$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/740c2fe1-87eb-3c13-86b3-e821960404e9.roa File: 740c2fe1-87eb-3c13-86b3-e821960404e9.roa (raw, json) Hash identifier: 1jmb9auXl5OKFtmKBMOgcR1hZltdx15dMZ6ofmu4L9E= Subject key identifier: 76:69:09:E5:36:48:27:A9:D9:8A:C8:64:6C:44:39:9D:21:F2:70:24 Certificate issuer: /CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d Certificate serial: 010D0C9F43285849F87A92AA5DB23304BEAF4200 Authority key identifier: BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/740c2fe1-87eb-3c13-86b3-e821960404e9.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 14929 IP address blocks: 2604:3000::/32 maxlen: 48 2604:d380::/32 maxlen: 48 2605:6d80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:92:aa:5d:b2:33:04:be:af:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=e33f255c-1cb3-4c57-89cc-7357658d9ecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:29:a8:da:20:79:08:9a:60:0f:62:e2:ab:86: 31:0b:c6:97:10:14:5c:a5:de:67:fe:7f:0f:91:55: 7a:29:20:40:b7:77:0d:aa:70:33:31:28:03:54:4a: 14:ad:4e:01:52:30:32:98:34:74:4a:e4:33:90:43: d2:ff:93:a8:ba:08:0c:9d:c1:64:e4:bc:84:72:63: 1f:be:40:63:58:47:b9:60:be:83:7e:b8:5c:22:56: 3a:5e:28:9c:1a:a4:fe:87:56:f4:bb:1e:7a:e1:e0: 94:30:a4:09:0d:35:13:06:88:af:2e:45:f8:bb:2e: 41:29:a9:a6:b6:78:01:eb:30:f4:05:b0:b5:d3:b0: d8:b4:61:e2:cd:e0:12:a3:ed:6c:b7:a3:f3:42:d2: 2c:cb:ee:25:fe:76:24:7b:cd:12:f5:dd:48:a3:3d: fe:9b:52:05:08:fe:6f:f9:4c:85:ed:cf:b9:8a:88: af:7c:26:0f:da:56:95:1a:d6:8d:ca:b7:71:39:ee: 04:83:98:fd:be:45:4f:bc:e8:0b:cd:87:51:44:bb: 42:2c:50:3a:a3:a8:06:73:76:aa:28:99:fb:61:15: 32:f6:33:5a:4d:8f:67:1d:f7:fb:89:1a:ba:3b:3e: bc:4f:30:89:f7:30:8b:76:77:2c:6e:02:6f:cf:93: c9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:69:09:E5:36:48:27:A9:D9:8A:C8:64:6C:44:39:9D:21:F2:70:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/740c2fe1-87eb-3c13-86b3-e821960404e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl X509v3 Authority Key Identifier: keyid:BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer sbgp-ipAddrBlock: critical IPv6: 2604:3000::/32 2604:d380::/32 2605:6d80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:fe:66:ee:29:84:61:f4:78:56:d6:eb:5f:ae:18:ba:04:ad: 65:0c:65:24:7f:7b:d7:d2:04:ac:bf:81:c0:75:ba:a0:0a:42: 65:89:67:f9:c2:42:87:e2:1e:4c:39:f1:a9:9c:10:3f:1b:a0: 3e:e8:0b:2b:4b:67:d5:65:bc:d9:a8:2e:f8:1a:2b:c5:57:c0: df:cf:69:9f:41:eb:17:eb:60:d7:12:63:0d:57:ea:d5:bf:28: 1a:a9:e1:a7:f7:e8:d1:99:b6:a0:9e:f2:17:7c:2f:01:e4:6e: 2f:a4:17:47:8b:02:75:0a:6d:e8:b7:d2:af:85:27:da:da:0c: ef:a9:2a:0c:cc:d3:e7:a4:69:3f:9d:7b:9b:4d:45:2b:7b:38: 4d:2a:64:7e:24:75:2f:a6:3b:3a:88:c9:2c:52:af:58:f0:6b: 68:b5:e1:95:18:4a:a5:99:65:91:84:ea:2f:7e:36:17:22:38: 6b:30:4f:4a:3f:7a:7f:7a:6d:36:ab:4d:63:1c:dc:6d:e9:45: 73:9b:ce:40:f3:6c:d8:96:ad:fb:00:65:90:4e:13:6e:1f:f3: 4c:27:2b:8b:0d:37:1e:0f:7d:67:88:1c:ef:21:b2:66:3a:17: a4:4f:0d:ee:41:49:7c:e7:b9:31:13:93:5f:15:9d:b5:42:d7: 7d:d2:27:aa -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEn4epKqXbIzBL6vQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGJjNDFkNTUtOWNiZC00MDNlLTlmYTctYTMzMzRmMWVk ZTNkMB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk ZTMzZjI1NWMtMWNiMy00YzU3LTg5Y2MtNzM1NzY1OGQ5ZWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiimo2iB5CJpgD2Liq4YxC8aXEBRcpd5n/n8P kVV6KSBAt3cNqnAzMSgDVEoUrU4BUjAymDR0SuQzkEPS/5OouggMncFk5LyEcmMf vkBjWEe5YL6DfrhcIlY6XiicGqT+h1b0ux564eCUMKQJDTUTBoivLkX4uy5BKamm tngB6zD0BbC107DYtGHizeASo+1st6PzQtIsy+4l/nYke80S9d1Ioz3+m1IFCP5v +UyF7c+5ioivfCYP2laVGtaNyrdxOe4Eg5j9vkVPvOgLzYdRRLtCLFA6o6gGc3aq KJn7YRUy9jNaTY9nHff7iRq6Oz68TzCJ9zCLdncsbgJvz5PJNQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFHZpCeU2SCep2YrIZGxEOZ0h8nAkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYmM0 MWQ1NS05Y2JkLTQwM2UtOWZhNy1hMzMzNGYxZWRlM2QvNzQwYzJmZTEtODdlYi0z YzEzLTg2YjMtZTgyMTk2MDQwNGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGJjNDFkNTUtOWNiZC00MDNlLTlm YTctYTMzMzRmMWVkZTNkL2RiYzQxZDU1LTljYmQtNDAzZS05ZmE3LWEzMzM0ZjFl ZGUzZC5jcmwwHwYDVR0jBBgwFoAUvQmQei2aL1ZlthZM7CRjivLSCZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYmM0MWQ1NS05Y2JkLTQwM2UtOWZhNy1hMzMz NGYxZWRlM2QuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUAJgQwAAMF ACYE04ADBQAmBW2AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAKn+Zu4phGH0eFbW61+uGLoErWUMZSR/e9fS BKy/gcB1uqAKQmWJZ/nCQofiHkw58amcED8boD7oCytLZ9VlvNmoLvgaK8VXwN/P aZ9B6xfrYNcSYw1X6tW/KBqp4af36NGZtqCe8hd8LwHkbi+kF0eLAnUKbei30q+F J9raDO+pKgzM0+ekaT+de5tNRSt7OE0qZH4kdS+mOzqIySxSr1jwa2i14ZUYSqWZ ZZGE6i9+NhciOGswT0o/en96bTarTWMc3G3pRXObzkDzbNiWrfsAZZBOE24f80wn K4sNNx4PfWeIHO8hsmY6F6RPDe5BSXznuTETk18VnbVC133SJ6o= -----END CERTIFICATE-----Generated at Mon Jun 16 18:46:25 2025 by rpki-client