$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3e53b78e-2ab8-3b67-b6b3-698393a631a5.roa File: 3e53b78e-2ab8-3b67-b6b3-698393a631a5.roa (raw, json) Hash identifier: Lhuo44/Iy1H8qSdVgawPVZ7uaUfTbqSM9R2D6oHki5w= Subject key identifier: 7F:82:5B:AC:03:5F:2F:BE:D0:A8:C8:0B:E2:DA:7E:09:57:1F:45:22 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584AD9365C9F3466E0CDCF1C9900 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3e53b78e-2ab8-3b67-b6b3-698393a631a5.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 20940 IP address blocks: 2001:418:1401:25::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:5c:9f:34:66:e0:cd:cf:1c:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=4111d9f7-c671-42ef-8c5c-05e48a138164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f9:2b:05:ae:bc:20:4a:78:aa:2d:39:00:6b: 32:f0:bc:3d:0d:69:b1:c6:fa:26:bb:61:d4:88:7a: aa:a9:ea:60:b0:e5:66:87:12:a3:1f:7d:9d:be:2d: 5e:03:94:f5:8f:f8:33:87:54:43:29:16:17:d9:03: 86:bd:72:ba:df:44:40:19:4e:8f:ee:3d:d6:d5:de: 93:65:b6:d1:67:f0:bd:15:aa:52:6b:6a:26:1d:19: 56:b8:38:e9:a8:52:5a:7a:43:27:e4:08:2a:50:90: 54:91:37:0c:5b:8b:0c:ba:fb:d3:9e:10:de:ff:5c: aa:b9:31:0c:5a:7a:be:35:dd:5c:41:9d:09:92:02: d2:85:c7:ca:e9:13:23:d8:8b:05:2e:0c:65:41:46: 61:f1:31:3c:4f:ed:76:fa:62:48:37:51:bc:67:9e: 89:c8:85:7f:c1:ff:80:28:c4:d7:ec:1e:85:c1:36: 7c:40:4e:97:53:89:28:4c:01:af:24:a9:fc:c4:4d: fc:5a:9b:32:9d:1c:a5:03:0b:15:9e:e0:e1:94:ab: 95:a6:f0:a1:74:56:d2:e5:22:80:b8:56:22:ce:a6: 1c:a2:dd:8e:ac:77:9c:b7:86:55:e3:88:cb:4f:cb: a6:87:52:0e:b4:d0:b5:f8:4d:91:f0:a9:85:e7:87: b1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:82:5B:AC:03:5F:2F:BE:D0:A8:C8:0B:E2:DA:7E:09:57:1F:45:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3e53b78e-2ab8-3b67-b6b3-698393a631a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:1401:25::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:27:ae:60:27:9f:53:64:10:d9:c7:80:06:ea:fe:9f:14:87: 8d:65:20:b1:cf:72:21:a6:c5:b6:96:a1:91:6a:3a:49:f6:cf: a4:e6:fb:c5:0f:0a:00:65:c4:42:a9:f1:fa:f0:e7:fd:6c:38: d3:0b:d2:db:d5:d0:17:39:42:3a:a3:bb:37:b0:7c:9e:eb:d5: fe:5b:93:8d:b5:18:6d:de:03:34:c0:cc:9a:03:98:82:33:f6: 82:41:1a:44:90:32:f2:26:80:e4:7d:c5:81:84:c8:db:97:47: 26:c7:83:56:e1:16:82:2c:a7:0d:34:70:51:5d:0b:82:6e:34: e8:b3:5c:65:e2:f4:db:9d:df:72:e2:2f:e7:50:8d:67:68:e9: 54:96:05:e5:0d:4f:25:1e:f3:4f:61:bd:0f:5d:81:c6:1f:b3: 29:13:1d:53:7e:05:a5:6a:50:45:ff:95:95:fb:41:ec:af:e9: 98:5a:51:e8:8f:53:14:06:5f:85:2b:e0:7f:ff:fb:bf:3e:8c: 8e:98:e0:eb:60:bc:35:c6:ff:f6:aa:e5:f7:5f:a6:e3:2d:62: 39:14:98:7d:2a:55:71:a4:13:d3:7a:6f:fd:13:ef:1b:cf:6a: 6e:88:24:60:39:2e:ce:e6:19:97:fb:04:ee:fb:42:22:56:1d: 1f:c9:48:10 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWErZNlyfNGbgzc8cmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk NDExMWQ5ZjctYzY3MS00MmVmLThjNWMtMDVlNDhhMTM4MTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/krBa68IEp4qi05AGsy8Lw9DWmxxvomu2HU iHqqqepgsOVmhxKjH32dvi1eA5T1j/gzh1RDKRYX2QOGvXK630RAGU6P7j3W1d6T ZbbRZ/C9FapSa2omHRlWuDjpqFJaekMn5AgqUJBUkTcMW4sMuvvTnhDe/1yquTEM Wnq+Nd1cQZ0JkgLShcfK6RMj2IsFLgxlQUZh8TE8T+12+mJIN1G8Z56JyIV/wf+A KMTX7B6FwTZ8QE6XU4koTAGvJKn8xE38WpsynRylAwsVnuDhlKuVpvChdFbS5SKA uFYizqYcot2OrHect4ZV44jLT8umh1IOtNC1+E2R8KmF54ex4wIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFH+CW6wDXy++0KjIC+LafglXH0UiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvM2U1M2I3OGUtMmFiOC0z YjY3LWI2YjMtNjk4MzkzYTYzMWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEEGBQB ACUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAhyeuYCefU2QQ2ceABur+nxSHjWUgsc9yIabFtpahkWo6SfbP pOb7xQ8KAGXEQqnx+vDn/Ww40wvS29XQFzlCOqO7N7B8nuvV/luTjbUYbd4DNMDM mgOYgjP2gkEaRJAy8iaA5H3FgYTI25dHJseDVuEWgiynDTRwUV0Lgm406LNcZeL0 253fcuIv51CNZ2jpVJYF5Q1PJR7zT2G9D12Bxh+zKRMdU34FpWpQRf+VlftB7K/p mFpR6I9TFAZfhSvgf//7vz6Mjpjg62C8Ncb/9qrl91+m4y1iORSYfSpVcaQT03pv /RPvG89qbogkYDkuzuYZl/sE7vtCIlYdH8lIEA== -----END CERTIFICATE-----Generated at Sat Aug 23 14:52:02 2025 by rpki-client