$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/309a1a50-a5ba-37b9-8b4d-0cc4d42332cc.roa File: 309a1a50-a5ba-37b9-8b4d-0cc4d42332cc.roa (raw, json) Hash identifier: qr7wOyj9ha1e1d7wiM8coZs47XrjDpGT5LH65Aqnf8w= Subject key identifier: D8:AA:C5:50:28:0D:0E:0E:71:84:07:6E:08:D9:80:13:C4:62:FD:E4 Certificate issuer: /CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d Certificate serial: 010D0C9F4328584BBA104B11414CFD98B1E1EA80 Authority key identifier: BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/309a1a50-a5ba-37b9-8b4d-0cc4d42332cc.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 1347 IP address blocks: 2604:3000::/32 maxlen: 48 2604:d380::/32 maxlen: 48 2605:6d80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:4b:11:41:4c:fd:98:b1:e1:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=0c85a796-2764-4d72-bc62-562c93a2334a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:bf:7e:6c:40:ba:a3:4d:3e:8f:58:e6:35:f9: f9:53:7d:29:15:84:42:d9:8f:aa:fb:c4:a6:5b:a0: a7:97:6b:5d:e1:70:72:76:a6:32:b3:29:7a:6b:e9: 02:0f:67:40:71:93:f6:42:5c:3a:83:d6:60:ec:ab: 1f:ce:48:57:16:35:70:4f:54:da:c4:53:d0:3b:45: f1:01:c3:30:41:e4:39:e2:c3:f5:14:07:69:f6:23: b8:68:8b:92:90:5c:bb:44:93:d1:63:a5:a1:d3:51: 4f:3d:eb:bd:75:20:2e:cd:8a:ec:6f:a9:c7:7c:f8: e0:58:13:bf:83:85:ae:8f:ee:43:95:2e:19:79:fc: 68:63:3b:0e:8e:a6:d2:d1:67:df:dc:9c:06:94:ce: 86:3b:c2:ae:21:60:89:b6:35:c2:7f:ce:46:fc:57: e5:7a:4f:ee:64:8e:7d:a7:a5:41:47:44:82:f1:1f: 13:bf:08:d3:6b:f7:20:c3:ee:8d:4b:38:fa:c6:42: 61:72:35:bb:94:2d:67:11:40:0e:d1:74:3a:a4:dc: 25:a2:14:22:a4:ed:28:48:46:85:71:dc:21:7e:96: 8a:36:20:5e:6c:76:3d:6e:7a:b4:10:2a:16:00:20: e8:6d:0f:15:2c:84:cb:9a:a5:2f:3a:bf:67:7f:ba: 63:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:AA:C5:50:28:0D:0E:0E:71:84:07:6E:08:D9:80:13:C4:62:FD:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/309a1a50-a5ba-37b9-8b4d-0cc4d42332cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl X509v3 Authority Key Identifier: keyid:BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer sbgp-ipAddrBlock: critical IPv6: 2604:3000::/32 2604:d380::/32 2605:6d80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:2c:9e:a8:5f:c2:7f:54:0b:b6:9d:75:7b:22:da:00:f1:c9: 53:8a:24:28:97:8a:75:35:e7:6a:35:29:a2:4b:09:fa:2c:5c: 2a:72:54:49:db:02:25:ef:97:2c:57:20:c3:66:4a:ab:e6:d9: 40:53:0a:39:06:b1:91:ba:91:10:76:0a:05:70:a0:f2:50:b3: 4a:c9:c0:d8:f8:0e:d4:9b:50:5a:57:30:39:5c:cb:9d:30:be: be:24:78:5a:75:79:96:ea:d4:6b:01:3f:39:3f:f8:00:a8:2f: d2:3b:73:9a:df:73:3c:49:7b:d8:cd:41:5c:55:94:c2:b0:b3: 86:29:cf:5b:fe:91:63:d3:87:93:83:2d:a3:19:c2:44:a3:03: ee:c1:ed:0f:51:21:32:8a:a4:63:56:97:7c:1e:5d:19:97:29: 96:ad:cb:ec:5f:bf:06:90:67:23:90:e4:4d:c6:77:a1:c6:99: cc:93:ce:44:04:0e:e0:e5:2e:15:63:ac:d2:d7:0a:a9:e0:9f: c3:05:ad:4f:d5:2c:27:e8:40:5b:11:7b:9b:2e:86:e5:d0:d3: 5d:47:0a:d3:9c:9f:98:b8:5f:9d:b6:70:79:e5:29:e7:20:6a: 99:6b:a1:46:f4:04:cb:0d:81:82:75:20:9d:aa:43:61:09:2f: 6b:6b:af:31 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEu6EEsRQUz9mLHh6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGJjNDFkNTUtOWNiZC00MDNlLTlmYTctYTMzMzRmMWVk ZTNkMB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk MGM4NWE3OTYtMjc2NC00ZDcyLWJjNjItNTYyYzkzYTIzMzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgr9+bEC6o00+j1jmNfn5U30pFYRC2Y+q+8Sm W6Cnl2td4XBydqYysyl6a+kCD2dAcZP2Qlw6g9Zg7KsfzkhXFjVwT1TaxFPQO0Xx AcMwQeQ54sP1FAdp9iO4aIuSkFy7RJPRY6Wh01FPPeu9dSAuzYrsb6nHfPjgWBO/ g4Wuj+5DlS4ZefxoYzsOjqbS0Wff3JwGlM6GO8KuIWCJtjXCf85G/Fflek/uZI59 p6VBR0SC8R8TvwjTa/cgw+6NSzj6xkJhcjW7lC1nEUAO0XQ6pNwlohQipO0oSEaF cdwhfpaKNiBebHY9bnq0ECoWACDobQ8VLITLmqUvOr9nf7pjPQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFNiqxVAoDQ4OcYQHbgjZgBPEYv3kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYmM0 MWQ1NS05Y2JkLTQwM2UtOWZhNy1hMzMzNGYxZWRlM2QvMzA5YTFhNTAtYTViYS0z N2I5LThiNGQtMGNjNGQ0MjMzMmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGJjNDFkNTUtOWNiZC00MDNlLTlm YTctYTMzMzRmMWVkZTNkL2RiYzQxZDU1LTljYmQtNDAzZS05ZmE3LWEzMzM0ZjFl ZGUzZC5jcmwwHwYDVR0jBBgwFoAUvQmQei2aL1ZlthZM7CRjivLSCZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYmM0MWQ1NS05Y2JkLTQwM2UtOWZhNy1hMzMz NGYxZWRlM2QuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUAJgQwAAMF ACYE04ADBQAmBW2AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBADAsnqhfwn9UC7addXsi2gDxyVOKJCiXinU1 52o1KaJLCfosXCpyVEnbAiXvlyxXIMNmSqvm2UBTCjkGsZG6kRB2CgVwoPJQs0rJ wNj4DtSbUFpXMDlcy50wvr4keFp1eZbq1GsBPzk/+ACoL9I7c5rfczxJe9jNQVxV lMKws4Ypz1v+kWPTh5ODLaMZwkSjA+7B7Q9RITKKpGNWl3weXRmXKZaty+xfvwaQ ZyOQ5E3Gd6HGmcyTzkQEDuDlLhVjrNLXCqngn8MFrU/VLCfoQFsRe5suhuXQ011H CtOcn5i4X522cHnlKecgaplroUb0BMsNgYJ1IJ2qQ2EJL2trrzE= -----END CERTIFICATE-----Generated at Wed Nov 5 09:00:59 2025 by rpki-client