$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/9fd311c1-e770-39bf-a936-c5c989cd234e.roa File: 9fd311c1-e770-39bf-a936-c5c989cd234e.roa (raw, json) Hash identifier: yqjjyUO+xEvwqpezI0A8yqDBp2qcBh2Yux9X+m37xn0= Subject key identifier: D6:65:17:6B:B2:E0:86:CD:C6:C5:B0:B9:6C:6C:1F:D8:A0:1E:73:D5 Certificate issuer: /CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd Certificate serial: 010D0C9F4328584B0B769C8D069132F3E26E9A80 Authority key identifier: 97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/9fd311c1-e770-39bf-a936-c5c989cd234e.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 225 IP address blocks: 2604:4540::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:9c:8d:06:91:32:f3:e2:6e:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=6ce90b9b-817b-4e33-92c1-a6499682ae5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:66:ad:9a:3c:36:1a:06:c5:5c:95:51:b9:fb: ad:a9:2f:9e:ec:90:af:15:9e:ea:e3:90:58:54:ee: 06:d4:df:63:7c:35:e4:ca:a1:40:1d:81:93:c2:88: 2a:52:cd:d6:56:c7:6d:98:8b:01:16:8a:4c:7a:b8: 87:f8:bd:1f:e0:6d:a2:eb:4b:9e:12:22:a2:1a:c2: 5d:a5:5b:f9:90:02:e1:1f:ee:af:3c:bd:55:90:5a: 54:e0:01:2d:a2:9b:04:a3:2f:6f:c6:26:ac:09:81: 98:02:48:1f:9d:d1:7e:d6:83:18:04:cf:c7:31:a7: 15:71:99:44:b1:13:d7:12:49:64:c2:59:5c:c8:0e: 6c:6c:46:a8:ec:f1:a4:31:8a:86:53:ef:94:91:2c: 89:0f:7b:75:ad:d3:cb:8e:b9:36:84:c8:09:8c:66: 95:03:16:53:f0:b2:69:17:d1:d7:c9:5b:b2:89:f4: 23:34:04:c4:3c:31:7a:45:bc:a9:7d:e4:b2:3c:a3: 92:b7:8f:65:2a:c7:84:74:5d:02:12:20:55:fe:de: df:05:aa:ee:b3:cd:85:58:a3:7f:97:d8:0b:23:1c: 22:19:c8:c8:1f:77:78:33:2d:6f:cf:41:2f:07:73: 2f:2e:a6:f2:38:81:af:5a:a3:4f:44:5a:c6:b2:8e: 08:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:65:17:6B:B2:E0:86:CD:C6:C5:B0:B9:6C:6C:1F:D8:A0:1E:73:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/9fd311c1-e770-39bf-a936-c5c989cd234e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl X509v3 Authority Key Identifier: keyid:97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer sbgp-ipAddrBlock: critical IPv6: 2604:4540::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:9a:a1:81:a7:f3:e5:97:d4:03:62:2b:ec:e9:0f:8d:81:ad: 53:d7:2f:17:97:57:3b:c5:2c:ee:f1:d8:de:88:b6:f5:ce:18: a3:b0:e4:c6:c7:8f:b5:89:2b:ae:f8:27:b7:b4:0c:d0:94:9c: 34:dd:aa:9e:90:da:24:90:22:25:c0:c5:2c:08:82:3e:45:11: b6:13:4e:c3:4a:0c:5d:ba:37:cf:46:3f:9e:3d:48:ee:be:6f: 94:be:b2:2e:e1:9e:11:48:b2:ad:c7:29:d8:f2:06:af:73:82: 44:6c:62:fa:47:d9:ac:a5:2f:19:cc:ef:78:35:c8:81:17:25: 3d:2d:da:93:b5:24:06:02:84:83:e1:9c:d8:5a:d4:43:09:e2: 21:e8:6a:7c:2a:50:24:11:f0:4e:51:66:7b:89:f5:1a:dc:c9: 9a:aa:43:f5:aa:f5:c2:af:2f:b5:6a:bb:07:80:3d:40:4c:93: 15:c3:d8:2d:7d:e6:de:c2:87:8f:ff:d2:73:f3:aa:b5:61:b3: 81:c2:f6:2d:3a:d4:fc:f3:59:47:31:59:3b:0f:25:9c:76:68: 19:59:8f:78:97:15:6c:ca:58:9a:21:cd:a3:b4:3c:f8:6e:9a: 0c:cd:8b:06:c4:82:88:1a:5c:eb:4b:b7:ca:54:a4:1d:f0:26: db:59:dc:11 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsLdpyNBpEy8+JumoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJmYzE2ZmUtYmYwYS00ZjNhLWE2NWUtMjE3ZDhmOGMz ZWNkMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk NmNlOTBiOWItODE3Yi00ZTMzLTkyYzEtYTY0OTk2ODJhZTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmatmjw2GgbFXJVRufutqS+e7JCvFZ7q45BY VO4G1N9jfDXkyqFAHYGTwogqUs3WVsdtmIsBFopMeriH+L0f4G2i60ueEiKiGsJd pVv5kALhH+6vPL1VkFpU4AEtopsEoy9vxiasCYGYAkgfndF+1oMYBM/HMacVcZlE sRPXEklkwllcyA5sbEao7PGkMYqGU++UkSyJD3t1rdPLjrk2hMgJjGaVAxZT8LJp F9HXyVuyifQjNATEPDF6RbypfeSyPKOSt49lKseEdF0CEiBV/t7fBarus82FWKN/ l9gLIxwiGcjIH3d4My1vz0EvB3MvLqbyOIGvWqNPRFrGso4ILQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNZlF2uy4IbNxsWwuWxsH9igHnPVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84YmZj MTZmZS1iZjBhLTRmM2EtYTY1ZS0yMTdkOGY4YzNlY2QvOWZkMzExYzEtZTc3MC0z OWJmLWE5MzYtYzVjOTg5Y2QyMzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGJmYzE2ZmUtYmYwYS00ZjNhLWE2 NWUtMjE3ZDhmOGMzZWNkLzhiZmMxNmZlLWJmMGEtNGYzYS1hNjVlLTIxN2Q4Zjhj M2VjZC5jcmwwHwYDVR0jBBgwFoAUl/yFHXLGc9xg3OTz+hLE+ivzRnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84YmZjMTZmZS1iZjBhLTRmM2EtYTY1ZS0yMTdk OGY4YzNlY2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgRFQAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEiaoYGn8+WX1ANiK+zpD42BrVPXLxeXVzvFLO7x2N6ItvXOGKOw 5MbHj7WJK674J7e0DNCUnDTdqp6Q2iSQIiXAxSwIgj5FEbYTTsNKDF26N89GP549 SO6+b5S+si7hnhFIsq3HKdjyBq9zgkRsYvpH2aylLxnM73g1yIEXJT0t2pO1JAYC hIPhnNha1EMJ4iHoanwqUCQR8E5RZnuJ9RrcyZqqQ/Wq9cKvL7VquweAPUBMkxXD 2C195t7Ch4//0nPzqrVhs4HC9i061PzzWUcxWTsPJZx2aBlZj3iXFWzKWJohzaO0 PPhumgzNiwbEgogaXOtLt8pUpB3wJttZ3BE= -----END CERTIFICATE-----Generated at Thu Sep 11 12:16:55 2025 by rpki-client