$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c06dfc86-1b61-3407-a99c-95e4e3d9ec33.roa File: c06dfc86-1b61-3407-a99c-95e4e3d9ec33.roa (raw, json) Hash identifier: MKZ4Q9cGFSDsYahb9x50XQzniwlmiU/lTtWGuZPavag= Subject key identifier: C5:F3:E4:D6:3C:C3:FF:00:BA:71:D0:17:62:81:27:92:15:80:5E:45 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584AD7D1245093625551F31E2D00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c06dfc86-1b61-3407-a99c-95e4e3d9ec33.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 20940 IP address blocks: 2001:418:1401:500::/56 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:24:50:93:62:55:51:f3:1e:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=1c23380d-b325-4356-87dc-a7785522a946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:99:be:11:34:c4:da:0b:f2:07:0f:58:54:f0: f5:50:52:ef:99:3c:46:c6:8b:0b:7e:8c:8d:bf:57: f9:51:97:d3:33:0f:d0:52:16:e8:45:2a:f3:d2:d2: e0:6b:47:ef:b5:a6:fe:50:04:42:3d:85:3b:35:f8: 26:d0:e8:5e:f9:ec:38:07:86:f9:05:a7:9d:fe:68: cd:73:41:ca:1a:f4:6b:81:2c:e6:99:29:b6:af:d8: 0f:f9:be:94:7e:94:f6:ec:08:a6:d1:18:ed:1a:6a: f4:63:90:62:0d:d5:cc:37:ee:b1:ef:7f:22:e1:db: fe:7a:e5:e9:9e:5e:2f:d7:73:98:d0:d5:bf:b4:69: 9a:65:97:2a:db:84:19:2f:60:1a:1c:24:66:e0:3b: 57:f6:7a:59:b8:53:78:40:ca:a5:e5:0d:bc:14:b5: f5:48:8c:3b:2c:f0:11:41:7c:95:71:9a:6e:e2:c9: da:c6:18:fc:6a:ae:66:41:00:51:17:2f:e9:27:8e: f4:68:df:b0:a7:f4:d8:d3:54:43:d4:5f:5f:12:72: 33:97:44:3f:1f:3e:63:89:a0:7f:fe:8f:41:a4:94: a5:18:4d:eb:53:48:79:5b:9d:8d:e2:7e:4e:f7:e2: 66:78:4c:f7:a5:f6:34:e9:a7:f6:2d:8b:d7:ee:79: b0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:F3:E4:D6:3C:C3:FF:00:BA:71:D0:17:62:81:27:92:15:80:5E:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c06dfc86-1b61-3407-a99c-95e4e3d9ec33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:1401:500::/56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:88:28:dc:cf:04:1a:54:c1:36:d9:7f:b8:e1:0f:80:b6:90: 4d:50:3c:de:17:78:8b:5c:7a:f5:03:3e:33:85:3a:82:2e:92: f2:07:8d:c4:d9:f5:92:aa:f3:da:c2:58:9d:a7:2c:23:68:c9: 92:8c:12:0f:21:32:7c:48:7b:82:b3:e2:69:1f:04:e4:e7:0b: dd:bb:fd:0c:7e:07:ef:30:85:d5:f4:ee:01:ce:87:2e:74:3f: a9:a9:1d:cd:27:58:4a:5a:b6:d7:30:0b:45:b3:c6:cf:bf:9b: ee:0a:3a:f4:15:01:4b:97:7f:f6:e2:76:08:37:09:be:a6:79: be:2a:06:90:38:46:c1:cf:d1:0c:06:d1:82:04:54:a2:d0:11: be:ac:76:5e:96:85:84:3e:de:f0:e4:f2:3c:79:15:68:f6:a3: 7b:19:e4:03:ec:99:93:b7:98:ce:cb:44:fa:0c:dc:71:d1:9b: c7:ea:e0:92:56:f1:1e:bd:45:f2:c7:95:7f:f9:e0:a5:50:1c: 5e:dd:46:08:00:a9:c3:fc:5b:56:ea:37:62:f3:dd:3c:ff:92: 2f:ee:3e:28:96:82:d7:ac:a0:4c:ac:c9:d9:ca:40:8c:54:29: c9:0f:0f:c3:74:26:ae:0c:1b:49:8a:38:e0:d3:f1:ad:ba:82: a2:a6:2b:09 -----BEGIN CERTIFICATE----- MIIGRzCCBS+gAwIBAgIUAQ0Mn0MoWErX0SRQk2JVUfMeLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk MWMyMzM4MGQtYjMyNS00MzU2LTg3ZGMtYTc3ODU1MjJhOTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZm+ETTE2gvyBw9YVPD1UFLvmTxGxosLfoyN v1f5UZfTMw/QUhboRSrz0tLga0fvtab+UARCPYU7Nfgm0Ohe+ew4B4b5Baed/mjN c0HKGvRrgSzmmSm2r9gP+b6UfpT27Aim0RjtGmr0Y5BiDdXMN+6x738i4dv+euXp nl4v13OY0NW/tGmaZZcq24QZL2AaHCRm4DtX9npZuFN4QMql5Q28FLX1SIw7LPAR QXyVcZpu4snaxhj8aq5mQQBRFy/pJ470aN+wp/TY01RD1F9fEnIzl0Q/Hz5jiaB/ /o9BpJSlGE3rU0h5W52N4n5O9+JmeEz3pfY06af2LYvX7nmwnQIDAQABo4IDWTCC A1UwHQYDVR0OBBYEFMXz5NY8w/8AunHQF2KBJ5IVgF5FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYzA2ZGZjODYtMWI2MS0z NDA3LWE5OWMtOTVlNGUzZDllYzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAAjAKAwgAIAEEGBQB BTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQCxiCjczwQaVME22X+44Q+AtpBNUDzeF3iLXHr1Az4zhTqCLpLy B43E2fWSqvPawlidpywjaMmSjBIPITJ8SHuCs+JpHwTk5wvdu/0MfgfvMIXV9O4B zocudD+pqR3NJ1hKWrbXMAtFs8bPv5vuCjr0FQFLl3/24nYINwm+pnm+KgaQOEbB z9EMBtGCBFSi0BG+rHZeloWEPt7w5PI8eRVo9qN7GeQD7JmTt5jOy0T6DNxx0ZvH 6uCSVvEevUXyx5V/+eClUBxe3UYIAKnD/FtW6jdi8908/5Iv7j4oloLXrKBMrMnZ ykCMVCnJDw/DdCauDBtJijjg0/GtuoKipisJ -----END CERTIFICATE-----Generated at Sat Aug 23 14:52:08 2025 by rpki-client