$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8dfd5f6d-30c2-3ab5-9e90-8fdec3ef44ea.roa File: 8dfd5f6d-30c2-3ab5-9e90-8fdec3ef44ea.roa (raw, json) Hash identifier: S2FqM2oDIdqReL33uLDgS8RtBMoDI5dTJ84pLMJnbtk= Subject key identifier: 24:0B:4A:75:BC:FC:FC:C6:0A:DC:C3:C5:6F:03:1C:74:99:2A:E9:F8 Certificate issuer: /CN=8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5 Certificate serial: 010D0C9F4328584AB91B83F2A0767AFBE038DC80 Authority key identifier: 92:04:3A:A3:CA:F8:0F:3C:8D:45:A1:49:B5:5F:4B:AD:F5:C3:D9:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8dfd5f6d-30c2-3ab5-9e90-8fdec3ef44ea.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 10965 IP address blocks: 2001:410:2000::/40 maxlen: 48 2001:410:2000::/48 maxlen: 48 2001:410:2001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:83:f2:a0:76:7a:fb:e0:38:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=bb0017ff-8ca3-4efc-8fe0-03c8852676d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ec:84:e1:54:c7:7c:b8:c0:b3:df:71:08:78: 47:cc:06:f3:c2:f3:5f:c1:31:dd:14:3c:eb:14:55: c2:9c:96:e0:a9:34:98:00:1d:bd:c2:f8:a3:55:77: a8:a2:ec:87:a3:ad:46:22:2d:1a:70:f0:86:c7:54: e6:e5:56:94:10:c0:27:6e:0c:9a:ec:8c:d6:62:54: 16:61:d2:df:84:4d:ee:6a:5f:cd:75:0b:07:b2:82: 73:6a:4a:a2:41:3c:f7:75:b8:f1:88:1e:9d:db:54: 86:55:d9:8a:9c:75:34:c0:5b:d7:fc:b3:f9:fe:f6: 26:4b:1b:b3:0e:cc:8f:d9:35:ea:b8:3f:b8:27:7b: 75:9c:fc:d6:50:10:98:7e:1d:cc:3f:0e:7b:90:dd: 9b:07:66:bd:4f:28:55:10:74:39:63:c2:93:3e:0f: 53:58:9f:42:0e:b4:3a:73:2f:13:b8:b5:5d:f6:a7: b7:70:db:75:69:92:6b:56:41:d2:95:c6:30:98:49: fb:da:4f:f3:02:a3:8c:a9:4e:2e:91:dd:a7:b5:e1: 20:f6:31:90:66:05:da:f2:97:6a:07:38:ac:0d:0a: 71:c5:c7:5d:c1:0f:55:44:2c:56:d3:16:19:fe:67: 84:ce:b2:38:44:d7:9c:30:68:5c:39:cb:0e:d0:96: 7d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:0B:4A:75:BC:FC:FC:C6:0A:DC:C3:C5:6F:03:1C:74:99:2A:E9:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8dfd5f6d-30c2-3ab5-9e90-8fdec3ef44ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.crl X509v3 Authority Key Identifier: keyid:92:04:3A:A3:CA:F8:0F:3C:8D:45:A1:49:B5:5F:4B:AD:F5:C3:D9:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer sbgp-ipAddrBlock: critical IPv6: 2001:410:2000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:e0:50:31:13:cc:25:80:97:81:ec:54:0e:38:44:d9:c9:cd: 40:a1:7e:a4:51:64:6b:dd:4e:0d:72:aa:ed:ae:6b:4b:3d:89: c9:b2:46:3c:b0:12:59:c5:1c:03:1a:6e:a8:68:f0:7f:aa:89: d6:80:a7:45:1e:ec:47:4c:10:d3:b7:5b:67:e6:76:ba:3d:de: bb:b9:96:82:5d:89:1b:f0:97:b4:c0:70:e5:1f:72:85:3a:95: e2:0c:c4:0b:8f:80:3b:37:5d:55:54:b4:9b:3d:3d:d9:53:a0: dd:d9:8a:3b:0c:0a:1e:16:5d:51:30:99:3a:65:c6:5c:25:af: 82:85:d5:a7:a2:f3:25:c4:31:37:d3:be:ac:99:6a:1b:da:be: bc:6f:1d:e4:ae:8a:19:28:46:00:48:ba:82:d0:b9:73:e0:e5: 46:4b:22:23:38:0c:e1:14:19:c8:0c:92:e2:bc:98:f1:e3:6c: 66:87:28:4b:34:98:c5:bd:ee:4b:9c:5d:ed:ad:6d:99:bd:4d: 95:15:ed:31:9a:32:91:b6:78:4a:33:9b:40:4e:11:54:1d:f6: 33:f2:57:34:e2:a7:01:b7:2a:10:1e:3a:dc:93:4c:4d:b2:42: 19:7a:a5:b7:2e:b6:95:84:59:d6:1f:59:eb:6f:c7:94:33:7c: 82:01:38:79 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEq5G4PyoHZ6++A43IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGM5ZjUzYzctZTY0ZC00ZjE0LWE1ZTEtYzE0ZThiMWUz OGI1MB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk YmIwMDE3ZmYtOGNhMy00ZWZjLThmZTAtMDNjODg1MjY3NmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuyE4VTHfLjAs99xCHhHzAbzwvNfwTHdFDzr FFXCnJbgqTSYAB29wvijVXeoouyHo61GIi0acPCGx1Tm5VaUEMAnbgya7IzWYlQW YdLfhE3ual/NdQsHsoJzakqiQTz3dbjxiB6d21SGVdmKnHU0wFvX/LP5/vYmSxuz DsyP2TXquD+4J3t1nPzWUBCYfh3MPw57kN2bB2a9TyhVEHQ5Y8KTPg9TWJ9CDrQ6 cy8TuLVd9qe3cNt1aZJrVkHSlcYwmEn72k/zAqOMqU4ukd2nteEg9jGQZgXa8pdq BzisDQpxxcddwQ9VRCxW0xYZ/meEzrI4RNecMGhcOcsO0JZ96QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCQLSnW8/PzGCtzDxW8DHHSZKun4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84Yzlm NTNjNy1lNjRkLTRmMTQtYTVlMS1jMTRlOGIxZTM4YjUvOGRmZDVmNmQtMzBjMi0z YWI1LTllOTAtOGZkZWMzZWY0NGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGM5ZjUzYzctZTY0ZC00ZjE0LWE1 ZTEtYzE0ZThiMWUzOGI1LzhjOWY1M2M3LWU2NGQtNGYxNC1hNWUxLWMxNGU4YjFl MzhiNS5jcmwwHwYDVR0jBBgwFoAUkgQ6o8r4DzyNRaFJtV9LrfXD2Q4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84YzlmNTNjNy1lNjRkLTRmMTQtYTVlMS1jMTRl OGIxZTM4YjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAIAEEECAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEASuBQMRPMJYCXgexUDjhE2cnNQKF+pFFka91ODXKq7a5rSz2JybJG PLASWcUcAxpuqGjwf6qJ1oCnRR7sR0wQ07dbZ+Z2uj3eu7mWgl2JG/CXtMBw5R9y hTqV4gzEC4+AOzddVVS0mz092VOg3dmKOwwKHhZdUTCZOmXGXCWvgoXVp6LzJcQx N9O+rJlqG9q+vG8d5K6KGShGAEi6gtC5c+DlRksiIzgM4RQZyAyS4ryY8eNsZoco SzSYxb3uS5xd7a1tmb1NlRXtMZoykbZ4SjObQE4RVB32M/JXNOKnAbcqEB463JNM TbJCGXqlty62lYRZ1h9Z62/HlDN8ggE4eQ== -----END CERTIFICATE-----Generated at Mon Aug 4 18:29:17 2025 by rpki-client