$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a2a97d39-6a72-3779-bcbb-cfdbb288c517.roa File: a2a97d39-6a72-3779-bcbb-cfdbb288c517.roa (raw, json) Hash identifier: Uw/m8OKCxbe+bZNod8+RWdJm0Wb1RsXT6zCEpMVJSWQ= Subject key identifier: BC:92:04:3D:54:E8:B8:57:E1:A3:91:77:AD:BF:C8:B1:71:96:16:C6 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584A66C072610EB9C0D628541E40 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a2a97d39-6a72-3779-bcbb-cfdbb288c517.roa Signing time: Fri 04 Jul 2025 01:00:49 +0000 ROA not before: Fri 04 Jul 2025 01:00:49 +0000 ROA not after: Thu 02 Oct 2025 01:00:49 +0000 asID: 9009 IP address blocks: 2607:740:23::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:66:c0:72:61:0e:b9:c0:d6:28:54:1e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jul 4 01:00:49 2025 GMT Not After : Oct 2 01:00:49 2025 GMT Subject: CN=bd074ba7-68ac-49f6-b7a6-ae5c3ea59692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:0a:10:a2:a7:49:60:1e:10:f6:46:6a:fc:e7: 3e:78:ee:d0:bc:77:1b:96:f8:8a:cc:e1:53:33:5e: b3:3b:22:f9:9d:d1:df:11:d7:6f:74:ce:21:e7:63: f2:90:0c:7d:fd:8b:e0:fe:7b:38:04:a0:cc:98:78: e1:47:50:1b:4d:18:a4:b7:b0:a9:0c:46:9f:fb:46: 89:a0:c9:97:c5:bf:98:0b:dd:bf:1c:d1:c6:f3:bd: 6f:24:c2:f4:c8:de:da:52:05:a9:cd:ca:60:02:10: 54:7f:b5:4e:65:8f:db:d2:f9:ba:37:63:b0:93:ad: d5:f6:39:bc:83:e9:d5:63:d7:c6:d3:02:40:51:01: d2:f7:c8:9c:31:33:d2:6b:5a:38:73:7b:9a:51:47: ad:fb:2b:fc:75:f1:e1:9d:c8:c6:e0:e2:44:7f:45: 9b:e3:8c:37:a6:7b:c1:b2:32:d5:bd:b1:73:3b:a9: 43:d4:cc:60:12:04:42:da:7e:4a:cb:49:12:e1:31: 63:74:76:e0:62:a5:d1:40:f3:ab:6b:ae:7a:92:09: 06:28:82:17:38:3c:ca:08:45:2c:e3:d9:11:ff:a3: ea:21:a0:92:be:76:08:01:f2:ab:2f:2e:04:2d:c8: 87:04:17:9e:4f:86:ea:94:28:f6:17:d1:66:04:40: 92:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:92:04:3D:54:E8:B8:57:E1:A3:91:77:AD:BF:C8:B1:71:96:16:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a2a97d39-6a72-3779-bcbb-cfdbb288c517.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:23::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:3a:89:a2:fa:6c:d6:0e:e8:24:42:d9:55:e1:cf:f4:fb:ca: c2:ca:1b:a3:c3:e3:ff:86:3c:dd:85:64:76:a3:57:6f:69:47: 4c:2c:8e:b2:b4:18:0c:98:b2:87:33:28:1b:3e:52:45:a0:8c: 28:89:3d:a7:d5:1b:41:95:6b:b2:f5:96:8a:df:80:a4:87:d0: d0:d1:49:57:b7:f0:f6:34:1e:64:fa:53:42:78:16:2b:d9:58: eb:59:95:80:a1:11:a5:36:0e:91:c7:7e:b6:ad:85:d9:e5:92: 59:58:fe:8f:74:cb:0a:07:3b:24:c2:36:f8:35:76:0a:53:51: e0:35:96:92:8b:30:e5:21:f8:74:48:c7:4f:b3:28:24:a6:24: 8c:66:eb:98:fb:dd:52:72:dc:44:38:7c:d3:32:2b:c7:9d:ea: c1:f3:93:1d:a6:2a:0c:c9:d2:7f:d8:4a:f5:3b:c4:6a:fa:00: 8f:36:94:7c:0a:6c:44:76:6a:94:2f:ad:ae:9d:2c:b7:46:30: 81:51:6a:51:bd:fe:66:51:33:4d:1d:78:eb:b9:58:d5:9f:3e: 98:64:c6:08:47:d5:eb:31:c9:76:51:29:6d:c9:be:59:d6:44: a8:69:22:d3:66:68:a0:ce:a7:e3:a6:62:4f:97:73:f2:4a:b5: 87:81:5c:a2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpmwHJhDrnA1ihUHkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk YmQwNzRiYTctNjhhYy00OWY2LWI3YTYtYWU1YzNlYTU5NjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQoQoqdJYB4Q9kZq/Oc+eO7QvHcblviKzOFT M16zOyL5ndHfEddvdM4h52PykAx9/Yvg/ns4BKDMmHjhR1AbTRikt7CpDEaf+0aJ oMmXxb+YC92/HNHG871vJML0yN7aUgWpzcpgAhBUf7VOZY/b0vm6N2Owk63V9jm8 g+nVY9fG0wJAUQHS98icMTPSa1o4c3uaUUet+yv8dfHhncjG4OJEf0Wb44w3pnvB sjLVvbFzO6lD1MxgEgRC2n5Ky0kS4TFjdHbgYqXRQPOra656kgkGKIIXODzKCEUs 49kR/6PqIaCSvnYIAfKrLy4ELciHBBeeT4bqlCj2F9FmBECSoQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLySBD1U6LhX4aORd62/yLFxlhbGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvYTJhOTdkMzktNmE3Mi0z Nzc5LWJjYmItY2ZkYmIyODhjNTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAAj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFc6iaL6bNYO6CRC2VXhz/T7ysLKG6PD4/+GPN2FZHajV29pR0ws jrK0GAyYsoczKBs+UkWgjCiJPafVG0GVa7L1lorfgKSH0NDRSVe38PY0HmT6U0J4 FivZWOtZlYChEaU2DpHHfrathdnlkllY/o90ywoHOyTCNvg1dgpTUeA1lpKLMOUh +HRIx0+zKCSmJIxm65j73VJy3EQ4fNMyK8ed6sHzkx2mKgzJ0n/YSvU7xGr6AI82 lHwKbER2apQvra6dLLdGMIFRalG9/mZRM00deOu5WNWfPphkxghH1esxyXZRKW3J vlnWRKhpItNmaKDOp+OmYk+Xc/JKtYeBXKI= -----END CERTIFICATE-----Generated at Sat Jul 12 13:51:24 2025 by rpki-client