$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/d9d404ae-69ce-38c1-be30-2a3604bc6f00.roa File: d9d404ae-69ce-38c1-be30-2a3604bc6f00.roa (raw, json) Hash identifier: PjafoJEwfHRdTMl4uucQ4OWc12FQBnQdON+JYgvpv9o= Subject key identifier: 47:15:B8:D5:2D:38:D9:B4:E3:E0:E9:30:80:6E:6B:9C:2E:5F:B5:E5 Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F4328584ACE0B9915B8BECC6F34B96200 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/d9d404ae-69ce-38c1-be30-2a3604bc6f00.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 12189 IP address blocks: 2607:6000:b00::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:99:15:b8:be:cc:6f:34:b9:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=c38d1e15-92f2-4cc6-87bf-fa4292bff389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f7:16:88:78:9e:6a:b7:86:b1:af:d0:52:f8: 92:36:4b:43:61:2d:ad:a5:e2:68:ba:36:bf:76:73: ac:e0:13:db:e3:21:8e:12:20:08:b5:9a:07:5f:cc: e0:73:48:55:22:e9:16:59:96:63:ab:2a:fa:d8:ce: 8c:7e:c0:2d:af:03:a7:82:6b:76:01:69:40:e9:57: 00:33:d4:9c:0d:b1:b3:0f:b7:56:cb:02:e7:77:40: 7b:1f:96:fc:9b:b1:5e:a9:a5:7d:3a:a7:22:74:1a: 56:63:c6:b5:46:5b:db:bc:38:5f:0d:d7:3e:9a:92: 12:c4:15:37:6a:96:02:c5:5d:14:8d:bb:cf:b5:b5: 43:31:07:72:dd:73:f3:a7:86:29:17:e2:ba:c1:af: f8:92:c4:b5:55:24:dc:65:18:12:c7:c9:20:89:eb: 5d:62:0d:9c:64:64:24:2e:33:7a:a9:f3:ad:4a:70: d8:a6:ff:8d:c7:cb:21:72:f6:06:1e:7e:65:ec:71: bb:a1:ea:be:ee:fa:3e:5c:8f:f0:16:2f:28:39:9b: 79:d5:49:d2:78:a2:38:43:61:6d:28:16:fe:32:43: 35:86:01:cd:a9:09:ed:b4:2a:35:fd:77:9d:f8:68: bc:1f:77:a1:51:2a:c3:90:6d:37:3a:83:2e:eb:ec: 91:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:15:B8:D5:2D:38:D9:B4:E3:E0:E9:30:80:6E:6B:9C:2E:5F:B5:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/d9d404ae-69ce-38c1-be30-2a3604bc6f00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv6: 2607:6000:b00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:50:3b:5a:91:f3:93:29:6b:ec:d5:0d:b7:f5:f1:61:21:8b: cb:c1:8d:d4:07:e2:9d:65:97:3e:0a:48:39:c8:ff:1d:96:1d: 6e:3d:d5:89:d2:04:67:36:25:c5:0f:d1:48:65:ec:19:20:16: a2:ab:91:f4:17:82:2c:a4:10:b8:9c:74:c2:af:b6:5f:68:d8: 0d:2c:32:25:e4:4b:6d:66:f6:34:3c:a4:15:f1:fa:72:7d:a7: 4d:ab:d5:bf:ce:f3:40:09:94:0d:6b:9a:d3:1e:4e:5e:b5:e0: 8c:8e:f2:ae:56:eb:f9:6f:95:33:e0:4d:08:4a:2a:ff:ba:37: 83:8f:38:ca:44:39:03:1c:3a:ae:26:31:6b:c4:4b:ce:bc:d6: 9f:70:f1:7d:ef:a5:2c:8e:65:29:bf:dd:25:57:51:d0:25:09: 03:05:76:de:34:7c:9c:18:fc:5e:fa:0f:fb:98:d8:0c:7e:8a: 62:f4:f2:f5:69:7a:35:79:fb:e3:f1:2c:b4:5f:57:6a:84:3f: c4:75:9c:5b:c6:f9:e4:52:09:c1:24:bb:e4:1e:dd:a1:ed:f9: 58:23:f7:a9:79:a4:c3:b9:54:7d:25:cc:c9:65:23:e5:bf:61: e2:2c:4d:d4:8c:38:ee:68:fa:03:69:0e:61:34:c9:57:3a:25: ea:71:41:32 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErOC5kVuL7MbzS5YgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk YzM4ZDFlMTUtOTJmMi00Y2M2LTg3YmYtZmE0MjkyYmZmMzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/cWiHieareGsa/QUviSNktDYS2tpeJouja/ dnOs4BPb4yGOEiAItZoHX8zgc0hVIukWWZZjqyr62M6MfsAtrwOngmt2AWlA6VcA M9ScDbGzD7dWywLnd0B7H5b8m7FeqaV9OqcidBpWY8a1RlvbvDhfDdc+mpISxBU3 apYCxV0UjbvPtbVDMQdy3XPzp4YpF+K6wa/4ksS1VSTcZRgSx8kgietdYg2cZGQk LjN6qfOtSnDYpv+Nx8shcvYGHn5l7HG7oeq+7vo+XI/wFi8oOZt51UnSeKI4Q2Ft KBb+MkM1hgHNqQnttCo1/Xed+Gi8H3ehUSrDkG03OoMu6+yRfwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEcVuNUtONm04+DpMIBua5wuX7XlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvZDlkNDA0YWUtNjljZS0z OGMxLWJlMzAtMmEzNjA0YmM2ZjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgdgAAsw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAflA7WpHzkylr7NUNt/XxYSGLy8GN1AfinWWXPgpIOcj/HZYdbj3V idIEZzYlxQ/RSGXsGSAWoquR9BeCLKQQuJx0wq+2X2jYDSwyJeRLbWb2NDykFfH6 cn2nTavVv87zQAmUDWua0x5OXrXgjI7yrlbr+W+VM+BNCEoq/7o3g484ykQ5Axw6 riYxa8RLzrzWn3Dxfe+lLI5lKb/dJVdR0CUJAwV23jR8nBj8XvoP+5jYDH6KYvTy 9Wl6NXn74/EstF9XaoQ/xHWcW8b55FIJwSS75B7doe35WCP3qXmkw7lUfSXMyWUj 5b9h4ixN1Iw47mj6A2kOYTTJVzol6nFBMg== -----END CERTIFICATE-----Generated at Sat Aug 23 20:08:57 2025 by rpki-client