$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/19de2498-405e-3610-ad8d-53af4f1172c7.roa File: 19de2498-405e-3610-ad8d-53af4f1172c7.roa (raw, json) Hash identifier: nZBtrkgrT605GNGuUt9XVc/vM+k3J4FSCgqet72cEOg= Subject key identifier: 45:2C:E1:B7:8B:24:18:21:18:AC:E6:52:AD:79:0F:4A:3F:98:E2:79 Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F4328584A103549B2EFEAD6B064A77580 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/19de2498-405e-3610-ad8d-53af4f1172c7.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 12189 IP address blocks: 2607:6000:f00::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:49:b2:ef:ea:d6:b0:64:a7:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=2968cb1a-07de-480b-ae3d-552eca6c77c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:7e:50:b0:d6:57:2f:b2:99:b0:14:89:3b:aa: 8b:ab:e9:1c:26:f1:75:c3:bb:75:67:90:4c:0e:30: 46:52:ab:f4:ee:f7:91:63:c9:05:19:7b:15:79:4e: 65:88:c7:5b:43:32:aa:ee:5a:c6:67:96:09:be:bc: 55:e6:1b:cb:85:66:af:cc:20:87:4c:3c:0c:b6:28: ee:b7:58:a4:dd:ed:f0:74:7b:16:b8:40:07:16:36: 66:6c:66:dd:6c:e8:2f:72:bf:b5:f3:ef:a5:2f:2b: 37:2a:28:32:15:07:8f:de:74:86:0e:17:56:11:06: ee:51:d7:f6:e9:c8:13:8b:ac:d0:8f:7c:1a:af:c0: 8e:e2:e6:80:7a:99:0d:a5:ea:b0:a8:20:67:bb:43: 72:a3:96:83:15:11:a4:de:d4:bc:54:10:17:73:8f: 91:2d:f3:21:38:59:fc:89:34:c6:12:0f:5a:7c:6b: 80:e9:a5:66:06:28:59:a9:b8:82:6a:09:26:41:e3: 01:e2:00:61:fd:b0:19:58:25:99:d2:48:bc:3f:95: 48:ae:ce:fe:5b:0e:72:70:85:33:3e:7d:d6:af:8f: be:4b:50:3d:ae:38:36:ba:87:0c:01:38:d7:ce:0c: 7d:86:3b:cc:24:ff:e9:b3:b1:81:c0:c4:c6:39:07: 71:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:2C:E1:B7:8B:24:18:21:18:AC:E6:52:AD:79:0F:4A:3F:98:E2:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/19de2498-405e-3610-ad8d-53af4f1172c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv6: 2607:6000:f00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:96:45:45:43:71:e1:4b:39:cb:5c:3b:27:1f:b1:c8:6e:17: d5:19:d8:53:cb:ea:1f:c9:0e:0c:60:a5:09:37:9a:be:bf:55: fe:96:04:4e:bd:7c:c1:22:59:5b:0d:b1:25:8b:11:9f:cc:77: 3d:73:57:d7:3b:b2:5c:2b:20:ec:81:4c:b1:b2:88:d6:44:5e: 5d:55:86:ea:70:40:8f:18:dc:68:2d:13:2e:8b:3b:f6:c4:84: 02:b2:a4:c8:3d:50:38:86:63:75:9a:71:be:b7:cb:9c:53:65: 9d:aa:40:70:92:b5:2e:db:3e:2e:8c:aa:ea:05:27:a7:b7:83: 94:3a:77:84:ac:34:d1:76:d3:84:b1:ed:7c:dd:5f:84:b6:5e: 77:29:dd:af:d6:fb:97:48:97:d2:7e:8b:40:88:51:27:02:67: a1:cd:6a:cf:72:71:ac:a0:c6:74:57:86:dc:20:65:cd:66:d6: b2:20:c6:f8:c4:81:c5:02:89:ff:83:36:8e:09:59:7c:5c:d2: 52:83:8f:44:65:b2:ba:2b:c3:39:3e:b2:83:d9:9f:d2:c8:2a: b6:cf:67:99:97:e9:2b:2d:5b:c3:33:0b:d9:38:7e:03:f1:9b: f1:cc:b1:42:e3:54:94:4e:de:7c:95:8f:a1:3d:df:9f:95:a0: 07:8f:2c:46 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEoQNUmy7+rWsGSndYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk Mjk2OGNiMWEtMDdkZS00ODBiLWFlM2QtNTUyZWNhNmM3N2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhH5QsNZXL7KZsBSJO6qLq+kcJvF1w7t1Z5BM DjBGUqv07veRY8kFGXsVeU5liMdbQzKq7lrGZ5YJvrxV5hvLhWavzCCHTDwMtiju t1ik3e3wdHsWuEAHFjZmbGbdbOgvcr+18++lLys3KigyFQeP3nSGDhdWEQbuUdf2 6cgTi6zQj3war8CO4uaAepkNpeqwqCBnu0Nyo5aDFRGk3tS8VBAXc4+RLfMhOFn8 iTTGEg9afGuA6aVmBihZqbiCagkmQeMB4gBh/bAZWCWZ0ki8P5VIrs7+Ww5ycIUz Pn3Wr4++S1A9rjg2uocMATjXzgx9hjvMJP/ps7GBwMTGOQdx/wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEUs4beLJBghGKzmUq15D0o/mOJ5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvMTlkZTI0OTgtNDA1ZS0z NjEwLWFkOGQtNTNhZjRmMTE3MmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgdgAA8w VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAn5ZFRUNx4Us5y1w7Jx+xyG4X1RnYU8vqH8kODGClCTeavr9V/pYE Tr18wSJZWw2xJYsRn8x3PXNX1zuyXCsg7IFMsbKI1kReXVWG6nBAjxjcaC0TLos7 9sSEArKkyD1QOIZjdZpxvrfLnFNlnapAcJK1Lts+Loyq6gUnp7eDlDp3hKw00XbT hLHtfN1fhLZedyndr9b7l0iX0n6LQIhRJwJnoc1qz3JxrKDGdFeG3CBlzWbWsiDG +MSBxQKJ/4M2jglZfFzSUoOPRGWyuivDOT6yg9mf0sgqts9nmZfpKy1bwzML2Th+ A/Gb8cyxQuNUlE7efJWPoT3fn5WgB48sRg== -----END CERTIFICATE-----Generated at Sun Jun 15 17:41:04 2025 by rpki-client