$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a4f87b05-483e-3849-9acf-31f521ab9b61.roa File: a4f87b05-483e-3849-9acf-31f521ab9b61.roa (raw, json) Hash identifier: rLwX3L5sCYDdsze/L5ZxHx5s38wdVnqj6ZIh9y198Uk= Subject key identifier: B3:A2:18:B3:3F:8E:41:46:FD:E9:87:D9:04:FF:CF:C5:89:0D:28:28 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285848A9961B2FC961E32F8142E200 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a4f87b05-483e-3849-9acf-31f521ab9b61.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 9009 IP address blocks: 2607:740:3c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:1b:2f:c9:61:e3:2f:81:42:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=8e211f0c-9798-46c0-93e7-0c00fca78949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:bd:90:9a:dc:8d:b4:cd:d7:ef:7d:1a:b6:f1: 6d:64:b5:39:65:ea:88:d8:18:28:5e:0e:90:77:ab: ff:59:e4:07:5e:e9:e4:03:2e:2f:c4:77:9b:3e:52: 99:0e:88:b8:d8:ba:d1:43:72:6a:ab:7b:51:4f:30: 88:fb:a1:1e:fb:1f:f2:78:c8:9c:25:79:08:70:5d: ce:6f:ec:0f:7a:83:b6:ea:f5:ab:d0:28:7b:fe:39: 56:ad:1a:09:89:82:3c:dc:13:03:26:df:ad:9e:0d: 39:79:7c:f7:cb:d3:46:60:15:93:1e:44:27:09:87: 5c:eb:5a:00:5b:88:7d:7b:ba:7f:1e:85:cc:e0:0f: 6b:5b:0f:f3:09:6d:80:cf:24:55:1f:79:8a:6a:76: 89:45:d8:b5:03:63:cb:70:9f:d9:e5:82:c3:fe:e2: 76:bd:0c:80:c8:88:c7:70:e4:b3:9f:10:32:62:3b: e7:af:da:63:01:e9:46:b8:e8:79:5d:0c:40:e2:e2: 87:9e:46:fa:4c:4c:c9:b8:67:ed:8f:fa:e4:e8:bc: 67:03:dd:9f:82:37:e6:00:00:62:47:e1:c3:d1:fa: c5:d3:3b:9a:49:58:a8:7b:a5:60:98:d4:28:f5:55: 5e:c4:06:de:58:7c:1f:42:f5:ab:02:71:60:59:e7: 7e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:A2:18:B3:3F:8E:41:46:FD:E9:87:D9:04:FF:CF:C5:89:0D:28:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a4f87b05-483e-3849-9acf-31f521ab9b61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:3c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:33:60:f4:88:e5:de:5a:fc:82:86:cf:7f:1e:a8:13:2f:7a: d2:76:d1:71:18:2d:d5:03:a0:c9:1a:4b:5c:81:19:0c:9d:84: a0:7a:ff:de:3d:e3:d0:48:fb:b2:9b:7f:05:ed:be:c7:bf:c9: 48:0f:55:3c:63:bc:5c:ed:f0:0b:b3:d1:7e:2c:48:cf:75:c5: a2:a3:88:07:30:2c:59:fd:fa:aa:46:81:89:22:b0:ed:ea:d9: 9f:0e:f6:ae:f3:7b:1f:bc:5b:d4:8e:6e:78:dc:b5:91:dd:8f: 52:50:48:6c:8a:79:a5:f5:ef:ca:77:69:10:92:af:37:10:5b: 57:5f:5d:e1:ff:fd:32:90:1f:f6:61:67:47:3a:2c:78:78:b9: 3d:55:d1:95:df:da:61:87:1f:45:b2:a2:77:16:39:e8:46:6d: ab:de:8c:81:b8:69:fd:6d:d3:a8:49:74:95:5a:ff:bc:28:d7: d8:df:e9:97:86:16:05:cc:e4:4d:0d:56:4b:ba:a4:a0:df:6d: 81:c0:04:ee:d3:b1:8b:92:7d:a0:a5:7b:2d:3d:cc:64:5c:11: e5:f8:72:4c:89:2e:62:a4:6d:d6:1b:ce:85:ee:dc:99:f7:10: 1c:a7:8d:66:9e:0b:71:2b:c5:ba:ad:78:34:ab:59:22:be:da: 83:a9:98:86 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiplhsvyWHjL4FC4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk OGUyMTFmMGMtOTc5OC00NmMwLTkzZTctMGMwMGZjYTc4OTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApr2QmtyNtM3X730atvFtZLU5ZeqI2BgoXg6Q d6v/WeQHXunkAy4vxHebPlKZDoi42LrRQ3Jqq3tRTzCI+6Ee+x/yeMicJXkIcF3O b+wPeoO26vWr0Ch7/jlWrRoJiYI83BMDJt+tng05eXz3y9NGYBWTHkQnCYdc61oA W4h9e7p/HoXM4A9rWw/zCW2AzyRVH3mKanaJRdi1A2PLcJ/Z5YLD/uJ2vQyAyIjH cOSznxAyYjvnr9pjAelGuOh5XQxA4uKHnkb6TEzJuGftj/rk6LxnA92fgjfmAABi R+HD0frF0zuaSVioe6VgmNQo9VVexAbeWHwfQvWrAnFgWed+ewIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLOiGLM/jkFG/emH2QT/z8WJDSgoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvYTRmODdiMDUtNDgzZS0z ODQ5LTlhY2YtMzFmNTIxYWI5YjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAA8 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIIzYPSI5d5a/IKGz38eqBMvetJ20XEYLdUDoMkaS1yBGQydhKB6 /94949BI+7KbfwXtvse/yUgPVTxjvFzt8Auz0X4sSM91xaKjiAcwLFn9+qpGgYki sO3q2Z8O9q7zex+8W9SObnjctZHdj1JQSGyKeaX178p3aRCSrzcQW1dfXeH//TKQ H/ZhZ0c6LHh4uT1V0ZXf2mGHH0WyoncWOehGbavejIG4af1t06hJdJVa/7wo19jf 6ZeGFgXM5E0NVku6pKDfbYHABO7TsYuSfaCley09zGRcEeX4ckyJLmKkbdYbzoXu 3Jn3EBynjWaeC3ErxbqteDSrWSK+2oOpmIY= -----END CERTIFICATE-----Generated at Mon Apr 7 11:53:03 2025 by rpki-client