$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/99e80352-28e0-3280-b087-90da68e9840c.roa File: 99e80352-28e0-3280-b087-90da68e9840c.roa (raw, json) Hash identifier: Bv5j1IpNk4obD0IjAE69ixtTzf7EcmlmvbU4xG+JWGk= Subject key identifier: 78:BF:C4:64:92:F5:CD:85:56:A0:97:BC:56:E7:52:90:48:04:E8:E3 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584A6825F6C80D35F1E0606AA580 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/99e80352-28e0-3280-b087-90da68e9840c.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 9009 IP address blocks: 2607:740:36::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:25:f6:c8:0d:35:f1:e0:60:6a:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=95ec2d48-b3fc-4892-b104-af6907fa87bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:24:7f:2f:0b:05:97:8c:e2:cd:83:5c:5e:0e: 0f:2b:94:50:fa:63:8d:9d:73:ef:7b:3a:3d:a7:63: 1a:c8:0b:4e:4e:18:ec:7f:f5:41:44:56:c4:4e:2f: 6b:85:3d:da:11:a6:48:c2:a8:32:51:c1:06:82:c4: 33:a7:28:8f:19:f3:58:84:91:e7:9f:bb:03:ae:39: 80:02:7c:c3:ff:1c:88:eb:85:f4:a4:9b:2b:f2:bf: d9:67:25:0b:ac:53:ee:13:42:07:f1:0b:82:07:b8: ee:e2:25:f7:b5:09:e2:b1:36:df:7f:d2:12:67:9b: 17:14:b9:c2:0a:8e:d7:b9:eb:09:c2:01:d3:f6:f1: 8d:16:7e:ee:c4:8e:15:21:e3:16:75:53:1d:43:46: 6d:27:9e:d2:45:2c:7d:31:02:86:b8:95:f5:6d:e0: 2c:78:2c:3d:cf:c1:28:a9:a3:7c:e7:e4:bd:ec:16: 25:a2:1b:84:96:11:48:1a:1e:a7:a5:3d:29:a4:28: 75:ef:86:c3:09:79:b5:22:b9:6b:f9:1c:56:bd:48: ed:b3:f1:14:a0:4b:e9:81:be:e6:08:b6:2d:f5:87: 6d:94:5f:ae:58:d5:d3:32:3d:e2:78:c9:3e:aa:a5: 16:c0:76:54:51:3e:83:04:87:67:2c:72:2b:fa:3f: 90:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:BF:C4:64:92:F5:CD:85:56:A0:97:BC:56:E7:52:90:48:04:E8:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/99e80352-28e0-3280-b087-90da68e9840c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:36::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:ba:27:e1:45:9e:ee:70:7e:63:93:95:e0:06:66:d2:2d:02: 41:b5:3a:58:a6:7f:19:45:b7:bf:53:8b:52:18:71:58:ea:ce: b4:cd:de:3d:c2:34:b3:1e:4e:b7:27:3c:39:69:cd:d8:0d:31: 09:41:f5:8a:a1:29:38:69:37:80:9b:dc:b1:c5:d0:82:59:b3: f8:40:a9:fa:db:1f:a2:b0:e0:f4:6c:a7:83:25:9f:33:30:7a: 10:50:05:5b:d6:7d:ef:19:3f:ae:75:c0:6e:b4:78:72:6f:3b: b3:39:38:42:5c:a9:1d:f0:35:65:37:d7:0f:2e:ae:de:14:cf: 5f:d4:39:dd:7d:63:50:11:f8:14:4e:65:9e:0e:7a:7a:9c:e1: 3b:72:4b:24:b5:b1:74:ab:8b:38:44:84:47:e3:f8:4d:6c:57: 87:87:0b:00:68:7d:77:2f:90:d3:13:08:b7:05:21:a2:3e:fe: f1:8a:6e:89:5c:cf:c2:98:de:68:f7:1d:3c:a7:3e:51:f3:b6: 13:79:af:97:ca:93:31:3c:bb:6f:c9:23:2f:a6:95:93:b2:d4: b8:0b:31:fa:fa:4f:c4:5e:13:84:91:6a:09:5d:8d:6c:a3:aa: 32:e6:06:dc:b6:98:8c:e8:32:81:be:25:f0:2f:7b:93:82:d1: 47:10:96:da -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpoJfbIDTXx4GBqpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk OTVlYzJkNDgtYjNmYy00ODkyLWIxMDQtYWY2OTA3ZmE4N2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCR/LwsFl4zizYNcXg4PK5RQ+mONnXPvezo9 p2MayAtOThjsf/VBRFbETi9rhT3aEaZIwqgyUcEGgsQzpyiPGfNYhJHnn7sDrjmA AnzD/xyI64X0pJsr8r/ZZyULrFPuE0IH8QuCB7ju4iX3tQnisTbff9ISZ5sXFLnC Co7XuesJwgHT9vGNFn7uxI4VIeMWdVMdQ0ZtJ57SRSx9MQKGuJX1beAseCw9z8Eo qaN85+S97BYlohuElhFIGh6npT0ppCh174bDCXm1Irlr+RxWvUjts/EUoEvpgb7m CLYt9YdtlF+uWNXTMj3ieMk+qqUWwHZUUT6DBIdnLHIr+j+QZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHi/xGSS9c2FVqCXvFbnUpBIBOjjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvOTllODAzNTItMjhlMC0z MjgwLWIwODctOTBkYTY4ZTk4NDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAA2 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEK6J+FFnu5wfmOTleAGZtItAkG1OlimfxlFt79Ti1IYcVjqzrTN 3j3CNLMeTrcnPDlpzdgNMQlB9YqhKThpN4Cb3LHF0IJZs/hAqfrbH6Kw4PRsp4Ml nzMwehBQBVvWfe8ZP651wG60eHJvO7M5OEJcqR3wNWU31w8urt4Uz1/UOd19Y1AR +BROZZ4Oenqc4TtySyS1sXSrizhEhEfj+E1sV4eHCwBofXcvkNMTCLcFIaI+/vGK bolcz8KY3mj3HTynPlHzthN5r5fKkzE8u2/JIy+mlZOy1LgLMfr6T8ReE4SRagld jWyjqjLmBty2mIzoMoG+JfAve5OC0UcQlto= -----END CERTIFICATE-----Generated at Sat Jul 12 13:53:43 2025 by rpki-client