$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3a696e09-7384-38e4-8936-c5171efb8159.roa File: 3a696e09-7384-38e4-8936-c5171efb8159.roa (raw, json) Hash identifier: Tn3aWxk8xJ6ellsKyRsnQo9r30oAj3c0QNrsAH63Hdc= Subject key identifier: 03:E1:55:30:86:54:D1:84:96:38:4D:30:49:B7:47:7E:BF:E3:34:43 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584AD7D117830A57EC1D693C0840 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3a696e09-7384-38e4-8936-c5171efb8159.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 1225 IP address blocks: 2001:418:1401:12::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:17:83:0a:57:ec:1d:69:3c:08:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=1114e03d-b279-424b-bc41-3fa441e41f6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:bf:e8:44:6b:47:a2:f2:bd:ca:5a:6e:81:fe: 7b:45:01:85:7a:7c:db:3d:80:3a:fe:7a:6d:b6:57: fe:9b:3d:68:cd:b1:25:17:3c:26:44:d4:86:66:0b: b8:6a:7c:60:f8:dd:64:81:40:df:dc:6a:18:ab:a8: 8d:4e:e2:48:a6:16:59:a2:21:21:47:49:41:64:be: e0:65:2e:e4:99:da:45:93:d0:bc:99:23:b9:f9:db: 34:5f:21:af:ec:df:d8:3c:b7:79:ca:74:69:bf:0c: 2f:a8:64:7a:c4:62:13:bc:5f:38:ba:01:26:d6:a5: d9:8d:fc:82:8b:a7:bf:1d:39:60:9c:7a:e9:aa:78: f0:33:5b:c8:2f:66:e8:6a:3f:b7:91:f5:3e:41:01: b0:de:04:7a:a5:51:f3:e4:20:b5:e2:cc:50:9f:d7: b9:f0:3d:a5:73:48:0f:5a:e0:28:f9:13:15:02:e4: 42:dd:64:74:d0:44:00:07:ce:e7:85:28:b7:fc:77: 9b:21:28:1a:fa:f5:45:5b:c0:ca:d6:93:80:8a:50: c2:89:49:df:2c:1e:bb:af:23:e8:87:ed:80:40:c6: b4:36:85:74:1f:cd:a8:20:75:52:6c:ff:b6:89:c3: ed:47:e3:8a:00:b9:be:8f:f1:01:5e:ac:18:3d:09: fe:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:E1:55:30:86:54:D1:84:96:38:4D:30:49:B7:47:7E:BF:E3:34:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3a696e09-7384-38e4-8936-c5171efb8159.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:1401:12::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:d8:6d:e9:bd:42:f8:9f:7e:36:83:81:48:fd:12:19:68:b4: cb:4a:a8:31:81:ef:a5:b5:1b:da:77:63:1c:db:89:c4:b4:fb: e7:a3:26:04:4e:05:7a:4d:14:03:2c:9c:96:ed:14:22:da:4c: b0:7c:fa:06:9f:5e:03:3a:f4:7f:d9:2b:95:21:06:26:19:25: 36:3b:6b:0c:f7:67:8f:f7:e2:76:dd:02:0c:e5:5c:99:fd:cd: 7f:66:e6:b4:7b:3b:ec:db:fe:03:bf:0e:6e:9f:1d:31:d9:f5: a0:1e:86:42:9d:fb:61:c0:be:a0:cc:65:7f:d1:e1:34:a9:3b: a3:59:18:ba:52:e1:f8:e3:ba:c6:c3:81:9c:dd:6d:c8:9f:ab: 0c:75:11:23:71:10:73:a0:b2:dc:bb:04:19:fc:5b:6a:0b:df: 67:29:ae:7d:3f:10:d6:21:fb:3d:da:74:a6:42:12:c5:96:58: 98:39:30:b2:81:24:bc:59:57:68:bf:63:b7:96:1b:c5:af:4e: 41:87:84:40:0b:56:f8:3a:73:b2:ac:e1:cc:8e:0e:03:36:e2: 4a:db:50:72:f4:15:27:ff:35:e2:a3:99:99:28:64:be:2e:63: 00:24:59:16:1b:93:68:7b:7d:52:9c:ed:28:9c:24:e8:e9:fc: 43:91:68:4e -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWErX0ReDClfsHWk8CEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk MTExNGUwM2QtYjI3OS00MjRiLWJjNDEtM2ZhNDQxZTQxZjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmr/oRGtHovK9ylpugf57RQGFenzbPYA6/npt tlf+mz1ozbElFzwmRNSGZgu4anxg+N1kgUDf3GoYq6iNTuJIphZZoiEhR0lBZL7g ZS7kmdpFk9C8mSO5+ds0XyGv7N/YPLd5ynRpvwwvqGR6xGITvF84ugEm1qXZjfyC i6e/HTlgnHrpqnjwM1vIL2boaj+3kfU+QQGw3gR6pVHz5CC14sxQn9e58D2lc0gP WuAo+RMVAuRC3WR00EQAB87nhSi3/HebISga+vVFW8DK1pOAilDCiUnfLB67ryPo h+2AQMa0NoV0H82oIHVSbP+2icPtR+OKALm+j/EBXqwYPQn+GwIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFAPhVTCGVNGEljhNMEm3R36/4zRDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvM2E2OTZlMDktNzM4NC0z OGU0LTg5MzYtYzUxNzFlZmI4MTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEEGBQB ABIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAldht6b1C+J9+NoOBSP0SGWi0y0qoMYHvpbUb2ndjHNuJxLT7 56MmBE4Fek0UAyyclu0UItpMsHz6Bp9eAzr0f9krlSEGJhklNjtrDPdnj/fidt0C DOVcmf3Nf2bmtHs77Nv+A78Obp8dMdn1oB6GQp37YcC+oMxlf9HhNKk7o1kYulLh +OO6xsOBnN1tyJ+rDHURI3EQc6Cy3LsEGfxbagvfZymufT8Q1iH7Pdp0pkISxZZY mDkwsoEkvFlXaL9jt5Ybxa9OQYeEQAtW+DpzsqzhzI4OAzbiSttQcvQVJ/814qOZ mShkvi5jACRZFhuTaHt9UpztKJwk6On8Q5FoTg== -----END CERTIFICATE-----Generated at Sat Aug 23 18:09:14 2025 by rpki-client