$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/2d1cb9ba-986b-337c-a27a-9e706d8757d1.roa File: 2d1cb9ba-986b-337c-a27a-9e706d8757d1.roa (raw, json) Hash identifier: M2NuCTRJb+tK8FBbzFtMFKIhNo91m5O1g+HEpWJT7Rg= Subject key identifier: D0:79:21:77:5A:91:6C:57:C8:E1:D9:C9:AA:43:DF:2A:7E:8D:1F:BE Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F432858491246A6BF303DA19FE6C4CD80 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/2d1cb9ba-986b-337c-a27a-9e706d8757d1.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 19437 IP address blocks: 2607:6002:300::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:a6:bf:30:3d:a1:9f:e6:c4:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=60495228-cb90-4e70-af87-385bc91182ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d1:1d:42:a0:01:95:29:13:65:ae:49:f1:fd: fa:88:4e:75:f6:66:23:5f:29:d9:61:ad:f4:e1:9a: fe:66:2a:2d:3c:2b:3e:c3:24:f8:06:e3:04:0c:d1: 34:bf:c2:3c:96:23:e9:c6:28:b6:ad:51:76:92:99: dd:11:98:25:ba:19:99:53:a3:70:28:3f:0a:76:35: db:7d:2e:8a:6a:1d:71:c0:88:53:b0:4b:da:6d:c3: 20:02:05:e5:95:0a:15:71:d3:84:a3:cb:c8:67:59: 37:5c:f5:9b:9b:56:ad:ae:62:29:20:7f:af:d5:d6: dc:c2:4d:16:ca:1c:c8:02:5e:24:fe:3e:b5:0a:0d: bf:d3:cd:36:39:6f:03:97:0c:59:e9:e9:28:20:35: c1:af:67:17:af:b0:da:f0:3e:58:99:7f:9a:5a:32: c8:e6:84:8e:7b:77:fc:61:57:e8:ad:1d:31:9e:d5: 33:90:a0:e6:1c:a4:41:fe:66:eb:f4:60:98:17:fc: 39:ab:0e:29:f4:5f:0b:c4:9e:a6:5c:4f:fb:8a:38: 64:72:ad:ef:81:de:d5:6a:11:62:f7:fa:ee:04:5d: d0:68:fe:ae:ba:45:7f:b6:63:a9:12:41:c1:1a:2a: d9:96:95:a5:5a:d4:0c:4f:a8:21:fe:29:c0:e9:37: b8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:79:21:77:5A:91:6C:57:C8:E1:D9:C9:AA:43:DF:2A:7E:8D:1F:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/2d1cb9ba-986b-337c-a27a-9e706d8757d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv6: 2607:6002:300::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:aa:57:2b:c4:a6:96:ee:14:3b:d3:ac:5e:34:b5:93:c8:7a: 54:3c:08:2c:32:1c:4f:86:f1:62:ef:27:62:c0:05:e1:df:ac: 98:ce:66:10:82:7b:20:3d:a7:49:58:d2:da:71:b7:12:5e:8f: a1:e0:09:27:b8:75:b9:ac:d0:fa:c8:52:86:68:0e:4f:dd:47: bc:86:12:e7:a2:2a:6c:c0:d6:9a:1e:01:60:ae:3c:a9:5a:06: 07:fb:1b:10:2f:cf:46:b4:ec:7b:ab:6a:70:2d:3e:b5:de:6b: f7:49:c1:84:a1:0b:ea:82:e5:a4:1b:58:e8:e0:a2:04:ae:13: f3:23:d0:c6:e4:1d:9e:0d:cc:8b:6b:ce:1e:e2:f0:da:01:4d: c0:59:4f:48:69:cd:1d:64:58:90:86:0e:76:6c:59:45:96:c2: 49:f2:ab:b1:bf:53:4f:88:45:db:81:12:2e:91:23:45:ab:bf: 72:43:d9:b0:c6:91:8d:a3:5a:7c:b4:0e:fe:ae:15:37:a5:1e: 98:91:cb:84:82:d6:93:4f:f0:83:b1:9b:f6:67:b6:3d:02:7c: 17:17:cc:ed:08:47:bc:b5:f1:d0:90:8a:bf:df:a2:34:cf:fb: 18:f7:39:1a:4d:ad:9d:53:c1:68:88:fd:48:21:b8:96:02:a7: 54:ee:a7:32 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkSRqa/MD2hn+bEzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk NjA0OTUyMjgtY2I5MC00ZTcwLWFmODctMzg1YmM5MTE4MmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tEdQqABlSkTZa5J8f36iE519mYjXynZYa30 4Zr+ZiotPCs+wyT4BuMEDNE0v8I8liPpxii2rVF2kpndEZgluhmZU6NwKD8KdjXb fS6Kah1xwIhTsEvabcMgAgXllQoVcdOEo8vIZ1k3XPWbm1atrmIpIH+v1dbcwk0W yhzIAl4k/j61Cg2/0802OW8DlwxZ6ekoIDXBr2cXr7Da8D5YmX+aWjLI5oSOe3f8 YVforR0xntUzkKDmHKRB/mbr9GCYF/w5qw4p9F8LxJ6mXE/7ijhkcq3vgd7VahFi 9/ruBF3QaP6uukV/tmOpEkHBGirZlpWlWtQMT6gh/inA6Te4ywIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNB5IXdakWxXyOHZyapD3yp+jR++MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvMmQxY2I5YmEtOTg2Yi0z MzdjLWEyN2EtOWU3MDZkODc1N2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgdgAgMw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAMapXK8Smlu4UO9OsXjS1k8h6VDwILDIcT4bxYu8nYsAF4d+smM5m EIJ7ID2nSVjS2nG3El6PoeAJJ7h1uazQ+shShmgOT91HvIYS56IqbMDWmh4BYK48 qVoGB/sbEC/PRrTse6tqcC0+td5r90nBhKEL6oLlpBtY6OCiBK4T8yPQxuQdng3M i2vOHuLw2gFNwFlPSGnNHWRYkIYOdmxZRZbCSfKrsb9TT4hF24ESLpEjRau/ckPZ sMaRjaNafLQO/q4VN6UemJHLhILWk0/wg7Gb9me2PQJ8FxfM7QhHvLXx0JCKv9+i NM/7GPc5Gk2tnVPBaIj9SCG4lgKnVO6nMg== -----END CERTIFICATE-----Generated at Tue May 6 18:54:39 2025 by rpki-client