$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/3f57fca9-06dd-3728-9f37-d97b6a30f7ea.roa File: 3f57fca9-06dd-3728-9f37-d97b6a30f7ea.roa (raw, json) Hash identifier: 3q/d9IVp5a0dqpnT+hvaegQMnBj5k3djvutj6wRLf/o= Subject key identifier: 34:8A:47:24:E1:C5:66:9A:27:B6:66:E4:4B:1F:80:37:D6:9D:3C:33 Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F432858490E16BD57E52DB477F3609D80 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/3f57fca9-06dd-3728-9f37-d97b6a30f7ea.roa Signing time: Sun 02 Mar 2025 14:00:52 +0000 ROA not before: Sun 02 Mar 2025 14:00:52 +0000 ROA not after: Sat 31 May 2025 13:00:52 +0000 asID: 12189 IP address blocks: 2607:6004:100::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0e:16:bd:57:e5:2d:b4:77:f3:60:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: Mar 2 14:00:52 2025 GMT Not After : May 31 13:00:52 2025 GMT Subject: CN=47ebbb44-5bce-48e0-b89f-987f37a1a6c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b0:51:7f:93:e6:1d:4b:c2:bc:4d:a5:cd:e3: 0d:86:49:b8:56:81:77:8f:eb:5d:36:df:5e:84:86: 6b:a8:06:9a:df:44:07:14:5d:dd:6e:65:a1:fc:89: 6d:a2:d6:cc:d8:2f:52:51:e8:5b:90:3a:63:71:d3: 8e:12:39:10:8a:95:40:20:39:54:f9:e3:4a:e1:62: f1:d0:68:06:c1:bb:9b:d7:0f:43:5c:33:86:97:66: d5:18:32:77:59:10:f0:97:f3:e6:4f:03:48:52:a5: fe:0a:80:7a:fd:32:f3:78:6a:16:1d:b6:52:41:0f: 03:0c:f6:1a:cd:5e:49:51:11:43:25:e5:7b:1f:f4: 67:48:ef:df:4f:c8:49:45:f6:84:0d:db:f5:93:3e: 65:2c:33:a4:16:9a:06:e4:5b:9b:03:a7:22:2e:ec: d1:b7:8d:41:ec:44:5d:1b:cc:69:67:42:2e:31:07: 4d:1c:b2:75:d5:d7:fe:0c:17:8c:62:1b:32:25:65: 74:8f:23:ca:c6:8d:f0:c1:bb:7e:49:d8:ab:65:51: 56:ee:4b:c6:08:1b:4e:6f:69:4e:fe:02:e6:62:c6: c0:74:08:fa:35:a9:54:5b:3c:7f:d2:42:32:aa:9b: 67:19:5e:4e:9c:4b:09:66:3d:8d:05:40:ee:73:69: 79:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:8A:47:24:E1:C5:66:9A:27:B6:66:E4:4B:1F:80:37:D6:9D:3C:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/3f57fca9-06dd-3728-9f37-d97b6a30f7ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv6: 2607:6004:100::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:25:52:52:a4:44:b1:68:fd:7d:ad:dc:3d:9b:e9:59:99:34: 00:37:c8:0f:b8:b8:e3:cb:b4:34:56:4a:4d:8f:f5:54:70:93: 63:c5:69:ec:2a:3b:4d:be:db:41:8c:c6:71:e7:5e:cd:b8:d5: 50:f5:00:c5:58:94:6d:ab:9a:94:e1:f6:55:60:04:91:a0:44: ac:8a:4b:c3:cf:25:0c:b8:68:e6:52:1e:f7:e8:35:89:c1:e7: 85:46:e0:ca:1d:c2:7b:77:2d:15:2b:cc:bd:07:9b:9d:82:ed: 52:7b:74:39:07:1a:e3:6c:d6:71:be:0a:98:94:8b:06:39:03: e5:6b:0b:88:86:8d:a6:fa:a0:9e:a4:aa:fb:aa:ad:dc:e2:e8: 92:54:a9:81:49:2f:38:ca:47:6f:6d:7a:48:e4:e7:91:12:70: c7:d1:15:28:da:62:82:ab:17:a9:3d:f9:ce:74:4a:c4:eb:c2: f9:8a:8a:e7:28:eb:e4:d0:88:d0:4e:a7:bf:56:66:4a:36:be: e9:c9:97:75:a5:5b:05:40:b1:49:e7:e6:91:54:22:de:bf:98: d9:05:b1:b9:a6:fd:d6:12:d9:f9:81:42:3d:b9:97:54:8b:40: 1a:6f:63:90:2c:af:ba:ac:76:5a:3d:6b:8b:31:84:52:66:db: f4:85:9e:cc -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkOFr1X5S20d/NgnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk NDdlYmJiNDQtNWJjZS00OGUwLWI4OWYtOTg3ZjM3YTFhNmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbBRf5PmHUvCvE2lzeMNhkm4VoF3j+tdNt9e hIZrqAaa30QHFF3dbmWh/IltotbM2C9SUehbkDpjcdOOEjkQipVAIDlU+eNK4WLx 0GgGwbub1w9DXDOGl2bVGDJ3WRDwl/PmTwNIUqX+CoB6/TLzeGoWHbZSQQ8DDPYa zV5JURFDJeV7H/RnSO/fT8hJRfaEDdv1kz5lLDOkFpoG5FubA6ciLuzRt41B7ERd G8xpZ0IuMQdNHLJ11df+DBeMYhsyJWV0jyPKxo3wwbt+SdirZVFW7kvGCBtOb2lO /gLmYsbAdAj6NalUWzx/0kIyqptnGV5OnEsJZj2NBUDuc2l5TQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDSKRyThxWaaJ7Zm5EsfgDfWnTwzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvM2Y1N2ZjYTktMDZkZC0z NzI4LTlmMzctZDk3YjZhMzBmN2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgdgBAEw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAJyVSUqREsWj9fa3cPZvpWZk0ADfID7i448u0NFZKTY/1VHCTY8Vp 7Co7Tb7bQYzGcedezbjVUPUAxViUbaualOH2VWAEkaBErIpLw88lDLho5lIe9+g1 icHnhUbgyh3Ce3ctFSvMvQebnYLtUnt0OQca42zWcb4KmJSLBjkD5WsLiIaNpvqg nqSq+6qt3OLoklSpgUkvOMpHb216SOTnkRJwx9EVKNpigqsXqT35znRKxOvC+YqK 5yjr5NCI0E6nv1ZmSja+6cmXdaVbBUCxSefmkVQi3r+Y2QWxuab91hLZ+YFCPbmX VItAGm9jkCyvuqx2Wj1rizGEUmbb9IWezA== -----END CERTIFICATE-----Generated at Mon May 5 12:06:02 2025 by rpki-client