$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/309a1a50-a5ba-37b9-8b4d-0cc4d42332cc.roa File: 309a1a50-a5ba-37b9-8b4d-0cc4d42332cc.roa (raw, json) Hash identifier: Oe4D2RZEG3Iw0ikczzi1yvBOy99vBOK12ZySjKAZKtE= Subject key identifier: 3F:BE:11:7D:DF:A6:73:65:CA:73:2E:21:A9:B5:2D:76:11:C3:04:19 Certificate issuer: /CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d Certificate serial: 010D0C9F4328584919418E296E1150D53B263800 Authority key identifier: BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/309a1a50-a5ba-37b9-8b4d-0cc4d42332cc.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 1347 IP address blocks: 2604:3000::/32 maxlen: 48 2604:d380::/32 maxlen: 48 2605:6d80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:8e:29:6e:11:50:d5:3b:26:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=9170c8ee-2bb0-4823-8eca-8f89dc122945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6e:d8:42:8a:f4:42:4c:65:a5:2e:9c:6d:df: 03:83:74:c7:a2:49:6b:5c:f5:51:32:59:d2:49:e9: 71:b0:ad:40:e3:5d:d2:c6:f9:d9:32:04:70:43:25: c8:8e:73:ca:20:ef:83:fa:e4:e8:52:05:16:ae:18: ed:fd:6d:bd:b6:8b:18:7b:02:55:bf:bc:2f:9a:76: e0:b4:a5:0e:00:1b:c1:87:d5:98:48:ae:9a:30:e6: 8c:58:fa:18:16:bd:45:b8:94:ff:4d:27:8e:9d:1a: c8:33:86:1d:4f:85:23:02:b3:b0:f9:45:bc:46:b4: f5:50:d1:a9:0e:66:06:f8:65:d6:95:0c:8b:33:a1: b7:f8:41:8e:4c:da:46:a3:4f:a2:ec:40:ba:6a:08: 9f:29:4f:35:de:48:85:ee:16:4f:25:bf:e4:3a:8a: 6b:7e:a7:d4:06:7b:8d:0b:12:b8:b6:ab:08:bc:8c: 18:56:83:07:c1:fa:99:ed:f4:dd:e8:c7:50:31:6c: 29:d9:c9:15:d3:89:31:d3:de:8a:8a:2c:d4:97:64: 95:29:28:cd:e1:0c:7e:97:79:6a:ab:c9:37:7f:a5: b3:1e:c7:30:a4:7a:34:4a:22:41:02:9e:6f:0f:27: 86:90:dd:c8:67:66:b7:96:ef:c3:95:5d:9c:53:6c: d6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:BE:11:7D:DF:A6:73:65:CA:73:2E:21:A9:B5:2D:76:11:C3:04:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/309a1a50-a5ba-37b9-8b4d-0cc4d42332cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl X509v3 Authority Key Identifier: keyid:BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer sbgp-ipAddrBlock: critical IPv6: 2604:3000::/32 2604:d380::/32 2605:6d80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:4e:0f:41:43:b5:ea:64:cb:c5:35:d3:4d:8f:e2:19:8f:e0: 0d:23:37:f0:ce:0d:be:62:0c:f7:b0:4c:2d:76:b6:b3:d8:74: f1:b2:c7:f7:31:49:e6:df:9a:ec:fb:e8:87:55:8c:18:04:a5: 23:03:e7:bf:15:3f:ad:b0:c1:b1:c7:72:6e:22:ac:f6:c3:82: 75:f8:e9:18:b1:cc:5d:c1:88:73:7d:59:d7:54:be:c3:58:44: ef:b2:a4:48:eb:50:ff:cd:e7:54:3c:25:70:0c:ca:72:1e:be: 50:2f:02:72:be:7d:a0:66:77:e9:24:8f:ad:5b:79:c7:7a:ba: a0:1e:c7:ef:9a:eb:bc:46:b0:95:78:20:0a:14:02:75:81:19: 88:6b:cf:42:fd:83:8b:85:e1:b0:22:0c:f4:8d:a2:de:88:50: 92:9b:6b:25:d7:c4:bd:60:e7:a5:d7:8a:e8:54:fd:49:5d:06: 25:b7:7d:4f:a0:34:20:b0:fe:97:e8:78:a8:cb:94:17:75:71: 9b:f1:a4:f8:6a:60:96:19:97:c8:4b:7c:ac:54:70:61:01:19: 13:c3:dd:0a:0f:49:23:e2:a1:90:05:67:99:06:22:56:b8:31: c4:bd:ca:1c:99:96:22:ee:d4:07:1a:69:39:79:44:5e:81:d2: 7a:36:2a:7b -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEkZQY4pbhFQ1TsmOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGJjNDFkNTUtOWNiZC00MDNlLTlmYTctYTMzMzRmMWVk ZTNkMB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk OTE3MGM4ZWUtMmJiMC00ODIzLThlY2EtOGY4OWRjMTIyOTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArW7YQor0QkxlpS6cbd8Dg3THoklrXPVRMlnS SelxsK1A413SxvnZMgRwQyXIjnPKIO+D+uToUgUWrhjt/W29tosYewJVv7wvmnbg tKUOABvBh9WYSK6aMOaMWPoYFr1FuJT/TSeOnRrIM4YdT4UjArOw+UW8RrT1UNGp DmYG+GXWlQyLM6G3+EGOTNpGo0+i7EC6agifKU813kiF7hZPJb/kOoprfqfUBnuN CxK4tqsIvIwYVoMHwfqZ7fTd6MdQMWwp2ckV04kx096KiizUl2SVKSjN4Qx+l3lq q8k3f6WzHscwpHo0SiJBAp5vDyeGkN3IZ2a3lu/DlV2cU2zWywIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFD++EX3fpnNlynMuIam1LXYRwwQZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYmM0 MWQ1NS05Y2JkLTQwM2UtOWZhNy1hMzMzNGYxZWRlM2QvMzA5YTFhNTAtYTViYS0z N2I5LThiNGQtMGNjNGQ0MjMzMmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGJjNDFkNTUtOWNiZC00MDNlLTlm YTctYTMzMzRmMWVkZTNkL2RiYzQxZDU1LTljYmQtNDAzZS05ZmE3LWEzMzM0ZjFl ZGUzZC5jcmwwHwYDVR0jBBgwFoAUvQmQei2aL1ZlthZM7CRjivLSCZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYmM0MWQ1NS05Y2JkLTQwM2UtOWZhNy1hMzMz NGYxZWRlM2QuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUAJgQwAAMF ACYE04ADBQAmBW2AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBABROD0FDtepky8U1002P4hmP4A0jN/DODb5i DPewTC12trPYdPGyx/cxSebfmuz76IdVjBgEpSMD578VP62wwbHHcm4irPbDgnX4 6RixzF3BiHN9WddUvsNYRO+ypEjrUP/N51Q8JXAMynIevlAvAnK+faBmd+kkj61b ecd6uqAex++a67xGsJV4IAoUAnWBGYhrz0L9g4uF4bAiDPSNot6IUJKbayXXxL1g 56XXiuhU/UldBiW3fU+gNCCw/pfoeKjLlBd1cZvxpPhqYJYZl8hLfKxUcGEBGRPD 3QoPSSPioZAFZ5kGIla4McS9yhyZliLu1AcaaTl5RF6B0no2Kns= -----END CERTIFICATE-----Generated at Sat Apr 5 11:11:38 2025 by rpki-client