$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/3d17c561-ea87-3032-81af-6559c2402369.roa File: 3d17c561-ea87-3032-81af-6559c2402369.roa (raw, json) Hash identifier: CusoQJcndeVh6YVDUnkRiu9L0kw76XaJaCPt+V0ujoU= Subject key identifier: 53:04:77:85:DE:9A:74:F0:56:F6:BB:5A:25:71:B8:2E:DB:46:DC:E6 Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F432858491246A6AE6259B5EFD7A13F40 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/3d17c561-ea87-3032-81af-6559c2402369.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 20454 IP address blocks: 2607:6002:171::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:a6:ae:62:59:b5:ef:d7:a1:3f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=964fc5e2-74b1-4d12-b991-bb9cc3ca5012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4a:83:57:f7:64:b2:df:3a:39:27:86:f2:7f: f0:98:a3:fa:71:7f:67:62:63:8b:3e:ff:fb:3e:7b: 99:fb:9f:2b:d7:e3:f4:bb:41:9d:2a:de:58:b4:cd: 62:3b:b2:cd:4b:f6:4a:61:ff:6e:4d:b4:c7:3b:5a: 9c:fb:70:96:b8:e1:4d:d4:27:6b:df:be:41:79:05: c6:4d:b0:1e:01:e0:de:5c:d5:c7:d9:35:bd:34:65: a0:0d:69:06:a3:46:c4:50:ba:9e:78:25:88:93:28: 42:9c:69:b4:85:e0:83:ea:06:cd:82:6a:83:2d:2c: d6:ae:53:7f:5c:f0:df:e5:0b:f9:5e:e2:fa:f1:c8: 5b:e4:8d:b3:02:a7:f1:2f:d0:77:66:ea:77:91:16: 25:7e:9c:8a:46:12:44:4c:c5:41:3e:da:ca:d5:b5: d0:f5:c0:65:3f:32:6c:37:2f:85:8b:b1:39:5e:36: f1:d7:3c:fd:da:74:8b:25:14:8b:90:bd:49:f3:06: dd:fe:8f:f4:db:d2:4b:b5:12:1f:a5:59:7c:81:2f: a5:18:77:7c:cb:d9:07:3c:bd:21:32:84:f7:fa:58: e5:93:01:e7:4f:3a:17:b9:22:da:bf:62:98:fb:23: d5:73:5b:e5:c3:7d:7b:80:1a:44:09:53:38:6f:c6: 16:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:04:77:85:DE:9A:74:F0:56:F6:BB:5A:25:71:B8:2E:DB:46:DC:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/3d17c561-ea87-3032-81af-6559c2402369.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv6: 2607:6002:171::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:f9:7b:f0:3d:0e:29:d4:63:4e:ad:db:8d:79:6c:0b:65:fb: 9a:1b:d5:44:23:fc:b9:4d:e1:99:15:88:95:03:66:aa:8f:e4: 51:93:69:61:97:d6:3f:86:a3:5a:f8:75:47:89:c9:54:01:bd: 94:9f:75:ba:cd:df:8a:97:3c:ca:2f:9b:26:0e:c1:2c:d3:d1: d0:2b:a4:49:04:3c:b8:43:6f:e0:3a:33:cf:66:e1:53:db:9d: 89:04:2f:d7:dc:65:c8:b4:fe:5b:f4:f1:08:1c:1c:71:77:70: cc:c9:e5:8a:09:c5:c3:b9:07:fe:3e:34:7c:98:80:36:f8:53: 76:c8:94:5f:2e:8e:fb:4d:42:0a:84:bd:31:d2:3a:92:91:a2: e4:5a:96:1b:f9:bd:24:38:06:10:4e:2c:e5:bb:c1:fd:f8:48: 74:8a:c2:bb:88:f0:42:6c:a4:33:dc:aa:c4:92:0c:2a:b5:7d: 95:b8:33:98:91:a8:39:d8:de:72:0e:a6:22:4e:bc:8f:64:65: 68:1d:02:90:71:cc:76:c4:1b:4d:1a:a2:df:3a:7f:d0:a1:f8: d4:49:b9:b0:05:34:74:dd:73:3a:05:e9:52:99:b1:d1:aa:3d: 83:80:22:c5:51:6f:ae:be:26:ea:0c:79:67:13:9a:15:56:a8: bb:dc:80:55 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkSRqauYlm179ehP0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk OTY0ZmM1ZTItNzRiMS00ZDEyLWI5OTEtYmI5Y2MzY2E1MDEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUqDV/dkst86OSeG8n/wmKP6cX9nYmOLPv/7 PnuZ+58r1+P0u0GdKt5YtM1iO7LNS/ZKYf9uTbTHO1qc+3CWuOFN1Cdr375BeQXG TbAeAeDeXNXH2TW9NGWgDWkGo0bEULqeeCWIkyhCnGm0heCD6gbNgmqDLSzWrlN/ XPDf5Qv5XuL68chb5I2zAqfxL9B3Zup3kRYlfpyKRhJETMVBPtrK1bXQ9cBlPzJs Ny+Fi7E5Xjbx1zz92nSLJRSLkL1J8wbd/o/029JLtRIfpVl8gS+lGHd8y9kHPL0h MoT3+ljlkwHnTzoXuSLav2KY+yPVc1vlw317gBpECVM4b8YWfQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFMEd4XemnTwVva7WiVxuC7bRtzmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvM2QxN2M1NjEtZWE4Ny0z MDMyLTgxYWYtNjU1OWMyNDAyMzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgdgAgFx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGz5e/A9DinUY06t2415bAtl+5ob1UQj/LlN4ZkViJUDZqqP5FGT aWGX1j+Go1r4dUeJyVQBvZSfdbrN34qXPMovmyYOwSzT0dArpEkEPLhDb+A6M89m 4VPbnYkEL9fcZci0/lv08QgcHHF3cMzJ5YoJxcO5B/4+NHyYgDb4U3bIlF8ujvtN QgqEvTHSOpKRouRalhv5vSQ4BhBOLOW7wf34SHSKwruI8EJspDPcqsSSDCq1fZW4 M5iRqDnY3nIOpiJOvI9kZWgdApBxzHbEG00aot86f9Ch+NRJubAFNHTdczoF6VKZ sdGqPYOAIsVRb66+JuoMeWcTmhVWqLvcgFU= -----END CERTIFICATE-----Generated at Sun Apr 27 04:09:13 2025 by rpki-client