$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/d9d404ae-69ce-38c1-be30-2a3604bc6f00.roa File: d9d404ae-69ce-38c1-be30-2a3604bc6f00.roa (raw, json) Hash identifier: lrKX3m/tckurCXb8ZOBSxBBbvxk4QYXK48t2r8PXWh8= Subject key identifier: 5F:BC:9C:9C:A3:66:3E:C8:03:3F:87:02:7D:F4:2B:DE:93:BF:C1:26 Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F432858490E16C1BF728A272AC2D3C400 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/d9d404ae-69ce-38c1-be30-2a3604bc6f00.roa Signing time: Sun 02 Mar 2025 14:00:52 +0000 ROA not before: Sun 02 Mar 2025 14:00:52 +0000 ROA not after: Sat 31 May 2025 13:00:52 +0000 asID: 12189 IP address blocks: 2607:6000:b00::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0e:16:c1:bf:72:8a:27:2a:c2:d3:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: Mar 2 14:00:52 2025 GMT Not After : May 31 13:00:52 2025 GMT Subject: CN=513d8122-92a2-4167-bfbd-85b54df2f873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:3e:3b:02:6a:79:68:c3:24:65:b7:57:6c:5a: 06:b5:f2:4b:05:eb:58:a6:4e:f4:26:2f:d4:55:a5: 59:74:d2:ca:2c:83:e7:8e:a0:1a:8b:7d:60:15:d9: 2c:e1:fa:42:c0:b7:bb:a9:72:e5:e4:08:64:90:a0: 49:cf:bb:fa:96:96:3d:07:54:c9:2b:7e:bf:07:67: d8:9e:e8:8b:17:6f:33:cf:f7:19:b0:c2:c8:c5:97: 3c:51:f2:64:be:12:69:06:39:57:33:8a:de:3f:ae: 33:c1:1a:93:96:d9:f7:2a:46:97:a8:b9:c6:25:73: a9:3c:8e:df:b4:d4:42:f4:46:bb:6e:06:ab:3e:ca: a4:99:8b:ce:8f:38:5e:52:6b:9f:39:91:a5:2b:e0: 6e:27:f2:ae:8e:c6:3b:60:c5:8f:e8:19:d7:2e:a5: e3:b6:e3:98:77:32:af:3f:d4:62:d9:8d:93:e7:db: ed:8b:fe:98:ee:43:e3:d3:19:73:6e:98:2d:76:36: c4:3c:f4:41:55:bf:ea:d5:eb:0d:64:46:af:81:c7: 55:43:56:a4:ab:7b:3d:40:71:11:c2:db:05:c6:b7: af:7c:e0:72:30:cf:f6:77:94:df:5d:29:be:02:55: de:84:19:88:70:c8:bb:6a:cb:98:b0:07:55:ac:51: 32:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:BC:9C:9C:A3:66:3E:C8:03:3F:87:02:7D:F4:2B:DE:93:BF:C1:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/d9d404ae-69ce-38c1-be30-2a3604bc6f00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv6: 2607:6000:b00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:88:4a:12:52:86:44:cb:20:12:21:88:98:2e:b3:ae:2f:88: 7d:ff:e4:b2:92:70:20:66:42:10:68:91:84:81:a9:94:9b:af: 62:08:4d:0b:29:c9:49:9e:19:42:25:2e:2f:9b:57:0c:b0:74: 3f:ca:b0:92:47:57:33:dc:23:e9:2f:46:1f:98:4d:34:ca:43: fa:2f:79:8f:2b:48:ed:83:17:5f:c1:2e:dd:51:07:b6:89:51: 10:ec:15:52:48:ff:4b:0d:4b:38:5b:8f:3f:36:c7:42:58:56: e0:4e:5a:2c:2b:75:c6:73:51:2f:1b:7f:46:f8:22:45:c4:aa: e2:46:48:45:9c:d9:fa:d0:4a:2a:3d:ba:64:03:b3:1c:0e:9b: 33:8e:1a:1c:57:7c:58:6f:6a:81:40:e8:80:a8:9b:79:59:26: 83:57:e7:4c:cc:83:ac:00:c9:7c:ae:af:c8:85:3f:d7:34:82: 1d:96:15:3f:f7:7d:1e:70:d4:03:9e:fd:2d:e2:b6:61:39:9d: 3c:80:b8:f5:96:49:0a:21:e4:f5:8e:5a:39:7f:ab:42:17:50: e6:df:a4:bf:7c:18:d9:e7:ec:68:d0:1b:5d:fb:1c:18:2e:cf: 4d:c8:bc:01:92:8e:5b:0e:b9:52:28:e6:02:54:af:25:cd:c2: 5f:57:30:be -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkOFsG/coonKsLTxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk NTEzZDgxMjItOTJhMi00MTY3LWJmYmQtODViNTRkZjJmODczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiD47Amp5aMMkZbdXbFoGtfJLBetYpk70Ji/U VaVZdNLKLIPnjqAai31gFdks4fpCwLe7qXLl5AhkkKBJz7v6lpY9B1TJK36/B2fY nuiLF28zz/cZsMLIxZc8UfJkvhJpBjlXM4reP64zwRqTltn3KkaXqLnGJXOpPI7f tNRC9Ea7bgarPsqkmYvOjzheUmufOZGlK+BuJ/KujsY7YMWP6BnXLqXjtuOYdzKv P9Ri2Y2T59vti/6Y7kPj0xlzbpgtdjbEPPRBVb/q1esNZEavgcdVQ1akq3s9QHER wtsFxrevfOByMM/2d5TfXSm+AlXehBmIcMi7asuYsAdVrFEy2QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFF+8nJyjZj7IAz+HAn30K96Tv8EmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvZDlkNDA0YWUtNjljZS0z OGMxLWJlMzAtMmEzNjA0YmM2ZjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgdgAAsw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAQ4hKElKGRMsgEiGImC6zri+Iff/kspJwIGZCEGiRhIGplJuvYghN CynJSZ4ZQiUuL5tXDLB0P8qwkkdXM9wj6S9GH5hNNMpD+i95jytI7YMXX8Eu3VEH tolREOwVUkj/Sw1LOFuPPzbHQlhW4E5aLCt1xnNRLxt/RvgiRcSq4kZIRZzZ+tBK Kj26ZAOzHA6bM44aHFd8WG9qgUDogKibeVkmg1fnTMyDrADJfK6vyIU/1zSCHZYV P/d9HnDUA579LeK2YTmdPIC49ZZJCiHk9Y5aOX+rQhdQ5t+kv3wY2efsaNAbXfsc GC7PTci8AZKOWw65UijmAlSvJc3CX1cwvg== -----END CERTIFICATE-----Generated at Sat Apr 5 23:17:48 2025 by rpki-client