$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a3e5e46a-dd84-34eb-9259-02fea641d879.roa File: a3e5e46a-dd84-34eb-9259-02fea641d879.roa (raw, json) Hash identifier: B+nx34kU7iG4uBvaxxXEppzwgBDLtp+F9sobTdO/96A= Subject key identifier: 84:A9:09:20:69:FB:8B:9C:76:A7:4B:DC:D0:10:6D:F6:B2:E3:C6:DD Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584965E97A771B5957A7C81BFF00 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a3e5e46a-dd84-34eb-9259-02fea641d879.roa Signing time: Thu 03 Apr 2025 01:00:46 +0000 ROA not before: Thu 03 Apr 2025 01:00:46 +0000 ROA not after: Wed 02 Jul 2025 01:00:46 +0000 asID: 396356 IP address blocks: 2607:740:45::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:65:e9:7a:77:1b:59:57:a7:c8:1b:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Apr 3 01:00:46 2025 GMT Not After : Jul 2 01:00:46 2025 GMT Subject: CN=759f914f-c8ab-4172-aec0-7ddb9ea30db4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d1:67:cf:ec:ab:17:d5:2d:d7:56:0b:8d:74: fc:96:b4:c1:53:79:2c:10:e8:56:8e:a2:9c:39:33: 6b:af:ff:e6:2c:ee:9c:78:2f:2a:04:c6:88:d9:fe: 99:37:a2:91:74:ed:d1:4a:a4:b3:79:bd:12:8e:cd: a0:49:c5:7b:01:40:0c:4b:a4:f0:1e:e7:01:b0:81: fc:12:b6:ca:c3:a1:61:a2:fc:c9:b8:51:f8:be:d1: 46:55:de:87:70:9e:d7:74:2e:d2:b2:0c:8a:ab:ec: d1:99:fd:98:22:bf:81:d0:c6:02:cf:32:d5:eb:15: 3b:db:d2:c1:f1:5a:cc:46:a1:89:17:5c:ba:0a:74: 86:b4:49:f0:a1:10:46:9e:29:05:04:c9:c9:ee:5e: 24:5f:cc:74:7d:e3:d8:a7:4b:1c:a1:f1:a4:39:6f: 4c:02:ab:91:b2:5c:b6:70:74:22:8d:cb:d1:40:82: 2c:7d:33:b7:28:37:f8:66:fd:fb:82:27:79:54:89: c4:94:ff:dd:5e:2e:3d:33:ca:5b:ea:32:a6:d6:6a: 0b:4c:64:c0:d7:b2:ea:ea:28:23:fd:aa:89:af:28: ba:2c:8d:80:0b:44:5d:ed:dd:7c:e0:21:c0:8c:67: 79:a1:fc:fe:15:5d:aa:3d:a9:22:1d:6f:9b:67:25: 80:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A9:09:20:69:FB:8B:9C:76:A7:4B:DC:D0:10:6D:F6:B2:E3:C6:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a3e5e46a-dd84-34eb-9259-02fea641d879.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:45::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:4a:02:3a:8b:74:27:03:70:57:7d:ee:e3:16:14:64:01:2a: 91:ed:85:14:a9:51:b2:68:31:b0:bc:74:ce:43:8c:ec:6b:61: ad:eb:84:e1:77:ff:4c:71:80:76:82:be:c2:88:a8:a5:ff:13: 12:ad:61:c4:62:74:44:01:af:ea:ab:ea:05:89:38:c9:7c:8f: 86:28:ad:db:e5:8f:ad:cf:e4:5c:30:c3:e8:03:a2:1f:6e:ab: 8e:4d:17:86:b1:03:64:4d:a0:3f:57:d5:24:32:09:6c:29:66: e9:b9:d4:94:30:d4:e1:ef:a6:c3:86:61:0b:39:2a:b6:f9:9b: 15:e3:fb:f8:ea:a2:6a:d9:59:c1:8a:85:a6:f6:94:6b:10:5b: 3b:19:06:23:d6:46:a7:e9:44:ae:ea:33:63:be:8d:98:d4:8d: d5:25:41:78:d2:fd:07:ad:5e:c3:37:bd:b1:e6:f1:9f:fd:dd: 7b:88:37:c5:a9:ea:cd:cc:0e:78:99:4d:b8:b9:b1:43:1c:e9: 6d:ed:ee:56:c9:f2:1f:41:a0:6e:3d:8d:b5:84:8c:c5:76:3f: bc:a5:9f:43:cf:78:e9:23:5b:1c:09:73:76:40:a4:20:20:c9: 18:0c:35:d9:7c:f3:86:9b:ec:65:e1:40:be:e5:e4:90:92:98: af:37:46:d6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEll6Xp3G1lXp8gb/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDQwMzAxMDA0NloXDTI1MDcwMjAxMDA0NlowLzEtMCsGA1UEAxMk NzU5ZjkxNGYtYzhhYi00MTcyLWFlYzAtN2RkYjllYTMwZGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdFnz+yrF9Ut11YLjXT8lrTBU3ksEOhWjqKc OTNrr//mLO6ceC8qBMaI2f6ZN6KRdO3RSqSzeb0Sjs2gScV7AUAMS6TwHucBsIH8 ErbKw6FhovzJuFH4vtFGVd6HcJ7XdC7SsgyKq+zRmf2YIr+B0MYCzzLV6xU729LB 8VrMRqGJF1y6CnSGtEnwoRBGnikFBMnJ7l4kX8x0fePYp0scofGkOW9MAquRsly2 cHQijcvRQIIsfTO3KDf4Zv37gid5VInElP/dXi49M8pb6jKm1moLTGTA17Lq6igj /aqJryi6LI2AC0Rd7d184CHAjGd5ofz+FV2qPakiHW+bZyWANwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFISpCSBp+4ucdqdL3NAQbfay48bdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvYTNlNWU0NmEtZGQ4NC0z NGViLTkyNTktMDJmZWE2NDFkODc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQABF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAChKAjqLdCcDcFd97uMWFGQBKpHthRSpUbJoMbC8dM5DjOxrYa3r hOF3/0xxgHaCvsKIqKX/ExKtYcRidEQBr+qr6gWJOMl8j4Yordvlj63P5Fwww+gD oh9uq45NF4axA2RNoD9X1SQyCWwpZum51JQw1OHvpsOGYQs5Krb5mxXj+/jqomrZ WcGKhab2lGsQWzsZBiPWRqfpRK7qM2O+jZjUjdUlQXjS/QetXsM3vbHm8Z/93XuI N8Wp6s3MDniZTbi5sUMc6W3t7lbJ8h9BoG49jbWEjMV2P7yln0PPeOkjWxwJc3ZA pCAgyRgMNdl884ab7GXhQL7l5JCSmK83RtY= -----END CERTIFICATE-----Generated at Mon Apr 7 11:58:18 2025 by rpki-client