4b:af:04:5f:9e:48:83:c7:9c:ef:e1:04:2c: a7:60:61:de:29:81:d3:46:d4:42:d7:ed:e0:44:4f: f0:91:5c:cb:04:65:67:80:d2:7e:8f:e0:5a:3d:46: 61:0b:c9:17:2c:9d:5a:0b:ad:28:91:3a:61:da:21: 0c:9a:03:f8:51:b9:2a:35:6d:ae:8d:55:e0:ef:d8: 5e:54:78:6d:7f:63:d7:9b:fe:aa:df:2f:85:13:30: 3f:85:ac:19:ab:6e:bc:5a:e4:21:a7:83:ce:1a:09: d1:ff:d6:b1:69:fd:7a:7f:7b:aa:14:ca:6b:97:0b: b6:26:a7:f9:9e:4c:d0:3e:fd:aa:64:bb:6f:b7:ec: 73:5b:0b:dd:d0:1d:9f:e3:3b:8b:88:16:71:8b:dc: b4:cb:1d:f7:ac:9a:2e:31:87:7a:ee:29:1b:bf:7f: 78:53:f7:26:17:10:08:83:6a:4b:8f:67:1b:a7:e4: a0:0a:d4:e5:7e:e4:d8:bc:e1:84:b6:71:e6:5b:95: 17:fb:4d:ca:1c:33:44:c0:64:15:ce:39:a7:5a:07: e3:09:0b:cd:95:45:16:e8:d1:1b:f0:8a:5c:ff:f3: 7d:b4:d0:19:0c:20:d6:39:2a:11:b8:5f:5b:3f:38: ac:53:01:26:1d:8d:20:8b:ea:4b:fa:49:62:9c:05: 29:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:65:E7:EC:85:28:2C:06:65:4F:56:94:F3:46:F2:74:36:A3:5F:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/85327b21-941f-3e4d-b13b-7e28774ba9ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:2f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:8e:64:03:d5:b2:c2:cc:3b:48:b8:23:6c:78:49:30:0f:4d: 26:bd:3b:fa:17:e7:da:7e:8f:b2:75:40:18:c9:b9:a7:a7:a3: 00:f5:66:36:3d:7d:55:3e:ce:41:a8:00:53:ff:f0:84:55:9a: 3d:26:2c:7a:2d:67:5d:5c:10:55:fc:c5:82:2a:ab:6f:68:88: 25:ef:a2:89:c5:7e:b5:65:ae:dc:45:10:91:52:86:fb:2e:4b: a0:ca:13:bb:17:19:84:ff:ca:83:4f:67:86:9e:ba:3b:32:87: 02:d3:a0:06:f7:d2:61:12:29:a6:77:e4:12:ed:7a:22:40:df: 50:25:7d:9f:6d:d5:c2:35:c3:66:83:b0:05:83:61:a4:b9:3e: ed:a3:52:42:f7:65:c8:ed:c2:3a:df:46:ac:c3:28:a2:0a:d6: e7:d3:53:0c:65:ee:63:b8:ba:1a:dd:68:be:0e:a4:e7:49:7d: 20:77:05:42:0a:c3:75:40:3c:e3:1d:b4:ef:74:73:0e:ef:69: d1:02:29:63:08:d4:f3:fe:aa:88:9d:da:17:c3:51:f6:85:93: 73:ca:31:ea:7c:59:a8:4b:47:9e:92:1f:17:f2:52:e9:46:3d: 54:84:94:03:c3:16:5e:b8:d1:e3:6b:fc:e0:a6:23:13:4a:01: e0:a6:58:bf -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpoJfaJNWE6R0g9wAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk NjNmNThhNmQtNzg3Yi00OWMwLWFhNTQtMTEyNjU5MzU0NjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0uvBF+eSIPHnO/hBCynYGHeKYHTRtRC1+3g RE/wkVzLBGVngNJ+j+BaPUZhC8kXLJ1aC60okTph2iEMmgP4UbkqNW2ujVXg79he VHhtf2PXm/6q3y+FEzA/hawZq268WuQhp4POGgnR/9axaf16f3uqFMprlwu2Jqf5 nkzQPv2qZLtvt+xzWwvd0B2f4zuLiBZxi9y0yx33rJouMYd67ikbv394U/cmFxAI g2pLj2cbp+SgCtTlfuTYvOGEtnHmW5UX+03KHDNEwGQVzjmnWgfjCQvNlUUW6NEb 8Ipc//N9tNAZDCDWOSoRuF9bPzisUwEmHY0gi+pL+klinAUphQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIVl5+yFKCwGZU9WlPNG8nQ2o18tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvODUzMjdiMjEtOTQxZi0z ZTRkLWIxM2ItN2UyODc3NGJhOWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAAv MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEaOZAPVssLMO0i4I2x4STAPTSa9O/oX59p+j7J1QBjJuaenowD1 ZjY9fVU+zkGoAFP/8IRVmj0mLHotZ11cEFX8xYIqq29oiCXvoonFfrVlrtxFEJFS hvsuS6DKE7sXGYT/yoNPZ4aeujsyhwLToAb30mESKaZ35BLteiJA31AlfZ9t1cI1 w2aDsAWDYaS5Pu2jUkL3ZcjtwjrfRqzDKKIK1ufTUwxl7mO4uhrdaL4OpOdJfSB3 BUIKw3VAPOMdtO90cw7vadECKWMI1PP+qoid2hfDUfaFk3PKMep8WahLR56SHxfy UulGPVSElAPDFl640eNr/OCmIxNKAeCmWL8= -----END CERTIFICATE-----Generated at Sat Jul 12 14:08:12 2025 by rpki-client