$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/740c2fe1-87eb-3c13-86b3-e821960404e9.roa File: 740c2fe1-87eb-3c13-86b3-e821960404e9.roa (raw, json) Hash identifier: /dqC+Lji9wWqcvU07CsWDsYW2pskqjQHqxPU2ai2+0I= Subject key identifier: 15:E3:EA:AC:8C:2A:AF:AB:6F:FA:7C:A6:33:7F:E6:48:78:7F:B1:EC Certificate issuer: /CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d Certificate serial: 010D0C9F4328584919418E085A9EA649F1263980 Authority key identifier: BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/740c2fe1-87eb-3c13-86b3-e821960404e9.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 14929 IP address blocks: 2604:3000::/32 maxlen: 48 2604:d380::/32 maxlen: 48 2605:6d80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:8e:08:5a:9e:a6:49:f1:26:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=e3680f59-1896-4739-8573-348931cf1546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8a:31:b3:58:fa:e2:fd:84:07:3b:0b:6c:35: ae:6e:9c:a3:2a:05:d2:d5:79:25:2b:63:42:be:c1: b0:c9:07:6a:80:fa:0d:1f:4d:d4:65:60:1f:f4:df: 77:1a:b4:e3:b9:6d:a7:b8:fc:db:35:83:21:4f:e7: 39:66:d6:ec:28:58:e7:ea:c9:16:b7:2c:af:96:8d: 16:b0:92:03:4e:34:5f:59:9b:39:14:d7:cb:fa:a4: ee:34:5f:7a:da:80:eb:53:4d:2d:e0:35:03:e7:68: cd:3f:65:38:09:71:d5:75:f4:cf:08:e5:40:9e:78: ff:10:98:7b:9c:02:20:df:22:7e:e4:12:28:5c:30: 73:4c:2d:9f:13:35:b7:81:c8:5a:26:1c:97:da:d8: 8f:eb:38:85:3d:91:88:c1:47:e2:36:2c:3b:95:29: 2d:c8:bf:80:9d:d2:09:b3:de:ac:b4:ec:b1:ad:a0: 58:3a:a4:7b:b0:84:ee:97:61:f3:08:f6:77:9b:53: 78:84:b6:4a:8d:dd:d8:77:b9:a7:ee:b2:50:5d:27: 99:c4:96:c7:c4:83:f0:e1:95:69:7b:87:65:70:d6: 6f:1c:1f:a8:e9:f5:45:73:aa:b7:12:8e:9e:d1:63: a5:91:d2:41:a7:6c:aa:d7:05:e1:76:46:a4:da:18: c4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:E3:EA:AC:8C:2A:AF:AB:6F:FA:7C:A6:33:7F:E6:48:78:7F:B1:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/740c2fe1-87eb-3c13-86b3-e821960404e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl X509v3 Authority Key Identifier: keyid:BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer sbgp-ipAddrBlock: critical IPv6: 2604:3000::/32 2604:d380::/32 2605:6d80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:8e:14:82:6f:08:43:a2:23:38:6c:5d:19:ad:52:42:79:9f: 24:f5:a7:f0:33:5f:56:0e:40:1a:2a:79:c4:8c:8d:2c:86:27: 5b:90:22:f0:64:fc:53:b9:a3:34:15:39:94:95:91:44:48:b4: 08:22:4f:ec:50:0c:9f:4f:54:c0:55:86:41:19:cb:d1:62:7e: f4:a2:1e:d9:f4:98:55:8f:8f:68:73:20:fc:cc:a4:8a:d7:35: 26:e0:f7:d8:95:3d:81:dc:40:20:41:1c:53:cc:7f:48:b9:b7: e8:4e:43:28:2e:0f:4f:c7:f9:0c:5f:26:cc:5f:ff:a0:bf:b0: 6f:23:c5:8d:a9:88:21:22:f5:bb:97:55:85:32:ae:63:86:3d: e9:2b:2f:38:93:50:db:b7:cc:1e:0e:b3:32:c0:dc:54:f8:78: 66:c7:b0:d7:d2:6c:f1:5a:ba:10:a1:29:ac:59:d7:a7:35:4f: 63:1c:44:b6:6f:48:ce:9a:f1:4d:69:f2:b7:a1:43:e2:2b:1a: d9:2c:d7:ac:b4:b1:34:3a:3c:64:ad:11:70:36:fc:3b:a0:22: 72:c9:7c:2f:40:ab:83:45:6c:5d:43:0b:a4:a3:a1:9b:8a:5c: f0:cd:7e:5d:40:6f:ca:8f:53:a8:2b:8d:5f:6f:a7:97:ee:c9: 72:6c:c0:7b -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEkZQY4IWp6mSfEmOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGJjNDFkNTUtOWNiZC00MDNlLTlmYTctYTMzMzRmMWVk ZTNkMB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk ZTM2ODBmNTktMTg5Ni00NzM5LTg1NzMtMzQ4OTMxY2YxNTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIoxs1j64v2EBzsLbDWubpyjKgXS1XklK2NC vsGwyQdqgPoNH03UZWAf9N93GrTjuW2nuPzbNYMhT+c5ZtbsKFjn6skWtyyvlo0W sJIDTjRfWZs5FNfL+qTuNF962oDrU00t4DUD52jNP2U4CXHVdfTPCOVAnnj/EJh7 nAIg3yJ+5BIoXDBzTC2fEzW3gchaJhyX2tiP6ziFPZGIwUfiNiw7lSktyL+AndIJ s96stOyxraBYOqR7sITul2HzCPZ3m1N4hLZKjd3Yd7mn7rJQXSeZxJbHxIPw4ZVp e4dlcNZvHB+o6fVFc6q3Eo6e0WOlkdJBp2yq1wXhdkak2hjEnQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFBXj6qyMKq+rb/p8pjN/5kh4f7HsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYmM0 MWQ1NS05Y2JkLTQwM2UtOWZhNy1hMzMzNGYxZWRlM2QvNzQwYzJmZTEtODdlYi0z YzEzLTg2YjMtZTgyMTk2MDQwNGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGJjNDFkNTUtOWNiZC00MDNlLTlm YTctYTMzMzRmMWVkZTNkL2RiYzQxZDU1LTljYmQtNDAzZS05ZmE3LWEzMzM0ZjFl ZGUzZC5jcmwwHwYDVR0jBBgwFoAUvQmQei2aL1ZlthZM7CRjivLSCZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYmM0MWQ1NS05Y2JkLTQwM2UtOWZhNy1hMzMz NGYxZWRlM2QuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUAJgQwAAMF ACYE04ADBQAmBW2AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAFmOFIJvCEOiIzhsXRmtUkJ5nyT1p/AzX1YO QBoqecSMjSyGJ1uQIvBk/FO5ozQVOZSVkURItAgiT+xQDJ9PVMBVhkEZy9FifvSi Htn0mFWPj2hzIPzMpIrXNSbg99iVPYHcQCBBHFPMf0i5t+hOQyguD0/H+QxfJsxf /6C/sG8jxY2piCEi9buXVYUyrmOGPekrLziTUNu3zB4OszLA3FT4eGbHsNfSbPFa uhChKaxZ16c1T2McRLZvSM6a8U1p8rehQ+IrGtks16y0sTQ6PGStEXA2/DugInLJ fC9Aq4NFbF1DC6SjoZuKXPDNfl1Ab8qPU6grjV9vp5fuyXJswHs= -----END CERTIFICATE-----Generated at Sat Apr 5 11:14:37 2025 by rpki-client