$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/e2842c98-5d52-3814-87ba-39dd9613c7d5.roa File: e2842c98-5d52-3814-87ba-39dd9613c7d5.roa (raw, json) Hash identifier: /adKymHLxNaQ5o+lOkT9CgWBJ1ErTthk+sX5fknV0gM= Subject key identifier: 86:87:61:28:FB:06:24:5D:DD:92:1C:A6:66:B8:27:D7:56:10:00:21 Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F43285849DA50071A148F7E9EB3E41E00 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/e2842c98-5d52-3814-87ba-39dd9613c7d5.roa Signing time: Wed 14 May 2025 17:41:17 +0000 ROA not before: Wed 14 May 2025 17:41:17 +0000 ROA not after: Tue 12 Aug 2025 17:41:17 +0000 asID: 20454 IP address blocks: 2607:6003:2301::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:da:50:07:1a:14:8f:7e:9e:b3:e4:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: May 14 17:41:17 2025 GMT Not After : Aug 12 17:41:17 2025 GMT Subject: CN=ba87c243-50da-4bb0-ad1f-915d692a8138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:71:0c:d6:c3:d2:61:b3:6f:84:5f:99:62:7d: 26:b2:68:14:46:c1:00:9a:fd:d4:a0:bb:0d:a6:6f: 27:c6:1c:0b:1d:fc:71:a1:51:7f:c2:ab:f2:4f:98: be:16:c2:d4:ca:51:7e:33:df:c6:3e:6f:b4:b2:b6: 07:66:59:23:78:92:fb:52:63:47:77:7d:b2:02:3c: 1f:d8:2a:50:8f:bc:6b:8d:00:c2:ba:c7:dd:08:99: 91:e7:ee:bc:57:44:c1:2e:44:1b:b1:17:70:68:2f: bc:d4:84:68:9a:75:29:fd:f8:dc:2b:3b:e7:ca:b8: 00:18:81:fd:78:f0:48:4b:2b:3c:3d:a5:73:90:70: 26:fe:8b:eb:22:0c:39:dd:3c:af:e8:70:6d:22:08: 6c:30:5d:c9:a6:70:57:c5:f8:41:ff:3d:84:20:a1: b0:53:56:5b:b2:22:2a:2d:a7:b2:7f:5d:58:b4:ef: 5f:aa:89:22:d5:98:72:8a:13:85:4b:7a:ef:53:7b: f7:8e:f8:4b:01:e8:4e:82:ec:10:9c:83:2a:06:62: 24:b7:36:25:1a:c5:d3:c1:59:57:72:7a:0a:18:3b: f2:31:07:c5:9b:fe:bd:01:15:0b:5a:82:1f:3d:17: 20:40:73:73:28:1d:bf:86:19:00:42:be:8b:fd:63: 50:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:87:61:28:FB:06:24:5D:DD:92:1C:A6:66:B8:27:D7:56:10:00:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/e2842c98-5d52-3814-87ba-39dd9613c7d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv6: 2607:6003:2301::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:75:27:31:86:d3:11:d1:cd:51:5c:9f:a2:c9:1a:af:93:03: 69:74:ee:89:c5:49:04:66:3f:71:b4:69:15:20:19:8e:c2:94: ab:ed:7e:f3:19:6f:d1:4a:89:3c:01:79:4c:c4:7b:93:64:9b: 0a:c7:04:ec:4e:be:5b:54:eb:97:c3:52:b7:5c:8a:1b:9e:ab: 25:a4:88:ba:12:38:6d:be:da:23:a6:fe:62:a8:d8:9a:8f:5e: 3c:0e:10:fb:0e:56:53:eb:ca:14:e4:4f:ec:84:66:2e:3c:77: e9:1e:94:87:0d:53:8a:18:d6:c4:fb:4c:78:48:ee:7c:b2:c3: 7b:96:5a:b0:67:5b:20:cf:21:36:7b:f1:fc:a0:b6:b0:ac:c6: 72:a0:2d:02:65:f6:d6:ad:7d:c9:9c:03:0c:93:5d:01:e1:90: 77:f6:a5:75:bb:cd:13:e7:f2:29:73:4c:4e:8e:19:a3:8e:76: 25:c3:cd:91:97:84:0d:4c:cb:89:47:68:cf:44:76:cd:1c:ca: 9f:0a:0e:a6:8d:d7:e2:50:e2:88:45:77:7c:5e:27:a0:bd:62: 39:73:c5:73:ac:59:22:e3:e2:96:c3:e9:7c:5e:6e:a3:79:c6: 1d:00:77:11:76:72:33:04:27:1e:2b:38:1b:4f:40:b7:1d:cc: d5:23:39:a4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnaUAcaFI9+nrPkHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI1MDUxNDE3NDExN1oXDTI1MDgxMjE3NDExN1owLzEtMCsGA1UEAxMk YmE4N2MyNDMtNTBkYS00YmIwLWFkMWYtOTE1ZDY5MmE4MTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXEM1sPSYbNvhF+ZYn0msmgURsEAmv3UoLsN pm8nxhwLHfxxoVF/wqvyT5i+FsLUylF+M9/GPm+0srYHZlkjeJL7UmNHd32yAjwf 2CpQj7xrjQDCusfdCJmR5+68V0TBLkQbsRdwaC+81IRomnUp/fjcKzvnyrgAGIH9 ePBISys8PaVzkHAm/ovrIgw53Tyv6HBtIghsMF3JpnBXxfhB/z2EIKGwU1ZbsiIq Laeyf11YtO9fqoki1ZhyihOFS3rvU3v3jvhLAehOguwQnIMqBmIktzYlGsXTwVlX cnoKGDvyMQfFm/69ARULWoIfPRcgQHNzKB2/hhkAQr6L/WNQ2QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIaHYSj7BiRd3ZIcpma4J9dWEAAhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvZTI4NDJjOTgtNWQ1Mi0z ODE0LTg3YmEtMzlkZDk2MTNjN2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgdgAyMB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHR1JzGG0xHRzVFcn6LJGq+TA2l07onFSQRmP3G0aRUgGY7ClKvt fvMZb9FKiTwBeUzEe5NkmwrHBOxOvltU65fDUrdcihueqyWkiLoSOG2+2iOm/mKo 2JqPXjwOEPsOVlPryhTkT+yEZi48d+kelIcNU4oY1sT7THhI7nyyw3uWWrBnWyDP ITZ78fygtrCsxnKgLQJl9tatfcmcAwyTXQHhkHf2pXW7zRPn8ilzTE6OGaOOdiXD zZGXhA1My4lHaM9Eds0cyp8KDqaN1+JQ4ohFd3xeJ6C9YjlzxXOsWSLj4pbD6Xxe bqN5xh0AdxF2cjMEJx4rOBtPQLcdzNUjOaQ= -----END CERTIFICATE-----Generated at Tue Jul 1 01:02:19 2025 by rpki-client