$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/56bc3e2c-e7cd-3d01-998a-548f26e4717c.roa File: 56bc3e2c-e7cd-3d01-998a-548f26e4717c.roa (raw, json) Hash identifier: LfHse9ks9QoHEJNcQmx4E/LurshvB1Fvcc1WLcxBLe4= Subject key identifier: E8:C2:9B:42:F4:67:1C:08:25:32:DB:BB:B6:A6:C9:35:F8:7E:C1:09 Certificate issuer: /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d Certificate serial: 010D0C9F4328584ACB40E73C050D55A0E5877080 Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/56bc3e2c-e7cd-3d01-998a-548f26e4717c.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 1880 IP address blocks: 2001:440:1800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:40:e7:3c:05:0d:55:a0:e5:87:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=ac8045b9-999c-410f-9e3e-3b12a965811f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:42:d3:97:cf:be:2c:6b:e0:09:9a:06:ea:7b: 3b:34:b4:9a:b6:98:c7:32:03:e9:a5:8f:7f:69:0b: 2b:9a:83:fe:1c:07:7f:fa:ff:ad:57:09:b9:8c:46: 98:76:a6:c4:84:ab:8b:a5:c1:65:a1:b6:5e:07:c8: 7d:ca:4b:31:f5:7f:b0:1c:70:c8:5c:f5:f9:e1:72: 45:c1:3d:d6:08:94:9d:cf:ea:bd:f4:3b:67:9d:95: 95:95:b2:75:14:04:e0:ec:51:cc:5f:48:9f:05:11: 6a:2f:da:e4:1b:9d:b4:98:f2:82:5a:77:02:5f:35: 42:31:b4:61:ac:8a:83:57:e1:d1:f2:3a:2e:f5:4d: b3:a1:62:4c:96:1b:7f:1f:9f:9c:19:4a:28:d3:a0: d1:2e:a8:2d:94:86:b0:b3:b8:a8:53:82:38:a2:b6: 20:8c:7c:9f:36:6d:43:48:71:ab:12:80:c9:e9:09: 3f:93:70:5b:a9:0b:4b:24:1a:48:b3:ab:92:dc:ea: a0:da:4a:8e:a2:44:39:5a:b4:24:52:42:6d:79:ac: d0:60:da:fc:12:b0:a7:58:05:d2:82:72:d4:01:1b: 0d:9c:a5:1f:ac:a9:73:45:3a:a1:fe:bb:a7:7a:9e: eb:7f:88:ca:2a:69:6d:62:fc:b7:0a:f7:7d:7b:4a: ad:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:C2:9B:42:F4:67:1C:08:25:32:DB:BB:B6:A6:C9:35:F8:7E:C1:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/56bc3e2c-e7cd-3d01-998a-548f26e4717c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl X509v3 Authority Key Identifier: keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer sbgp-ipAddrBlock: critical IPv6: 2001:440:1800::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:8b:56:6b:4e:13:76:3e:69:98:ef:be:7f:a2:29:74:8a:f5: b1:89:9e:b9:1f:9a:50:cf:da:5a:d2:f4:7e:29:52:e1:14:74: 45:07:a1:79:0f:23:82:a1:bc:99:a9:b8:66:5e:80:fd:81:2a: 9f:2c:3b:ee:2a:43:5f:3a:ab:9b:be:6f:51:18:a3:d3:80:55: 97:7b:05:43:97:da:c9:da:ed:17:3f:2f:06:5b:ba:b0:6a:67: 00:d0:8e:68:fb:4d:f7:58:80:65:2a:80:a1:88:6b:fe:0e:d0: 47:22:1a:aa:39:cd:e3:51:da:42:11:09:3d:11:28:7b:ca:91: 9b:e5:7d:09:dd:e8:ab:05:80:3c:d4:63:5a:04:24:fa:3d:0d: 7b:77:a2:a1:69:80:6a:81:4f:1e:a8:30:d9:10:d3:cf:34:14: 28:8a:09:f9:db:4c:0e:14:a8:2f:9f:7e:a7:6e:16:cf:51:04: c7:eb:dc:be:bd:e6:8e:0d:26:28:ea:75:0c:bf:bb:8c:fb:40: bd:fe:63:29:a1:1f:5c:09:2f:d2:90:b3:7e:6d:25:b9:89:8f: dd:5d:ae:4b:0e:a5:08:f4:b5:95:b1:6c:5d:ad:04:5a:9a:ef: 27:bf:34:24:44:00:b5:08:39:fb:8a:c9:9c:b4:d6:2d:00:df: 11:6a:69:69 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErLQOc8BQ1VoOWHcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWNkZjFiZGMtNTRmZC00NjM0LWIwMWQtYzZiMmViMjJk ZjZkMB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk YWM4MDQ1YjktOTk5Yy00MTBmLTllM2UtM2IxMmE5NjU4MTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvELTl8++LGvgCZoG6ns7NLSatpjHMgPppY9/ aQsrmoP+HAd/+v+tVwm5jEaYdqbEhKuLpcFlobZeB8h9yksx9X+wHHDIXPX54XJF wT3WCJSdz+q99DtnnZWVlbJ1FATg7FHMX0ifBRFqL9rkG520mPKCWncCXzVCMbRh rIqDV+HR8jou9U2zoWJMlht/H5+cGUoo06DRLqgtlIaws7ioU4I4orYgjHyfNm1D SHGrEoDJ6Qk/k3BbqQtLJBpIs6uS3Oqg2kqOokQ5WrQkUkJteazQYNr8ErCnWAXS gnLUARsNnKUfrKlzRTqh/runep7rf4jKKmltYvy3Cvd9e0qtLQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOjCm0L0ZxwIJTLbu7amyTX4fsEJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2Rm MWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIyZWIyMmRmNmQvNTZiYzNlMmMtZTdjZC0z ZDAxLTk5OGEtNTQ4ZjI2ZTQ3MTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWNkZjFiZGMtNTRmZC00NjM0LWIw MWQtYzZiMmViMjJkZjZkLzljZGYxYmRjLTU0ZmQtNDYzNC1iMDFkLWM2YjJlYjIy ZGY2ZC5jcmwwHwYDVR0jBBgwFoAU6H7MV4UVtPTqWZhgnk9l+3ulRnIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2RmMWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIy ZWIyMmRmNmQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEQBgA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFyLVmtOE3Y+aZjvvn+iKXSK9bGJnrkfmlDP2lrS9H4pUuEUdEUH oXkPI4KhvJmpuGZegP2BKp8sO+4qQ186q5u+b1EYo9OAVZd7BUOX2sna7Rc/LwZb urBqZwDQjmj7TfdYgGUqgKGIa/4O0EciGqo5zeNR2kIRCT0RKHvKkZvlfQnd6KsF gDzUY1oEJPo9DXt3oqFpgGqBTx6oMNkQ0880FCiKCfnbTA4UqC+ffqduFs9RBMfr 3L695o4NJijqdQy/u4z7QL3+YymhH1wJL9KQs35tJbmJj91drksOpQj0tZWxbF2t BFqa7ye/NCREALUIOfuKyZy01i0A3xFqaWk= -----END CERTIFICATE-----Generated at Thu Aug 21 10:24:24 2025 by rpki-client