$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/3eeee4d3-e250-340d-9b70-0dfe3a06b37d.roa File: 3eeee4d3-e250-340d-9b70-0dfe3a06b37d.roa (raw, json) Hash identifier: hZW1HcFSi3ttMpNlkKY5PCyH4q1WzOgM0YWgte/Oy2k= Subject key identifier: 28:E3:55:0C:B2:0C:A1:01:84:C6:A9:EA:60:12:CE:C6:CB:C8:21:63 Certificate issuer: /CN=ebff2bbd-fab0-4f48-a625-d53c63f1bbe6 Certificate serial: 010D0C9F43285849BB0F6832A5D0FE2CBFB26F00 Authority key identifier: 43:DE:DC:F8:9F:C5:8D:6E:3C:61:F8:80:3F:72:0E:D5:0C:74:A6:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/3eeee4d3-e250-340d-9b70-0dfe3a06b37d.roa Signing time: Sat 03 May 2025 13:01:01 +0000 ROA not before: Sat 03 May 2025 13:01:01 +0000 ROA not after: Fri 01 Aug 2025 13:01:01 +0000 asID: 18604 IP address blocks: 2604:1a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bb:0f:68:32:a5:d0:fe:2c:bf:b2:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebff2bbd-fab0-4f48-a625-d53c63f1bbe6 Validity Not Before: May 3 13:01:01 2025 GMT Not After : Aug 1 13:01:01 2025 GMT Subject: CN=0c57d411-8d1d-44d2-9f92-bc28baf9938c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:3b:52:ea:14:d0:16:82:62:ef:5e:72:29:39: b6:5b:e6:cc:15:f4:bb:1f:8d:e0:83:f7:d6:6b:39: d4:49:de:ae:41:bf:40:c8:58:e4:7f:0e:58:27:77: 47:f2:71:52:9e:9b:90:0e:27:bc:75:61:86:bb:13: 27:eb:d4:f8:37:0d:90:38:f3:f4:ab:a7:aa:7b:bc: 47:36:62:3b:43:2c:87:94:fd:fb:b4:cd:28:68:fa: b3:b1:16:fc:af:a2:0a:71:bb:57:f1:d8:a7:e6:df: 29:94:1d:1e:fa:09:a9:ab:ed:4e:20:aa:56:75:46: 0c:ad:69:66:74:cd:e7:35:77:42:17:67:3c:57:6e: 1f:d2:c0:ef:b7:38:ba:78:5a:7c:9f:ed:93:01:f9: 1c:9f:f3:6f:b8:77:01:d3:b6:29:9f:fd:f7:17:40: 10:91:4a:20:d5:a0:98:71:0d:02:c4:29:35:c7:45: 42:be:45:45:04:4c:a9:18:78:73:ee:8b:80:af:28: 6e:a1:6a:39:81:ed:b7:4b:10:3d:57:5b:15:ed:1b: 6e:dd:e8:f9:ce:c1:73:f8:87:6d:08:c3:e0:1b:2a: 43:7e:8f:5b:b1:9e:6b:af:8c:a6:d0:d1:8f:8a:99: 75:7a:59:26:fc:3d:1d:cc:b3:a7:53:d7:c8:14:f0: 95:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E3:55:0C:B2:0C:A1:01:84:C6:A9:EA:60:12:CE:C6:CB:C8:21:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/3eeee4d3-e250-340d-9b70-0dfe3a06b37d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.crl X509v3 Authority Key Identifier: keyid:43:DE:DC:F8:9F:C5:8D:6E:3C:61:F8:80:3F:72:0E:D5:0C:74:A6:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.cer sbgp-ipAddrBlock: critical IPv6: 2604:1a0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:b7:55:ea:fa:18:3d:f9:ad:8c:17:dd:26:67:ef:13:a6:dc: 2c:dc:3e:fa:bf:9a:3f:3e:6a:05:30:45:a0:82:a9:59:26:7f: 9d:5c:9b:c8:bd:cc:35:00:cf:e6:c2:f6:91:fc:05:86:de:5f: 0f:c3:b7:ef:60:11:0f:5c:b7:79:be:8c:47:c3:a2:1d:2f:27: ea:a2:58:05:57:60:9f:42:18:03:21:89:42:b0:d4:bf:67:24: e6:39:76:94:b8:f0:44:6f:56:20:8a:37:6e:b0:8d:08:0c:36: c4:c5:29:39:ae:76:64:f6:6f:75:79:67:41:b5:a2:d9:c4:c0: 53:7a:2a:e1:e7:ad:d9:18:4d:ed:25:d1:00:d8:53:c2:5e:0a: b1:da:d1:1a:d7:eb:bd:65:20:d7:5f:ee:e8:30:97:a3:56:40: 43:21:bc:c4:30:f9:bb:24:d6:b7:20:b3:3b:a4:22:1c:cb:2b: af:69:00:0c:c0:4f:a1:e8:14:a8:aa:7c:d0:e4:ba:50:9e:3e: 67:67:64:00:91:66:f9:6a:ff:8b:dc:a8:3c:81:a8:4e:cf:a3: 3c:68:c5:8a:10:1c:94:36:e3:af:c7:37:2e:a3:7e:63:13:d9: a4:b1:9d:01:85:bf:8d:47:c1:a5:a5:a5:47:da:a6:8f:fe:4d: e3:df:b0:eb -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm7D2gypdD+LL+ybwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWJmZjJiYmQtZmFiMC00ZjQ4LWE2MjUtZDUzYzYzZjFi YmU2MB4XDTI1MDUwMzEzMDEwMVoXDTI1MDgwMTEzMDEwMVowLzEtMCsGA1UEAxMk MGM1N2Q0MTEtOGQxZC00NGQyLTlmOTItYmMyOGJhZjk5MzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDtS6hTQFoJi715yKTm2W+bMFfS7H43gg/fW aznUSd6uQb9AyFjkfw5YJ3dH8nFSnpuQDie8dWGGuxMn69T4Nw2QOPP0q6eqe7xH NmI7QyyHlP37tM0oaPqzsRb8r6IKcbtX8din5t8plB0e+gmpq+1OIKpWdUYMrWlm dM3nNXdCF2c8V24f0sDvtzi6eFp8n+2TAfkcn/NvuHcB07Ypn/33F0AQkUog1aCY cQ0CxCk1x0VCvkVFBEypGHhz7ouAryhuoWo5ge23SxA9V1sV7Rtu3ej5zsFz+Idt CMPgGypDfo9bsZ5rr4ym0NGPipl1elkm/D0dzLOnU9fIFPCVswIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCjjVQyyDKEBhMap6mASzsbLyCFjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lYmZm MmJiZC1mYWIwLTRmNDgtYTYyNS1kNTNjNjNmMWJiZTYvM2VlZWU0ZDMtZTI1MC0z NDBkLTliNzAtMGRmZTNhMDZiMzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZWJmZjJiYmQtZmFiMC00ZjQ4LWE2 MjUtZDUzYzYzZjFiYmU2L2ViZmYyYmJkLWZhYjAtNGY0OC1hNjI1LWQ1M2M2M2Yx YmJlNi5jcmwwHwYDVR0jBBgwFoAUQ97c+J/FjW48YfiAP3IO1Qx0ppMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9lYmZmMmJiZC1mYWIwLTRmNDgtYTYyNS1kNTNj NjNmMWJiZTYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQBoDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAVt1Xq+hg9+a2MF90mZ+8Tptws3D76v5o/PmoFMEWggqlZJn+dXJvI vcw1AM/mwvaR/AWG3l8Pw7fvYBEPXLd5voxHw6IdLyfqolgFV2CfQhgDIYlCsNS/ ZyTmOXaUuPBEb1YgijdusI0IDDbExSk5rnZk9m91eWdBtaLZxMBTeirh563ZGE3t JdEA2FPCXgqx2tEa1+u9ZSDXX+7oMJejVkBDIbzEMPm7JNa3ILM7pCIcyyuvaQAM wE+h6BSoqnzQ5LpQnj5nZ2QAkWb5av+L3Kg8gahOz6M8aMWKEByUNuOvxzcuo35j E9mksZ0Bhb+NR8GlpaVH2qaP/k3j37Dr -----END CERTIFICATE-----Generated at Wed May 7 13:45:35 2025 by rpki-client