$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/40ae5e84-384c-333f-9c53-a1037447f21a.roa File: 40ae5e84-384c-333f-9c53-a1037447f21a.roa (raw, json) Hash identifier: xtvmKjLufYNeOxHBnbHYo2U5dO3HAToinxB2HW1yWFU= Subject key identifier: 49:8C:ED:8A:3B:29:8E:81:DF:71:3C:8E:A9:D8:8C:CE:FE:0F:9F:94 Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F43285849F17FB16C591A97E5E20E0760 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/40ae5e84-384c-333f-9c53-a1037447f21a.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 19181 IP address blocks: 2607:6002:700::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:b1:6c:59:1a:97:e5:e2:0e:07:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=41f7edea-65c7-483e-aab5-4ff191e3e102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:6d:15:dc:27:ca:42:4a:84:ff:09:d7:da:2f: 34:7c:ae:2f:dd:f8:51:3c:fe:de:72:35:e4:60:bc: c6:53:7d:bd:96:a3:2f:51:b8:c7:ea:cb:f8:73:e0: 96:8f:11:52:83:1c:33:73:5b:30:16:0f:be:d7:d0: 77:62:31:d6:01:08:18:21:fe:f6:18:07:f2:42:12: f1:21:26:55:91:30:60:a5:93:28:39:32:b3:96:9f: e3:50:03:fc:29:48:a0:57:08:54:20:e8:4f:d5:5c: 21:96:78:25:20:e0:a0:17:66:a6:f2:88:13:ee:2e: 6f:b6:db:95:4f:a9:f5:3b:34:fa:36:dd:de:5e:ab: ea:f7:15:fc:8e:35:89:6a:94:d5:67:92:46:d5:75: 10:1d:82:e3:85:e2:ed:52:4b:19:f9:78:cb:cb:3b: ae:08:47:6b:54:50:11:3a:9b:44:38:73:50:d3:25: c6:e0:a7:d8:b3:74:ed:df:91:6d:9e:b5:cd:7b:3e: 69:3a:b9:9c:7c:47:31:22:69:eb:33:15:2b:15:4b: c6:03:78:8c:c8:42:f8:92:40:1d:72:a3:a4:09:3b: 7f:f2:b2:a5:d9:1e:3a:37:ff:af:c2:11:d0:a7:a6: 71:7f:3a:fa:de:c8:f5:9d:b8:d2:a4:36:a7:f5:6e: f2:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:8C:ED:8A:3B:29:8E:81:DF:71:3C:8E:A9:D8:8C:CE:FE:0F:9F:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/40ae5e84-384c-333f-9c53-a1037447f21a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv6: 2607:6002:700::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:4c:e1:05:c6:5c:ec:88:7d:ec:ac:96:84:3c:4c:a6:3f:44: 68:b5:da:ba:be:d9:a9:30:5b:0a:73:33:76:32:2a:42:2a:53: 48:d5:15:83:7f:43:e1:40:4f:61:e5:19:80:19:d1:4b:04:f7: 7d:33:b6:58:32:70:35:d0:17:02:6b:af:ef:1a:e0:40:90:5d: 44:35:2a:bf:a0:a6:4e:b8:bc:51:20:87:7b:cd:2e:46:b5:c7: af:cd:ca:99:66:c8:99:a1:e4:b0:9c:90:22:e6:a6:a8:8f:a5: 66:51:b4:b5:35:cb:08:43:98:cb:d2:db:26:f4:82:1c:ab:df: 30:f1:d2:bc:4c:17:bb:eb:9b:39:ff:fa:e4:41:91:55:db:42: 01:6c:ce:ed:ae:f3:dc:a3:f3:96:58:51:5c:49:87:5a:1a:fe: 78:54:bf:79:d7:de:13:a6:c8:1c:cc:31:0b:91:ed:d6:52:14: a1:d2:8e:bd:23:cc:66:3f:95:bc:97:13:b5:1c:43:ba:79:ec: a0:77:c1:04:c5:6a:28:31:f8:89:4f:0b:1c:b9:4c:1d:b0:2a: 8f:af:e5:36:b0:d4:3e:4d:30:98:fb:ca:30:bc:81:90:a4:94: cc:91:31:92:ed:fe:69:5b:be:c4:c9:79:ae:74:e2:0b:ff:d6: f4:1c:e2:b7 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEnxf7FsWRqX5eIOB2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk NDFmN2VkZWEtNjVjNy00ODNlLWFhYjUtNGZmMTkxZTNlMTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg20V3CfKQkqE/wnX2i80fK4v3fhRPP7ecjXk YLzGU329lqMvUbjH6sv4c+CWjxFSgxwzc1swFg++19B3YjHWAQgYIf72GAfyQhLx ISZVkTBgpZMoOTKzlp/jUAP8KUigVwhUIOhP1VwhlnglIOCgF2am8ogT7i5vttuV T6n1OzT6Nt3eXqvq9xX8jjWJapTVZ5JG1XUQHYLjheLtUksZ+XjLyzuuCEdrVFAR OptEOHNQ0yXG4KfYs3Tt35FtnrXNez5pOrmcfEcxImnrMxUrFUvGA3iMyEL4kkAd cqOkCTt/8rKl2R46N/+vwhHQp6Zxfzr63sj1nbjSpDan9W7yrQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEmM7Yo7KY6B33E8jqnYjM7+D5+UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvNDBhZTVlODQtMzg0Yy0z MzNmLTljNTMtYTEwMzc0NDdmMjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgdgAgcw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEARUzhBcZc7Ih97KyWhDxMpj9EaLXaur7ZqTBbCnMzdjIqQipTSNUV g39D4UBPYeUZgBnRSwT3fTO2WDJwNdAXAmuv7xrgQJBdRDUqv6CmTri8USCHe80u RrXHr83KmWbImaHksJyQIuamqI+lZlG0tTXLCEOYy9LbJvSCHKvfMPHSvEwXu+ub Of/65EGRVdtCAWzO7a7z3KPzllhRXEmHWhr+eFS/edfeE6bIHMwxC5Ht1lIUodKO vSPMZj+VvJcTtRxDunnsoHfBBMVqKDH4iU8LHLlMHbAqj6/lNrDUPk0wmPvKMLyB kKSUzJExku3+aVu+xMl5rnTiC//W9Bzitw== -----END CERTIFICATE-----Generated at Sun Jun 29 17:01:18 2025 by rpki-client