$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb3726d7-0f8c-4949-99b6-eecda94a0675/f61adb1e-bc9e-34ec-80fb-4d5ecf11e1dd.roa File: f61adb1e-bc9e-34ec-80fb-4d5ecf11e1dd.roa (raw, json) Hash identifier: cCynwcUFCPJpbtG37Nv6JsPYjD5kDvMnLFrOv9arlIQ= Subject key identifier: C2:8D:8B:02:D1:00:D2:97:C6:03:F2:11:1B:42:B0:0C:1A:A5:A9:A8 Certificate issuer: /CN=eb3726d7-0f8c-4949-99b6-eecda94a0675 Certificate serial: 010D0C9F4328584913AC1E919374510CEC954100 Authority key identifier: 9E:F0:8D:44:A7:A6:26:F4:A9:17:81:5E:EA:26:57:FC:D8:00:89:E1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb3726d7-0f8c-4949-99b6-eecda94a0675.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb3726d7-0f8c-4949-99b6-eecda94a0675/f61adb1e-bc9e-34ec-80fb-4d5ecf11e1dd.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 194 IP address blocks: 2620:117:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb3726d7-0f8c-4949-99b6-eecda94a0675/eb3726d7-0f8c-4949-99b6-eecda94a0675.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb3726d7-0f8c-4949-99b6-eecda94a0675/eb3726d7-0f8c-4949-99b6-eecda94a0675.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb3726d7-0f8c-4949-99b6-eecda94a0675.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:1e:91:93:74:51:0c:ec:95:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb3726d7-0f8c-4949-99b6-eecda94a0675 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=ae45fb60-1f94-4259-bc86-68a6279a4d36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:53:3f:48:d1:5a:81:29:e2:f1:70:4f:de:f3: 21:05:d5:a1:a6:c3:e1:4a:24:db:bc:4e:d2:a2:c8: ea:b5:11:ee:8e:df:08:37:e7:d5:66:00:fa:83:c5: 10:d2:8a:4b:65:f0:62:85:87:df:1e:29:27:a4:77: ab:67:a0:a6:de:7c:52:e7:9c:ba:f5:8e:65:fc:06: 9e:a8:1e:4b:79:0f:0b:c4:a9:de:f6:37:09:74:13: 02:5c:73:d1:85:e6:65:5a:45:f1:c1:6f:fb:c4:c6: 51:da:7b:93:20:b4:7f:b0:08:d4:ab:05:fe:d1:32: 2a:ac:b4:5e:a2:d4:ee:ed:08:23:40:25:1d:05:b3: 64:1c:a2:e6:5a:38:73:48:82:3d:e5:13:de:ac:9d: 69:9c:ca:5d:97:c7:dd:61:3c:fd:65:ad:4e:b7:f4: 33:20:6d:32:01:90:e8:88:f8:01:9e:e1:50:63:62: 71:0f:42:4a:39:27:61:09:a8:8c:80:61:20:c4:87: ef:bb:71:3e:c9:4f:d7:7c:12:d5:4c:99:e9:1d:73: 52:07:a8:38:15:b3:af:27:29:c2:91:0b:81:c8:5a: ba:7d:87:ab:9c:ef:1b:34:5f:7b:37:83:8d:ad:5d: af:80:bd:d4:e0:56:7a:35:de:a6:21:c4:4f:1c:83: 41:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:8D:8B:02:D1:00:D2:97:C6:03:F2:11:1B:42:B0:0C:1A:A5:A9:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb3726d7-0f8c-4949-99b6-eecda94a0675/f61adb1e-bc9e-34ec-80fb-4d5ecf11e1dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb3726d7-0f8c-4949-99b6-eecda94a0675/eb3726d7-0f8c-4949-99b6-eecda94a0675.crl X509v3 Authority Key Identifier: keyid:9E:F0:8D:44:A7:A6:26:F4:A9:17:81:5E:EA:26:57:FC:D8:00:89:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb3726d7-0f8c-4949-99b6-eecda94a0675.cer sbgp-ipAddrBlock: critical IPv6: 2620:117:2000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:54:46:3b:57:83:b6:f7:a5:ca:ca:25:ae:0b:38:e6:51:c2: 59:02:62:e6:61:ea:96:b6:e6:dc:f3:ea:37:72:b0:d4:2f:72: 44:82:56:5a:ad:a8:ef:8e:47:62:8d:52:94:4c:1a:35:29:ad: 45:06:fc:37:eb:c9:72:75:5f:5d:84:18:59:0c:52:12:e7:6a: 3a:07:7d:76:6f:f9:23:cd:96:81:3d:03:67:f7:5a:59:af:78: ca:26:88:4f:05:4e:f5:53:bb:48:e6:83:b8:b6:4f:2a:4a:53: 0f:8c:f3:2d:8b:37:65:39:31:86:7d:55:18:82:44:4f:41:a3: 8d:69:e4:01:14:7c:29:32:6d:6e:aa:1f:c6:3b:34:0c:66:ef: 09:e6:b6:7a:54:b7:68:25:1b:e6:7c:dd:1f:87:28:87:cf:e4: 10:53:aa:5e:c2:c3:e1:77:26:fa:e1:37:f3:8b:99:cd:61:ac: 61:53:f4:82:29:fa:5a:c4:6d:b9:86:92:f1:64:86:65:0a:b2: db:55:cf:cb:5a:fd:8f:fb:15:d9:9a:ec:71:17:78:d5:2a:77: b3:dc:39:cd:e3:65:c7:f5:b3:96:a2:24:68:65:cf:04:a1:1c: af:c1:92:1b:02:85:f2:87:52:87:41:45:07:92:cc:8e:7d:ff: 87:46:87:41 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkTrB6Rk3RRDOyVQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWIzNzI2ZDctMGY4Yy00OTQ5LTk5YjYtZWVjZGE5NGEw Njc1MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk YWU0NWZiNjAtMWY5NC00MjU5LWJjODYtNjhhNjI3OWE0ZDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVM/SNFagSni8XBP3vMhBdWhpsPhSiTbvE7S osjqtRHujt8IN+fVZgD6g8UQ0opLZfBihYffHiknpHerZ6Cm3nxS55y69Y5l/Aae qB5LeQ8LxKne9jcJdBMCXHPRheZlWkXxwW/7xMZR2nuTILR/sAjUqwX+0TIqrLRe otTu7QgjQCUdBbNkHKLmWjhzSII95RPerJ1pnMpdl8fdYTz9Za1Ot/QzIG0yAZDo iPgBnuFQY2JxD0JKOSdhCaiMgGEgxIfvu3E+yU/XfBLVTJnpHXNSB6g4FbOvJynC kQuByFq6fYernO8bNF97N4ONrV2vgL3U4FZ6Nd6mIcRPHINBqQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMKNiwLRANKXxgPyERtCsAwapamoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYjM3 MjZkNy0wZjhjLTQ5NDktOTliNi1lZWNkYTk0YTA2NzUvZjYxYWRiMWUtYmM5ZS0z NGVjLTgwZmItNGQ1ZWNmMTFlMWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWIzNzI2ZDctMGY4Yy00OTQ5LTk5 YjYtZWVjZGE5NGEwNjc1L2ViMzcyNmQ3LTBmOGMtNDk0OS05OWI2LWVlY2RhOTRh MDY3NS5jcmwwHwYDVR0jBBgwFoAUnvCNRKemJvSpF4Fe6iZX/NgAieEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lYjM3MjZkNy0wZjhjLTQ5NDktOTliNi1lZWNk YTk0YTA2NzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABFyAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAWlRGO1eDtvelysolrgs45lHCWQJi5mHqlrbm3PPqN3Kw1C9yRIJW Wq2o745HYo1SlEwaNSmtRQb8N+vJcnVfXYQYWQxSEudqOgd9dm/5I82WgT0DZ/da Wa94yiaITwVO9VO7SOaDuLZPKkpTD4zzLYs3ZTkxhn1VGIJET0GjjWnkARR8KTJt bqofxjs0DGbvCea2elS3aCUb5nzdH4coh8/kEFOqXsLD4Xcm+uE384uZzWGsYVP0 gin6WsRtuYaS8WSGZQqy21XPy1r9j/sV2ZrscRd41Sp3s9w5zeNlx/WzlqIkaGXP BKEcr8GSGwKF8odSh0FFB5LMjn3/h0aHQQ== -----END CERTIFICATE-----Generated at Sat Apr 12 13:35:09 2025 by rpki-client