$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/ebe79a59-4947-3591-abf8-3a90402caae2.roa File: ebe79a59-4947-3591-abf8-3a90402caae2.roa (raw, json) Hash identifier: g+saFDxU3AkeY1ShXZ4umSRjVZiuTozhn9E4wIzpqHI= Subject key identifier: 94:38:C0:41:3E:03:59:8E:37:DB:EA:66:DE:10:2A:95:2F:6A:05:43 Certificate issuer: /CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Certificate serial: 010D0C9F432858494B64188801765BD5BA1C2280 Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/ebe79a59-4947-3591-abf8-3a90402caae2.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 394285 IP address blocks: 2606:a100:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:18:88:01:76:5b:d5:ba:1c:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=e9e90d2b-099c-4151-8ab5-1c8ccfcadc07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:37:41:aa:eb:8a:f5:26:d9:b6:12:2b:b5:3e: b9:e8:d8:02:6b:5b:e9:3e:1d:06:f0:72:34:1b:a7: eb:bd:8f:8b:71:f5:d2:d7:7e:ce:b6:80:53:5c:cc: e3:bb:62:d8:1b:29:09:5c:5b:78:27:b3:a4:fa:39: 77:60:1e:0d:59:4b:d8:c5:99:7b:8d:ab:36:94:fb: 77:99:64:06:44:41:97:88:60:59:b9:69:1e:da:3a: e2:83:9f:b1:52:88:08:77:c0:b1:4d:1e:22:26:f6: 9a:7c:cd:d4:de:56:08:32:c6:a6:27:65:4b:9e:4a: d3:9a:20:12:d5:55:85:6d:52:53:52:94:a7:f6:76: 70:da:20:91:12:d2:0a:66:40:b5:02:0a:17:14:53: 0d:a9:c9:19:fb:4a:7f:f1:70:b3:ad:ba:07:db:ee: f7:89:c9:5d:a8:be:ae:85:1b:61:1e:01:7d:ac:4b: a7:37:df:05:5f:da:3d:a5:c7:d6:cf:12:69:ed:91: 6e:85:64:5c:2e:c1:30:c9:f9:9b:9a:1f:52:a5:5d: c6:ba:e1:6c:35:be:26:8e:1d:34:ee:80:6c:98:29: bf:ea:1d:64:3e:26:08:9c:ab:07:ed:6b:47:6a:54: 07:35:e1:9c:6e:83:3c:aa:aa:39:e8:59:68:3e:7f: 28:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:38:C0:41:3E:03:59:8E:37:DB:EA:66:DE:10:2A:95:2F:6A:05:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/ebe79a59-4947-3591-abf8-3a90402caae2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl X509v3 Authority Key Identifier: keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer sbgp-ipAddrBlock: critical IPv6: 2606:a100:4000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:24:b5:23:a8:b3:6a:80:7d:ad:6b:f5:82:2e:52:74:40:02: 24:ad:06:46:ec:6b:cb:24:da:08:8a:b7:af:96:92:23:43:cb: 79:82:05:76:7c:7a:1e:a0:b7:eb:64:40:34:63:e9:91:eb:01: a4:6b:43:b4:3b:d9:51:1c:41:8c:89:63:01:78:a2:53:dc:4b: bc:15:93:d7:5c:af:86:90:fa:ae:d2:cc:60:2c:e3:40:2a:64: 28:f7:b2:49:12:4a:1d:81:71:47:79:8a:61:8c:cf:1d:8e:b2: 5c:67:6b:4a:03:51:1d:cc:d1:93:3b:2e:43:1f:76:c7:48:cf: 95:60:3c:d8:4e:04:e4:5b:f2:22:1c:0d:1d:83:61:a9:82:0b: 5d:25:ca:fd:b7:b6:18:0a:b7:5c:e0:39:f2:e7:f4:54:95:32: 4e:df:c4:c3:11:4c:eb:69:2f:4c:a5:78:37:89:1e:0f:9e:08: a5:eb:ad:8a:0b:e8:56:a2:55:9c:6f:22:fa:36:ab:cd:e1:ef: 92:e9:66:b5:ee:7d:8f:51:47:95:30:cd:e0:20:01:ba:a0:57: 79:65:b6:44:60:a8:e8:e6:4c:b7:a7:3b:d5:8e:44:e9:d3:1f: e6:b0:3f:de:9c:42:71:9e:fc:ca:47:6f:5b:89:9d:3f:53:2e: 87:51:32:85 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWElLZBiIAXZb1bocIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VmZDc1MjktMzhiMS00NzJjLTlkNWItZDg3MzgyZDA4 OGEwMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk ZTllOTBkMmItMDk5Yy00MTUxLThhYjUtMWM4Y2NmY2FkYzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzdBquuK9SbZthIrtT656NgCa1vpPh0G8HI0 G6frvY+LcfXS137OtoBTXMzju2LYGykJXFt4J7Ok+jl3YB4NWUvYxZl7jas2lPt3 mWQGREGXiGBZuWke2jrig5+xUogId8CxTR4iJvaafM3U3lYIMsamJ2VLnkrTmiAS 1VWFbVJTUpSn9nZw2iCREtIKZkC1AgoXFFMNqckZ+0p/8XCzrboH2+73icldqL6u hRthHgF9rEunN98FX9o9pcfWzxJp7ZFuhWRcLsEwyfmbmh9SpV3GuuFsNb4mjh00 7oBsmCm/6h1kPiYInKsH7WtHalQHNeGcboM8qqo56FloPn8ovQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJQ4wEE+A1mON9vqZt4QKpUvagVDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZk NzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODczODJkMDg4YTAvZWJlNzlhNTktNDk0Ny0z NTkxLWFiZjgtM2E5MDQwMmNhYWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2VmZDc1MjktMzhiMS00NzJjLTlk NWItZDg3MzgyZDA4OGEwLzNlZmQ3NTI5LTM4YjEtNDcyYy05ZDViLWQ4NzM4MmQw ODhhMC5jcmwwHwYDVR0jBBgwFoAUW4MicpSIqXhZmzrb3eBIKYdqlAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZkNzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODcz ODJkMDg4YTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgahAEAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAOyS1I6izaoB9rWv1gi5SdEACJK0GRuxryyTaCIq3r5aSI0PLeYIF dnx6HqC362RANGPpkesBpGtDtDvZURxBjIljAXiiU9xLvBWT11yvhpD6rtLMYCzj QCpkKPeySRJKHYFxR3mKYYzPHY6yXGdrSgNRHczRkzsuQx92x0jPlWA82E4E5Fvy IhwNHYNhqYILXSXK/be2GAq3XOA58uf0VJUyTt/EwxFM62kvTKV4N4keD54Ipeut igvoVqJVnG8i+jarzeHvkulmte59j1FHlTDN4CABuqBXeWW2RGCo6OZMt6c71Y5E 6dMf5rA/3pxCcZ78ykdvW4mdP1Muh1EyhQ== -----END CERTIFICATE-----Generated at Sun Apr 6 22:58:03 2025 by rpki-client