$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8dfd5f6d-30c2-3ab5-9e90-8fdec3ef44ea.roa File: 8dfd5f6d-30c2-3ab5-9e90-8fdec3ef44ea.roa (raw, json) Hash identifier: XXovbaFSyMMLMdIMBQMfh7aFoDE3q+q8sh++M3TpU1U= Subject key identifier: AA:06:8E:83:17:D5:CB:D1:B1:DF:64:C5:63:BE:1C:44:37:60:9B:BE Certificate issuer: /CN=8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5 Certificate serial: 010D0C9F4328584D59EA51A80377AC1CA7250080 Authority key identifier: 92:04:3A:A3:CA:F8:0F:3C:8D:45:A1:49:B5:5F:4B:AD:F5:C3:D9:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8dfd5f6d-30c2-3ab5-9e90-8fdec3ef44ea.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 10965 IP address blocks: 2001:410:2000::/40 maxlen: 48 2001:410:2000::/48 maxlen: 48 2001:410:2001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:51:a8:03:77:ac:1c:a7:25:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=a78bdb0d-3cae-4c06-9671-f43fd0697479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:7c:61:6c:03:09:f3:a7:45:5b:de:55:b5:c6: ce:53:1f:ba:6a:e2:26:fc:6a:a9:4d:21:05:50:70: a9:33:7b:2a:e7:a3:16:06:1b:6e:5f:3b:07:4f:f3: 72:41:b9:86:23:e0:c3:66:88:76:1e:50:df:50:2c: 48:13:68:66:9a:2f:ef:1b:96:47:a7:42:3b:81:98: 4c:6c:89:f3:2c:ed:71:ed:34:02:05:78:f2:0a:98: 6c:90:71:72:3d:24:5e:3f:9e:bd:34:30:af:fc:6b: b7:e6:b8:d3:12:5a:1e:7f:b7:96:67:55:0c:9c:53: f5:03:f7:0a:e2:8d:8e:cf:3b:5b:6f:2c:2a:cd:8e: d8:af:26:68:6b:a3:d5:26:d6:da:7c:73:2a:91:46: a7:c4:b0:2f:16:6b:52:0c:b6:78:d0:6d:18:36:f1: 09:a7:ae:02:df:ca:35:b8:65:64:5c:3a:83:e6:70: 99:7b:e7:d0:01:c4:68:1c:8b:ca:f7:c7:db:00:29: f7:51:35:5f:ed:14:92:ba:6f:36:e8:69:30:e3:56: d7:52:62:6c:1f:2b:0f:64:23:0c:68:4a:19:3f:8c: fc:e2:15:96:07:85:b6:88:4e:cc:8e:a3:e9:cf:ad: 8c:a3:8e:85:05:03:5d:bd:25:74:59:c3:0a:5d:a4: 57:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:06:8E:83:17:D5:CB:D1:B1:DF:64:C5:63:BE:1C:44:37:60:9B:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8dfd5f6d-30c2-3ab5-9e90-8fdec3ef44ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.crl X509v3 Authority Key Identifier: keyid:92:04:3A:A3:CA:F8:0F:3C:8D:45:A1:49:B5:5F:4B:AD:F5:C3:D9:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer sbgp-ipAddrBlock: critical IPv6: 2001:410:2000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:87:87:e4:d3:cb:71:ad:46:f4:fb:67:aa:23:b9:4c:01:92: cc:b8:dc:0e:30:73:3b:e0:5e:6b:74:1d:6a:fd:56:3f:23:f1: dd:46:36:97:5e:18:90:76:4b:a3:79:2a:19:1c:c0:bb:ed:00: e9:2d:b6:f9:47:ff:5c:46:ed:42:f6:c2:dd:e8:38:1a:4e:2e: 91:25:89:94:60:f0:f2:c6:a3:ac:f3:9a:cd:5a:63:c0:fb:b0: 9d:e4:a7:2d:57:1c:52:c6:aa:08:07:78:29:33:9a:88:b2:41: 2d:b2:99:ea:d0:f7:a6:6e:a5:b1:19:21:8c:22:15:95:e6:bd: b5:a2:e9:5d:77:b6:ab:86:fa:6e:54:d8:98:b0:93:43:fc:60: 2c:40:1b:8c:aa:26:65:69:d7:db:a6:36:49:fc:75:4e:e5:0b: 5e:bf:d8:f2:6d:06:01:e2:55:9b:bf:a8:78:9b:bb:02:6b:fe: a0:fc:70:5b:f7:1d:a8:7c:6f:81:c3:aa:64:f1:62:27:24:29: 0c:a7:98:11:a7:45:93:64:db:52:59:19:95:9b:55:c0:b8:56: 18:0e:4c:37:df:d5:a7:2d:0c:29:09:be:d4:9a:a6:fa:cb:bb: 2f:13:7c:27:8e:89:1d:9c:c3:b9:fa:46:81:f9:52:f1:86:8c: b1:19:cf:4f -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1Z6lGoA3esHKclAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGM5ZjUzYzctZTY0ZC00ZjE0LWE1ZTEtYzE0ZThiMWUz OGI1MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk YTc4YmRiMGQtM2NhZS00YzA2LTk2NzEtZjQzZmQwNjk3NDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nxhbAMJ86dFW95VtcbOUx+6auIm/GqpTSEF UHCpM3sq56MWBhtuXzsHT/NyQbmGI+DDZoh2HlDfUCxIE2hmmi/vG5ZHp0I7gZhM bInzLO1x7TQCBXjyCphskHFyPSReP569NDCv/Gu35rjTEloef7eWZ1UMnFP1A/cK 4o2OzztbbywqzY7YryZoa6PVJtbafHMqkUanxLAvFmtSDLZ40G0YNvEJp64C38o1 uGVkXDqD5nCZe+fQAcRoHIvK98fbACn3UTVf7RSSum826Gkw41bXUmJsHysPZCMM aEoZP4z84hWWB4W2iE7MjqPpz62Mo46FBQNdvSV0WcMKXaRXCwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKoGjoMX1cvRsd9kxWO+HEQ3YJu+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84Yzlm NTNjNy1lNjRkLTRmMTQtYTVlMS1jMTRlOGIxZTM4YjUvOGRmZDVmNmQtMzBjMi0z YWI1LTllOTAtOGZkZWMzZWY0NGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGM5ZjUzYzctZTY0ZC00ZjE0LWE1 ZTEtYzE0ZThiMWUzOGI1LzhjOWY1M2M3LWU2NGQtNGYxNC1hNWUxLWMxNGU4YjFl MzhiNS5jcmwwHwYDVR0jBBgwFoAUkgQ6o8r4DzyNRaFJtV9LrfXD2Q4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84YzlmNTNjNy1lNjRkLTRmMTQtYTVlMS1jMTRl OGIxZTM4YjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAIAEEECAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAO4eH5NPLca1G9PtnqiO5TAGSzLjcDjBzO+Bea3Qdav1WPyPx3UY2 l14YkHZLo3kqGRzAu+0A6S22+Uf/XEbtQvbC3eg4Gk4ukSWJlGDw8sajrPOazVpj wPuwneSnLVccUsaqCAd4KTOaiLJBLbKZ6tD3pm6lsRkhjCIVlea9taLpXXe2q4b6 blTYmLCTQ/xgLEAbjKomZWnX26Y2Sfx1TuULXr/Y8m0GAeJVm7+oeJu7Amv+oPxw W/cdqHxvgcOqZPFiJyQpDKeYEadFk2TbUlkZlZtVwLhWGA5MN9/Vpy0MKQm+1Jqm +su7LxN8J46JHZzDufpGgflS8YaMsRnPTw== -----END CERTIFICATE-----Generated at Mon Apr 13 20:03:56 2026 by rpki-client