$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/2d1cb9ba-986b-337c-a27a-9e706d8757d1.roa File: 2d1cb9ba-986b-337c-a27a-9e706d8757d1.roa (raw, json) Hash identifier: g4pTD1sjT02ndx+pJUA5X1VstoIvAR6T1sefpC3F864= Subject key identifier: C2:3F:49:24:9D:88:86:0A:40:39:1A:CC:C6:FA:EF:32:CE:F0:C4:4A Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F4328584AD23BAAAF26F0282D96680AA0 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/2d1cb9ba-986b-337c-a27a-9e706d8757d1.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 19437 IP address blocks: 2607:6002:300::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:aa:af:26:f0:28:2d:96:68:0a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=b9c03830-a7b6-48eb-b71e-8c0fb02fadbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ed:79:ed:05:3b:46:c7:74:84:99:30:74:e0: 3b:94:e7:ce:08:06:54:3e:bd:a0:b0:2a:b2:fa:78: 4d:bd:db:50:6a:0e:87:e0:4e:05:cf:0f:02:62:46: dc:27:1a:a2:23:da:1e:09:c9:77:77:25:fe:f7:0e: 51:df:22:9a:10:de:c3:82:03:0d:2b:e3:0a:8e:e1: ed:83:66:ab:66:75:63:b2:3e:5b:9d:65:cf:ac:6d: 00:34:dd:5f:48:1b:b2:9c:24:56:8f:a5:be:75:5b: 61:c0:0d:8a:2c:a5:0c:1d:29:03:e8:21:52:fc:8c: bd:48:20:29:16:1c:c0:cd:36:9b:d3:14:f2:48:bf: fb:11:ca:23:a3:b6:ef:74:ba:ca:ff:a9:11:f5:ef: 6f:94:e1:00:3e:d0:4a:dd:9a:61:a3:87:6a:fd:6a: 8f:00:e4:18:65:49:87:37:af:90:72:a4:35:be:42: 5f:ba:da:39:4f:db:02:ad:13:8a:9a:42:c1:b4:33: c3:34:8f:b1:3f:1b:5d:b7:53:65:c4:b1:d0:67:d3: 4d:dc:5f:26:ad:79:1c:1a:2d:8d:0b:ae:4b:a0:c8: 18:cd:14:72:4f:43:12:7f:5e:3d:c7:82:9e:82:80: 01:6e:eb:d4:c7:74:3d:a6:8d:bb:49:3a:b1:66:e2: 6a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:3F:49:24:9D:88:86:0A:40:39:1A:CC:C6:FA:EF:32:CE:F0:C4:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/2d1cb9ba-986b-337c-a27a-9e706d8757d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv6: 2607:6002:300::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:11:25:21:32:00:38:58:f8:3b:34:dc:8b:f0:44:75:7e:8f: e4:f9:e1:0d:0e:7d:0c:3d:4b:dc:c5:6e:62:cb:e5:62:e9:de: 9a:e7:63:69:8d:5e:01:74:91:f4:9d:f3:65:48:8a:ac:e2:71: 61:2e:5b:10:8e:7b:e4:68:c3:67:1b:08:ea:52:6c:2d:5d:2a: 97:22:8d:d3:05:d1:dc:3e:3b:38:74:87:5f:53:e8:56:96:fb: c5:e2:e0:42:92:56:27:cc:71:e6:2b:53:ee:3b:d5:62:a9:a7: dc:67:99:36:c7:a9:b4:a2:af:99:a3:20:be:1d:e2:d6:b6:e9: 2a:0b:4f:da:51:53:d1:77:8c:aa:37:d9:aa:68:d1:93:4e:88: 3d:4a:9b:5a:44:c3:c1:4b:5c:22:6a:5c:76:4e:f2:3a:04:60: ce:55:c4:6f:e4:a2:d8:fc:24:fc:39:aa:07:df:5d:d2:64:6e: c2:98:91:41:f1:5d:be:d4:f3:26:43:77:67:e2:a6:5e:9f:aa: 47:a8:93:44:d2:31:8a:0d:86:5f:5b:67:42:53:95:40:5e:f7: fc:bf:5a:c7:44:f3:1d:f4:f7:24:3e:05:f3:36:4f:25:c1:87: b3:22:50:17:79:f4:a3:57:a7:a4:14:b2:95:1f:6c:94:d9:ed: 48:bb:a2:65 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErSO6qvJvAoLZZoCqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk YjljMDM4MzAtYTdiNi00OGViLWI3MWUtOGMwZmIwMmZhZGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqe157QU7Rsd0hJkwdOA7lOfOCAZUPr2gsCqy +nhNvdtQag6H4E4Fzw8CYkbcJxqiI9oeCcl3dyX+9w5R3yKaEN7DggMNK+MKjuHt g2arZnVjsj5bnWXPrG0ANN1fSBuynCRWj6W+dVthwA2KLKUMHSkD6CFS/Iy9SCAp FhzAzTab0xTySL/7Ecojo7bvdLrK/6kR9e9vlOEAPtBK3Zpho4dq/WqPAOQYZUmH N6+QcqQ1vkJfuto5T9sCrROKmkLBtDPDNI+xPxtdt1NlxLHQZ9NN3F8mrXkcGi2N C65LoMgYzRRyT0MSf149x4KegoABbuvUx3Q9po27STqxZuJqWQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMI/SSSdiIYKQDkazMb67zLO8MRKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvMmQxY2I5YmEtOTg2Yi0z MzdjLWEyN2EtOWU3MDZkODc1N2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgdgAgMw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAGBElITIAOFj4OzTci/BEdX6P5PnhDQ59DD1L3MVuYsvlYunemudj aY1eAXSR9J3zZUiKrOJxYS5bEI575GjDZxsI6lJsLV0qlyKN0wXR3D47OHSHX1Po Vpb7xeLgQpJWJ8xx5itT7jvVYqmn3GeZNseptKKvmaMgvh3i1rbpKgtP2lFT0XeM qjfZqmjRk06IPUqbWkTDwUtcImpcdk7yOgRgzlXEb+Si2Pwk/DmqB99d0mRuwpiR QfFdvtTzJkN3Z+KmXp+qR6iTRNIxig2GX1tnQlOVQF73/L9ax0TzHfT3JD4F8zZP JcGHsyJQF3n0o1enpBSylR9slNntSLuiZQ== -----END CERTIFICATE-----Generated at Sat Aug 23 20:55:46 2025 by rpki-client