$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/706a369f-74a7-310b-b9f6-4d2f898435d9.roa File: 706a369f-74a7-310b-b9f6-4d2f898435d9.roa (raw, json) Hash identifier: gvv/XQChBmjGoB0T1sOw19AiLfEuJFZ7Zs7BPvJXEkM= Subject key identifier: E4:50:B4:1E:5C:B4:37:90:98:EE:AF:47:77:16:94:C9:66:00:0C:B7 Certificate issuer: /CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d Certificate serial: 010D0C9F43285849F87A927AA2B8D1E7C6015820 Authority key identifier: BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/706a369f-74a7-310b-b9f6-4d2f898435d9.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 40160 IP address blocks: 2604:3000::/32 maxlen: 48 2604:d380::/32 maxlen: 48 2605:6d80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:92:7a:a2:b8:d1:e7:c6:01:58:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=0fce978e-4dd4-423f-b8ed-2968e5142012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:77:d7:1f:e9:5c:8b:cc:bd:9b:b6:24:00:d9: 33:4d:56:1d:59:b9:02:50:1b:84:c2:55:a4:5b:16: 11:55:2f:4f:cc:1a:ed:e1:49:d3:76:b2:1d:6c:2e: 0f:b3:fe:d6:58:b6:be:62:b1:b7:58:77:3e:2c:f2: c7:a9:93:38:99:6e:b9:14:52:9e:a8:7c:70:86:b2: 33:a5:44:76:1a:d5:e6:b8:b7:01:de:e6:94:b9:10: 0c:6f:ac:64:5f:d4:bf:65:e5:1c:99:ad:45:8a:8e: 6a:d5:9b:0e:34:a9:0d:b0:40:f1:00:95:39:84:00: 0d:45:ea:59:f6:8f:22:89:ee:6d:60:96:be:2b:54: ad:a5:4b:ef:9e:e3:db:91:68:58:e5:c1:ed:eb:a4: c9:5f:be:e8:83:75:da:b2:1d:74:b2:88:75:0a:76: a4:35:9f:9a:08:45:c3:4f:ee:11:f5:53:27:f9:09: c0:42:00:a0:a6:dc:05:55:4b:fc:38:5e:fb:14:e5: 50:37:a1:9e:98:93:c7:ae:51:01:da:b5:b1:37:44: 2b:a6:d8:a9:74:92:ac:e8:ac:12:95:dc:d4:c6:41: 92:4d:d3:f9:e9:d1:8c:eb:74:44:e1:83:3a:0b:aa: 69:8a:4f:af:ab:e5:20:57:00:1b:45:be:1a:5e:53: b4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:50:B4:1E:5C:B4:37:90:98:EE:AF:47:77:16:94:C9:66:00:0C:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/706a369f-74a7-310b-b9f6-4d2f898435d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl X509v3 Authority Key Identifier: keyid:BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer sbgp-ipAddrBlock: critical IPv6: 2604:3000::/32 2604:d380::/32 2605:6d80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:e7:0f:6e:3b:51:85:62:fd:2b:13:a7:ae:39:8b:32:88:3a: 5e:0c:a2:e2:50:af:f9:83:e6:4b:df:4f:68:f1:c7:22:a6:f1: 4b:c4:65:57:9e:72:94:6f:10:c8:69:ae:a9:12:58:69:b5:ae: 1b:ec:d3:fe:2b:92:75:ab:8d:90:f3:0b:4c:2b:e5:cd:6f:94: 75:b3:8a:84:c2:5a:56:80:6d:55:55:90:83:1b:80:77:7b:f3: d3:fa:57:8b:da:e5:50:c8:a6:3d:11:9f:9d:d3:ff:72:a2:d8: b5:81:9d:88:84:6c:4a:64:b2:b7:24:32:90:98:d7:27:ac:fd: db:92:39:97:85:46:d5:24:ae:63:60:dc:79:8d:93:5d:af:01: bf:a2:7d:31:0d:6c:e5:d8:a9:81:d2:25:f3:0c:f0:2c:dd:47: db:e3:e0:d6:bb:df:47:79:0f:7a:05:55:f8:f0:62:99:1e:41: a7:97:77:f3:97:a7:b2:e8:2e:18:cf:cd:f6:f7:11:77:f3:4e: ff:77:50:5d:88:ee:55:fd:be:51:90:1f:97:00:86:17:14:06: 46:26:86:6f:c6:e2:bc:96:f7:c2:51:3d:53:17:dd:8e:a8:60: 7c:89:44:0c:3d:aa:91:0d:a8:46:25:ff:9c:6c:1a:cd:88:79: 82:6d:ee:5e -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEn4epJ6orjR58YBWCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGJjNDFkNTUtOWNiZC00MDNlLTlmYTctYTMzMzRmMWVk ZTNkMB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk MGZjZTk3OGUtNGRkNC00MjNmLWI4ZWQtMjk2OGU1MTQyMDEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHfXH+lci8y9m7YkANkzTVYdWbkCUBuEwlWk WxYRVS9PzBrt4UnTdrIdbC4Ps/7WWLa+YrG3WHc+LPLHqZM4mW65FFKeqHxwhrIz pUR2GtXmuLcB3uaUuRAMb6xkX9S/ZeUcma1Fio5q1ZsONKkNsEDxAJU5hAANRepZ 9o8iie5tYJa+K1StpUvvnuPbkWhY5cHt66TJX77og3Xash10soh1CnakNZ+aCEXD T+4R9VMn+QnAQgCgptwFVUv8OF77FOVQN6GemJPHrlEB2rWxN0QrptipdJKs6KwS ldzUxkGSTdP56dGM63RE4YM6C6ppik+vq+UgVwAbRb4aXlO0zwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFORQtB5ctDeQmO6vR3cWlMlmAAy3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYmM0 MWQ1NS05Y2JkLTQwM2UtOWZhNy1hMzMzNGYxZWRlM2QvNzA2YTM2OWYtNzRhNy0z MTBiLWI5ZjYtNGQyZjg5ODQzNWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGJjNDFkNTUtOWNiZC00MDNlLTlm YTctYTMzMzRmMWVkZTNkL2RiYzQxZDU1LTljYmQtNDAzZS05ZmE3LWEzMzM0ZjFl ZGUzZC5jcmwwHwYDVR0jBBgwFoAUvQmQei2aL1ZlthZM7CRjivLSCZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYmM0MWQ1NS05Y2JkLTQwM2UtOWZhNy1hMzMz NGYxZWRlM2QuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUAJgQwAAMF ACYE04ADBQAmBW2AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAHPnD247UYVi/SsTp645izKIOl4MouJQr/mD 5kvfT2jxxyKm8UvEZVeecpRvEMhprqkSWGm1rhvs0/4rknWrjZDzC0wr5c1vlHWz ioTCWlaAbVVVkIMbgHd789P6V4va5VDIpj0Rn53T/3Ki2LWBnYiEbEpksrckMpCY 1yes/duSOZeFRtUkrmNg3HmNk12vAb+ifTENbOXYqYHSJfMM8CzdR9vj4Na730d5 D3oFVfjwYpkeQaeXd/OXp7LoLhjPzfb3EXfzTv93UF2I7lX9vlGQH5cAhhcUBkYm hm/G4ryW98JRPVMX3Y6oYHyJRAw9qpENqEYl/5xsGs2IeYJt7l4= -----END CERTIFICATE-----Generated at Sun Jun 15 17:33:03 2025 by rpki-client