$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/b729f1bb-ad8d-31e0-9602-d62296e43bf3.roa File: b729f1bb-ad8d-31e0-9602-d62296e43bf3.roa (raw, json) Hash identifier: T3T+13eJZUl0I596UV23x9OYfeibh6fStKogrDGSgEI= Subject key identifier: B7:FB:3A:55:1D:E4:81:A5:E7:68:05:41:6E:EE:5C:5B:D5:B5:93:B1 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F432858489340B2DD363E84D1413552C0 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/b729f1bb-ad8d-31e0-9602-d62296e43bf3.roa Signing time: Fri 17 Jan 2025 14:00:53 +0000 ROA not before: Fri 17 Jan 2025 14:00:53 +0000 ROA not after: Thu 17 Apr 2025 13:00:53 +0000 asID: 209181 IP address blocks: 2607:740:46::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:93:40:b2:dd:36:3e:84:d1:41:35:52:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jan 17 14:00:53 2025 GMT Not After : Apr 17 13:00:53 2025 GMT Subject: CN=166618c8-803c-4ad4-b8d4-7f86dd2a5805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d1:54:e0:67:43:35:88:5e:a3:7e:a9:8f:34: 26:ac:14:ef:44:aa:e6:1a:27:4d:f9:ac:8b:f9:e3: 89:ca:35:73:3b:be:2b:37:ba:72:7c:00:8e:dd:b4: dc:fe:97:43:4c:08:68:ed:a0:fd:3a:a8:85:fa:6e: 44:56:2e:69:79:79:ce:33:04:c8:03:60:4a:6c:b2: 7c:88:da:36:51:f7:7f:e7:48:12:33:51:f3:c8:68: 40:66:00:f1:85:4e:6a:ee:d9:64:fa:e9:c9:73:56: 67:61:63:cd:b7:71:cc:9d:83:e9:21:d4:a3:e9:49: d9:7c:3a:40:41:c8:4c:a2:f5:da:7a:00:e6:2c:07: c2:09:96:72:f6:be:b9:8f:81:02:bd:07:af:b2:61: 40:d6:bc:f1:7f:aa:4a:08:e8:7e:f6:53:02:b7:f5: 31:93:61:47:7f:6f:63:b7:4b:69:a7:df:7e:c2:ec: fc:ab:0d:86:32:55:5f:5c:6e:03:78:d4:d0:ab:6f: 6a:90:00:d2:c4:87:8d:ec:61:bc:b8:78:02:7a:74: 29:a3:90:24:fe:27:4e:a1:66:dc:93:ab:7d:a0:a5: 3e:f9:bb:a3:da:86:51:07:ca:25:bb:f6:28:1a:6b: 6b:56:1b:93:2a:2c:5e:23:f4:72:83:9c:c7:75:8a: 4c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:FB:3A:55:1D:E4:81:A5:E7:68:05:41:6E:EE:5C:5B:D5:B5:93:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/b729f1bb-ad8d-31e0-9602-d62296e43bf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:46::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:4f:3e:02:b4:a5:d6:d4:9e:7a:37:24:53:0c:d6:92:b5:a2: 78:e1:8a:91:0c:5b:7d:f0:3a:c7:4e:55:c5:30:f9:50:76:9e: 43:bc:8c:d1:86:5b:29:a9:73:21:12:f9:24:ae:b3:ba:9a:ad: 76:8c:ca:0f:6e:80:16:7f:ea:e7:e5:e8:3c:da:ed:ec:27:42: 95:7d:08:68:8e:2f:1e:77:37:03:ac:d7:24:da:76:09:3f:3c: 1a:0c:26:96:90:d9:0d:ce:65:a8:23:d0:ce:e2:80:91:21:3a: 7e:fe:a8:eb:d5:5d:a6:86:5f:e1:f6:83:e3:d9:63:8b:08:7a: 28:6d:49:0a:2d:87:ef:35:92:64:59:10:3e:4b:54:80:fa:9b: ff:6c:de:7b:f3:22:df:3f:39:9c:68:31:93:11:1f:5c:df:52: 02:fa:97:b2:05:78:f8:f5:df:f5:95:79:ac:c1:a7:fb:42:b1: cb:c2:46:88:d1:0c:03:d8:5d:d2:7f:b7:51:98:b4:9a:01:a5: 20:dd:e2:34:0a:10:29:2e:cd:e8:9e:fb:98:67:1c:fb:64:1e: 33:fb:72:1b:93:83:82:6d:08:68:35:5d:36:37:fd:18:97:6a: 76:17:5d:7b:fc:ae:a0:d3:30:24:2a:ea:cc:54:91:9a:7d:73: 45:55:59:50 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiTQLLdNj6E0UE1UsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDExNzE0MDA1M1oXDTI1MDQxNzEzMDA1M1owLzEtMCsGA1UEAxMk MTY2NjE4YzgtODAzYy00YWQ0LWI4ZDQtN2Y4NmRkMmE1ODA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9FU4GdDNYheo36pjzQmrBTvRKrmGidN+ayL +eOJyjVzO74rN7pyfACO3bTc/pdDTAho7aD9OqiF+m5EVi5peXnOMwTIA2BKbLJ8 iNo2Ufd/50gSM1HzyGhAZgDxhU5q7tlk+unJc1ZnYWPNt3HMnYPpIdSj6UnZfDpA QchMovXaegDmLAfCCZZy9r65j4ECvQevsmFA1rzxf6pKCOh+9lMCt/Uxk2FHf29j t0tpp99+wuz8qw2GMlVfXG4DeNTQq29qkADSxIeN7GG8uHgCenQpo5Ak/idOoWbc k6t9oKU++buj2oZRB8olu/YoGmtrVhuTKixeI/Ryg5zHdYpMOwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLf7OlUd5IGl52gFQW7uXFvVtZOxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvYjcyOWYxYmItYWQ4ZC0z MWUwLTk2MDItZDYyMjk2ZTQzYmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQABG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADZPPgK0pdbUnno3JFMM1pK1onjhipEMW33wOsdOVcUw+VB2nkO8 jNGGWympcyES+SSus7qarXaMyg9ugBZ/6ufl6Dza7ewnQpV9CGiOLx53NwOs1yTa dgk/PBoMJpaQ2Q3OZagj0M7igJEhOn7+qOvVXaaGX+H2g+PZY4sIeihtSQoth+81 kmRZED5LVID6m/9s3nvzIt8/OZxoMZMRH1zfUgL6l7IFePj13/WVeazBp/tCscvC RojRDAPYXdJ/t1GYtJoBpSDd4jQKECkuzeie+5hnHPtkHjP7chuTg4JtCGg1XTY3 /RiXanYXXXv8rqDTMCQq6sxUkZp9c0VVWVA= -----END CERTIFICATE-----Generated at Sat Apr 5 12:39:31 2025 by rpki-client