$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a4f87b05-483e-3849-9acf-31f521ab9b61.roa File: a4f87b05-483e-3849-9acf-31f521ab9b61.roa (raw, json) Hash identifier: p/JVakajZ9aSJSFZ9iSkLHU+KZWAqdW5F2aEMhXPisE= Subject key identifier: 70:CA:FC:CA:DB:35:62:FC:08:27:D3:24:33:27:F3:FD:9D:2F:71:0B Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584A6825F7018558C0ED8FFC5EA0 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a4f87b05-483e-3849-9acf-31f521ab9b61.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 9009 IP address blocks: 2607:740:3c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Jul 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:25:f7:01:85:58:c0:ed:8f:fc:5e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=06ffd736-a778-4e6b-87c3-f344954c7376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c0:29:4f:72:b6:2f:17:8e:6c:8b:9b:49:2b: 8a:31:83:6e:6c:a4:2e:52:1a:03:7e:22:b1:d9:df: 8b:7d:16:ce:4b:36:3f:57:b4:85:35:5e:ca:4d:40: c5:d9:30:04:2c:c3:87:73:75:ad:37:9b:e1:0d:cd: f3:48:e6:18:df:15:00:da:37:df:10:e6:92:95:d9: 47:bc:7e:54:fb:71:ab:04:3d:f9:93:ba:33:53:bf: c8:92:33:0e:58:b9:74:c9:ba:5a:d3:41:31:71:6c: 99:51:bf:62:4d:fa:92:31:4b:dc:68:bc:a9:a4:d2: 78:ae:13:41:22:86:d4:b4:cd:c3:ff:ef:7e:32:a0: 94:ed:89:73:91:58:a7:a7:ae:9a:eb:0a:99:3a:ce: 99:03:4e:cb:9e:cf:02:7e:9f:96:3d:b0:89:02:b5: cd:cf:03:92:e9:84:a0:b4:aa:31:10:34:33:9c:47: 0c:af:95:8b:9d:29:36:b2:a6:d9:d7:d7:53:97:20: 36:fd:43:e3:19:5f:b4:65:ba:85:ba:04:e2:6b:e4: d5:af:7f:11:d3:9f:43:fc:bf:f7:b9:0f:04:0c:27: c7:50:3b:62:bb:9b:b1:4c:51:6e:3c:9f:8f:12:e2: d6:68:f0:7e:34:35:cb:7a:3b:f2:8f:72:cd:15:cf: 7d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:CA:FC:CA:DB:35:62:FC:08:27:D3:24:33:27:F3:FD:9D:2F:71:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a4f87b05-483e-3849-9acf-31f521ab9b61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:3c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:b4:4d:d2:9f:b4:92:49:b9:40:f1:03:94:4e:bd:ef:30:0f: 05:79:35:77:2b:b1:f2:52:f2:e4:5d:5d:f2:11:1f:5a:fc:e8: ee:58:e5:f8:37:22:02:60:3c:67:1c:00:d4:78:6f:0d:36:72: fd:1c:15:7b:d9:54:d2:f3:7c:1b:85:26:f0:bd:8f:e3:22:6f: 0a:78:6c:03:eb:92:2b:56:37:00:ce:e4:26:49:5b:79:5f:6d: 81:9d:0a:13:63:ac:70:01:e9:40:59:47:a5:49:0f:d7:29:b5: 03:fa:00:8a:3c:3c:25:80:28:8c:42:d1:65:8c:cd:85:57:f2: 2e:f2:f7:7a:4d:05:16:49:b9:a1:1c:72:d8:e9:0e:b3:b9:8a: bb:32:0c:7e:72:94:ae:57:b7:43:ac:fa:a6:b1:51:cd:0e:bb: 14:32:97:44:da:d0:10:38:16:90:18:ca:95:42:64:5b:52:d7: 29:f2:6f:17:fe:ab:8e:2f:70:e6:52:d3:41:c4:40:c6:12:90: 94:1e:af:62:ea:81:92:e4:e3:19:50:90:3b:93:3c:ae:7a:18: ff:10:79:86:3f:00:6f:fc:02:f2:0c:df:b2:0d:32:c4:6d:14: 9b:da:c8:3b:d3:ce:fc:f9:18:45:c7:2c:43:f1:f3:2a:da:00: 2a:42:a0:1c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpoJfcBhVjA7Y/8XqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk MDZmZmQ3MzYtYTc3OC00ZTZiLTg3YzMtZjM0NDk1NGM3Mzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsApT3K2LxeObIubSSuKMYNubKQuUhoDfiKx 2d+LfRbOSzY/V7SFNV7KTUDF2TAELMOHc3WtN5vhDc3zSOYY3xUA2jffEOaSldlH vH5U+3GrBD35k7ozU7/IkjMOWLl0ybpa00ExcWyZUb9iTfqSMUvcaLyppNJ4rhNB IobUtM3D/+9+MqCU7YlzkVinp66a6wqZOs6ZA07Lns8Cfp+WPbCJArXNzwOS6YSg tKoxEDQznEcMr5WLnSk2sqbZ19dTlyA2/UPjGV+0ZbqFugTia+TVr38R059D/L/3 uQ8EDCfHUDtiu5uxTFFuPJ+PEuLWaPB+NDXLejvyj3LNFc99FQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHDK/MrbNWL8CCfTJDMn8/2dL3ELMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvYTRmODdiMDUtNDgzZS0z ODQ5LTlhY2YtMzFmNTIxYWI5YjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAA8 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA+0TdKftJJJuUDxA5ROve8wDwV5NXcrsfJS8uRdXfIRH1r86O5Y 5fg3IgJgPGccANR4bw02cv0cFXvZVNLzfBuFJvC9j+Mibwp4bAPrkitWNwDO5CZJ W3lfbYGdChNjrHAB6UBZR6VJD9cptQP6AIo8PCWAKIxC0WWMzYVX8i7y93pNBRZJ uaEcctjpDrO5irsyDH5ylK5Xt0Os+qaxUc0OuxQyl0Ta0BA4FpAYypVCZFtS1yny bxf+q44vcOZS00HEQMYSkJQer2LqgZLk4xlQkDuTPK56GP8QeYY/AG/8AvIM37IN MsRtFJvayDvTzvz5GEXHLEPx8yraACpCoBw= -----END CERTIFICATE-----Generated at Sat Jul 12 15:18:34 2025 by rpki-client