$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/3eeee4d3-e250-340d-9b70-0dfe3a06b37d.roa File: 3eeee4d3-e250-340d-9b70-0dfe3a06b37d.roa (raw, json) Hash identifier: Z3SniZUIUXsO/Hjyq4jfkqXhMMjkfRQ92r71FXshImk= Subject key identifier: 79:10:61:42:DD:AB:0E:5B:16:21:80:29:66:06:81:DE:5B:C7:73:DA Certificate issuer: /CN=ebff2bbd-fab0-4f48-a625-d53c63f1bbe6 Certificate serial: 010D0C9F4328584A9A662BF6BCEF33C8A9CA7600 Authority key identifier: 43:DE:DC:F8:9F:C5:8D:6E:3C:61:F8:80:3F:72:0E:D5:0C:74:A6:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/3eeee4d3-e250-340d-9b70-0dfe3a06b37d.roa Signing time: Tue 22 Jul 2025 13:01:03 +0000 ROA not before: Tue 22 Jul 2025 13:01:03 +0000 ROA not after: Mon 20 Oct 2025 13:01:03 +0000 asID: 18604 IP address blocks: 2604:1a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9a:66:2b:f6:bc:ef:33:c8:a9:ca:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebff2bbd-fab0-4f48-a625-d53c63f1bbe6 Validity Not Before: Jul 22 13:01:03 2025 GMT Not After : Oct 20 13:01:03 2025 GMT Subject: CN=0491b988-1ffa-4137-baa1-2dc94fc3169d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:07:5a:3e:25:85:5f:fa:f6:f4:60:9f:30:4d: 93:d0:0c:30:29:8e:cc:b4:56:35:55:09:fd:b5:6a: 40:b2:88:26:8c:f2:fe:21:5c:af:45:25:fa:a0:5c: 42:36:0a:79:5b:1e:62:85:b2:48:48:f9:72:28:34: e1:fd:ec:d5:f7:5c:e3:b6:a1:58:e2:77:a1:35:3a: 98:f4:52:61:4a:18:8a:9c:91:66:eb:b1:be:46:21: 8d:cf:48:49:4f:71:92:10:45:f6:23:2b:18:d5:6b: 79:56:ae:6b:f5:be:4b:93:69:63:b3:b6:7b:58:6d: 1a:5a:bc:02:40:5b:fb:05:89:fc:04:7e:b9:d3:5c: be:c7:cd:7b:9a:54:42:cd:e9:da:9f:86:4c:9f:d0: 7b:41:33:4e:66:91:10:e6:6a:25:ee:fa:a5:b2:74: 9c:25:63:56:5b:ff:00:49:9a:ee:5e:6a:88:cc:21: 49:70:97:84:3e:98:ad:85:8f:0f:bc:bd:cd:3d:d4: 92:41:6a:fd:b8:59:30:5e:5f:b2:d9:15:7d:50:0e: 4b:42:a1:81:95:21:9b:84:8e:d8:ab:ba:8d:d4:f1: 08:8b:98:fe:de:89:c4:e1:34:b0:80:65:ca:ab:dc: 54:f3:76:38:62:e9:01:05:4d:5f:7a:ea:26:63:5a: 1d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:10:61:42:DD:AB:0E:5B:16:21:80:29:66:06:81:DE:5B:C7:73:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/3eeee4d3-e250-340d-9b70-0dfe3a06b37d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.crl X509v3 Authority Key Identifier: keyid:43:DE:DC:F8:9F:C5:8D:6E:3C:61:F8:80:3F:72:0E:D5:0C:74:A6:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.cer sbgp-ipAddrBlock: critical IPv6: 2604:1a0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:51:12:d1:62:3c:c9:0e:9e:e7:0b:d3:7f:fd:a6:9d:8c:cb: 57:71:cd:19:af:da:af:f1:ff:9e:07:4d:73:59:1d:45:c0:18: c7:22:9a:76:d6:6f:07:2f:30:f3:c4:19:d6:dd:fc:6d:f5:0f: d4:55:95:9a:61:50:1a:2e:5f:65:8f:11:f3:7e:94:70:27:c1: 34:2c:d5:6a:10:62:6e:3e:7b:56:83:b5:60:f7:b5:cd:f2:d9: 01:65:fb:96:fd:0a:95:d9:a2:87:f6:71:77:be:be:c7:c4:ac: 87:33:fe:bf:06:02:b2:54:16:19:5a:78:eb:f2:9d:8a:49:6a: c7:cf:9d:2a:c2:1f:35:b3:73:21:2f:90:d9:dc:ba:6f:5b:59: cd:24:f0:af:c6:c9:0d:58:6f:d4:bc:88:36:e6:ae:e4:2b:32: b5:3e:fd:02:51:7a:ba:b6:ca:5e:91:77:ae:15:e9:e6:13:0c: b2:88:84:a7:66:e6:b2:7d:a1:26:7b:bc:22:78:03:b8:d6:44: ae:20:c3:c5:15:d3:49:fe:eb:ba:26:bb:82:68:28:f1:5b:54: 95:38:51:30:f9:25:9d:57:bf:45:d3:af:ba:12:3f:23:12:50: 68:f2:c0:29:02:35:36:de:ed:ac:4e:a7:1e:12:d0:d0:ed:73: 08:2b:0e:a5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqaZiv2vO8zyKnKdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWJmZjJiYmQtZmFiMC00ZjQ4LWE2MjUtZDUzYzYzZjFi YmU2MB4XDTI1MDcyMjEzMDEwM1oXDTI1MTAyMDEzMDEwM1owLzEtMCsGA1UEAxMk MDQ5MWI5ODgtMWZmYS00MTM3LWJhYTEtMmRjOTRmYzMxNjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgdaPiWFX/r29GCfME2T0AwwKY7MtFY1VQn9 tWpAsogmjPL+IVyvRSX6oFxCNgp5Wx5ihbJISPlyKDTh/ezV91zjtqFY4nehNTqY 9FJhShiKnJFm67G+RiGNz0hJT3GSEEX2IysY1Wt5Vq5r9b5Lk2ljs7Z7WG0aWrwC QFv7BYn8BH6501y+x817mlRCzenan4ZMn9B7QTNOZpEQ5mol7vqlsnScJWNWW/8A SZruXmqIzCFJcJeEPpithY8PvL3NPdSSQWr9uFkwXl+y2RV9UA5LQqGBlSGbhI7Y q7qN1PEIi5j+3onE4TSwgGXKq9xU83Y4YukBBU1feuomY1odRwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHkQYULdqw5bFiGAKWYGgd5bx3PaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lYmZm MmJiZC1mYWIwLTRmNDgtYTYyNS1kNTNjNjNmMWJiZTYvM2VlZWU0ZDMtZTI1MC0z NDBkLTliNzAtMGRmZTNhMDZiMzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZWJmZjJiYmQtZmFiMC00ZjQ4LWE2 MjUtZDUzYzYzZjFiYmU2L2ViZmYyYmJkLWZhYjAtNGY0OC1hNjI1LWQ1M2M2M2Yx YmJlNi5jcmwwHwYDVR0jBBgwFoAUQ97c+J/FjW48YfiAP3IO1Qx0ppMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9lYmZmMmJiZC1mYWIwLTRmNDgtYTYyNS1kNTNj NjNmMWJiZTYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQBoDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBDURLRYjzJDp7nC9N//aadjMtXcc0Zr9qv8f+eB01zWR1FwBjHIpp2 1m8HLzDzxBnW3fxt9Q/UVZWaYVAaLl9ljxHzfpRwJ8E0LNVqEGJuPntWg7Vg97XN 8tkBZfuW/QqV2aKH9nF3vr7HxKyHM/6/BgKyVBYZWnjr8p2KSWrHz50qwh81s3Mh L5DZ3LpvW1nNJPCvxskNWG/UvIg25q7kKzK1Pv0CUXq6tspekXeuFenmEwyyiISn ZuayfaEme7wieAO41kSuIMPFFdNJ/uu6JruCaCjxW1SVOFEw+SWdV79F06+6Ej8j ElBo8sApAjU23u2sTqceEtDQ7XMIKw6l -----END CERTIFICATE-----Generated at Mon Aug 4 19:04:02 2025 by rpki-client