$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/fd72707a-d414-3938-b730-61666b6c47aa.roa File: fd72707a-d414-3938-b730-61666b6c47aa.roa (raw, json) Hash identifier: uLAK9DMLWaAhYEd7DCqMCS1tI9kBPvjbL6lcq+vfhM0= Subject key identifier: 41:33:3A:F5:E9:63:5F:32:3D:7E:72:DE:45:81:A5:D3:D4:86:11:09 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285848A9961AAFD9A0565F62C02080 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/fd72707a-d414-3938-b730-61666b6c47aa.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 9009 IP address blocks: 2607:740:30::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:1a:af:d9:a0:56:5f:62:c0:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=0657f752-3c5c-4720-ae2e-c1ea9f1cc687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:82:aa:93:c8:e5:28:d0:91:e7:44:63:87:67: 33:95:da:61:35:b8:8b:15:bf:3a:88:de:67:61:4c: 41:c6:f7:ea:4f:03:6d:20:1b:16:93:97:e6:18:08: a0:2c:a1:64:0d:ce:d1:f8:0d:f6:f5:2d:f5:1f:48: 3e:98:e3:35:0a:c3:28:4a:d2:dc:34:1b:c7:da:7e: 08:3e:32:8f:1e:53:f6:25:12:79:f3:39:92:3f:d8: c3:e8:b0:07:8d:54:5e:1e:f7:1d:08:63:eb:bb:8c: 1f:6e:75:5e:df:67:aa:67:25:52:b1:6f:d6:96:12: 14:97:98:4c:23:06:b6:69:76:6f:44:21:8a:48:4e: 1d:da:cb:19:d5:7d:8e:f9:2f:81:02:c6:0c:08:c3: 2c:f8:a6:a0:8b:c2:3c:ff:b4:9d:e2:8c:73:ca:55: 66:c9:93:f8:0f:47:5e:02:91:49:e4:62:a7:c8:a7: 28:3f:5d:57:d0:b2:65:6a:98:24:70:df:59:1f:a6: d2:ca:16:67:ed:b7:ca:3a:37:f4:1d:7c:6a:2f:0a: 1f:c6:90:3e:d6:8f:fb:ba:1d:de:72:83:6b:dc:2d: 86:93:24:8a:87:51:6b:b5:3f:65:42:75:97:31:30: b9:4a:30:9a:9d:15:e2:4d:fe:68:c0:54:ca:8d:d4: df:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:33:3A:F5:E9:63:5F:32:3D:7E:72:DE:45:81:A5:D3:D4:86:11:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/fd72707a-d414-3938-b730-61666b6c47aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:30::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:19:ce:aa:99:62:75:fa:4a:67:26:a1:4d:ed:1c:b6:c7:b8: 6c:5b:25:3b:77:e8:05:d9:5b:bc:c1:07:d6:c8:a2:1a:a3:ad: 78:ff:56:c6:d0:c4:04:9c:16:2b:87:a6:29:be:83:36:cc:46: 64:27:02:c9:f8:50:46:bc:08:d6:69:e4:bc:f8:e1:0d:25:ea: 1a:6e:38:27:cd:4d:81:1e:85:c3:8a:62:cb:f7:7e:3d:20:4d: 7a:d1:5a:43:20:bb:a0:5e:3d:03:db:4f:6d:fb:6c:2e:14:ae: 44:11:55:1f:7c:46:9d:a7:81:52:ed:f0:04:3d:57:60:c3:d7: 91:0b:6f:c5:db:65:82:d7:42:e3:ef:b3:cd:f9:99:42:5b:c5: ff:e7:da:f0:e4:34:fb:97:e5:6d:5b:ec:f7:69:8f:29:e4:18: 6e:50:ca:1e:71:3a:89:db:54:60:d2:fb:33:e4:a2:7d:3d:49: 04:49:64:8f:ac:9d:53:6a:55:ed:02:d5:9b:37:00:d5:21:c1: 53:9f:b2:93:8d:d2:bd:f0:75:9e:f9:6c:9c:14:12:6b:d7:f1: 28:e8:5a:38:6b:c9:b5:1d:03:87:ac:b3:b0:ee:2f:9c:30:20: 9e:10:8c:8c:57:77:e4:47:5e:6b:cd:8f:a7:32:ff:ca:cd:05: 5d:5a:77:5b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiplhqv2aBWX2LAIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk MDY1N2Y3NTItM2M1Yy00NzIwLWFlMmUtYzFlYTlmMWNjNjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4Kqk8jlKNCR50Rjh2czldphNbiLFb86iN5n YUxBxvfqTwNtIBsWk5fmGAigLKFkDc7R+A329S31H0g+mOM1CsMoStLcNBvH2n4I PjKPHlP2JRJ58zmSP9jD6LAHjVReHvcdCGPru4wfbnVe32eqZyVSsW/WlhIUl5hM Iwa2aXZvRCGKSE4d2ssZ1X2O+S+BAsYMCMMs+Kagi8I8/7Sd4oxzylVmyZP4D0de ApFJ5GKnyKcoP11X0LJlapgkcN9ZH6bSyhZn7bfKOjf0HXxqLwofxpA+1o/7uh3e coNr3C2GkySKh1FrtT9lQnWXMTC5SjCanRXiTf5owFTKjdTfzQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEEzOvXpY18yPX5y3kWBpdPUhhEJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvZmQ3MjcwN2EtZDQxNC0z OTM4LWI3MzAtNjE2NjZiNmM0N2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAAw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEEZzqqZYnX6SmcmoU3tHLbHuGxbJTt36AXZW7zBB9bIohqjrXj/ VsbQxAScFiuHpim+gzbMRmQnAsn4UEa8CNZp5Lz44Q0l6hpuOCfNTYEehcOKYsv3 fj0gTXrRWkMgu6BePQPbT237bC4UrkQRVR98Rp2ngVLt8AQ9V2DD15ELb8XbZYLX QuPvs835mUJbxf/n2vDkNPuX5W1b7PdpjynkGG5Qyh5xOonbVGDS+zPkon09SQRJ ZI+snVNqVe0C1Zs3ANUhwVOfspON0r3wdZ75bJwUEmvX8SjoWjhrybUdA4ess7Du L5wwIJ4QjIxXd+RHXmvNj6cy/8rNBV1ad1s= -----END CERTIFICATE-----Generated at Mon Apr 7 12:16:43 2025 by rpki-client