$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3b035878-f1ae-3036-94e4-2a11a6346da4.roa File: 3b035878-f1ae-3036-94e4-2a11a6346da4.roa (raw, json) Hash identifier: zDs7CB1qFjZd6PcagqXELqysprI77hxau3pi+OATmls= Subject key identifier: 20:82:83:1E:B3:06:0F:04:1A:1C:45:46:42:1D:1A:6E:9A:8C:9D:85 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584ADD667D38DFA9F1B44E870FE2 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3b035878-f1ae-3036-94e4-2a11a6346da4.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 20940 IP address blocks: 2001:418:1401:7d::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:7d:38:df:a9:f1:b4:4e:87:0f:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=b3690d8b-c204-4cad-a6be-3822fb5277d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:56:a2:91:3b:a9:22:dd:20:3e:94:c1:e8:a9: 14:f9:38:b2:f5:fa:4b:58:5f:6b:7e:0d:2a:97:6b: 3f:76:7a:f7:e9:f5:16:ab:0d:f6:7a:f1:f6:67:08: 38:64:dc:61:ae:98:92:d5:7f:73:da:6d:26:c1:12: 2a:fc:2c:c5:3d:87:52:32:60:2f:ff:7b:b5:4c:38: 64:be:d3:5b:27:1e:2a:a1:40:9b:c6:16:a1:c7:27: 04:f8:2e:43:fc:44:67:69:60:20:8a:4c:49:d7:09: 9a:c3:cc:3d:83:7e:f7:94:2b:bd:28:07:e2:80:a0: 05:2f:be:15:e7:2e:28:5b:a1:b7:81:07:63:ca:9f: 07:97:30:83:4f:bc:74:3d:d3:fe:d0:2d:92:09:fb: 37:2c:8d:63:c5:cd:03:e7:62:3a:60:c2:12:a1:dc: 40:c8:e7:02:b7:d6:c2:b6:a9:0b:32:85:d9:cd:f0: b2:e7:f7:c1:d2:03:cb:5e:c7:4f:eb:85:6b:91:bc: db:24:b3:5e:f8:74:8b:37:51:59:13:68:ce:8e:19: 97:e4:7e:a0:00:46:5b:19:7e:f9:0b:0a:c0:1b:76: c8:7e:f2:84:85:6e:44:60:76:1c:81:c7:36:51:20: d7:cd:b2:4d:1c:b8:68:81:af:be:24:b2:30:3a:32: 14:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:82:83:1E:B3:06:0F:04:1A:1C:45:46:42:1D:1A:6E:9A:8C:9D:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3b035878-f1ae-3036-94e4-2a11a6346da4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:1401:7d::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:2c:b2:a9:ae:05:34:4e:84:51:46:17:71:13:f8:7b:d1:61: 83:f8:ed:89:00:2e:fb:27:d2:db:26:39:78:18:20:39:65:66: 6f:fc:a9:cf:f7:d0:90:80:5a:ad:9c:b1:98:0d:68:bf:d9:cb: ac:98:bd:79:cc:bd:23:39:8c:57:dc:f9:da:40:2b:98:52:67: 3c:92:c2:a0:d8:0a:5f:a7:0b:90:47:96:a4:c6:92:03:b8:d1: 78:57:98:de:56:90:70:bb:24:94:e2:4c:9b:67:c7:a5:3a:5f: d1:56:a0:bd:2b:2a:91:fe:a3:20:5c:1b:6d:86:bd:e3:08:65: 29:f5:4d:19:db:1e:d6:88:3d:1a:1b:40:a2:ec:2b:40:26:36: 81:34:c7:10:eb:c8:af:12:31:67:fb:30:09:8b:69:14:aa:92: 17:00:02:38:8a:31:1f:dd:78:3a:fe:bd:d3:dc:38:db:b0:a6: 51:bf:a3:6f:0a:4e:63:eb:9f:a3:5a:21:91:c4:37:a8:ea:71: 50:c8:56:d7:4d:9e:07:68:5d:6f:eb:ba:ff:91:ac:1a:c8:5e: a7:7b:f7:15:e2:6f:52:4d:ef:0a:5f:04:d1:4c:6a:27:bb:13: 05:ce:e7:66:4d:3b:20:04:be:5e:e8:26:33:26:79:f5:41:9b: 7e:11:33:e9 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWErdZn0436nxtE6HD+IwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk YjM2OTBkOGItYzIwNC00Y2FkLWE2YmUtMzgyMmZiNTI3N2Q5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFaikTupIt0gPpTB6KkU+Tiy9fpLWF9rfg0q l2s/dnr36fUWqw32evH2Zwg4ZNxhrpiS1X9z2m0mwRIq/CzFPYdSMmAv/3u1TDhk vtNbJx4qoUCbxhahxycE+C5D/ERnaWAgikxJ1wmaw8w9g373lCu9KAfigKAFL74V 5y4oW6G3gQdjyp8HlzCDT7x0PdP+0C2SCfs3LI1jxc0D52I6YMISodxAyOcCt9bC tqkLMoXZzfCy5/fB0gPLXsdP64VrkbzbJLNe+HSLN1FZE2jOjhmX5H6gAEZbGX75 CwrAG3bIfvKEhW5EYHYcgcc2USDXzbJNHLhoga++JLIwOjIUPQIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFCCCgx6zBg8EGhxFRkIdGm6ajJ2FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvM2IwMzU4NzgtZjFhZS0z MDM2LTk0ZTQtMmExMWE2MzQ2ZGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEEGBQB AH0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAkyyyqa4FNE6EUUYXcRP4e9Fhg/jtiQAu+yfS2yY5eBggOWVm b/ypz/fQkIBarZyxmA1ov9nLrJi9ecy9IzmMV9z52kArmFJnPJLCoNgKX6cLkEeW pMaSA7jReFeY3laQcLsklOJMm2fHpTpf0VagvSsqkf6jIFwbbYa94whlKfVNGdse 1og9GhtAouwrQCY2gTTHEOvIrxIxZ/swCYtpFKqSFwACOIoxH914Ov6909w427Cm Ub+jbwpOY+ufo1ohkcQ3qOpxUMhW102eB2hdb+u6/5GsGshep3v3FeJvUk3vCl8E 0UxqJ7sTBc7nZk07IAS+XugmMyZ59UGbfhEz6Q== -----END CERTIFICATE-----Generated at Sat Aug 23 14:50:51 2025 by rpki-client