$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/909e0677-e107-3f90-b3d6-d289381c03ee.roa File: 909e0677-e107-3f90-b3d6-d289381c03ee.roa (raw, json) Hash identifier: Rd6rYEQbrxJxtjn+K0LjCkJ8viU0rxz0sC9QMFI/Neo= Subject key identifier: DA:CF:63:F1:F9:F1:91:3C:EC:3B:38:C2:D0:E5:DC:78:26:93:AE:0D Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285848A99622A1D0B2D36EE2FCF980 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/909e0677-e107-3f90-b3d6-d289381c03ee.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 9009 IP address blocks: 2607:740:39::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:22:a1:d0:b2:d3:6e:e2:fc:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=e5c98794-5926-4bc5-b129-85d5ff2802ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2a:d9:61:37:7b:a3:c8:39:03:2f:c4:54:e1: d4:a5:16:2b:af:d4:13:e6:89:5e:b8:30:4c:d9:72: 45:12:3e:f2:d8:67:d8:a4:8a:00:a9:10:8a:e1:70: 63:37:1f:06:16:c9:8b:1f:7c:1d:25:52:71:1d:cc: a0:1b:63:98:9c:ee:92:59:57:4f:dc:f9:88:37:cc: fc:77:e5:fa:a2:61:ef:35:7a:92:40:21:2d:d5:9d: 47:a4:05:b3:7b:6e:86:54:72:d4:a7:de:af:12:17: f2:1c:71:2b:7e:4b:8a:67:72:43:c7:30:ce:0e:e0: 2b:7d:c5:58:00:c7:19:58:46:bd:e8:4f:88:e8:16: 0b:66:d2:54:b4:b0:e0:c1:de:29:89:19:1d:92:74: 49:e9:81:b9:8f:66:d4:62:bc:1c:35:0c:b9:19:a6: b7:77:c4:84:69:e5:3f:14:d8:9f:78:54:f7:d5:43: 84:a0:ab:58:fc:98:43:55:66:b0:4c:a2:31:58:6f: 70:48:bc:98:97:bd:ac:01:a2:cc:a1:11:d4:1e:da: 23:29:3c:5a:63:fe:29:58:a9:e0:b7:a2:f3:4f:fd: fe:19:f8:d7:d8:b9:db:3b:98:1f:0b:5b:34:63:20: f2:53:54:70:47:39:ae:86:64:b4:23:60:8f:d8:c6: 30:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:CF:63:F1:F9:F1:91:3C:EC:3B:38:C2:D0:E5:DC:78:26:93:AE:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/909e0677-e107-3f90-b3d6-d289381c03ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:39::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:fa:05:2b:c5:b3:b2:25:a4:33:ae:02:8b:c2:14:f3:87:3c: 27:09:e9:9a:ad:d9:ce:1d:fc:39:91:7f:54:55:71:60:d0:c6: 38:50:d7:34:ea:74:eb:5e:d7:bc:b0:30:1f:48:e4:eb:e6:26: 8d:8f:01:d4:ff:41:43:8a:43:90:fb:c6:a4:ca:e0:9b:19:35: 2d:98:7d:af:28:91:55:08:24:97:be:01:54:8d:4e:17:1e:24: 6e:ed:78:e7:26:52:8f:e4:4f:c3:31:35:bc:83:ae:db:57:03: 6d:84:e4:5b:1f:0d:11:c5:01:df:be:01:d0:77:7b:b2:76:cc: 44:fd:7b:0c:5e:7c:7e:3d:37:ff:4a:92:6f:d5:34:51:f0:50: 28:4c:93:2f:77:e5:55:7e:14:58:f4:78:f0:74:4e:97:27:a5: 1a:d4:66:af:e3:18:e3:e0:bd:ad:27:5c:76:e9:f9:e5:19:31: 49:b3:ab:55:6d:cf:17:0d:ea:92:eb:95:45:69:55:2e:d6:51: 0d:3f:24:90:53:df:3d:50:2a:aa:c1:6e:78:05:98:ca:6f:f0: fb:f8:4d:80:8d:b8:57:40:c0:fd:34:0d:0e:1a:6f:79:3d:5a: 5a:f1:74:10:8f:b7:3f:99:d2:e3:23:06:9d:92:93:f8:fb:51: 43:dd:71:53 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEipliKh0LLTbuL8+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZTVjOTg3OTQtNTkyNi00YmM1LWIxMjktODVkNWZmMjgwMmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCrZYTd7o8g5Ay/EVOHUpRYrr9QT5oleuDBM 2XJFEj7y2GfYpIoAqRCK4XBjNx8GFsmLH3wdJVJxHcygG2OYnO6SWVdP3PmIN8z8 d+X6omHvNXqSQCEt1Z1HpAWze26GVHLUp96vEhfyHHErfkuKZ3JDxzDODuArfcVY AMcZWEa96E+I6BYLZtJUtLDgwd4piRkdknRJ6YG5j2bUYrwcNQy5Gaa3d8SEaeU/ FNifeFT31UOEoKtY/JhDVWawTKIxWG9wSLyYl72sAaLMoRHUHtojKTxaY/4pWKng t6LzT/3+GfjX2LnbO5gfC1s0YyDyU1RwRzmuhmS0I2CP2MYwdQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNrPY/H58ZE87Ds4wtDl3Hgmk64NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvOTA5ZTA2NzctZTEwNy0z ZjkwLWIzZDYtZDI4OTM4MWMwM2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAA5 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABz6BSvFs7IlpDOuAovCFPOHPCcJ6Zqt2c4d/DmRf1RVcWDQxjhQ 1zTqdOte17ywMB9I5OvmJo2PAdT/QUOKQ5D7xqTK4JsZNS2Yfa8okVUIJJe+AVSN ThceJG7teOcmUo/kT8MxNbyDrttXA22E5FsfDRHFAd++AdB3e7J2zET9ewxefH49 N/9Kkm/VNFHwUChMky935VV+FFj0ePB0TpcnpRrUZq/jGOPgva0nXHbp+eUZMUmz q1VtzxcN6pLrlUVpVS7WUQ0/JJBT3z1QKqrBbngFmMpv8Pv4TYCNuFdAwP00DQ4a b3k9WlrxdBCPtz+Z0uMjBp2Sk/j7UUPdcVM= -----END CERTIFICATE-----Generated at Mon Apr 7 12:11:18 2025 by rpki-client