$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3d2a36e5-0f29-3667-a43c-663484ccb468.roa File: 3d2a36e5-0f29-3667-a43c-663484ccb468.roa (raw, json) Hash identifier: AsOYjX82BNxY+hnYpZesXoiBRhdG/rV0eSMU+DuI9ZQ= Subject key identifier: DF:9B:FB:82:0A:89:62:C3:21:05:43:09:E0:62:63:87:3A:FD:D2:A6 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584B05E14291D47F192DDD28EBA4 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3d2a36e5-0f29-3667-a43c-663484ccb468.roa Signing time: Sat 30 Aug 2025 01:00:34 +0000 ROA not before: Sat 30 Aug 2025 01:00:34 +0000 ROA not after: Fri 28 Nov 2025 02:00:34 +0000 asID: 3939 IP address blocks: 2001:418:1401:a3::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:05:e1:42:91:d4:7f:19:2d:dd:28:eb:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 30 01:00:34 2025 GMT Not After : Nov 28 02:00:34 2025 GMT Subject: CN=a67fbb9e-4fcd-4e91-bad9-46fe9c6a9876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:27:e5:08:72:5e:a1:ed:15:d3:63:3f:80:ea: 7b:fa:55:bb:b0:1b:f2:91:8d:78:00:45:96:00:a0: ff:46:7e:74:47:e5:b6:f0:ca:72:fc:57:fc:68:37: 8e:ae:57:48:af:42:73:69:27:13:d2:9c:11:c6:6f: 43:c9:63:a9:a3:d1:1f:7b:76:eb:f0:81:44:bb:4b: 2b:f9:b6:46:8b:0d:6b:4b:03:96:19:55:41:89:15: f3:03:16:0a:6b:c2:c4:c4:73:f8:0d:67:84:90:e1: ec:22:33:d6:96:16:67:63:e3:42:b9:59:a4:fe:81: a6:12:c4:b5:36:6d:ef:72:fc:ff:39:d1:aa:18:f5: 9c:d8:3c:7e:3e:2e:6e:07:fe:c5:be:64:c3:24:ed: d0:2d:6c:85:5e:ad:fc:0b:65:23:44:98:86:f8:52: 7d:fd:bd:06:af:90:69:76:3f:f5:ec:6e:b9:b7:b3: 33:ec:75:f3:46:9d:77:39:b7:ab:a3:67:c9:6f:fd: a5:a5:3e:d6:b9:ed:99:f9:94:eb:b3:a5:68:2e:fc: 31:c3:e9:dd:5b:a1:83:9a:7a:d2:8b:a9:0b:1d:41: c1:a3:68:16:66:1c:c1:5c:ed:aa:bc:2a:e3:1f:d2: 82:27:2c:5e:34:6d:f3:b9:d2:33:46:17:2e:a9:f0: cc:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:9B:FB:82:0A:89:62:C3:21:05:43:09:E0:62:63:87:3A:FD:D2:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3d2a36e5-0f29-3667-a43c-663484ccb468.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:1401:a3::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:b6:00:a1:1a:1d:b7:05:f4:8d:43:5f:54:50:fb:a7:67:d1: bd:a0:e3:d4:3b:9a:e7:56:cf:72:7e:72:d0:68:3c:93:5d:80: 04:42:ca:e0:4d:3f:d2:f2:7b:24:03:8d:c7:c2:b2:91:43:25: 12:35:f5:38:31:2b:49:9f:15:3b:1e:69:09:42:52:52:2a:8b: ec:bc:73:f2:45:64:25:7c:51:98:17:a4:0b:49:6e:23:3f:1e: db:2f:a6:85:dd:a1:5e:bf:23:12:e9:92:d0:95:f2:ae:87:bb: 8b:40:0d:6e:ef:b3:92:87:8e:05:44:df:eb:41:bc:e9:25:8a: 6b:8e:19:df:9a:54:61:da:09:24:6b:c7:41:4a:3b:07:96:fb: 07:39:7c:21:6e:16:53:df:c8:7c:60:8e:6c:35:aa:ec:97:ec: 3d:da:2a:1b:38:99:d7:a1:42:ca:71:10:87:7b:8a:a5:dd:28: 54:a3:79:92:2a:ac:3e:20:46:14:86:81:f5:d0:d4:a7:2c:b6: 44:1c:a7:9f:3b:52:68:4a:45:8a:a3:15:af:e1:9f:d9:5f:46: 7e:39:63:29:a0:df:60:ee:fd:60:e0:8c:07:22:99:4d:36:d5: 13:cb:69:d2:f6:a3:6a:08:7a:89:3a:17:70:42:c1:26:a9:36: 6f:1b:cb:f0 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEsF4UKR1H8ZLd0o66QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDgzMDAxMDAzNFoXDTI1MTEyODAyMDAzNFowLzEtMCsGA1UEAxMk YTY3ZmJiOWUtNGZjZC00ZTkxLWJhZDktNDZmZTljNmE5ODc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCflCHJeoe0V02M/gOp7+lW7sBvykY14AEWW AKD/Rn50R+W28Mpy/Ff8aDeOrldIr0JzaScT0pwRxm9DyWOpo9Efe3br8IFEu0sr +bZGiw1rSwOWGVVBiRXzAxYKa8LExHP4DWeEkOHsIjPWlhZnY+NCuVmk/oGmEsS1 Nm3vcvz/OdGqGPWc2Dx+Pi5uB/7FvmTDJO3QLWyFXq38C2UjRJiG+FJ9/b0Gr5Bp dj/17G65t7Mz7HXzRp13Obero2fJb/2lpT7Wue2Z+ZTrs6VoLvwxw+ndW6GDmnrS i6kLHUHBo2gWZhzBXO2qvCrjH9KCJyxeNG3zudIzRhcuqfDMvwIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFN+b+4IKiWLDIQVDCeBiY4c6/dKmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvM2QyYTM2ZTUtMGYyOS0z NjY3LWE0M2MtNjYzNDg0Y2NiNDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEEGBQB AKMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAvrYAoRodtwX0jUNfVFD7p2fRvaDj1Dua51bPcn5y0Gg8k12A BELK4E0/0vJ7JAONx8KykUMlEjX1ODErSZ8VOx5pCUJSUiqL7Lxz8kVkJXxRmBek C0luIz8e2y+mhd2hXr8jEumS0JXyroe7i0ANbu+zkoeOBUTf60G86SWKa44Z35pU YdoJJGvHQUo7B5b7Bzl8IW4WU9/IfGCObDWq7JfsPdoqGziZ16FCynEQh3uKpd0o VKN5kiqsPiBGFIaB9dDUpyy2RBynnztSaEpFiqMVr+Gf2V9GfjljKaDfYO79YOCM ByKZTTbVE8tp0vajagh6iToXcELBJqk2bxvL8A== -----END CERTIFICATE-----Generated at Mon Oct 20 10:25:02 2025 by rpki-client