$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1e6876f9-49d1-343a-8c70-400d9e4a4ed1.roa File: 1e6876f9-49d1-343a-8c70-400d9e4a4ed1.roa (raw, json) Hash identifier: dvYS3mhwWS9zFRnU3iDsJmyTAMJI0Lx2u8w+ag0GhAc= Subject key identifier: D7:68:46:E0:E0:BD:7A:B6:87:6B:F7:6D:0E:1F:9C:FD:C1:BE:A5:43 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584AD9365EC56E30C186F6C19200 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1e6876f9-49d1-343a-8c70-400d9e4a4ed1.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 397601 IP address blocks: 2001:418:1456:b20::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:5e:c5:6e:30:c1:86:f6:c1:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=de4d4719-c222-4894-be1c-d503b4895d8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:ab:85:23:28:18:b5:da:9c:1a:31:af:00:3a: f2:ef:4a:ed:d8:ac:25:a0:54:00:72:a0:a6:3b:60: 6a:16:56:73:28:1c:0d:b4:c4:e2:e7:0c:74:dc:3d: 93:0d:95:71:d4:12:40:55:19:98:9b:2e:46:ca:45: 1a:15:28:5d:32:c0:02:e9:6d:a8:1e:a7:af:02:6b: b4:79:dd:af:ce:55:62:46:df:51:73:2f:a8:45:a0: 81:98:6a:85:8d:14:16:04:09:32:50:d5:30:6e:b1: 97:e1:ab:f8:f2:2e:d4:95:23:7f:74:a8:67:c9:45: 9e:09:12:c8:6d:30:fc:a6:fd:b4:50:f6:d0:11:1a: fd:c5:f3:39:9e:77:35:f9:55:94:5f:2a:06:6a:66: 4c:81:3e:ab:cb:7f:b3:39:df:03:31:d4:3f:bc:ce: 08:4c:46:15:e8:54:be:f1:f6:e4:82:1c:b3:b9:61: 1e:f7:14:09:90:c1:ba:4d:bf:e7:13:94:b5:a8:13: 55:ec:19:09:26:2d:d6:c4:76:9f:e8:f0:ad:8e:e7: 77:4f:1f:a6:2d:3e:d9:c4:67:99:a4:90:f7:02:ed: 57:16:fc:8d:ce:33:4b:25:79:d3:16:6b:8d:a0:aa: bc:21:99:53:4c:90:83:31:b4:25:2e:be:07:d8:ff: 74:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:68:46:E0:E0:BD:7A:B6:87:6B:F7:6D:0E:1F:9C:FD:C1:BE:A5:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1e6876f9-49d1-343a-8c70-400d9e4a4ed1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:1456:b20::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:1d:74:2a:7d:1f:a1:d0:0d:85:b5:11:d1:43:db:00:a0:cb: 4d:8b:27:4a:b5:bb:bd:dd:60:0a:15:d0:83:8a:f5:6c:dc:3d: cb:c3:2d:a5:11:f8:e2:45:ae:d7:af:67:18:c4:fd:8c:36:f7: 1e:be:e1:87:cd:88:ff:1e:8b:36:8f:fa:f3:76:8c:e4:72:04: 96:c5:c7:75:13:60:9f:c3:64:fd:f8:b5:09:91:01:67:2e:fd: 61:72:60:40:ca:a5:09:6f:25:84:52:59:89:e9:8b:77:a3:3c: 6f:12:52:c6:ad:0d:4c:57:e2:bc:2c:57:5a:ba:72:43:db:02: ae:a1:ca:d0:b2:27:ab:74:23:9e:08:d7:f8:1d:76:5b:a5:4c: b0:18:52:98:ab:9e:74:4f:54:82:9a:9f:13:18:fd:71:0e:a3: 6c:b1:24:67:c6:0d:8e:98:59:7b:55:6c:de:83:0b:7e:7d:fb: 02:88:e4:3b:af:b1:99:0e:7b:9f:eb:d4:f5:0d:2c:33:58:9f: 74:9a:4f:5d:b6:28:57:c7:cc:56:a8:08:ae:ec:9e:69:58:a3: 63:a7:67:41:da:d5:3e:09:f4:fe:34:ef:1d:ba:ae:6f:58:f3: a5:23:7a:fa:0e:8b:c7:41:ad:c2:c0:6a:84:9b:dd:d8:a7:84: 34:23:1f:07 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWErZNl7FbjDBhvbBkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk ZGU0ZDQ3MTktYzIyMi00ODk0LWJlMWMtZDUwM2I0ODk1ZDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7quFIygYtdqcGjGvADry70rt2KwloFQAcqCm O2BqFlZzKBwNtMTi5wx03D2TDZVx1BJAVRmYmy5GykUaFShdMsAC6W2oHqevAmu0 ed2vzlViRt9Rcy+oRaCBmGqFjRQWBAkyUNUwbrGX4av48i7UlSN/dKhnyUWeCRLI bTD8pv20UPbQERr9xfM5nnc1+VWUXyoGamZMgT6ry3+zOd8DMdQ/vM4ITEYV6FS+ 8fbkghyzuWEe9xQJkMG6Tb/nE5S1qBNV7BkJJi3WxHaf6PCtjud3Tx+mLT7ZxGeZ pJD3Au1XFvyNzjNLJXnTFmuNoKq8IZlTTJCDMbQlLr4H2P90HwIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFNdoRuDgvXq2h2v3bQ4fnP3BvqVDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMWU2ODc2ZjktNDlkMS0z NDNhLThjNzAtNDAwZDllNGE0ZWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEEGBRW CyAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEARB10Kn0fodANhbUR0UPbAKDLTYsnSrW7vd1gChXQg4r1bNw9 y8MtpRH44kWu169nGMT9jDb3Hr7hh82I/x6LNo/683aM5HIElsXHdRNgn8Nk/fi1 CZEBZy79YXJgQMqlCW8lhFJZiemLd6M8bxJSxq0NTFfivCxXWrpyQ9sCrqHK0LIn q3QjngjX+B12W6VMsBhSmKuedE9UgpqfExj9cQ6jbLEkZ8YNjphZe1Vs3oMLfn37 AojkO6+xmQ57n+vU9Q0sM1ifdJpPXbYoV8fMVqgIruyeaVijY6dnQdrVPgn0/jTv Hbqub1jzpSN6+g6Lx0GtwsBqhJvd2KeENCMfBw== -----END CERTIFICATE-----Generated at Sat Aug 23 14:46:18 2025 by rpki-client