$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/54268940-4af9-39c9-bd94-1f4f53099856.roa File: 54268940-4af9-39c9-bd94-1f4f53099856.roa (raw, json) Hash identifier: NO1zfkyNo3rjQ+uE7E6mLEjxEbQcxmkX0A8RYxUvoi4= Subject key identifier: FC:5D:91:A5:02:98:1F:EB:D9:F8:81:54:1B:05:A4:88:19:C4:A7:28 Certificate issuer: /CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d Certificate serial: 010D0C9F43285849F87A929879611311B35E7540 Authority key identifier: BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/54268940-4af9-39c9-bd94-1f4f53099856.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 5006 IP address blocks: 2604:3000::/32 maxlen: 48 2604:d380::/32 maxlen: 48 2605:6d80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:92:98:79:61:13:11:b3:5e:75:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=702c0ae5-8961-4dc9-8915-755bb943dab9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b1:63:da:84:d7:40:5e:56:88:41:c4:45:74: 45:fc:ba:aa:d7:12:ec:2e:cb:00:82:f7:bb:2e:ef: c0:68:ea:fd:87:63:f2:49:f6:e3:58:34:24:fe:1d: ee:70:0f:2f:e6:f0:1f:81:d1:f2:54:c4:5f:73:81: ec:c9:c0:fa:ea:da:a2:bb:5a:37:64:90:4d:5e:9d: bd:96:df:f1:30:b1:58:53:a8:d8:45:72:98:fb:c3: c3:29:ce:ea:1f:86:48:94:b2:33:cf:07:7b:02:7c: 11:47:c9:0a:e2:06:6c:c2:69:2f:a6:fe:33:20:02: 5e:4b:6f:07:e3:7e:59:8a:1a:d6:7b:bd:92:ca:69: 95:13:61:df:8e:e9:6c:cf:db:b2:75:42:de:28:41: 03:39:3d:e5:a8:01:db:65:0e:f2:a4:bf:12:ef:ce: 97:c3:12:60:eb:88:e0:4c:0a:28:60:6a:49:12:bd: 42:a6:27:36:3f:70:a2:3e:0f:73:b0:6e:26:0a:54: d2:52:14:da:f2:64:43:78:db:c2:a4:3d:02:29:56: 29:50:09:ff:56:3d:91:1b:7e:87:41:00:73:ad:6b: 54:f8:74:b1:f1:53:95:87:be:fc:1e:cb:5b:04:73: 71:24:71:4e:21:c3:a0:2a:e7:06:1b:7a:96:c2:88: de:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:5D:91:A5:02:98:1F:EB:D9:F8:81:54:1B:05:A4:88:19:C4:A7:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/54268940-4af9-39c9-bd94-1f4f53099856.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl X509v3 Authority Key Identifier: keyid:BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer sbgp-ipAddrBlock: critical IPv6: 2604:3000::/32 2604:d380::/32 2605:6d80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:aa:6b:f0:fb:1e:d7:4a:34:37:0b:58:85:79:88:99:0f:06: 10:15:ee:71:18:49:b1:81:93:3b:e1:50:40:8b:60:34:a4:a9: fa:50:60:d2:8b:3c:fa:dc:cf:79:ee:90:6c:da:e6:ca:81:7c: d6:b1:45:d4:da:14:e7:18:55:af:b4:d6:c6:d2:a3:19:4d:1a: a4:ac:35:d0:5f:0f:a1:63:f6:73:b2:08:cc:ae:4f:81:bf:cd: 36:49:ac:83:fd:cf:89:2b:d8:53:a3:e0:b2:6b:1f:25:d2:57: e5:91:80:e4:04:b9:5e:42:e4:1f:55:e2:c5:8d:e3:6f:e4:d3: 4c:2b:92:8f:77:c8:af:cf:45:4e:51:d7:6d:d8:cf:11:f1:d6: b6:a1:8d:74:67:2f:c2:dd:89:3d:85:7c:15:26:c0:62:0a:ec: 4d:27:ed:a8:90:ea:3a:8b:4e:12:83:44:89:c1:8a:de:81:94: 04:2b:bb:7b:98:09:e9:f0:e3:87:2d:54:ca:b3:4b:7b:e1:93: 5c:16:46:0b:47:a5:0c:b6:83:23:f5:31:45:a5:57:3b:55:18: 15:00:c3:ad:bf:76:dc:50:5f:b7:96:7f:64:61:e4:09:00:8a: 90:3b:50:20:a3:16:8a:f4:2c:fc:22:cc:82:17:af:f3:48:20: 50:5f:ec:3c -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEn4epKYeWETEbNedUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGJjNDFkNTUtOWNiZC00MDNlLTlmYTctYTMzMzRmMWVk ZTNkMB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk NzAyYzBhZTUtODk2MS00ZGM5LTg5MTUtNzU1YmI5NDNkYWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rFj2oTXQF5WiEHERXRF/Lqq1xLsLssAgve7 Lu/AaOr9h2PySfbjWDQk/h3ucA8v5vAfgdHyVMRfc4HsycD66tqiu1o3ZJBNXp29 lt/xMLFYU6jYRXKY+8PDKc7qH4ZIlLIzzwd7AnwRR8kK4gZswmkvpv4zIAJeS28H 435ZihrWe72SymmVE2Hfjulsz9uydULeKEEDOT3lqAHbZQ7ypL8S786XwxJg64jg TAooYGpJEr1Cpic2P3CiPg9zsG4mClTSUhTa8mRDeNvCpD0CKVYpUAn/Vj2RG36H QQBzrWtU+HSx8VOVh778HstbBHNxJHFOIcOgKucGG3qWwoje6QIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFPxdkaUCmB/r2fiBVBsFpIgZxKcoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYmM0 MWQ1NS05Y2JkLTQwM2UtOWZhNy1hMzMzNGYxZWRlM2QvNTQyNjg5NDAtNGFmOS0z OWM5LWJkOTQtMWY0ZjUzMDk5ODU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGJjNDFkNTUtOWNiZC00MDNlLTlm YTctYTMzMzRmMWVkZTNkL2RiYzQxZDU1LTljYmQtNDAzZS05ZmE3LWEzMzM0ZjFl ZGUzZC5jcmwwHwYDVR0jBBgwFoAUvQmQei2aL1ZlthZM7CRjivLSCZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYmM0MWQ1NS05Y2JkLTQwM2UtOWZhNy1hMzMz NGYxZWRlM2QuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUAJgQwAAMF ACYE04ADBQAmBW2AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAGyqa/D7HtdKNDcLWIV5iJkPBhAV7nEYSbGB kzvhUECLYDSkqfpQYNKLPPrcz3nukGza5sqBfNaxRdTaFOcYVa+01sbSoxlNGqSs NdBfD6Fj9nOyCMyuT4G/zTZJrIP9z4kr2FOj4LJrHyXSV+WRgOQEuV5C5B9V4sWN 42/k00wrko93yK/PRU5R123YzxHx1rahjXRnL8LdiT2FfBUmwGIK7E0n7aiQ6jqL ThKDRInBit6BlAQru3uYCenw44ctVMqzS3vhk1wWRgtHpQy2gyP1MUWlVztVGBUA w62/dtxQX7eWf2Rh5AkAipA7UCCjFor0LPwizIIXr/NIIFBf7Dw= -----END CERTIFICATE-----Generated at Mon Jun 16 14:47:20 2025 by rpki-client