$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/a3b36418-37a2-34a8-b072-a15f8f21810a.roa File: a3b36418-37a2-34a8-b072-a15f8f21810a.roa (raw, json) Hash identifier: wQ8RABPCFFcIwD91y0lXPWiHGLMEfIyA2cB2qcZofeQ= Subject key identifier: 9B:F4:11:86:68:F7:31:7A:C7:BF:BE:88:32:AE:38:9E:9B:2A:12:F3 Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F432858490E16C1CE9F0146D19A9FBC80 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/a3b36418-37a2-34a8-b072-a15f8f21810a.roa Signing time: Sun 02 Mar 2025 14:00:52 +0000 ROA not before: Sun 02 Mar 2025 14:00:52 +0000 ROA not after: Sat 31 May 2025 13:00:52 +0000 asID: 12189 IP address blocks: 2607:6000:900::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0e:16:c1:ce:9f:01:46:d1:9a:9f:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: Mar 2 14:00:52 2025 GMT Not After : May 31 13:00:52 2025 GMT Subject: CN=8b255e83-b532-4946-8f72-bf3e408fa3a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:56:a9:a1:2e:98:ba:66:bd:03:1e:36:75:a4: eb:98:31:ea:b7:16:36:c8:40:8d:c2:be:26:63:7c: 78:d9:24:e8:59:8e:4b:c6:2b:5b:3f:00:50:a0:bf: 48:e7:63:8e:ea:2e:63:6d:02:65:57:ee:00:6f:36: 21:94:0b:3f:89:17:9a:7a:13:00:dd:2d:7f:71:59: 97:97:e5:d3:24:74:ac:a5:20:be:06:6b:85:14:bc: 29:91:a8:fc:51:61:54:54:18:70:f4:00:1d:ff:b2: 46:32:b8:6f:40:5f:c2:22:b9:c2:98:a3:b4:b6:43: 75:b8:b4:6a:a1:48:1e:b1:96:80:ea:e0:fa:e4:bc: c6:a1:cc:19:de:f9:24:74:b4:3b:c4:50:5f:da:d7: 05:a9:95:34:75:e0:3b:96:31:ce:b8:45:a5:be:b2: 54:ea:fe:dd:18:d3:31:0c:b0:1c:c8:6d:94:85:3e: c5:ac:eb:b8:b5:fc:e1:ef:0a:02:0a:e2:96:ba:75: 26:25:af:67:aa:63:93:ad:ed:dd:df:3b:2b:b5:cb: b5:ae:c4:9a:80:65:32:37:6f:f7:8d:24:6e:10:c3: fe:d7:e2:98:be:5e:14:71:71:4d:3f:ed:3c:ee:37: 14:ec:27:90:a3:2b:f0:af:f7:e1:72:7e:1e:1a:98: 2a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:F4:11:86:68:F7:31:7A:C7:BF:BE:88:32:AE:38:9E:9B:2A:12:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/a3b36418-37a2-34a8-b072-a15f8f21810a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv6: 2607:6000:900::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:2a:93:d9:12:d2:14:65:a3:38:a7:e8:75:1a:69:9e:a8:31: 35:69:34:45:91:09:f6:59:9f:2a:60:53:bf:8e:f4:b5:39:08: 67:30:49:05:95:d4:99:34:8a:32:d2:1f:a4:c6:1b:52:c7:32: 22:35:34:5e:bf:ac:59:78:85:77:db:23:a6:64:22:79:60:56: 78:a7:1e:3f:be:16:3f:5e:15:f1:7f:b2:d6:86:b6:3d:89:34: d8:e8:d7:08:bf:76:0d:df:f0:f6:32:d3:b9:01:21:d3:73:60: ee:d1:f6:93:2a:c1:5a:08:10:19:60:9a:ac:3b:b2:fa:ad:75: ca:bc:ed:27:7f:f5:7d:cf:13:3f:d6:74:35:df:1a:34:f7:9b: 2d:f6:1c:9d:2c:14:44:e7:a7:bb:9b:9f:ee:16:fe:84:16:74: 0f:a7:5d:89:ab:ca:cc:d7:9b:77:0e:30:c2:28:37:26:18:ab: 60:f3:e1:6e:2b:dc:fd:c2:f0:95:90:01:d5:f6:5f:ac:0e:08: 6b:f7:95:f5:7a:3d:04:b2:fd:44:ff:5c:91:02:4e:be:bb:f3: 15:ec:60:5c:88:19:5b:eb:d6:8a:33:8e:6e:c8:64:76:ce:36: 59:d2:4a:72:8b:35:8d:9e:65:cb:a9:21:3b:5b:92:5f:e2:92: e6:2b:77:91 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkOFsHOnwFG0ZqfvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk OGIyNTVlODMtYjUzMi00OTQ2LThmNzItYmYzZTQwOGZhM2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5FapoS6Yuma9Ax42daTrmDHqtxY2yECNwr4m Y3x42SToWY5LxitbPwBQoL9I52OO6i5jbQJlV+4AbzYhlAs/iReaehMA3S1/cVmX l+XTJHSspSC+BmuFFLwpkaj8UWFUVBhw9AAd/7JGMrhvQF/CIrnCmKO0tkN1uLRq oUgesZaA6uD65LzGocwZ3vkkdLQ7xFBf2tcFqZU0deA7ljHOuEWlvrJU6v7dGNMx DLAcyG2UhT7FrOu4tfzh7woCCuKWunUmJa9nqmOTre3d3zsrtcu1rsSagGUyN2/3 jSRuEMP+1+KYvl4UcXFNP+087jcU7CeQoyvwr/fhcn4eGpgquQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJv0EYZo9zF6x7++iDKuOJ6bKhLzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvYTNiMzY0MTgtMzdhMi0z NGE4LWIwNzItYTE1ZjhmMjE4MTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgdgAAkw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAniqT2RLSFGWjOKfodRppnqgxNWk0RZEJ9lmfKmBTv470tTkIZzBJ BZXUmTSKMtIfpMYbUscyIjU0Xr+sWXiFd9sjpmQieWBWeKceP74WP14V8X+y1oa2 PYk02OjXCL92Dd/w9jLTuQEh03Ng7tH2kyrBWggQGWCarDuy+q11yrztJ3/1fc8T P9Z0Nd8aNPebLfYcnSwUROenu5uf7hb+hBZ0D6ddiavKzNebdw4wwig3JhirYPPh bivc/cLwlZAB1fZfrA4Ia/eV9Xo9BLL9RP9ckQJOvrvzFexgXIgZW+vWijOObshk ds42WdJKcos1jZ5ly6khO1uSX+KS5it3kQ== -----END CERTIFICATE-----Generated at Sat Apr 5 20:34:56 2025 by rpki-client