$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/54268940-4af9-39c9-bd94-1f4f53099856.roa File: 54268940-4af9-39c9-bd94-1f4f53099856.roa (raw, json) Hash identifier: p/evHLde9OnC8TALRm1EVP9gXCG/HkWCgXQnh6p6Yxc= Subject key identifier: 94:0D:27:37:3E:96:84:FE:48:BC:46:71:0B:E2:96:0F:A6:0F:87:CC Certificate issuer: /CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d Certificate serial: 010D0C9F4328584AD936659786AC58D32DDEF180 Authority key identifier: BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/54268940-4af9-39c9-bd94-1f4f53099856.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 5006 IP address blocks: 2604:3000::/32 maxlen: 48 2604:d380::/32 maxlen: 48 2605:6d80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:65:97:86:ac:58:d3:2d:de:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=f179262a-fcd3-43d1-bec5-06afaa826a13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fc:4b:86:12:8f:d8:5f:ad:44:21:8a:40:01: ee:35:16:5d:62:a3:18:1a:cd:09:4c:05:39:fe:0a: f8:05:79:54:c3:a8:39:97:ab:10:47:90:99:f2:da: f6:84:18:9f:2b:ed:eb:58:5f:9b:bc:72:cf:46:d7: 88:f7:68:07:49:a3:ce:b1:31:c0:9d:40:b4:85:dd: c9:f1:28:96:da:aa:73:c0:c6:b7:5d:d4:d4:2b:10: ce:fd:ae:c0:c5:16:99:4d:13:dd:e6:79:b1:e8:98: 97:40:fe:66:0b:87:4d:86:3a:cd:e8:4a:ce:ab:b1: ee:28:24:0e:45:3e:87:dd:56:4a:b8:ff:dc:83:7b: f9:53:a7:7a:67:1e:7d:44:60:c0:e6:a5:28:29:7d: c5:9c:89:52:0f:7e:c7:33:9e:6c:33:e6:bf:11:93: 2e:5d:06:95:79:8b:20:6b:b5:41:a3:93:e0:a1:1b: 87:fb:98:e2:7c:fb:6c:b3:4a:b4:82:86:53:5e:62: 54:d8:dc:77:46:5e:7e:0d:0c:8f:17:ce:bb:ea:6b: be:45:25:32:a2:a9:26:6a:8d:1f:a6:17:ab:14:46: 5a:aa:a1:9b:ee:23:6b:ce:b0:94:f0:3c:0b:5d:08: 8c:23:8b:87:37:45:18:f2:8f:85:7c:fc:06:c5:a4: 4d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:0D:27:37:3E:96:84:FE:48:BC:46:71:0B:E2:96:0F:A6:0F:87:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/54268940-4af9-39c9-bd94-1f4f53099856.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl X509v3 Authority Key Identifier: keyid:BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer sbgp-ipAddrBlock: critical IPv6: 2604:3000::/32 2604:d380::/32 2605:6d80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:fa:59:49:13:7a:99:6c:55:df:80:a7:02:c7:39:c7:6e:bf: 27:b4:b9:79:fe:93:87:e8:65:7b:79:e2:8f:52:48:e8:02:88: 44:07:4b:a3:9e:26:82:d6:d1:a5:57:a2:d6:f6:41:2a:21:23: 1a:d9:60:69:f4:a5:37:4f:c5:ad:ea:19:8e:b7:1c:70:ff:e5: f3:09:34:03:13:e4:49:3e:d9:ef:db:18:7a:47:37:c4:ec:fb: 5f:d5:65:d0:2c:98:4d:b0:8a:c8:5f:50:ec:f6:39:22:2c:f2: 06:7c:8b:47:21:98:3b:87:cc:ed:7f:6a:bb:6f:04:82:de:16: b0:0d:73:86:96:dc:11:af:8c:d5:e1:de:bf:68:7f:6b:bb:66: a5:2a:35:7e:08:80:54:50:18:ae:9d:d5:cd:7b:31:0c:bd:5c: 89:8d:d2:8e:c6:fa:be:5c:6b:e5:5f:57:96:9d:b4:cb:67:30: f4:a2:1a:4a:dd:d0:86:67:a7:82:ad:3f:1d:75:49:7c:e2:31: 22:d6:52:a0:ad:49:34:1c:cd:7d:27:50:a8:05:9c:7e:18:6f: 65:eb:77:42:af:84:0c:80:ec:19:8a:10:89:8f:50:02:cd:63: a4:87:fd:5f:85:b1:fe:21:f8:80:56:01:21:68:9a:85:7b:e6: e9:26:9f:b5 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWErZNmWXhqxY0y3e8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGJjNDFkNTUtOWNiZC00MDNlLTlmYTctYTMzMzRmMWVk ZTNkMB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk ZjE3OTI2MmEtZmNkMy00M2QxLWJlYzUtMDZhZmFhODI2YTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPxLhhKP2F+tRCGKQAHuNRZdYqMYGs0JTAU5 /gr4BXlUw6g5l6sQR5CZ8tr2hBifK+3rWF+bvHLPRteI92gHSaPOsTHAnUC0hd3J 8SiW2qpzwMa3XdTUKxDO/a7AxRaZTRPd5nmx6JiXQP5mC4dNhjrN6ErOq7HuKCQO RT6H3VZKuP/cg3v5U6d6Zx59RGDA5qUoKX3FnIlSD37HM55sM+a/EZMuXQaVeYsg a7VBo5PgoRuH+5jifPtss0q0goZTXmJU2Nx3Rl5+DQyPF8676mu+RSUyoqkmao0f pherFEZaqqGb7iNrzrCU8DwLXQiMI4uHN0UY8o+FfPwGxaRNcQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFJQNJzc+loT+SLxGcQvilg+mD4fMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYmM0 MWQ1NS05Y2JkLTQwM2UtOWZhNy1hMzMzNGYxZWRlM2QvNTQyNjg5NDAtNGFmOS0z OWM5LWJkOTQtMWY0ZjUzMDk5ODU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGJjNDFkNTUtOWNiZC00MDNlLTlm YTctYTMzMzRmMWVkZTNkL2RiYzQxZDU1LTljYmQtNDAzZS05ZmE3LWEzMzM0ZjFl ZGUzZC5jcmwwHwYDVR0jBBgwFoAUvQmQei2aL1ZlthZM7CRjivLSCZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYmM0MWQ1NS05Y2JkLTQwM2UtOWZhNy1hMzMz NGYxZWRlM2QuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUAJgQwAAMF ACYE04ADBQAmBW2AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAHP6WUkTeplsVd+ApwLHOcduvye0uXn+k4fo ZXt54o9SSOgCiEQHS6OeJoLW0aVXotb2QSohIxrZYGn0pTdPxa3qGY63HHD/5fMJ NAMT5Ek+2e/bGHpHN8Ts+1/VZdAsmE2wishfUOz2OSIs8gZ8i0chmDuHzO1/artv BILeFrANc4aW3BGvjNXh3r9of2u7ZqUqNX4IgFRQGK6d1c17MQy9XImN0o7G+r5c a+VfV5adtMtnMPSiGkrd0IZnp4KtPx11SXziMSLWUqCtSTQczX0nUKgFnH4Yb2Xr d0KvhAyA7BmKEImPUALNY6SH/V+Fsf4h+IBWASFomoV75ukmn7U= -----END CERTIFICATE-----Generated at Sat Aug 23 16:29:58 2025 by rpki-client