$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a2a97d39-6a72-3779-bcbb-cfdbb288c517.roa File: a2a97d39-6a72-3779-bcbb-cfdbb288c517.roa (raw, json) Hash identifier: h22+4FDoYqy3z8Pq4vskNpgMA26YOW/5uwowNudx1mU= Subject key identifier: 4E:43:C4:9D:19:05:CF:D9:AD:49:CF:AB:E7:67:9D:69:97:A4:B6:07 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285848A830B024F6190D09F45E4928 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a2a97d39-6a72-3779-bcbb-cfdbb288c517.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 9009 IP address blocks: 2607:740:23::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:b0:24:f6:19:0d:09:f4:5e:49:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=5a73ceea-aeb4-4abb-b67a-91f5808e2654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:12:06:fd:f5:28:36:d2:63:f4:80:66:78:e2: 1c:8e:32:c5:c1:be:bf:80:e5:52:bb:11:88:53:ab: 5d:0b:00:5a:00:cc:a1:62:cf:10:89:9f:27:ed:e3: 05:42:27:df:5b:29:00:86:d1:fc:44:07:82:08:83: 32:58:ff:25:f5:79:ed:ff:82:b2:c5:86:6c:22:8f: c4:4b:1d:fb:ff:7c:d7:b9:93:c1:75:73:19:71:01: fb:01:c7:8b:69:7c:90:33:15:e2:53:80:94:40:3a: 90:f9:f0:87:75:a3:3a:64:0b:86:70:b8:96:b6:a6: ed:86:23:48:0b:2b:e7:55:37:d4:da:3c:2b:c5:36: e5:ab:4c:8c:26:a3:3f:2a:57:30:ba:5b:9f:ea:22: d9:a5:cf:85:8b:60:a7:1f:8e:2a:d5:2f:1a:f1:2c: 98:59:f1:86:48:37:f0:9a:1a:c8:2a:1f:58:49:43: 51:dc:03:0c:da:fb:d3:e9:89:b3:48:a0:3f:59:e3: 70:2d:6c:2f:3e:7c:32:d5:58:21:9b:6a:9e:f5:22: ae:60:f4:aa:ba:53:1b:c3:f6:2a:62:6a:d6:3e:9e: 7d:b9:3f:6c:6e:f2:04:07:12:58:32:bb:31:ed:6e: 00:65:6e:ca:fb:22:16:e9:1c:fe:22:5d:90:4c:36: 46:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:43:C4:9D:19:05:CF:D9:AD:49:CF:AB:E7:67:9D:69:97:A4:B6:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a2a97d39-6a72-3779-bcbb-cfdbb288c517.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:23::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:57:ac:cf:9d:31:ba:c5:9e:73:74:87:42:52:36:65:81:6f: d4:74:58:c7:81:23:9e:72:b3:79:79:81:e2:7d:15:41:d1:70: 9b:b1:04:91:f0:8d:7e:b3:ee:d8:9a:c1:96:1d:85:e6:c7:2b: f6:67:9c:9a:6f:12:6a:4a:43:f8:08:4b:ef:13:19:17:80:2d: 11:84:39:6b:70:c1:7e:5f:e3:d6:e7:40:cb:ed:01:7f:e2:0f: 7e:e4:71:9a:42:c5:a2:47:7b:21:61:f8:67:bf:18:c6:d7:12: 4a:cf:bc:b2:26:59:2c:a5:b6:bc:0d:dc:01:5f:ec:7d:6f:90: d4:6c:57:e0:49:c3:fd:7a:a0:52:4b:f2:21:ab:94:41:76:df: 56:4f:9d:6c:c2:af:15:67:27:ba:69:3e:ab:75:06:0a:a7:0b: ac:94:4a:5c:79:7f:d9:01:82:4f:03:5f:7f:a1:0d:b8:3b:14: 98:45:79:1c:16:73:d0:70:bc:ad:7f:c5:af:2d:43:cd:b0:51: 87:af:eb:b0:9d:10:99:96:a5:0e:d0:12:4b:13:a1:a4:e1:68: 57:68:5f:92:19:c6:5d:dc:9f:4f:3d:de:66:a3:e9:00:b0:46: 05:ce:82:6c:3a:11:e2:3f:4f:7a:9f:bc:60:ee:74:8b:8c:6e: 8e:e6:25:de -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEioMLAk9hkNCfReSSgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk NWE3M2NlZWEtYWViNC00YWJiLWI2N2EtOTFmNTgwOGUyNjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBIG/fUoNtJj9IBmeOIcjjLFwb6/gOVSuxGI U6tdCwBaAMyhYs8QiZ8n7eMFQiffWykAhtH8RAeCCIMyWP8l9Xnt/4KyxYZsIo/E Sx37/3zXuZPBdXMZcQH7AceLaXyQMxXiU4CUQDqQ+fCHdaM6ZAuGcLiWtqbthiNI CyvnVTfU2jwrxTblq0yMJqM/Klcwuluf6iLZpc+Fi2CnH44q1S8a8SyYWfGGSDfw mhrIKh9YSUNR3AMM2vvT6YmzSKA/WeNwLWwvPnwy1Vghm2qe9SKuYPSqulMbw/Yq YmrWPp59uT9sbvIEBxJYMrsx7W4AZW7K+yIW6Rz+Il2QTDZGwQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE5DxJ0ZBc/ZrUnPq+dnnWmXpLYHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvYTJhOTdkMzktNmE3Mi0z Nzc5LWJjYmItY2ZkYmIyODhjNTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAAj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAJXrM+dMbrFnnN0h0JSNmWBb9R0WMeBI55ys3l5geJ9FUHRcJux BJHwjX6z7tiawZYdhebHK/ZnnJpvEmpKQ/gIS+8TGReALRGEOWtwwX5f49bnQMvt AX/iD37kcZpCxaJHeyFh+Ge/GMbXEkrPvLImWSyltrwN3AFf7H1vkNRsV+BJw/16 oFJL8iGrlEF231ZPnWzCrxVnJ7ppPqt1BgqnC6yUSlx5f9kBgk8DX3+hDbg7FJhF eRwWc9BwvK1/xa8tQ82wUYev67CdEJmWpQ7QEksToaThaFdoX5IZxl3cn0893maj 6QCwRgXOgmw6EeI/T3qfvGDudIuMbo7mJd4= -----END CERTIFICATE-----Generated at Mon Apr 7 11:52:56 2025 by rpki-client