$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/309a1a50-a5ba-37b9-8b4d-0cc4d42332cc.roa File: 309a1a50-a5ba-37b9-8b4d-0cc4d42332cc.roa (raw, json) Hash identifier: 1V5eTLu3EO0Q03mL3BrloPRwYf5QjwMHAFQxlaT2MUI= Subject key identifier: F2:BD:29:30:04:E1:FE:72:5E:FF:EB:2E:33:45:B6:FF:0B:CF:B8:39 Certificate issuer: /CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d Certificate serial: 010D0C9F43285849F87A92B874DA101A52D5CB40 Authority key identifier: BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/309a1a50-a5ba-37b9-8b4d-0cc4d42332cc.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 1347 IP address blocks: 2604:3000::/32 maxlen: 48 2604:d380::/32 maxlen: 48 2605:6d80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:92:b8:74:da:10:1a:52:d5:cb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=49e79308-9bdd-4a64-a32c-75041c43e4fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:84:95:f8:4b:1e:35:ed:c2:29:e1:cb:69:d1: e3:6b:b5:e2:1e:a0:a7:e1:45:de:d5:6a:44:56:1a: 1a:5e:2d:6e:38:86:5c:c6:cb:85:5a:d2:69:1a:d8: d1:3f:f3:df:4c:d5:e1:3f:62:a2:46:74:d8:53:76: d5:c1:7e:8e:0f:da:df:7c:fc:21:4a:e5:60:10:04: 13:47:61:1a:d5:ab:9c:4b:b2:9b:06:e6:09:3c:5e: dd:44:db:be:0b:de:44:0f:d0:3a:0c:39:83:6a:4d: ea:3e:8b:12:fc:e1:3c:85:55:43:b5:82:d2:e2:41: 00:59:9a:09:98:71:d2:39:43:0a:ef:94:23:c5:ad: e3:c1:65:f7:f3:e8:83:97:8e:c3:50:df:c7:87:2e: a7:18:d0:41:c1:ec:98:c2:63:0f:10:56:29:8f:45: 91:fa:56:ab:31:a2:d8:d5:16:40:be:2a:91:73:61: 49:22:57:aa:4a:87:08:39:ae:72:d3:df:4e:30:7d: 62:9f:09:e2:7e:ad:bd:2e:43:e1:e5:ef:c7:db:7c: d4:ca:14:12:54:33:11:41:0b:d4:e7:cf:13:ca:74: 70:08:6f:80:37:19:f7:65:0e:4a:55:26:dc:55:5f: 17:ec:cc:21:d8:de:d9:96:94:03:4b:35:46:0c:ab: ea:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:BD:29:30:04:E1:FE:72:5E:FF:EB:2E:33:45:B6:FF:0B:CF:B8:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/309a1a50-a5ba-37b9-8b4d-0cc4d42332cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl X509v3 Authority Key Identifier: keyid:BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer sbgp-ipAddrBlock: critical IPv6: 2604:3000::/32 2604:d380::/32 2605:6d80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:96:2e:3b:78:e9:e1:06:45:d5:9f:18:5e:2c:53:bd:8c:9a: c4:cb:8f:a6:bd:89:1f:d0:4d:08:c1:c0:23:bb:d4:77:b8:7e: 5a:9b:ab:f1:78:fc:b5:e0:be:76:2a:a0:1d:85:65:02:0e:cc: 2c:84:d5:8c:3d:20:03:ad:26:e0:5d:5e:c6:7e:4c:94:d8:6d: f9:eb:47:64:3b:81:df:2b:55:08:73:fd:44:0a:59:b0:f5:dd: 8a:54:b1:85:e6:9c:bb:b2:8a:fd:b8:d0:66:92:1e:c2:26:3a: d1:fc:87:d7:5c:cc:fb:7c:fc:d9:8d:12:b4:36:53:ed:14:2e: 1b:aa:8d:5d:0f:d1:55:9c:68:9d:56:c3:b1:12:21:47:35:f9: 8a:36:9d:84:73:9c:c8:7e:8a:5e:af:0c:0b:cf:7e:aa:e7:08: b4:20:68:cc:5c:a6:cf:a0:fd:53:33:1b:48:58:67:4a:3d:05: dd:7e:b0:bd:df:22:31:e9:4c:69:5e:cc:90:2f:b4:ff:39:7b: 08:78:c5:eb:52:13:dd:95:01:84:8a:f8:1e:72:ab:53:c9:e9: c0:a4:82:90:43:94:1c:e5:24:71:c7:c4:ba:aa:30:dd:04:87: 10:6f:65:8f:e9:eb:0e:96:07:a5:6b:b7:65:d2:f6:3d:27:f1: 31:aa:b5:fa -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEn4epK4dNoQGlLVy0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGJjNDFkNTUtOWNiZC00MDNlLTlmYTctYTMzMzRmMWVk ZTNkMB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk NDllNzkzMDgtOWJkZC00YTY0LWEzMmMtNzUwNDFjNDNlNGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYSV+EseNe3CKeHLadHja7XiHqCn4UXe1WpE VhoaXi1uOIZcxsuFWtJpGtjRP/PfTNXhP2KiRnTYU3bVwX6OD9rffPwhSuVgEAQT R2Ea1aucS7KbBuYJPF7dRNu+C95ED9A6DDmDak3qPosS/OE8hVVDtYLS4kEAWZoJ mHHSOUMK75Qjxa3jwWX38+iDl47DUN/Hhy6nGNBBweyYwmMPEFYpj0WR+larMaLY 1RZAviqRc2FJIleqSocIOa5y099OMH1inwnifq29LkPh5e/H23zUyhQSVDMRQQvU 588TynRwCG+ANxn3ZQ5KVSbcVV8X7Mwh2N7ZlpQDSzVGDKvqTwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFPK9KTAE4f5yXv/rLjNFtv8Lz7g5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYmM0 MWQ1NS05Y2JkLTQwM2UtOWZhNy1hMzMzNGYxZWRlM2QvMzA5YTFhNTAtYTViYS0z N2I5LThiNGQtMGNjNGQ0MjMzMmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGJjNDFkNTUtOWNiZC00MDNlLTlm YTctYTMzMzRmMWVkZTNkL2RiYzQxZDU1LTljYmQtNDAzZS05ZmE3LWEzMzM0ZjFl ZGUzZC5jcmwwHwYDVR0jBBgwFoAUvQmQei2aL1ZlthZM7CRjivLSCZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYmM0MWQ1NS05Y2JkLTQwM2UtOWZhNy1hMzMz NGYxZWRlM2QuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUAJgQwAAMF ACYE04ADBQAmBW2AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAHSWLjt46eEGRdWfGF4sU72MmsTLj6a9iR/Q TQjBwCO71He4flqbq/F4/LXgvnYqoB2FZQIOzCyE1Yw9IAOtJuBdXsZ+TJTYbfnr R2Q7gd8rVQhz/UQKWbD13YpUsYXmnLuyiv240GaSHsImOtH8h9dczPt8/NmNErQ2 U+0ULhuqjV0P0VWcaJ1Ww7ESIUc1+Yo2nYRznMh+il6vDAvPfqrnCLQgaMxcps+g /VMzG0hYZ0o9Bd1+sL3fIjHpTGlezJAvtP85ewh4xetSE92VAYSK+B5yq1PJ6cCk gpBDlBzlJHHHxLqqMN0EhxBvZY/p6w6WB6Vrt2XS9j0n8TGqtfo= -----END CERTIFICATE-----Generated at Sun Jun 15 17:47:23 2025 by rpki-client