$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/aff36023-01d7-3371-9cba-b3d40a4f342c.roa File: aff36023-01d7-3371-9cba-b3d40a4f342c.roa (raw, json) Hash identifier: PoDKwLGeKlo4opKwOcm5sdv1Bnc2yBYWrqjDB7Wgsbk= Subject key identifier: 43:51:EB:42:48:DD:A6:A8:E8:E9:58:B7:BC:AA:BE:1F:88:4C:7F:B7 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584AD9365D6967587F65C4C51480 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/aff36023-01d7-3371-9cba-b3d40a4f342c.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 20940 IP address blocks: 2001:418:1401:71::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:5d:69:67:58:7f:65:c4:c5:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=501e7abd-0132-445e-96df-cd9d4f9e0d38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ae:4a:fe:ca:35:e2:74:79:e0:0a:a5:ab:89: 77:e9:8b:28:ac:fd:aa:f4:c9:cc:44:d4:fa:cc:5c: ec:5a:35:ef:a4:d2:f3:44:9c:b6:44:60:5f:de:fc: e9:e7:7a:0a:c8:37:6a:6b:c9:c4:b8:d5:06:c8:da: ab:a3:82:f7:70:bf:74:5d:a1:37:1b:5c:7c:83:9d: 10:57:a0:1e:57:f8:8b:8f:83:31:8d:56:4a:97:1f: 88:de:95:53:40:78:75:d9:ce:40:0b:7f:e6:09:1a: 51:9d:ce:c8:18:59:e4:9a:e0:8b:b6:a5:50:2a:9a: 25:c7:9d:8b:4d:5a:b0:92:1a:f5:f5:4b:66:99:20: 1d:e3:c7:49:28:6a:c0:bf:51:ec:58:74:bb:a8:38: 16:58:a4:bd:3f:64:15:80:b5:d0:78:34:74:aa:23: f2:cf:fc:1f:92:b5:78:2c:2d:6f:08:aa:f7:e5:eb: c2:9b:47:36:0e:65:91:f9:a7:51:b8:07:c2:2b:c5: 14:51:a5:e3:13:5b:ff:77:b8:09:1a:ad:06:0d:1d: b4:f4:18:87:6b:08:f4:cc:1b:75:a6:b1:ea:fd:e5: 14:56:f3:d0:e4:db:ac:9c:5e:5f:d2:f2:9f:d8:de: d1:15:1d:e3:8f:33:8f:7b:e1:03:f9:fd:fd:0e:60: d6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:51:EB:42:48:DD:A6:A8:E8:E9:58:B7:BC:AA:BE:1F:88:4C:7F:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/aff36023-01d7-3371-9cba-b3d40a4f342c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:1401:71::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:c9:26:6e:e2:91:f6:f3:ce:71:f5:37:02:94:8d:d5:28:ba: a6:ea:e3:75:94:ad:66:c9:22:eb:1b:ef:35:e3:65:57:dc:8b: 64:ec:3c:4d:0d:70:ee:0b:93:9a:0a:de:65:33:a1:f4:21:43: 56:5d:e2:b6:0f:f1:24:5a:45:d1:7e:e9:ec:1c:ab:64:02:aa: 0b:2e:f1:02:57:ed:a1:97:dc:96:96:c1:cc:9e:c4:49:1c:b3: 9d:61:2b:b5:32:11:66:2a:2e:21:01:2d:e9:5e:a9:06:51:51: 99:18:8a:35:a3:dd:a2:52:fa:be:3d:1f:74:6a:34:77:66:df: f8:97:14:cf:9a:8c:e3:ba:d9:c1:84:9c:0e:09:49:47:9f:e9: c1:6b:23:d9:00:f4:40:44:22:7e:3c:cb:7d:34:a2:79:a9:d5: e5:ab:ab:72:d7:03:da:34:21:16:8f:e8:7d:6f:ba:77:a4:0f: 99:f0:a3:06:16:82:4d:ef:81:89:89:7a:ce:d5:f2:73:25:fa: cc:73:e0:90:f2:10:ad:be:de:80:ca:21:d4:65:d1:9e:77:04: 2a:23:de:81:f4:c9:0d:8d:41:45:15:99:f8:6c:1e:0b:0b:ca: 97:39:2a:46:b0:29:19:2c:da:e4:44:d3:c0:ba:fa:b9:24:44: 47:23:b5:4a -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWErZNl1pZ1h/ZcTFFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk NTAxZTdhYmQtMDEzMi00NDVlLTk2ZGYtY2Q5ZDRmOWUwZDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAha5K/so14nR54Aqlq4l36YsorP2q9MnMRNT6 zFzsWjXvpNLzRJy2RGBf3vzp53oKyDdqa8nEuNUGyNqro4L3cL90XaE3G1x8g50Q V6AeV/iLj4MxjVZKlx+I3pVTQHh12c5AC3/mCRpRnc7IGFnkmuCLtqVQKpolx52L TVqwkhr19UtmmSAd48dJKGrAv1HsWHS7qDgWWKS9P2QVgLXQeDR0qiPyz/wfkrV4 LC1vCKr35evCm0c2DmWR+adRuAfCK8UUUaXjE1v/d7gJGq0GDR209BiHawj0zBt1 prHq/eUUVvPQ5NusnF5f0vKf2N7RFR3jjzOPe+ED+f39DmDW2wIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFENR60JI3aao6OlYt7yqvh+ITH+3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYWZmMzYwMjMtMDFkNy0z MzcxLTljYmEtYjNkNDBhNGYzNDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEEGBQB AHEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAD8kmbuKR9vPOcfU3ApSN1Si6purjdZStZski6xvvNeNlV9yL ZOw8TQ1w7guTmgreZTOh9CFDVl3itg/xJFpF0X7p7ByrZAKqCy7xAlftoZfclpbB zJ7ESRyznWErtTIRZiouIQEt6V6pBlFRmRiKNaPdolL6vj0fdGo0d2bf+JcUz5qM 47rZwYScDglJR5/pwWsj2QD0QEQifjzLfTSieanV5aurctcD2jQhFo/ofW+6d6QP mfCjBhaCTe+BiYl6ztXycyX6zHPgkPIQrb7egMoh1GXRnncEKiPegfTJDY1BRRWZ +GweCwvKlzkqRrApGSza5ETTwLr6uSRERyO1Sg== -----END CERTIFICATE-----Generated at Sat Aug 23 13:04:02 2025 by rpki-client