$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409/8d419152-cb9a-3d9d-b08f-c378f5e8aa3c.roa File: 8d419152-cb9a-3d9d-b08f-c378f5e8aa3c.roa (raw, json) Hash identifier: 34oHt8cHx+t7uAtCimhimUHmvrWhMuKA83HdN6M8Y5Y= Subject key identifier: 10:32:15:B8:4C:F4:B7:36:9C:F7:BC:87:9A:B0:F3:9B:8E:00:C7:01 Certificate issuer: /CN=9b1ca75e-4539-4223-b200-925398eb3409 Certificate serial: 010D0C9F4328584ACF70FCD722149D112536E480 Authority key identifier: DD:74:9D:1A:2F:AF:94:47:44:4E:AA:33:8B:1B:60:1C:CA:04:0E:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409/8d419152-cb9a-3d9d-b08f-c378f5e8aa3c.roa Signing time: Sun 10 Aug 2025 13:00:41 +0000 ROA not before: Sun 10 Aug 2025 13:00:41 +0000 ROA not after: Sat 08 Nov 2025 14:00:41 +0000 asID: 16509 IP address blocks: 2607:a940:b000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409/9b1ca75e-4539-4223-b200-925398eb3409.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409/9b1ca75e-4539-4223-b200-925398eb3409.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cf:70:fc:d7:22:14:9d:11:25:36:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b1ca75e-4539-4223-b200-925398eb3409 Validity Not Before: Aug 10 13:00:41 2025 GMT Not After : Nov 8 14:00:41 2025 GMT Subject: CN=cbfe20c4-f96d-4edb-8c06-d79e1504e0c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e5:47:89:22:6e:ea:e2:25:6b:aa:97:d8:23: 57:ee:54:7b:35:27:67:bb:6f:f2:6a:c7:d8:53:2d: f1:bb:eb:b7:54:49:8b:4f:92:48:24:f3:bc:20:01: 9e:ac:fc:6f:bc:01:07:46:0c:70:ce:95:06:ba:04: 02:e6:e7:2a:72:be:62:4c:b0:7d:7a:3a:72:55:8d: 33:5c:f2:a7:ce:38:24:8f:61:f2:01:b0:ea:7f:ec: 5d:2b:97:7d:83:53:c0:e2:45:2c:19:97:8a:25:31: 43:fa:98:da:38:38:90:87:d3:52:97:b9:38:8c:c5: 98:47:a8:d3:77:5f:54:21:34:32:84:1b:3a:97:94: 29:db:9e:59:1a:cc:8d:d9:74:e5:bc:ef:de:e2:cb: 18:ba:f1:ce:e6:91:7e:1c:fb:07:2a:5c:65:b0:61: 49:6d:f4:39:7f:bb:98:c4:d5:3b:0c:20:e7:f4:20: 72:c6:f0:14:da:c2:ba:38:6e:41:0a:40:28:ad:c8: f0:dc:1c:ee:65:b6:95:85:df:68:4d:fe:59:97:ba: b8:08:9e:a3:51:ae:a1:a5:cb:2e:7f:b7:c7:7d:23: ce:b5:a5:85:a3:1a:d9:d9:47:39:4d:40:13:b2:19: 76:42:0e:a5:28:b1:a5:a3:5f:5a:b7:ad:bf:9c:f8: 59:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:32:15:B8:4C:F4:B7:36:9C:F7:BC:87:9A:B0:F3:9B:8E:00:C7:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409/8d419152-cb9a-3d9d-b08f-c378f5e8aa3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409/9b1ca75e-4539-4223-b200-925398eb3409.crl X509v3 Authority Key Identifier: keyid:DD:74:9D:1A:2F:AF:94:47:44:4E:AA:33:8B:1B:60:1C:CA:04:0E:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409.cer sbgp-ipAddrBlock: critical IPv6: 2607:a940:b000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:63:97:2e:61:ad:d3:41:59:bc:aa:0a:fe:9b:ca:77:94:ab: f7:69:6e:fd:46:9e:9b:21:e9:d5:84:c0:32:d1:fe:0c:f2:43: cc:5b:3d:2c:5e:2a:df:86:5d:fa:46:75:45:6c:53:b7:0e:16: c1:d8:1c:8a:d4:bc:5a:15:22:9a:cc:5f:d5:71:f3:00:56:c8: e1:8f:d9:d3:62:3a:cd:98:15:97:21:ee:16:f2:b5:18:40:7e: fc:e9:23:31:fd:54:5b:66:35:fb:19:90:d0:b0:b2:e3:a7:2b: 23:14:c7:36:ea:57:a0:9a:d9:ea:df:f7:81:2f:ec:27:17:db: 26:bb:b1:d9:4b:7d:4a:f4:37:6e:05:21:58:16:82:a1:90:93: 94:85:7a:a7:c5:27:f6:6b:90:93:32:3c:7c:90:33:80:69:98: e6:49:f2:b0:07:c7:18:d8:3a:79:6b:c2:cd:9f:de:ef:e3:34: 31:b6:7a:c1:de:82:77:7f:42:44:c8:9a:7a:63:d0:d4:43:03: 07:59:bf:44:8b:05:5e:8c:2c:1d:95:26:20:5d:bf:9e:dc:05: b0:73:0e:d4:3e:d8:e8:da:75:96:c0:52:94:b1:fa:65:c8:34: 6a:94:a1:42:eb:b4:0d:97:b1:b9:d8:92:d9:9d:c1:0a:fa:ab: 3a:66:b1:e7 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErPcPzXIhSdESU25IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWIxY2E3NWUtNDUzOS00MjIzLWIyMDAtOTI1Mzk4ZWIz NDA5MB4XDTI1MDgxMDEzMDA0MVoXDTI1MTEwODE0MDA0MVowLzEtMCsGA1UEAxMk Y2JmZTIwYzQtZjk2ZC00ZWRiLThjMDYtZDc5ZTE1MDRlMGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueVHiSJu6uIla6qX2CNX7lR7NSdnu2/yasfY Uy3xu+u3VEmLT5JIJPO8IAGerPxvvAEHRgxwzpUGugQC5ucqcr5iTLB9ejpyVY0z XPKnzjgkj2HyAbDqf+xdK5d9g1PA4kUsGZeKJTFD+pjaODiQh9NSl7k4jMWYR6jT d19UITQyhBs6l5Qp255ZGsyN2XTlvO/e4ssYuvHO5pF+HPsHKlxlsGFJbfQ5f7uY xNU7DCDn9CByxvAU2sK6OG5BCkAorcjw3BzuZbaVhd9oTf5Zl7q4CJ6jUa6hpcsu f7fHfSPOtaWFoxrZ2Uc5TUATshl2Qg6lKLGlo19at62/nPhZmQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBAyFbhM9Lc2nPe8h5qw85uOAMcBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85YjFj YTc1ZS00NTM5LTQyMjMtYjIwMC05MjUzOThlYjM0MDkvOGQ0MTkxNTItY2I5YS0z ZDlkLWIwOGYtYzM3OGY1ZThhYTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOWIxY2E3NWUtNDUzOS00MjIzLWIy MDAtOTI1Mzk4ZWIzNDA5LzliMWNhNzVlLTQ1MzktNDIyMy1iMjAwLTkyNTM5OGVi MzQwOS5jcmwwHwYDVR0jBBgwFoAU3XSdGi+vlEdETqozixtgHMoEDkIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85YjFjYTc1ZS00NTM5LTQyMjMtYjIwMC05MjUz OThlYjM0MDkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgepQLAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAQ2OXLmGt00FZvKoK/pvKd5Sr92lu/UaemyHp1YTAMtH+DPJDzFs9 LF4q34Zd+kZ1RWxTtw4WwdgcitS8WhUimsxf1XHzAFbI4Y/Z02I6zZgVlyHuFvK1 GEB+/OkjMf1UW2Y1+xmQ0LCy46crIxTHNupXoJrZ6t/3gS/sJxfbJrux2Ut9SvQ3 bgUhWBaCoZCTlIV6p8Un9muQkzI8fJAzgGmY5knysAfHGNg6eWvCzZ/e7+M0MbZ6 wd6Cd39CRMiaemPQ1EMDB1m/RIsFXowsHZUmIF2/ntwFsHMO1D7Y6Np1lsBSlLH6 Zcg0apShQuu0DZexudiS2Z3BCvqrOmax5w== -----END CERTIFICATE-----Generated at Sat Aug 23 14:12:12 2025 by rpki-client