$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/1ceb3d1b-b649-306a-b995-cef65268e7ee.roa File: 1ceb3d1b-b649-306a-b995-cef65268e7ee.roa (raw, json) Hash identifier: FZXyKnk51tbXXlpsyV/jvqL7Vw1AjKDNBO3o3J9Ga40= Subject key identifier: 87:EA:14:C3:47:AB:93:66:E8:5C:35:31:21:43:3E:1A:FB:FC:76:48 Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F432858494E2EAC073BBD8E2AD06A7580 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/1ceb3d1b-b649-306a-b995-cef65268e7ee.roa Signing time: Tue 25 Mar 2025 13:00:51 +0000 ROA not before: Tue 25 Mar 2025 13:00:51 +0000 ROA not after: Mon 23 Jun 2025 13:00:51 +0000 asID: 400672 IP address blocks: 2607:6003:230d::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:2e:ac:07:3b:bd:8e:2a:d0:6a:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: Mar 25 13:00:51 2025 GMT Not After : Jun 23 13:00:51 2025 GMT Subject: CN=a8b3a251-dcea-4a4d-b9f0-816aa4891481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9d:55:e7:df:53:6c:11:1b:8d:8a:8f:06:27: c4:bf:da:08:55:69:5f:7c:4a:59:f3:68:c2:eb:92: ca:f5:dd:fc:8c:2a:28:b4:a9:54:11:e1:96:ae:6e: 0b:e8:c2:40:ab:58:b1:8c:00:79:aa:f5:ab:27:0f: ff:d6:2c:fe:fc:95:22:18:67:3b:39:70:40:fe:94: b5:c1:53:95:01:13:11:77:bb:17:e5:16:d7:31:5d: 19:9b:69:7b:b6:24:72:74:6c:26:37:6a:5f:a1:58: c2:6d:6e:30:ca:1d:f0:44:50:a0:43:fa:eb:06:b9: 6e:be:af:72:37:07:bf:27:8a:a0:34:99:68:6e:ac: c4:e9:f3:9b:31:f4:b4:d3:52:d0:5b:13:ef:39:36: 69:60:b6:a7:86:81:e3:dd:53:42:6d:f0:93:f1:0a: ec:fa:9e:00:e9:08:68:7f:d7:ee:75:6f:f9:59:70: 10:3f:a3:ae:ff:51:01:b3:6d:5e:52:11:68:eb:6c: 50:af:5d:a1:6c:ac:c0:56:b0:07:a4:19:92:2e:fe: 47:39:02:0c:ba:06:dc:a3:69:26:3f:f6:84:05:7d: 08:aa:66:16:4c:38:20:fd:ee:91:85:bf:f9:ff:ec: a2:56:45:97:0c:db:cc:3a:86:64:8b:c9:ee:35:53: e1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:EA:14:C3:47:AB:93:66:E8:5C:35:31:21:43:3E:1A:FB:FC:76:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/1ceb3d1b-b649-306a-b995-cef65268e7ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv6: 2607:6003:230d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:17:e8:9c:95:e4:bc:f7:02:36:59:4a:80:f9:86:05:d0:a3: f9:fe:f0:19:27:55:e9:ef:20:ff:1b:3b:59:19:dd:f9:96:3f: ca:11:3a:8c:55:0c:17:be:c2:8a:37:13:29:1c:02:c2:f9:c3: 8f:ac:83:0d:fd:08:94:51:f1:09:e4:15:2a:f9:98:64:2c:18: 43:98:24:8d:b5:8f:f2:09:fe:e2:a9:ea:e7:17:51:5e:0a:75: 0e:36:11:04:cd:8f:d6:b9:67:be:0c:1e:69:25:f0:e6:cb:ea: 04:6d:81:43:45:3f:b5:18:d9:a4:74:2b:6a:0e:6b:87:5f:0f: 6d:b0:ca:d3:e5:a3:6d:be:32:49:23:a1:28:b4:87:1a:40:8f: 2c:f4:31:61:9d:36:60:ef:df:d2:ad:34:18:74:51:07:a5:7f: 92:2c:df:7e:2e:4d:eb:86:0c:d5:f8:b1:dc:09:52:5f:77:d2: 57:b7:93:13:0e:d3:e9:ea:3b:39:60:c3:89:db:7c:1d:57:01: 9f:ab:12:6d:9a:bb:a1:8a:6a:be:37:dd:42:8f:57:f4:eb:5e: 13:38:15:93:41:bd:3d:25:38:48:71:ea:d8:c8:93:ed:11:65: 24:d3:77:52:3f:90:d9:b3:2a:0b:33:77:8d:b5:a8:73:4d:c8: b0:96:fa:da -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElOLqwHO72OKtBqdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk YThiM2EyNTEtZGNlYS00YTRkLWI5ZjAtODE2YWE0ODkxNDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJ1V599TbBEbjYqPBifEv9oIVWlffEpZ82jC 65LK9d38jCootKlUEeGWrm4L6MJAq1ixjAB5qvWrJw//1iz+/JUiGGc7OXBA/pS1 wVOVARMRd7sX5RbXMV0Zm2l7tiRydGwmN2pfoVjCbW4wyh3wRFCgQ/rrBrluvq9y Nwe/J4qgNJlobqzE6fObMfS001LQWxPvOTZpYLanhoHj3VNCbfCT8Qrs+p4A6Qho f9fudW/5WXAQP6Ou/1EBs21eUhFo62xQr12hbKzAVrAHpBmSLv5HOQIMugbco2km P/aEBX0IqmYWTDgg/e6Rhb/5/+yiVkWXDNvMOoZki8nuNVPhkQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIfqFMNHq5Nm6Fw1MSFDPhr7/HZIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvMWNlYjNkMWItYjY0OS0z MDZhLWI5OTUtY2VmNjUyNjhlN2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgdgAyMN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHUX6JyV5Lz3AjZZSoD5hgXQo/n+8BknVenvIP8bO1kZ3fmWP8oR OoxVDBe+woo3EykcAsL5w4+sgw39CJRR8QnkFSr5mGQsGEOYJI21j/IJ/uKp6ucX UV4KdQ42EQTNj9a5Z74MHmkl8ObL6gRtgUNFP7UY2aR0K2oOa4dfD22wytPlo22+ MkkjoSi0hxpAjyz0MWGdNmDv39KtNBh0UQelf5Is334uTeuGDNX4sdwJUl930le3 kxMO0+nqOzlgw4nbfB1XAZ+rEm2au6GKar433UKPV/TrXhM4FZNBvT0lOEhx6tjI k+0RZSTTd1I/kNmzKgszd421qHNNyLCW+to= -----END CERTIFICATE-----Generated at Tue Apr 8 12:36:05 2025 by rpki-client