$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/740c2fe1-87eb-3c13-86b3-e821960404e9.roa File: 740c2fe1-87eb-3c13-86b3-e821960404e9.roa (raw, json) Hash identifier: O8Tcmp339Ih+ar1EvEHngDjyxvBtADRC3i2m9ZjTVKc= Subject key identifier: 99:B2:CF:9F:61:E2:A4:43:8E:62:F3:26:17:2F:8F:98:B2:51:72:19 Certificate issuer: /CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d Certificate serial: 010D0C9F4328584AD93665A84C3AD09C70DB3EA5 Authority key identifier: BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/740c2fe1-87eb-3c13-86b3-e821960404e9.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 14929 IP address blocks: 2604:3000::/32 maxlen: 48 2604:d380::/32 maxlen: 48 2605:6d80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:65:a8:4c:3a:d0:9c:70:db:3e:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=19120089-feaa-489a-bf71-122e930df33e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:48:72:51:62:af:a0:58:e5:4e:af:7e:93:70: 3b:21:00:a2:30:e2:92:16:02:b2:de:38:bc:2b:36: 91:ce:a6:eb:01:92:d4:07:8d:68:db:5c:41:58:3f: 09:f8:d1:0c:f2:52:b5:e4:d2:c1:1b:63:7d:bf:a0: e6:0b:4f:a2:60:ae:57:b8:15:b7:41:3b:e0:20:ce: 91:c9:45:f5:f5:93:8d:6c:5c:a7:03:4d:ce:e6:dc: cb:47:53:63:36:12:48:7e:88:f1:23:f1:73:60:4a: 9c:66:76:b8:ed:9e:19:f4:24:d8:b2:b6:7c:f0:63: f7:93:f6:39:e0:e0:b1:a6:a5:b6:43:b6:15:91:0b: 2f:a6:51:ad:59:c8:b0:db:60:66:e0:e5:6f:8e:99: 43:b6:9f:da:8d:99:4b:ef:05:a4:cf:5a:f9:4a:5b: 5e:09:29:a9:b6:3a:cc:5c:f6:d2:00:fd:57:65:68: ef:76:1d:e0:a8:90:56:e1:0d:91:43:6f:f7:f6:41: 71:9c:90:39:d8:11:55:f6:4f:3f:31:7b:3f:6e:c1: d7:e4:65:88:af:13:46:a8:37:d2:f5:53:8e:d8:c1: 04:86:06:74:88:8e:db:02:f4:f8:b8:56:3a:c9:a4: bc:9c:f2:d8:4c:6d:ef:3a:16:f4:e3:2b:18:39:52: 70:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:B2:CF:9F:61:E2:A4:43:8E:62:F3:26:17:2F:8F:98:B2:51:72:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/740c2fe1-87eb-3c13-86b3-e821960404e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl X509v3 Authority Key Identifier: keyid:BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer sbgp-ipAddrBlock: critical IPv6: 2604:3000::/32 2604:d380::/32 2605:6d80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:c0:eb:64:d9:aa:e3:8f:6d:0a:79:3d:3b:41:6b:8f:2f:3e: 5c:a0:2d:00:fb:34:79:a6:87:cf:30:f1:d9:c7:0d:15:a8:bd: 37:0d:c0:7b:86:28:b2:03:c0:67:0b:11:76:2e:28:a9:cc:3d: 8f:a5:73:87:7b:05:f0:db:a7:a8:bb:8e:72:d2:7b:53:46:44: f9:2a:78:cd:fa:3b:32:51:8c:4f:89:49:04:4c:0b:3d:7b:76: 0d:d9:f0:ef:c7:b5:3f:fe:57:98:3f:a9:72:af:b7:f8:b2:e4: 15:3d:3c:ec:eb:ca:94:f4:54:bb:18:93:d2:76:18:42:4c:e4: 67:88:15:ca:40:2f:f0:2c:0d:46:75:86:fa:e9:b4:ee:c1:96: 09:33:6c:a4:d8:75:56:20:f9:0c:2e:62:2f:64:ba:e2:67:d5: 72:59:94:27:ed:92:3a:c3:1a:9a:e5:c4:b8:4c:c4:87:4d:47: 0f:94:53:35:21:ed:b4:b6:6d:6c:d6:75:43:c6:e6:cc:85:1c: d2:1d:a8:d1:d1:ae:da:3e:e2:d0:e8:8b:15:a1:d5:23:e9:93: 5a:79:01:6c:af:a0:f7:dd:0e:51:ae:d7:94:15:a3:5b:67:e5: 24:7d:10:13:49:d5:91:d1:26:12:3f:97:c7:42:ce:a0:7b:d9: 31:db:1f:97 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWErZNmWoTDrQnHDbPqUwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGJjNDFkNTUtOWNiZC00MDNlLTlmYTctYTMzMzRmMWVk ZTNkMB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk MTkxMjAwODktZmVhYS00ODlhLWJmNzEtMTIyZTkzMGRmMzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEhyUWKvoFjlTq9+k3A7IQCiMOKSFgKy3ji8 KzaRzqbrAZLUB41o21xBWD8J+NEM8lK15NLBG2N9v6DmC0+iYK5XuBW3QTvgIM6R yUX19ZONbFynA03O5tzLR1NjNhJIfojxI/FzYEqcZna47Z4Z9CTYsrZ88GP3k/Y5 4OCxpqW2Q7YVkQsvplGtWciw22Bm4OVvjplDtp/ajZlL7wWkz1r5SlteCSmptjrM XPbSAP1XZWjvdh3gqJBW4Q2RQ2/39kFxnJA52BFV9k8/MXs/bsHX5GWIrxNGqDfS 9VOO2MEEhgZ0iI7bAvT4uFY6yaS8nPLYTG3vOhb04ysYOVJw2QIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFJmyz59h4qRDjmLzJhcvj5iyUXIZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYmM0 MWQ1NS05Y2JkLTQwM2UtOWZhNy1hMzMzNGYxZWRlM2QvNzQwYzJmZTEtODdlYi0z YzEzLTg2YjMtZTgyMTk2MDQwNGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGJjNDFkNTUtOWNiZC00MDNlLTlm YTctYTMzMzRmMWVkZTNkL2RiYzQxZDU1LTljYmQtNDAzZS05ZmE3LWEzMzM0ZjFl ZGUzZC5jcmwwHwYDVR0jBBgwFoAUvQmQei2aL1ZlthZM7CRjivLSCZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYmM0MWQ1NS05Y2JkLTQwM2UtOWZhNy1hMzMz NGYxZWRlM2QuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUAJgQwAAMF ACYE04ADBQAmBW2AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAB3A62TZquOPbQp5PTtBa48vPlygLQD7NHmm h88w8dnHDRWovTcNwHuGKLIDwGcLEXYuKKnMPY+lc4d7BfDbp6i7jnLSe1NGRPkq eM36OzJRjE+JSQRMCz17dg3Z8O/HtT/+V5g/qXKvt/iy5BU9POzrypT0VLsYk9J2 GEJM5GeIFcpAL/AsDUZ1hvrptO7BlgkzbKTYdVYg+QwuYi9kuuJn1XJZlCftkjrD GprlxLhMxIdNRw+UUzUh7bS2bWzWdUPG5syFHNIdqNHRrto+4tDoixWh1SPpk1p5 AWyvoPfdDlGu15QVo1tn5SR9EBNJ1ZHRJhI/l8dCzqB72THbH5c= -----END CERTIFICATE-----Generated at Sat Aug 23 15:54:43 2025 by rpki-client