$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/e60dcdad-e41a-33b5-9259-fdbeb18ca76e.roa File: e60dcdad-e41a-33b5-9259-fdbeb18ca76e.roa (raw, json) Hash identifier: kwAQ/aM5jDLIHQ4EwBANw9XsOPuQ29kJweQQN5OrQok= Subject key identifier: F8:01:B8:98:06:51:CD:B1:C2:25:FB:CC:14:C3:FD:A5:7B:A7:D2:67 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584A6825F6F1D56E79D067F31C00 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/e60dcdad-e41a-33b5-9259-fdbeb18ca76e.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 262287 IP address blocks: 2607:740:36::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Jul 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:25:f6:f1:d5:6e:79:d0:67:f3:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=7a975839-c7f2-4354-8eba-ebd8a1e35c48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:de:33:0b:d8:77:7a:82:b6:fc:87:67:6d:37: 31:eb:08:56:58:fa:c2:8c:c0:e1:ce:24:d1:13:6c: 6e:57:f1:b1:b4:21:fb:c9:97:93:75:06:8d:79:74: 04:02:be:24:da:6e:a9:06:80:a4:d7:05:37:f2:2a: 9c:38:40:0e:27:45:88:bf:98:e9:b3:48:09:1a:72: 14:00:8a:de:22:ff:6e:a7:62:e7:31:05:41:bf:94: 94:bc:55:bc:6b:1a:ec:8b:8d:df:4f:74:e7:81:25: fc:a9:33:a2:89:c1:85:51:85:54:56:b8:84:78:fd: 51:ed:33:4d:ab:af:f1:63:dd:d1:15:4c:76:6d:3e: b6:b5:58:bb:bb:8d:f0:fb:ac:98:af:97:7e:cf:6d: c2:ea:47:c3:ce:e3:b9:c3:f3:a6:6a:f0:78:b3:89: 19:75:0e:47:6d:57:95:41:b6:0b:05:ee:ac:df:cc: 3a:82:5e:d8:dd:29:cc:bd:68:e9:a4:ad:40:d7:c1: d2:be:4d:52:24:06:a6:d5:51:c7:35:5b:c0:19:c4: 2e:3f:99:89:44:d7:17:ad:16:4b:8d:4c:ec:52:1a: 26:80:3d:b9:61:73:0c:d4:6b:40:df:71:1f:9d:d6: 7e:c8:2c:d5:c1:d2:0f:5a:4d:bd:9b:88:d4:73:42: d0:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:01:B8:98:06:51:CD:B1:C2:25:FB:CC:14:C3:FD:A5:7B:A7:D2:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/e60dcdad-e41a-33b5-9259-fdbeb18ca76e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:36::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:57:1a:40:d1:de:be:88:7c:94:22:49:91:74:7d:e6:a2:aa: e3:37:be:b8:2d:0e:c1:68:c9:0a:b6:fa:74:1e:89:7c:84:56: 2c:dd:75:1e:9b:9c:db:e4:26:3c:81:dd:89:55:39:fa:bf:93: 48:83:f7:e5:03:38:ce:95:c8:5d:80:41:f3:48:7a:56:10:9d: c1:4e:24:97:bc:1b:0a:c2:4f:17:e1:0b:58:e5:db:5d:17:2b: 7d:d1:5c:8d:ba:03:02:87:cf:58:cb:ee:d1:55:24:80:e6:56: fd:4c:3d:43:19:2c:ea:8a:ab:6b:56:dc:5c:80:6f:ba:c7:b9: bf:1e:1d:cf:da:08:e3:90:5d:eb:88:9d:24:0c:e3:a7:ac:6b: a7:3e:69:f0:b3:02:f4:3e:67:fe:d1:58:00:5f:65:5f:90:d0: 5d:80:e0:bd:72:9c:db:4b:61:88:0e:76:08:a7:eb:7c:f7:f6: e3:b7:e9:b6:33:d5:0c:9e:95:7a:dd:28:b1:fc:7e:21:62:ff: 76:fc:0b:d4:30:28:2d:94:c4:37:d0:26:48:13:09:93:86:3d: 56:a8:06:19:d3:1e:d7:83:1a:63:7b:ff:fa:54:92:a5:cd:ba: 42:61:8e:71:48:bc:b5:5c:42:8b:96:f6:0d:a4:ff:20:5a:10: 4c:52:71:ce -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpoJfbx1W550GfzHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk N2E5NzU4MzktYzdmMi00MzU0LThlYmEtZWJkOGExZTM1YzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlN4zC9h3eoK2/IdnbTcx6whWWPrCjMDhziTR E2xuV/GxtCH7yZeTdQaNeXQEAr4k2m6pBoCk1wU38iqcOEAOJ0WIv5jps0gJGnIU AIreIv9up2LnMQVBv5SUvFW8axrsi43fT3TngSX8qTOiicGFUYVUVriEeP1R7TNN q6/xY93RFUx2bT62tVi7u43w+6yYr5d+z23C6kfDzuO5w/OmavB4s4kZdQ5HbVeV QbYLBe6s38w6gl7Y3SnMvWjppK1A18HSvk1SJAam1VHHNVvAGcQuP5mJRNcXrRZL jUzsUhomgD25YXMM1GtA33EfndZ+yCzVwdIPWk29m4jUc0LQjwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPgBuJgGUc2xwiX7zBTD/aV7p9JnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvZTYwZGNkYWQtZTQxYS0z M2I1LTkyNTktZmRiZWIxOGNhNzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAA2 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB9XGkDR3r6IfJQiSZF0feaiquM3vrgtDsFoyQq2+nQeiXyEVizd dR6bnNvkJjyB3YlVOfq/k0iD9+UDOM6VyF2AQfNIelYQncFOJJe8GwrCTxfhC1jl 210XK33RXI26AwKHz1jL7tFVJIDmVv1MPUMZLOqKq2tW3FyAb7rHub8eHc/aCOOQ XeuInSQM46esa6c+afCzAvQ+Z/7RWABfZV+Q0F2A4L1ynNtLYYgOdgin63z39uO3 6bYz1QyelXrdKLH8fiFi/3b8C9QwKC2UxDfQJkgTCZOGPVaoBhnTHteDGmN7//pU kqXNukJhjnFIvLVcQouW9g2k/yBaEExScc4= -----END CERTIFICATE-----Generated at Sat Jul 12 15:34:47 2025 by rpki-client