$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b3f2a884-ed69-3b80-bb8e-3adc19af5d47.roa File: b3f2a884-ed69-3b80-bb8e-3adc19af5d47.roa (raw, json) Hash identifier: EW14GHy7pi2OEZnsZxS/2lRaVp1odDVdzmltK5StpfQ= Subject key identifier: 6C:63:F1:A6:2E:BF:9B:B5:7D:2D:75:77:C8:AF:30:30:2F:B5:D7:7C Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584B84E79B77AA9F2F64B1699B60 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b3f2a884-ed69-3b80-bb8e-3adc19af5d47.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 213802 IP address blocks: 2001:418:1411::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:9b:77:aa:9f:2f:64:b1:69:9b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=dcd5aaf8-e50d-4f6b-8efc-9c8642127dfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5f:de:c9:1b:4c:e0:68:8d:37:dc:86:08:dc: a8:b9:65:a6:75:06:45:d1:cb:a4:05:5d:e7:b6:9e: 35:18:a9:d9:1c:2d:d8:1e:c0:27:09:ca:76:ba:19: 48:2d:b1:e1:3c:cf:2d:36:41:99:5d:19:08:c2:59: d2:34:24:71:b6:d7:56:94:31:d3:e6:4b:71:dc:60: 16:1c:0f:81:8f:56:5b:03:88:79:1a:29:bd:45:3c: 0a:a1:16:11:1c:57:40:64:84:30:15:0e:01:b1:56: 94:ee:59:3c:f1:4e:6b:96:ca:76:cd:52:8e:cb:42: b9:89:c5:70:fa:7f:34:5a:31:7e:a5:7e:a5:c3:59: 15:74:d8:28:22:7f:28:d9:9a:a5:8c:37:49:f2:5d: c6:eb:84:b0:5b:64:a8:c6:1b:4a:50:34:e5:0c:a2: 95:25:75:30:ff:32:76:3d:e4:65:f8:ee:6b:d6:65: da:ce:c9:f3:b2:be:62:e7:43:76:a1:b4:01:15:18: da:d9:12:fe:c7:ba:fc:07:0a:36:b6:9c:09:ae:0a: da:4d:59:b5:f5:62:19:94:40:e7:95:41:73:5d:f0: 9d:f8:5b:38:bf:f0:11:68:0b:a9:6b:bc:3d:7d:be: c2:3d:5f:82:fa:40:9d:ea:f9:83:f5:f5:1f:b1:d5: c4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:63:F1:A6:2E:BF:9B:B5:7D:2D:75:77:C8:AF:30:30:2F:B5:D7:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b3f2a884-ed69-3b80-bb8e-3adc19af5d47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:1411::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:fc:6b:c8:7a:dd:ca:44:11:43:a2:47:38:04:b3:f2:23:bb: b0:81:f9:db:b6:76:0b:03:30:ab:e3:f3:cc:b1:d7:8f:fa:f3: 2c:6a:79:e6:ab:c1:da:8e:27:f9:54:c4:ac:99:8c:f0:67:f7: 92:c2:4e:e7:06:d9:27:f6:2d:58:34:bf:bc:e6:e8:02:21:95: 1f:4d:13:98:8c:90:09:21:11:64:33:88:b6:b3:4c:76:de:aa: 93:89:5c:b0:52:99:67:d8:0e:1c:ae:44:5c:85:85:d2:57:d0: c8:fb:7d:31:53:56:59:4a:85:0e:bd:0e:6d:12:d6:8b:42:bb: 6e:10:0c:aa:fe:ba:7b:cb:c3:88:61:0f:dd:50:1f:ef:ce:96: 7d:e3:83:8b:99:f2:85:cc:5b:44:cc:b0:c5:ec:8c:f6:55:64: 07:1f:ac:42:67:0a:84:32:14:14:7d:a4:73:29:42:ac:47:9c: b1:9c:a7:67:29:2d:a9:24:8f:a1:ed:a0:b5:77:c8:b2:47:78: 9e:19:29:68:64:2a:02:27:2f:c3:9e:12:6b:84:9f:95:4a:6c: 82:68:d2:05:23:62:19:22:17:08:ed:bb:dd:72:d4:55:6f:fd: ee:09:71:40:d8:14:40:a4:de:89:6e:ea:23:b8:c2:7c:6e:fb: 3b:9e:82:68 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuE55t3qp8vZLFpm2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk ZGNkNWFhZjgtZTUwZC00ZjZiLThlZmMtOWM4NjQyMTI3ZGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwV/eyRtM4GiNN9yGCNyouWWmdQZF0cukBV3n tp41GKnZHC3YHsAnCcp2uhlILbHhPM8tNkGZXRkIwlnSNCRxttdWlDHT5ktx3GAW HA+Bj1ZbA4h5Gim9RTwKoRYRHFdAZIQwFQ4BsVaU7lk88U5rlsp2zVKOy0K5icVw +n80WjF+pX6lw1kVdNgoIn8o2ZqljDdJ8l3G64SwW2SoxhtKUDTlDKKVJXUw/zJ2 PeRl+O5r1mXazsnzsr5i50N2obQBFRja2RL+x7r8Bwo2tpwJrgraTVm19WIZlEDn lUFzXfCd+Fs4v/ARaAupa7w9fb7CPV+C+kCd6vmD9fUfsdXEAwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGxj8aYuv5u1fS11d8ivMDAvtdd8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYjNmMmE4ODQtZWQ2OS0z YjgwLWJiOGUtM2FkYzE5YWY1ZDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEGBQR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFn8a8h63cpEEUOiRzgEs/Iju7CB+du2dgsDMKvj88yx14/68yxq eearwdqOJ/lUxKyZjPBn95LCTucG2Sf2LVg0v7zm6AIhlR9NE5iMkAkhEWQziLaz THbeqpOJXLBSmWfYDhyuRFyFhdJX0Mj7fTFTVllKhQ69Dm0S1otCu24QDKr+unvL w4hhD91QH+/Oln3jg4uZ8oXMW0TMsMXsjPZVZAcfrEJnCoQyFBR9pHMpQqxHnLGc p2cpLakkj6HtoLV3yLJHeJ4ZKWhkKgInL8OeEmuEn5VKbIJo0gUjYhkiFwjtu91y 1FVv/e4JcUDYFECk3olu6iO4wnxu+zuegmg= -----END CERTIFICATE-----Generated at Mon Oct 20 13:22:38 2025 by rpki-client