$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/30adc210-0124-3859-98d4-f0e66af7da0a.roa File: 30adc210-0124-3859-98d4-f0e66af7da0a.roa (raw, json) Hash identifier: iWo6vLK5OcvApS9wQByLhAfa9tTRwairHZsAl+doa+I= Subject key identifier: CD:D2:16:81:24:BB:F2:D1:FA:B8:B9:EE:4D:0C:52:DC:49:0A:8C:03 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584AD7D11710A94F5E40E5624D00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/30adc210-0124-3859-98d4-f0e66af7da0a.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 1225 IP address blocks: 2001:418:0:7000::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:17:10:a9:4f:5e:40:e5:62:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=b2cc6501-405a-4961-9a32-e33355a92881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:47:c2:c6:c1:c6:8a:f6:9b:66:ca:f4:4c:d0: 3d:d1:4a:32:69:2f:fb:97:7a:b8:45:ea:00:ed:ce: 02:e9:78:01:71:e9:24:4d:83:4c:38:18:47:17:14: f7:22:6e:db:56:1b:b7:9f:b2:69:cb:d8:80:73:12: e8:90:ef:b4:b3:54:09:6f:39:4e:ba:99:51:33:d3: 0e:f8:67:50:0e:e3:99:84:7c:46:5f:1c:ea:46:36: 3c:39:2f:18:6d:e3:6d:5d:6d:ad:de:76:77:ae:e9: 70:35:8b:c5:84:26:76:04:e6:ba:c6:f8:b5:7b:17: a5:78:18:90:b4:f5:fd:d5:2c:a2:65:94:f4:29:ed: 04:a2:12:72:98:44:07:8c:7b:ba:1d:97:7e:aa:dc: cd:48:8b:55:e0:bd:7e:f8:02:b8:09:85:8c:08:a9: b3:8d:73:b4:24:eb:3b:a8:8a:cf:54:4c:b5:32:7b: ab:e2:c1:84:fc:b8:d9:40:87:ad:46:d1:ac:5d:73: 18:c9:1c:44:49:f7:aa:8d:ed:cc:c4:c5:fe:c5:ad: 5b:a0:71:1f:cc:31:90:a1:6d:6e:f7:0a:7f:df:e8: 78:f6:aa:83:62:a2:b0:44:ef:fc:38:7d:e1:55:76: ac:79:46:e1:2e:91:de:c0:e3:bc:e5:b1:46:63:80: ed:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:D2:16:81:24:BB:F2:D1:FA:B8:B9:EE:4D:0C:52:DC:49:0A:8C:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/30adc210-0124-3859-98d4-f0e66af7da0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:0:7000::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:a5:bc:22:b4:4f:fb:6a:b1:62:4a:00:9e:aa:b2:a6:99:5c: 95:9a:19:cc:d9:a1:ef:b0:51:c3:c8:98:65:25:4b:8b:fd:94: 44:29:25:84:b5:8c:11:20:87:7b:41:78:90:86:c6:32:96:0d: 24:8f:e3:f7:87:7f:39:a5:ca:5f:70:b4:2a:91:be:08:7a:bc: 1d:49:1b:d9:01:84:63:47:bb:d9:79:d1:b9:07:5d:1a:cc:8a: 44:07:be:70:14:e7:30:d6:f6:c6:5c:a2:99:a9:54:c3:3a:84: 1b:37:b0:96:08:b8:f6:35:94:16:cd:dc:6e:8d:a8:9c:f1:1a: 00:77:19:4f:75:d2:a6:39:59:f9:0c:ee:76:6a:ea:2d:e5:e9: 06:cd:21:d0:2c:36:96:48:7d:73:c2:29:81:a7:32:eb:ea:f4: d1:39:1a:c4:8d:41:2b:2b:ab:99:f7:51:7a:e2:f8:0c:e4:a9: 7b:90:7a:e8:a7:6d:49:fd:5a:20:7f:aa:a7:ec:7e:d8:48:94: c0:05:e8:14:ed:59:d3:47:b0:14:e8:70:9c:80:fb:a5:80:86: 5d:a1:ba:b9:98:80:43:31:d9:23:3f:b9:75:23:8e:d2:89:07: 71:dd:c3:05:e0:1a:f3:6a:cd:97:c2:dc:43:cd:84:0d:32:2e: 13:80:33:14 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWErX0RcQqU9eQOViTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk YjJjYzY1MDEtNDA1YS00OTYxLTlhMzItZTMzMzU1YTkyODgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkfCxsHGivabZsr0TNA90UoyaS/7l3q4ReoA 7c4C6XgBcekkTYNMOBhHFxT3Im7bVhu3n7Jpy9iAcxLokO+0s1QJbzlOuplRM9MO +GdQDuOZhHxGXxzqRjY8OS8YbeNtXW2t3nZ3rulwNYvFhCZ2BOa6xvi1exeleBiQ tPX91SyiZZT0Ke0EohJymEQHjHu6HZd+qtzNSItV4L1++AK4CYWMCKmzjXO0JOs7 qIrPVEy1Mnur4sGE/LjZQIetRtGsXXMYyRxESfeqje3MxMX+xa1boHEfzDGQoW1u 9wp/3+h49qqDYqKwRO/8OH3hVXaseUbhLpHewOO85bFGY4DtZwIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFM3SFoEku/LR+ri57k0MUtxJCowDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMzBhZGMyMTAtMDEyNC0z ODU5LTk4ZDQtZjBlNjZhZjdkYTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEEGAAA cAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEATqW8IrRP+2qxYkoAnqqypplclZoZzNmh77BRw8iYZSVLi/2U RCklhLWMESCHe0F4kIbGMpYNJI/j94d/OaXKX3C0KpG+CHq8HUkb2QGEY0e72XnR uQddGsyKRAe+cBTnMNb2xlyimalUwzqEGzewlgi49jWUFs3cbo2onPEaAHcZT3XS pjlZ+QzudmrqLeXpBs0h0Cw2lkh9c8Ipgacy6+r00TkaxI1BKyurmfdReuL4DOSp e5B66KdtSf1aIH+qp+x+2EiUwAXoFO1Z00ewFOhwnID7pYCGXaG6uZiAQzHZIz+5 dSOO0okHcd3DBeAa82rNl8LcQ82EDTIuE4AzFA== -----END CERTIFICATE-----Generated at Mon Oct 20 21:21:21 2025 by rpki-client