$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/37775d5a-0be2-366b-a5e6-29b8366d81e4.roa File: 37775d5a-0be2-366b-a5e6-29b8366d81e4.roa (raw, json) Hash identifier: uHO5mrkrsQGv0wxyXwPAFj9RQUxmazf8OAjb5v3LQ8I= Subject key identifier: 2B:28:66:4B:94:79:02:5A:9F:E9:C0:98:ED:85:73:1E:D4:E3:D6:CC Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584AF256A9E08A1F5E83B08AE8E0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/37775d5a-0be2-366b-a5e6-29b8366d81e4.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 3939 IP address blocks: 2001:418:1401:a1::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:a9:e0:8a:1f:5e:83:b0:8a:e8:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=f1c4cf41-36e6-4a01-8636-6828b3262571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0a:c0:98:c5:93:f1:cc:da:9a:1c:4a:8d:fc: 6b:4e:c3:03:28:c8:9e:dd:b3:7b:aa:f6:26:fc:07: 25:e5:df:18:55:62:03:e7:2d:cb:97:2e:e8:20:d8: 5d:e1:df:79:1a:c0:da:11:a7:7c:f7:fd:aa:51:39: d7:23:8e:2c:a7:78:fb:85:c8:b0:ca:a1:e1:1e:ad: 26:0f:2e:f7:d1:68:75:7e:e1:4f:1d:b2:b2:75:c2: 2b:5d:b2:02:79:f7:fd:0d:bb:d7:a9:9c:d3:6a:19: 8c:4c:d5:36:ac:00:a0:7f:14:aa:27:e8:84:41:2c: c3:7d:e4:c5:ad:b0:b9:b3:30:10:6a:43:13:19:78: f3:6a:2a:b9:bf:4d:4f:7e:f8:f9:f1:13:e5:55:45: 77:18:f9:46:16:d5:be:10:de:7a:6e:f3:89:f2:f1: d5:32:d5:f4:18:c0:27:07:02:01:e6:29:b8:3f:1c: a1:74:aa:52:60:ea:0e:05:fe:77:b2:e1:e7:6d:42: 1c:1d:aa:2d:6d:9b:63:2e:b8:c4:73:42:20:57:99: 41:49:bb:12:25:6e:19:cb:58:86:97:7d:cf:67:1e: c4:1f:11:7d:9d:67:2e:34:72:2c:6a:de:10:4a:ad: e8:79:08:25:49:44:10:9b:fb:0a:9b:e9:c5:ec:de: d2:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:28:66:4B:94:79:02:5A:9F:E9:C0:98:ED:85:73:1E:D4:E3:D6:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/37775d5a-0be2-366b-a5e6-29b8366d81e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:1401:a1::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:9c:66:3b:98:66:5c:52:56:61:43:0f:4b:aa:e9:28:ca:af: 38:b6:95:7b:c7:e7:bc:38:d3:b3:b5:57:95:90:99:ba:f1:22: 6e:44:e7:b6:97:73:99:09:96:c7:e9:2a:9c:4b:d0:87:d1:7c: 31:3a:35:84:a3:2c:b8:99:b4:20:5b:be:97:df:bc:a0:02:73: b9:d6:4a:cd:d7:48:d2:8b:e9:33:dc:c9:c7:f5:f0:0f:98:8a: cc:37:00:df:29:fb:bb:5a:fb:eb:83:24:44:8e:14:6f:92:ef: cc:fb:9c:0d:22:71:86:03:0e:e5:b6:aa:cd:f0:92:1a:85:d2: bd:dd:07:8b:3f:24:19:72:c0:58:1f:e1:bd:04:dd:23:7a:a3: fe:1e:d2:e6:ed:2c:d1:2b:ee:00:74:22:f8:f2:aa:ef:b1:6b: f8:c8:69:1d:7f:8b:00:1e:15:f3:84:02:e6:54:e9:29:69:a9: 15:55:40:9d:af:4e:a1:45:da:9a:c3:9b:27:5f:be:8e:ce:7d: fa:1e:94:31:49:16:6e:1d:6f:83:4e:41:3a:fa:0e:8c:de:6a: a9:78:94:e2:5b:0e:b0:a9:dd:e0:93:a5:0a:be:65:16:bb:ce: 26:c0:0f:d7:5e:39:b4:48:a3:78:b2:63:c1:c9:09:bc:5a:ce: 70:06:63:98 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEryVqngih9eg7CK6OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk ZjFjNGNmNDEtMzZlNi00YTAxLTg2MzYtNjgyOGIzMjYyNTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmArAmMWT8czamhxKjfxrTsMDKMie3bN7qvYm /Acl5d8YVWID5y3Lly7oINhd4d95GsDaEad89/2qUTnXI44sp3j7hciwyqHhHq0m Dy730Wh1fuFPHbKydcIrXbICeff9DbvXqZzTahmMTNU2rACgfxSqJ+iEQSzDfeTF rbC5szAQakMTGXjzaiq5v01Pfvj58RPlVUV3GPlGFtW+EN56bvOJ8vHVMtX0GMAn BwIB5im4PxyhdKpSYOoOBf53suHnbUIcHaotbZtjLrjEc0IgV5lBSbsSJW4Zy1iG l33PZx7EHxF9nWcuNHIsat4QSq3oeQglSUQQm/sKm+nF7N7SAwIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFCsoZkuUeQJan+nAmO2Fcx7U49bMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMzc3NzVkNWEtMGJlMi0z NjZiLWE1ZTYtMjliODM2NmQ4MWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEEGBQB AKEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEARJxmO5hmXFJWYUMPS6rpKMqvOLaVe8fnvDjTs7VXlZCZuvEi bkTntpdzmQmWx+kqnEvQh9F8MTo1hKMsuJm0IFu+l9+8oAJzudZKzddI0ovpM9zJ x/XwD5iKzDcA3yn7u1r764MkRI4Ub5LvzPucDSJxhgMO5baqzfCSGoXSvd0Hiz8k GXLAWB/hvQTdI3qj/h7S5u0s0SvuAHQi+PKq77Fr+MhpHX+LAB4V84QC5lTpKWmp FVVAna9OoUXamsObJ1++js59+h6UMUkWbh1vg05BOvoOjN5qqXiU4lsOsKnd4JOl Cr5lFrvOJsAP1145tEijeLJjwckJvFrOcAZjmA== -----END CERTIFICATE-----Generated at Sat Aug 23 14:53:12 2025 by rpki-client