$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/a3b36418-37a2-34a8-b072-a15f8f21810a.roa File: a3b36418-37a2-34a8-b072-a15f8f21810a.roa (raw, json) Hash identifier: Dzyl++n1fsrpBQVtLrFgoRH22FaFCfD0QJgU8TXae04= Subject key identifier: 1C:AB:76:05:F5:57:FC:28:67:D3:EB:41:70:F7:EC:84:57:A6:D1:3B Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F43285849ED4FCC1190A95BB0992D8000 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/a3b36418-37a2-34a8-b072-a15f8f21810a.roa Signing time: Wed 21 May 2025 13:01:04 +0000 ROA not before: Wed 21 May 2025 13:01:04 +0000 ROA not after: Tue 19 Aug 2025 13:01:04 +0000 asID: 12189 IP address blocks: 2607:6000:900::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ed:4f:cc:11:90:a9:5b:b0:99:2d:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: May 21 13:01:04 2025 GMT Not After : Aug 19 13:01:04 2025 GMT Subject: CN=aafa3f38-6e6d-4316-b472-a559bb5090c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:da:16:01:53:d0:f1:5a:c1:8f:49:94:b7:94: af:f5:2c:0a:cb:d0:65:41:12:89:91:53:8b:9f:df: da:2a:16:5d:ad:b2:1a:cb:68:80:e3:f9:b5:43:52: c0:25:aa:5d:ab:10:ce:61:2d:2a:fb:8e:fa:7f:59: cc:9a:5e:f1:86:86:98:f5:bf:1c:58:03:7f:3e:08: 91:84:ee:31:82:ba:fa:d5:79:dc:96:29:7e:0e:9e: a5:7d:e1:b8:66:b0:e7:58:4a:32:1a:6e:8d:0e:2d: 4e:69:00:63:26:38:bb:a8:fd:72:33:74:bf:f8:58: 7b:fa:95:ff:f7:b6:de:1c:b7:4b:4b:c7:5f:69:0c: 25:b7:99:50:62:2c:b9:62:41:e8:97:e5:a1:ab:3e: 65:81:52:0d:9e:82:47:94:5c:74:23:92:d0:0f:82: b3:cf:2d:3d:07:96:dd:3b:76:57:0a:8f:7e:f9:c5: c9:51:53:5d:5f:b1:f7:9e:06:bd:cf:44:04:3e:b3: 7b:4c:12:2b:2d:83:58:f9:60:52:4c:84:0c:ef:71: 56:38:1d:ff:4c:54:77:c2:fe:26:37:2b:6e:05:91: 51:b6:d3:94:45:d0:04:39:23:c5:50:63:5e:a5:0f: 1b:57:4b:3c:da:50:f8:6d:bf:ac:a6:5e:69:ee:55: ad:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:AB:76:05:F5:57:FC:28:67:D3:EB:41:70:F7:EC:84:57:A6:D1:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/a3b36418-37a2-34a8-b072-a15f8f21810a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv6: 2607:6000:900::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:36:45:b9:52:43:fa:88:b7:63:61:a2:77:c6:71:cd:65:23: 7e:b4:0f:ea:e7:c6:bd:23:23:32:b6:38:55:3e:c2:3e:96:a8: 3d:f9:a1:4f:d2:d0:88:ad:5d:40:55:ac:ad:46:53:2a:90:df: ec:76:c8:b6:1e:1e:9e:ed:d9:b6:8b:a5:74:f2:70:35:c9:64: b3:82:0a:0d:0e:5e:48:76:b7:6c:cb:f6:be:86:65:20:a8:b4: bd:e1:9c:62:82:d3:c4:4e:f5:3a:0e:85:63:55:9a:80:89:59: cf:f2:05:58:e1:12:c6:6b:01:9a:c0:8b:54:de:de:79:d8:cd: 1f:09:d9:01:d9:dc:db:d9:3d:a6:d3:78:8a:26:cc:61:ab:1d: a9:f4:c3:9f:7b:51:f4:cf:7d:dd:9c:45:43:7e:a4:a3:bd:39: 44:8d:a3:2a:4b:0c:c7:69:93:c0:c5:84:50:3b:d0:74:48:ee: 0e:a6:50:8b:59:4b:1c:e4:3d:28:58:b5:6e:38:10:7d:ac:2b: ef:73:94:3e:79:cf:8d:95:e6:ec:df:62:62:c8:76:9f:bf:19: 7a:d9:dc:14:16:d9:c8:77:ff:dc:12:90:18:66:df:bd:aa:51: d0:cf:6b:0e:80:11:b6:67:da:d9:81:7f:4f:39:6c:e2:74:94: cd:13:19:73 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEntT8wRkKlbsJktgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI1MDUyMTEzMDEwNFoXDTI1MDgxOTEzMDEwNFowLzEtMCsGA1UEAxMk YWFmYTNmMzgtNmU2ZC00MzE2LWI0NzItYTU1OWJiNTA5MGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitoWAVPQ8VrBj0mUt5Sv9SwKy9BlQRKJkVOL n9/aKhZdrbIay2iA4/m1Q1LAJapdqxDOYS0q+476f1nMml7xhoaY9b8cWAN/PgiR hO4xgrr61Xnclil+Dp6lfeG4ZrDnWEoyGm6NDi1OaQBjJji7qP1yM3S/+Fh7+pX/ 97beHLdLS8dfaQwlt5lQYiy5YkHol+Whqz5lgVINnoJHlFx0I5LQD4Kzzy09B5bd O3ZXCo9++cXJUVNdX7H3nga9z0QEPrN7TBIrLYNY+WBSTIQM73FWOB3/TFR3wv4m NytuBZFRttOURdAEOSPFUGNepQ8bV0s82lD4bb+spl5p7lWtgQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFByrdgX1V/woZ9PrQXD37IRXptE7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvYTNiMzY0MTgtMzdhMi0z NGE4LWIwNzItYTE1ZjhmMjE4MTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgdgAAkw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAAzZFuVJD+oi3Y2Gid8ZxzWUjfrQP6ufGvSMjMrY4VT7CPpaoPfmh T9LQiK1dQFWsrUZTKpDf7HbIth4enu3ZtouldPJwNclks4IKDQ5eSHa3bMv2voZl IKi0veGcYoLTxE71Og6FY1WagIlZz/IFWOESxmsBmsCLVN7eedjNHwnZAdnc29k9 ptN4iibMYasdqfTDn3tR9M993ZxFQ36ko705RI2jKksMx2mTwMWEUDvQdEjuDqZQ i1lLHOQ9KFi1bjgQfawr73OUPnnPjZXm7N9iYsh2n78ZetncFBbZyHf/3BKQGGbf vapR0M9rDoARtmfa2YF/Tzls4nSUzRMZcw== -----END CERTIFICATE-----Generated at Sun Jun 15 23:13:07 2025 by rpki-client