$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/1e33cf60-024f-320a-a973-9390c08f9547.roa File: 1e33cf60-024f-320a-a973-9390c08f9547.roa (raw, json) Hash identifier: sP/uNtTTWZIK68OqxnCMW8mmNrF06lZtLKFy05K9/WY= Subject key identifier: 69:E2:24:FD:76:F9:D5:4A:E6:5C:0A:B5:4F:88:E3:A8:0A:44:B8:4E Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F4328584ACE0B93E3E9F9599BFCEAC740 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/1e33cf60-024f-320a-a973-9390c08f9547.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 12189 IP address blocks: 2607:6003:230b::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:93:e3:e9:f9:59:9b:fc:ea:c7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=af28666a-9ebe-4b2f-a443-231ac00c52f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ab:e3:2a:17:6b:72:52:b2:1b:08:29:c6:69: 11:9f:1b:7d:90:95:f2:a6:54:27:72:88:6b:b6:2f: be:1b:c8:52:2a:03:07:a7:eb:7a:f7:dd:65:d3:c9: ae:d6:94:ed:db:53:59:fc:c6:85:bc:21:08:63:36: 36:c6:1f:55:f1:f6:52:3d:98:82:ed:8e:be:78:6d: fc:8f:8b:e1:80:79:b2:20:a8:e3:bf:0d:03:0b:a2: 86:05:07:b6:73:97:3b:dd:1b:8d:e1:f6:e1:e7:e4: 21:fe:05:31:b0:b3:82:b7:a9:be:ad:af:7c:f5:a1: 2c:71:9c:a6:bf:f8:09:f7:9f:29:bd:fc:d7:56:0d: 05:be:eb:23:ba:83:ba:c0:36:af:22:91:76:e7:7e: 6a:82:c1:45:bf:e8:be:cb:df:9b:16:f0:ae:c6:f4: 84:83:66:62:88:b7:a7:c0:c4:f0:99:e4:0b:33:ef: 6e:90:b6:01:b6:fb:aa:5c:67:d1:46:38:59:35:60: b3:4c:2f:c4:02:d0:f9:00:cb:a1:80:34:57:d9:1b: 22:72:66:44:9d:2f:cc:ad:ca:64:e5:8c:af:4f:10: 2f:0c:9c:ba:66:43:dd:6f:bc:8c:2b:4e:59:4a:1f: e6:8c:5c:76:03:00:f0:74:26:19:15:8e:09:12:1d: 6c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:E2:24:FD:76:F9:D5:4A:E6:5C:0A:B5:4F:88:E3:A8:0A:44:B8:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/1e33cf60-024f-320a-a973-9390c08f9547.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv6: 2607:6003:230b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:c6:82:48:1c:a1:9d:51:30:b5:84:70:26:62:75:fe:31:86: 7b:a9:bc:cc:5e:36:20:c9:53:96:e4:10:43:47:c7:22:13:78: 21:fd:e1:69:5b:aa:87:51:03:09:df:c9:57:cd:1c:88:be:2f: 29:7c:cd:ff:0b:bb:67:23:a5:86:44:dc:ca:72:08:85:aa:7a: 9c:96:bd:bc:d5:52:96:c2:44:85:9c:0c:64:75:e7:bb:34:f6: ec:6d:84:ac:6d:e3:af:86:b6:98:5f:2a:c0:d0:e5:a6:13:3a: e5:22:0b:27:34:74:db:80:24:31:eb:08:68:28:43:68:33:7e: 91:1d:d0:c1:9a:21:4f:19:78:b5:a8:40:b6:13:d1:43:c6:3a: 18:6c:f8:bc:b3:d6:03:7d:53:f5:d9:32:55:e6:93:fe:08:fc: bd:87:1f:32:95:01:cb:53:1e:24:75:1c:7c:f2:25:ba:a2:69: a9:29:09:c7:c7:8c:8f:e6:25:e3:97:02:da:f2:d0:f4:41:a8: 0c:a1:2a:a2:27:d3:63:5a:d3:7e:4b:d1:e0:23:db:38:87:ae: f7:c7:7d:21:e2:d1:cb:5c:ba:f4:9e:1a:36:3a:38:af:2a:2e: 82:b8:13:4a:15:00:9c:d3:48:c2:25:9a:72:00:58:2b:4e:21: 0d:c9:4a:54 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErOC5Pj6flZm/zqx0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk YWYyODY2NmEtOWViZS00YjJmLWE0NDMtMjMxYWMwMGM1MmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6vjKhdrclKyGwgpxmkRnxt9kJXyplQncohr ti++G8hSKgMHp+t6991l08mu1pTt21NZ/MaFvCEIYzY2xh9V8fZSPZiC7Y6+eG38 j4vhgHmyIKjjvw0DC6KGBQe2c5c73RuN4fbh5+Qh/gUxsLOCt6m+ra989aEscZym v/gJ958pvfzXVg0FvusjuoO6wDavIpF2535qgsFFv+i+y9+bFvCuxvSEg2ZiiLen wMTwmeQLM+9ukLYBtvuqXGfRRjhZNWCzTC/EAtD5AMuhgDRX2RsicmZEnS/Mrcpk 5YyvTxAvDJy6ZkPdb7yMK05ZSh/mjFx2AwDwdCYZFY4JEh1sXQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGniJP12+dVK5lwKtU+I46gKRLhOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvMWUzM2NmNjAtMDI0Zi0z MjBhLWE5NzMtOTM5MGMwOGY5NTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgdgAyML MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFjGgkgcoZ1RMLWEcCZidf4xhnupvMxeNiDJU5bkEENHxyITeCH9 4WlbqodRAwnfyVfNHIi+Lyl8zf8Lu2cjpYZE3MpyCIWqepyWvbzVUpbCRIWcDGR1 57s09uxthKxt46+GtphfKsDQ5aYTOuUiCyc0dNuAJDHrCGgoQ2gzfpEd0MGaIU8Z eLWoQLYT0UPGOhhs+Lyz1gN9U/XZMlXmk/4I/L2HHzKVActTHiR1HHzyJbqiaakp CcfHjI/mJeOXAtry0PRBqAyhKqIn02Na035L0eAj2ziHrvfHfSHi0ctcuvSeGjY6 OK8qLoK4E0oVAJzTSMIlmnIAWCtOIQ3JSlQ= -----END CERTIFICATE-----Generated at Sat Aug 23 21:55:40 2025 by rpki-client