$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/52c214a8-65e8-34d6-b99e-ab5d56938375.roa File: 52c214a8-65e8-34d6-b99e-ab5d56938375.roa (raw, json) Hash identifier: pIGoIK+ivcJj8v0Qn7D56GNth1QGhQCI7gMs584PXVE= Subject key identifier: 4C:2F:15:45:3D:B3:A7:89:63:2D:51:D7:53:8F:E6:FE:4D:9E:E2:A5 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584B05E14265F3580EA8FC5E3980 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/52c214a8-65e8-34d6-b99e-ab5d56938375.roa Signing time: Sat 30 Aug 2025 01:00:34 +0000 ROA not before: Sat 30 Aug 2025 01:00:34 +0000 ROA not after: Fri 28 Nov 2025 02:00:34 +0000 asID: 3939 IP address blocks: 2001:418:3ff:100::/56 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:05:e1:42:65:f3:58:0e:a8:fc:5e:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 30 01:00:34 2025 GMT Not After : Nov 28 02:00:34 2025 GMT Subject: CN=63fa3770-aa44-4eab-aae8-1096a7274ed2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d8:0b:53:aa:3b:4b:55:38:41:62:9a:b2:fb: ed:f8:60:63:ec:a5:5a:a9:b6:ea:e0:60:83:2f:63: 44:31:46:6d:21:23:b3:bc:e3:78:51:ea:b7:dc:a4: d6:63:1f:91:f4:0e:0a:d8:bc:b1:c0:84:2d:f7:a4: 4a:f2:de:94:41:a6:62:04:1d:ae:8f:b4:a8:2d:6e: 3f:f0:5a:78:d6:87:fb:f3:d0:48:0f:6e:82:29:b2: 93:3c:d1:20:77:76:3d:06:30:46:4b:56:cb:7b:55: 14:da:5c:6d:40:ed:cc:d1:58:70:f3:dc:05:21:ff: 32:3c:51:65:a8:45:a0:0d:d2:50:57:43:30:15:1d: f9:92:5f:08:1f:e9:d8:07:30:9e:24:0e:db:60:44: 13:b1:43:f9:db:01:7d:4c:ad:e0:83:8f:7d:af:ab: 31:8d:0f:8a:91:22:46:32:6f:83:14:c6:d1:48:f8: 03:d0:c8:3c:fc:e1:81:56:fa:ea:e4:d7:37:9d:77: 53:e5:e3:03:dd:4d:e8:fd:75:fc:b2:17:4c:cd:a5: 89:f2:f3:7a:c7:f5:78:ca:36:51:b2:eb:80:1c:02: 4b:73:43:23:09:81:9d:03:77:1c:69:c9:c2:93:4e: 17:ca:13:48:9c:78:2e:34:36:81:fc:d7:5b:de:d5: 10:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:2F:15:45:3D:B3:A7:89:63:2D:51:D7:53:8F:E6:FE:4D:9E:E2:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/52c214a8-65e8-34d6-b99e-ab5d56938375.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:3ff:100::/56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:aa:53:ba:37:5c:18:d2:9d:7d:f7:23:bd:89:95:d5:9c:c6: e3:9f:30:67:cb:91:07:60:a1:38:7e:07:62:bf:23:3a:ee:36: 74:30:ab:0a:2a:3c:01:5b:a4:31:80:26:f4:df:df:df:32:b7: cd:f0:30:e9:82:d6:4a:60:e4:ad:f8:e0:70:70:dc:d6:85:16: 08:38:ac:03:92:cf:28:38:f3:c5:a3:7f:b1:0f:49:4c:4b:2d: 11:01:33:2a:1a:26:34:0a:c8:66:4d:3f:6c:0d:e4:03:7b:e7: 97:9c:22:75:89:6b:a7:09:7e:b3:63:9e:5d:e6:c5:b8:a8:90: 07:68:33:93:0d:49:d9:b9:48:b5:d8:92:4f:a6:a2:fd:34:57: ed:a7:bb:32:6a:52:43:10:ff:84:00:5d:74:18:70:eb:eb:fe: 6a:81:ba:aa:12:80:e5:65:b2:9c:9e:c7:74:4a:74:fe:d6:f6: f0:20:1d:3c:9b:ac:b2:4d:ef:be:71:47:cd:89:01:ae:37:8a: 72:83:f8:f4:3a:56:3e:88:09:54:37:ce:22:fd:2b:d8:a9:64: 48:39:43:08:ca:a0:49:38:0e:57:2a:ac:10:5b:b0:50:a4:2a: 17:fe:df:c6:d2:34:d7:37:50:3e:bf:6f:9f:cb:d8:bf:23:69: 1b:6e:5a:ea -----BEGIN CERTIFICATE----- MIIGRzCCBS+gAwIBAgIUAQ0Mn0MoWEsF4UJl81gOqPxeOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDgzMDAxMDAzNFoXDTI1MTEyODAyMDAzNFowLzEtMCsGA1UEAxMk NjNmYTM3NzAtYWE0NC00ZWFiLWFhZTgtMTA5NmE3Mjc0ZWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNgLU6o7S1U4QWKasvvt+GBj7KVaqbbq4GCD L2NEMUZtISOzvON4Ueq33KTWYx+R9A4K2LyxwIQt96RK8t6UQaZiBB2uj7SoLW4/ 8Fp41of789BID26CKbKTPNEgd3Y9BjBGS1bLe1UU2lxtQO3M0Vhw89wFIf8yPFFl qEWgDdJQV0MwFR35kl8IH+nYBzCeJA7bYEQTsUP52wF9TK3gg499r6sxjQ+KkSJG Mm+DFMbRSPgD0Mg8/OGBVvrq5Nc3nXdT5eMD3U3o/XX8shdMzaWJ8vN6x/V4yjZR suuAHAJLc0MjCYGdA3ccacnCk04XyhNInHguNDaB/Ndb3tUQvQIDAQABo4IDWTCC A1UwHQYDVR0OBBYEFEwvFUU9s6eJYy1R11OP5v5NnuKlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNTJjMjE0YTgtNjVlOC0z NGQ2LWI5OWUtYWI1ZDU2OTM4Mzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAAjAKAwgAIAEEGAP/ ATBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQAEqlO6N1wY0p199yO9iZXVnMbjnzBny5EHYKE4fgdivyM67jZ0 MKsKKjwBW6QxgCb039/fMrfN8DDpgtZKYOSt+OBwcNzWhRYIOKwDks8oOPPFo3+x D0lMSy0RATMqGiY0CshmTT9sDeQDe+eXnCJ1iWunCX6zY55d5sW4qJAHaDOTDUnZ uUi12JJPpqL9NFftp7syalJDEP+EAF10GHDr6/5qgbqqEoDlZbKcnsd0SnT+1vbw IB08m6yyTe++cUfNiQGuN4pyg/j0OlY+iAlUN84i/SvYqWRIOUMIyqBJOA5XKqwQ W7BQpCoX/t/G0jTXN1A+v2+fy9i/I2kbblrq -----END CERTIFICATE-----Generated at Mon Oct 20 08:13:53 2025 by rpki-client