$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/54268940-4af9-39c9-bd94-1f4f53099856.roa File: 54268940-4af9-39c9-bd94-1f4f53099856.roa (raw, json) Hash identifier: wPLiLtGLTELPYNBLX59QKLfb1cNyRnH93hNp35SoJc8= Subject key identifier: 21:29:6E:32:13:93:CB:02:E4:26:86:5B:9B:CB:3E:79:A6:72:84:96 Certificate issuer: /CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d Certificate serial: 010D0C9F4328584919418DF07FC1F52C71AF6700 Authority key identifier: BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/54268940-4af9-39c9-bd94-1f4f53099856.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 5006 IP address blocks: 2604:3000::/32 maxlen: 48 2604:d380::/32 maxlen: 48 2605:6d80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:8d:f0:7f:c1:f5:2c:71:af:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=bb6d2b96-2125-4202-8fb5-24140ee5dc87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:21:ab:44:56:32:9a:75:83:16:f6:f1:12:52: 94:ce:2a:6d:c8:82:46:b5:e1:78:18:f0:f1:52:2f: 94:6f:34:26:45:ee:cb:57:25:bd:19:8a:44:e2:87: cf:54:c6:1a:72:ff:5d:09:d7:f3:82:a9:f5:1b:de: 5a:8c:63:57:8d:61:8d:b0:c5:79:ae:06:3f:88:57: 57:15:13:02:50:7e:c7:56:54:37:43:63:1a:93:7c: cb:99:d4:54:01:0e:cf:26:74:a0:42:aa:16:dd:2f: 77:78:a4:e0:59:13:30:54:5d:33:57:ce:9d:c1:05: 97:e0:eb:fa:4c:15:68:76:65:5c:09:19:b8:3a:06: 21:74:6d:cc:19:aa:40:79:d3:04:26:9a:52:a0:7e: 19:99:8f:c1:b3:36:13:58:1a:4c:53:5d:93:68:a5: 65:fc:59:32:55:c9:96:05:8a:c4:ea:58:6b:66:f1: 9a:e3:c2:ca:f9:c7:b6:8b:a5:88:98:04:2c:48:23: 84:c7:4e:fe:ce:b6:79:a1:7a:da:69:55:24:c2:3c: f1:b0:50:94:b5:78:d3:cf:23:a4:a7:99:11:1f:61: a8:f4:e4:d4:98:ae:76:53:6c:15:04:5d:6b:82:70: 2f:9e:48:cb:10:30:0f:e7:87:fb:3c:44:da:9f:68: 5c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:29:6E:32:13:93:CB:02:E4:26:86:5B:9B:CB:3E:79:A6:72:84:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/54268940-4af9-39c9-bd94-1f4f53099856.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl X509v3 Authority Key Identifier: keyid:BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer sbgp-ipAddrBlock: critical IPv6: 2604:3000::/32 2604:d380::/32 2605:6d80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:6b:42:35:f4:13:5f:13:e1:c3:91:55:d3:57:c0:89:ef:63: 5a:82:20:6f:4c:bc:37:b7:6a:e0:2b:a4:e2:eb:58:ba:f1:1b: 73:43:a0:fc:a2:15:2b:d3:79:1c:71:be:34:ee:a5:f0:3b:d7: dc:9e:73:1a:6e:2d:c5:3e:8e:e7:88:5e:5e:ed:c5:fa:48:40: 99:a0:17:61:e3:28:57:13:1e:34:a7:df:67:64:f2:df:f0:31: 8d:42:7c:d3:09:e9:5c:3a:c8:1e:2b:da:45:76:73:88:5d:9c: f3:c1:aa:31:9f:07:4e:17:3b:da:47:49:5c:ed:23:e5:25:bc: 5a:ab:14:58:54:59:91:2d:81:ca:95:6e:e4:ff:1a:5c:c5:6f: 4d:dd:21:ee:b7:d2:e9:ce:e4:70:dc:3f:14:9c:1f:76:f0:21: a8:78:b6:47:0e:cb:58:fa:29:7e:90:99:d1:f3:c4:de:ac:bf: 1f:8c:40:c6:40:5f:23:4d:72:36:63:7f:8f:66:6e:b9:37:f4: ee:ca:ee:88:3c:02:7b:d5:a2:3c:67:af:2a:1a:3a:3e:de:e0: 18:ca:9e:e1:6a:b0:4b:5e:5e:df:54:a9:cb:1c:94:5e:a2:cc: 7b:fb:1a:a4:fa:82:36:19:d2:c7:0a:2c:d3:71:10:19:dd:fd: fe:16:3a:a7 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEkZQY3wf8H1LHGvZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGJjNDFkNTUtOWNiZC00MDNlLTlmYTctYTMzMzRmMWVk ZTNkMB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk YmI2ZDJiOTYtMjEyNS00MjAyLThmYjUtMjQxNDBlZTVkYzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyGrRFYymnWDFvbxElKUziptyIJGteF4GPDx Ui+UbzQmRe7LVyW9GYpE4ofPVMYacv9dCdfzgqn1G95ajGNXjWGNsMV5rgY/iFdX FRMCUH7HVlQ3Q2Mak3zLmdRUAQ7PJnSgQqoW3S93eKTgWRMwVF0zV86dwQWX4Ov6 TBVodmVcCRm4OgYhdG3MGapAedMEJppSoH4ZmY/BszYTWBpMU12TaKVl/FkyVcmW BYrE6lhrZvGa48LK+ce2i6WImAQsSCOEx07+zrZ5oXraaVUkwjzxsFCUtXjTzyOk p5kRH2Go9OTUmK52U2wVBF1rgnAvnkjLEDAP54f7PETan2hcLQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFCEpbjITk8sC5CaGW5vLPnmmcoSWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYmM0 MWQ1NS05Y2JkLTQwM2UtOWZhNy1hMzMzNGYxZWRlM2QvNTQyNjg5NDAtNGFmOS0z OWM5LWJkOTQtMWY0ZjUzMDk5ODU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGJjNDFkNTUtOWNiZC00MDNlLTlm YTctYTMzMzRmMWVkZTNkL2RiYzQxZDU1LTljYmQtNDAzZS05ZmE3LWEzMzM0ZjFl ZGUzZC5jcmwwHwYDVR0jBBgwFoAUvQmQei2aL1ZlthZM7CRjivLSCZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYmM0MWQ1NS05Y2JkLTQwM2UtOWZhNy1hMzMz NGYxZWRlM2QuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUAJgQwAAMF ACYE04ADBQAmBW2AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAANrQjX0E18T4cORVdNXwInvY1qCIG9MvDe3 auArpOLrWLrxG3NDoPyiFSvTeRxxvjTupfA719yecxpuLcU+jueIXl7txfpIQJmg F2HjKFcTHjSn32dk8t/wMY1CfNMJ6Vw6yB4r2kV2c4hdnPPBqjGfB04XO9pHSVzt I+UlvFqrFFhUWZEtgcqVbuT/GlzFb03dIe630unO5HDcPxScH3bwIah4tkcOy1j6 KX6QmdHzxN6svx+MQMZAXyNNcjZjf49mbrk39O7K7og8AnvVojxnryoaOj7e4BjK nuFqsEteXt9UqcsclF6izHv7GqT6gjYZ0scKLNNxEBnd/f4WOqc= -----END CERTIFICATE-----Generated at Sat Apr 5 11:18:27 2025 by rpki-client