$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/3eeee4d3-e250-340d-9b70-0dfe3a06b37d.roa File: 3eeee4d3-e250-340d-9b70-0dfe3a06b37d.roa (raw, json) Hash identifier: w/6JsEVVLY2gwgoJvpllDfqZx27YZc60AyUiZmXPF+E= Subject key identifier: 8D:17:4C:4B:41:A1:CE:38:26:F9:E5:34:AD:B5:58:B0:2C:01:44:F1 Certificate issuer: /CN=ebff2bbd-fab0-4f48-a625-d53c63f1bbe6 Certificate serial: 010D0C9F43285848DA73B3850531EACE38174350 Authority key identifier: 43:DE:DC:F8:9F:C5:8D:6E:3C:61:F8:80:3F:72:0E:D5:0C:74:A6:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/3eeee4d3-e250-340d-9b70-0dfe3a06b37d.roa Signing time: Wed 12 Feb 2025 02:06:14 +0000 ROA not before: Wed 12 Feb 2025 02:06:14 +0000 ROA not after: Tue 13 May 2025 01:06:14 +0000 asID: 18604 IP address blocks: 2604:1a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:da:73:b3:85:05:31:ea:ce:38:17:43:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebff2bbd-fab0-4f48-a625-d53c63f1bbe6 Validity Not Before: Feb 12 02:06:14 2025 GMT Not After : May 13 01:06:14 2025 GMT Subject: CN=f21e9e35-7efb-4f58-a2ea-4f96a622428d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:17:de:04:59:8d:51:90:e2:00:f0:a1:e9:d1: 63:ad:21:fc:7d:b0:4e:9c:98:e2:08:a2:59:dc:c9: 97:f5:00:a1:0f:67:af:69:06:ac:2e:1e:a7:30:a5: 7e:93:28:60:71:07:3d:31:35:7b:da:aa:72:c2:75: 67:9a:eb:ad:37:a3:6f:10:11:4b:e2:b3:e1:85:d6: 99:e7:25:ab:a9:61:39:59:a1:33:d6:92:77:9d:18: 54:28:53:29:e3:fd:e6:87:a8:20:d3:c8:92:98:63: bc:93:5d:a2:3c:24:e8:f1:64:58:41:92:8f:49:a3: 18:36:75:7e:99:8d:be:f8:a8:47:2f:a5:20:36:64: 00:00:99:34:ed:18:e6:00:81:f1:06:90:0c:7a:9b: 01:1b:df:5e:83:a3:2e:99:ea:1b:f7:97:55:43:32: d5:a1:aa:62:58:d9:d8:73:20:1f:9f:a9:77:4e:b5: 3c:86:9f:90:db:09:7e:f7:65:47:33:5d:77:61:79: 1c:2b:a9:19:6c:c3:1e:f0:aa:50:7c:4e:05:c6:9b: d0:95:d3:ee:e1:1a:73:03:b7:38:4a:83:05:07:60: 5b:df:6d:91:75:3f:39:6d:c1:0d:69:f5:1b:51:ff: df:03:aa:ae:94:88:46:fe:63:b5:e3:10:f5:da:df: 20:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:17:4C:4B:41:A1:CE:38:26:F9:E5:34:AD:B5:58:B0:2C:01:44:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/3eeee4d3-e250-340d-9b70-0dfe3a06b37d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.crl X509v3 Authority Key Identifier: keyid:43:DE:DC:F8:9F:C5:8D:6E:3C:61:F8:80:3F:72:0E:D5:0C:74:A6:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.cer sbgp-ipAddrBlock: critical IPv6: 2604:1a0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:ba:c8:37:ff:e5:a2:89:24:4b:ad:0a:d0:46:e6:ec:dd:ef: 66:c2:2d:f8:41:d5:c9:c9:e1:1f:70:4a:88:57:eb:c4:9b:9e: 2c:5e:89:10:49:a0:f9:d2:14:08:42:96:05:92:ea:67:a0:ee: bf:eb:8b:0a:7e:47:f5:56:f3:ab:da:bf:8a:d1:62:08:a4:74: bb:c3:d7:42:f9:c8:ad:1c:ab:7a:be:2a:18:8f:81:9b:a4:da: c4:9f:46:ca:74:6a:b3:eb:c2:ad:2d:9c:20:dd:59:f7:ae:94: a9:8a:3b:fa:66:51:32:80:42:16:63:43:8b:db:5d:e0:a7:bc: ed:f6:68:47:ae:cc:07:8a:46:44:3d:c1:1f:a0:e7:7f:08:66: 51:4c:7c:1e:5b:7e:5f:e3:d5:d8:de:58:5b:4d:bb:88:09:2c: 12:37:f7:c8:95:05:a0:86:26:6e:0a:10:22:99:fb:7c:92:87: 55:a3:aa:54:2a:bc:15:c4:9f:84:70:e4:2e:4d:37:61:55:4d: 80:37:40:b0:61:e8:59:25:79:f6:2e:13:85:da:19:a1:d0:f0: 1b:24:75:1a:2b:5e:e3:46:3f:5c:d6:19:a2:61:05:b3:ce:2e: fa:38:7d:35:53:82:48:5f:06:61:28:e2:13:7d:fc:be:1c:47: 34:e1:2f:c9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjac7OFBTHqzjgXQ1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWJmZjJiYmQtZmFiMC00ZjQ4LWE2MjUtZDUzYzYzZjFi YmU2MB4XDTI1MDIxMjAyMDYxNFoXDTI1MDUxMzAxMDYxNFowLzEtMCsGA1UEAxMk ZjIxZTllMzUtN2VmYi00ZjU4LWEyZWEtNGY5NmE2MjI0MjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRfeBFmNUZDiAPCh6dFjrSH8fbBOnJjiCKJZ 3MmX9QChD2evaQasLh6nMKV+kyhgcQc9MTV72qpywnVnmuutN6NvEBFL4rPhhdaZ 5yWrqWE5WaEz1pJ3nRhUKFMp4/3mh6gg08iSmGO8k12iPCTo8WRYQZKPSaMYNnV+ mY2++KhHL6UgNmQAAJk07RjmAIHxBpAMepsBG99eg6Mumeob95dVQzLVoapiWNnY cyAfn6l3TrU8hp+Q2wl+92VHM113YXkcK6kZbMMe8KpQfE4FxpvQldPu4RpzA7c4 SoMFB2Bb322RdT85bcENafUbUf/fA6qulIhG/mO14xD12t8g0wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFI0XTEtBoc44JvnlNK21WLAsAUTxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lYmZm MmJiZC1mYWIwLTRmNDgtYTYyNS1kNTNjNjNmMWJiZTYvM2VlZWU0ZDMtZTI1MC0z NDBkLTliNzAtMGRmZTNhMDZiMzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZWJmZjJiYmQtZmFiMC00ZjQ4LWE2 MjUtZDUzYzYzZjFiYmU2L2ViZmYyYmJkLWZhYjAtNGY0OC1hNjI1LWQ1M2M2M2Yx YmJlNi5jcmwwHwYDVR0jBBgwFoAUQ97c+J/FjW48YfiAP3IO1Qx0ppMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9lYmZmMmJiZC1mYWIwLTRmNDgtYTYyNS1kNTNj NjNmMWJiZTYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQBoDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA/usg3/+WiiSRLrQrQRubs3e9mwi34QdXJyeEfcEqIV+vEm54sXokQ SaD50hQIQpYFkupnoO6/64sKfkf1VvOr2r+K0WIIpHS7w9dC+citHKt6vioYj4Gb pNrEn0bKdGqz68KtLZwg3Vn3rpSpijv6ZlEygEIWY0OL213gp7zt9mhHrswHikZE PcEfoOd/CGZRTHweW35f49XY3lhbTbuICSwSN/fIlQWghiZuChAimft8kodVo6pU KrwVxJ+EcOQuTTdhVU2AN0CwYehZJXn2LhOF2hmh0PAbJHUaK17jRj9c1hmiYQWz zi76OH01U4JIXwZhKOITffy+HEc04S/J -----END CERTIFICATE-----Generated at Wed Feb 19 20:43:59 2025 by rpki-client