$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a1c1cd8d-cf72-36a6-a480-8fc9b46e58f9.roa File: a1c1cd8d-cf72-36a6-a480-8fc9b46e58f9.roa (raw, json) Hash identifier: AFNPOdrajIHwizbH2E8jrNS72qoro9vfJ844jcT8DJQ= Subject key identifier: CC:BF:34:B1:41:E9:A9:AE:A2:4A:12:16:80:14:5F:27:44:A2:39:7A Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285848A9961A66ACB44BAB38C81D00 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a1c1cd8d-cf72-36a6-a480-8fc9b46e58f9.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 9009 IP address blocks: 2607:740:2d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:1a:66:ac:b4:4b:ab:38:c8:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=ad9e2dce-cc5c-41ff-8ce7-c72111070ffe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6b:5c:99:d9:c1:6c:4c:70:29:df:56:a8:55: 48:90:3e:c6:e1:a8:b9:26:71:6a:2e:55:50:9e:83: 95:80:2e:c9:a4:5f:79:f0:f6:0f:ed:00:43:c2:9b: 9f:4d:a1:11:eb:e2:67:10:dd:ad:f4:e6:2d:20:71: fb:0b:8f:92:26:85:8e:3e:2c:b9:93:e1:2f:13:7c: 94:46:6c:76:45:23:a1:4d:ee:21:3c:ba:88:3f:f2: 8e:77:e8:c7:a0:53:eb:96:5b:14:57:f7:64:03:6c: b9:83:7c:96:c9:ca:60:ce:e9:41:5a:c7:ed:5e:a9: 39:e9:63:6b:f6:89:4b:d0:19:b7:df:60:75:5e:03: ba:d3:7d:7e:84:b4:dd:a6:1c:d8:f1:22:d5:74:5b: 07:b7:c9:f7:d7:b4:22:e7:69:33:ae:8d:1e:9a:27: ac:ea:c3:a9:e0:67:f7:be:47:09:2b:e0:e2:16:6b: ab:c1:3d:33:bf:c6:ae:d2:fe:42:ac:d7:d4:a2:26: d1:9b:bf:5c:ec:06:39:7a:4e:d8:19:21:45:bd:f8: b5:2d:0c:2f:f5:5c:98:04:ce:15:e5:25:d1:5d:67: 5e:c6:d8:55:a7:87:73:10:59:17:87:fd:0b:95:18: 43:4c:79:18:8f:5d:42:0f:af:c0:76:65:47:40:87: 80:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:BF:34:B1:41:E9:A9:AE:A2:4A:12:16:80:14:5F:27:44:A2:39:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a1c1cd8d-cf72-36a6-a480-8fc9b46e58f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:2d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:5e:1f:09:55:3d:4d:2f:bf:83:3b:f5:9e:f8:1a:6c:8c:67: e0:e7:70:3b:d2:c5:d7:7e:2e:99:34:d7:e8:c7:6e:45:38:7d: ed:94:0b:12:97:80:07:7a:79:b0:c1:70:34:d7:87:cf:7e:5b: 3d:a8:50:29:73:80:08:79:e3:c3:04:8e:f8:5f:e3:de:9f:4f: 94:5e:1a:75:8c:35:ee:ba:8e:f3:a9:fe:03:78:44:ca:9c:9e: 17:18:47:01:3c:6a:e1:c9:7a:56:7e:99:10:d0:94:75:04:9e: d5:98:14:52:cc:69:2a:3b:80:64:c1:29:49:5a:41:bf:56:93: ee:05:77:6f:ac:f7:eb:ed:cf:ea:71:95:31:9f:02:04:c7:5b: 90:a7:53:c8:de:c7:ea:45:cb:61:b8:ae:ff:7c:00:a3:97:92: 20:6c:d8:fd:94:1e:45:8f:30:ed:7d:bc:6a:a4:59:70:d1:03: ca:e9:b2:36:8a:5a:9b:89:3f:50:61:06:54:dd:15:e8:6b:0e: f9:2a:71:a1:39:e5:77:54:60:ad:85:a4:43:6b:ea:52:7c:c3: d1:57:06:ac:f2:8a:d0:51:22:79:44:b1:0f:80:3a:bd:73:9e: 27:a9:75:2a:fd:67:46:71:42:ee:6d:da:49:a6:f9:e2:61:b2: 25:dc:42:e1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiplhpmrLRLqzjIHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk YWQ5ZTJkY2UtY2M1Yy00MWZmLThjZTctYzcyMTExMDcwZmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGtcmdnBbExwKd9WqFVIkD7G4ai5JnFqLlVQ noOVgC7JpF958PYP7QBDwpufTaER6+JnEN2t9OYtIHH7C4+SJoWOPiy5k+EvE3yU Rmx2RSOhTe4hPLqIP/KOd+jHoFPrllsUV/dkA2y5g3yWycpgzulBWsftXqk56WNr 9olL0Bm332B1XgO6031+hLTdphzY8SLVdFsHt8n317Qi52kzro0emies6sOp4Gf3 vkcJK+DiFmurwT0zv8au0v5CrNfUoibRm79c7AY5ek7YGSFFvfi1LQwv9VyYBM4V 5SXRXWdexthVp4dzEFkXh/0LlRhDTHkYj11CD6/AdmVHQIeAzwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMy/NLFB6amuokoSFoAUXydEojl6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvYTFjMWNkOGQtY2Y3Mi0z NmE2LWE0ODAtOGZjOWI0NmU1OGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAAt MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHleHwlVPU0vv4M79Z74GmyMZ+DncDvSxdd+Lpk01+jHbkU4fe2U CxKXgAd6ebDBcDTXh89+Wz2oUClzgAh548MEjvhf496fT5ReGnWMNe66jvOp/gN4 RMqcnhcYRwE8auHJelZ+mRDQlHUEntWYFFLMaSo7gGTBKUlaQb9Wk+4Fd2+s9+vt z+pxlTGfAgTHW5CnU8jex+pFy2G4rv98AKOXkiBs2P2UHkWPMO19vGqkWXDRA8rp sjaKWpuJP1BhBlTdFehrDvkqcaE55XdUYK2FpENr6lJ8w9FXBqzyitBRInlEsQ+A Or1zniepdSr9Z0ZxQu5t2kmm+eJhsiXcQuE= -----END CERTIFICATE-----Generated at Mon Apr 7 11:47:49 2025 by rpki-client