$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/84aceef2-689c-343a-9a23-0b785ea8f555.roa File: 84aceef2-689c-343a-9a23-0b785ea8f555.roa (raw, json) Hash identifier: cAbdGWLbVZHYdkLHtA/6T6SwSVHLMtisYG6ErFFXnu0= Subject key identifier: 23:77:74:B2:7A:C4:2D:07:2B:AD:4C:4A:6F:63:B6:3C:88:1B:E8:54 Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F43285849ED4FCC30F6E3E70765832AA0 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/84aceef2-689c-343a-9a23-0b785ea8f555.roa Signing time: Wed 21 May 2025 13:01:04 +0000 ROA not before: Wed 21 May 2025 13:01:04 +0000 ROA not after: Tue 19 Aug 2025 13:01:04 +0000 asID: 12189 IP address blocks: 2607:6000:500::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ed:4f:cc:30:f6:e3:e7:07:65:83:2a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: May 21 13:01:04 2025 GMT Not After : Aug 19 13:01:04 2025 GMT Subject: CN=41b79cb5-7118-4a02-a915-5f36aee820a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ad:2b:7f:51:24:00:fd:f8:73:3c:ca:44:1a: b0:06:77:50:7f:ad:df:b3:bc:2c:df:52:53:41:03: 75:e8:7c:f5:1b:78:62:3f:dd:09:4b:a8:60:ff:e9: 54:2a:cd:6d:9f:49:f0:66:34:f1:23:ef:33:eb:eb: 9e:71:8a:f8:74:3f:1c:c9:00:35:a4:7c:ab:ae:cc: 0d:45:19:ad:fa:3f:0c:ec:3e:15:f0:8f:bf:d5:8a: 90:54:e2:31:ea:37:d6:df:fc:9a:11:ff:35:4f:30: db:00:0b:51:cf:cf:dc:fc:e1:e7:69:47:ef:38:c5: c3:98:3b:c8:ba:ea:c5:94:47:96:73:25:66:0c:12: 8e:44:70:ca:bc:9e:28:aa:df:a1:0b:92:08:42:a7: ad:06:63:03:93:79:f2:95:69:e1:87:14:45:ea:5d: 9c:ec:75:5a:99:94:1f:22:b9:bd:f2:39:94:0f:5e: 56:a2:ab:4a:0b:e3:2b:45:0a:59:f2:87:d0:01:49: d2:e3:6c:32:05:66:31:8e:f1:74:a7:38:ad:3d:66: 92:22:16:2a:4d:7b:eb:4d:f4:f8:b8:5d:d7:b0:31: 4d:b9:55:37:d4:49:df:a9:d8:f8:11:7f:ee:ef:b8: 25:01:d7:05:7d:38:8b:88:f6:0d:18:6c:2b:eb:1c: 9d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:77:74:B2:7A:C4:2D:07:2B:AD:4C:4A:6F:63:B6:3C:88:1B:E8:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/84aceef2-689c-343a-9a23-0b785ea8f555.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv6: 2607:6000:500::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:0d:d5:e3:ea:c9:ea:1e:85:c3:34:31:2e:28:fd:63:40:d4: bb:4c:47:dc:ef:17:f8:a2:18:53:c9:20:17:8c:8b:af:ac:82: 30:c5:df:de:2f:2f:49:c1:2b:99:78:a5:d2:bf:50:95:43:e1: 95:5c:18:b7:70:fd:6a:30:8c:41:21:3d:5d:6c:90:9d:15:a6: 2d:67:99:10:27:2c:87:db:c2:06:2b:2d:4e:34:47:46:99:e2: 80:e2:fa:5c:73:1f:2f:d2:02:11:75:b3:5d:54:fc:9e:b9:e4: 3f:cb:94:8b:4a:e4:da:6c:02:04:4e:40:62:36:18:8b:13:47: 9e:ac:f9:5b:aa:b8:d5:f1:1b:e2:11:0b:a6:ad:f8:bf:dc:3b: bc:f4:92:d4:92:79:aa:c3:83:3c:e5:17:5b:e1:9d:a1:b2:a8: db:f7:e0:19:6f:81:1b:83:34:45:cd:be:47:3f:07:6c:83:94: 08:0d:4b:48:76:69:b1:ab:07:af:cc:f9:f9:22:5e:2f:b7:d3: 3a:ac:f9:2c:e3:75:67:f5:63:28:1c:a5:99:87:59:2b:9c:50: 18:22:a0:36:41:f5:2e:42:80:f3:00:18:af:4a:63:75:f3:54: d8:52:c4:22:93:b1:9e:9e:78:54:1d:50:3c:da:29:87:23:95: c8:49:e0:f8 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEntT8ww9uPnB2WDKqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI1MDUyMTEzMDEwNFoXDTI1MDgxOTEzMDEwNFowLzEtMCsGA1UEAxMk NDFiNzljYjUtNzExOC00YTAyLWE5MTUtNWYzNmFlZTgyMGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtK0rf1EkAP34czzKRBqwBndQf63fs7ws31JT QQN16Hz1G3hiP90JS6hg/+lUKs1tn0nwZjTxI+8z6+uecYr4dD8cyQA1pHyrrswN RRmt+j8M7D4V8I+/1YqQVOIx6jfW3/yaEf81TzDbAAtRz8/c/OHnaUfvOMXDmDvI uurFlEeWcyVmDBKORHDKvJ4oqt+hC5IIQqetBmMDk3nylWnhhxRF6l2c7HVamZQf Irm98jmUD15WoqtKC+MrRQpZ8ofQAUnS42wyBWYxjvF0pzitPWaSIhYqTXvrTfT4 uF3XsDFNuVU31Enfqdj4EX/u77glAdcFfTiLiPYNGGwr6xydewIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCN3dLJ6xC0HK61MSm9jtjyIG+hUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvODRhY2VlZjItNjg5Yy0z NDNhLTlhMjMtMGI3ODVlYThmNTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgdgAAUw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAMw3V4+rJ6h6FwzQxLij9Y0DUu0xH3O8X+KIYU8kgF4yLr6yCMMXf 3i8vScErmXil0r9QlUPhlVwYt3D9ajCMQSE9XWyQnRWmLWeZECcsh9vCBistTjRH RpnigOL6XHMfL9ICEXWzXVT8nrnkP8uUi0rk2mwCBE5AYjYYixNHnqz5W6q41fEb 4hELpq34v9w7vPSS1JJ5qsODPOUXW+GdobKo2/fgGW+BG4M0Rc2+Rz8HbIOUCA1L SHZpsasHr8z5+SJeL7fTOqz5LON1Z/VjKBylmYdZK5xQGCKgNkH1LkKA8wAYr0pj dfNU2FLEIpOxnp54VB1QPNophyOVyEng+A== -----END CERTIFICATE-----Generated at Sun Jun 15 17:45:56 2025 by rpki-client