$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/dda362f9-2202-3de7-b435-698e1f31aa2c.roa File: dda362f9-2202-3de7-b435-698e1f31aa2c.roa (raw, json) Hash identifier: ehFIDgpMloplVNRLiamw5Bpq6ur22gg7bULv0d6CI4s= Subject key identifier: F6:D3:6A:E0:BE:B5:66:EE:A4:B5:41:D4:43:07:90:F5:F9:C7:0D:5F Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584AD9365E4720A26E9806880E00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/dda362f9-2202-3de7-b435-698e1f31aa2c.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 3938 IP address blocks: 2001:418:1401:f5::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:5e:47:20:a2:6e:98:06:88:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=22f8fd66-3510-4236-a368-92c6099ba406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:bf:8e:a7:1c:84:6c:5e:ee:23:9e:84:c2:42: 19:06:f8:9d:94:f6:26:3f:3d:df:4e:72:0f:4c:4f: 28:d9:5f:c5:83:c5:61:00:cb:3c:31:4b:ae:52:5b: 88:1f:8a:d6:35:c2:9c:47:d6:49:2e:57:fe:8e:aa: 22:85:56:68:ee:6f:ff:70:da:c9:e9:ef:73:35:cd: d8:fc:be:52:ae:de:04:8e:29:10:41:e4:ff:73:da: d5:7a:41:4d:55:09:32:90:25:1c:8a:5a:37:6c:6a: 54:93:0c:98:4c:59:dd:58:78:e9:d1:5b:46:f4:d2: a3:04:a2:89:2e:35:4d:67:a2:89:78:a2:e8:86:ee: bd:b1:4b:d9:74:f1:df:9e:b6:4f:0d:e3:9b:07:f1: c2:78:2f:6d:e9:69:a7:ef:7d:1c:36:a3:65:2e:2f: f1:4c:b8:dc:dd:d3:06:4a:f1:01:06:29:0f:d3:9d: db:a0:88:81:39:47:9d:ed:fe:97:7c:69:75:ad:78: 5b:dc:cf:1f:5f:04:1e:44:76:1d:c2:83:4d:25:06: 9b:16:af:21:bb:c7:02:1f:8c:6f:b6:37:3b:b1:f1: 40:09:a9:5a:b9:5c:dd:91:d5:ed:a3:dc:83:f7:75: e1:0c:4d:cb:3d:88:87:0d:48:bd:9e:e3:0b:e4:7a: 2c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:D3:6A:E0:BE:B5:66:EE:A4:B5:41:D4:43:07:90:F5:F9:C7:0D:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/dda362f9-2202-3de7-b435-698e1f31aa2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:1401:f5::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:3f:57:26:fd:6d:e9:69:cc:22:9a:62:27:68:3d:b2:cb:d6: a8:73:42:74:76:bb:06:26:8b:c0:d5:4f:c2:c3:0e:ff:39:c1: 07:4b:d5:57:8f:b2:b7:c7:c1:73:15:cc:65:a8:93:5b:0f:1d: c0:13:15:f7:e5:b2:1b:d1:91:40:14:43:7c:cc:c7:27:83:c5: 27:37:23:dd:61:76:16:ed:16:28:e7:29:1a:0a:75:f7:22:94: 55:5f:e3:dd:a5:58:be:c2:40:63:de:c1:f0:9f:0c:65:b6:5f: cb:99:d7:4a:43:1a:ed:0b:99:0e:48:2b:1c:48:7b:67:1d:92: 2c:0e:ba:da:73:f8:45:c1:83:10:82:b2:a2:33:35:19:e4:3c: 78:c4:f6:59:35:74:21:db:ce:87:dc:ce:d2:fc:48:3d:1f:88: b8:91:a6:58:b8:e6:fc:44:54:96:3a:4a:6e:7c:c3:6a:b9:d8: 0e:13:40:7f:05:b9:f4:5e:48:15:a5:1d:68:8b:64:f0:0e:fb: 91:14:80:a8:c7:ec:ea:97:11:3c:44:09:fa:b6:1d:06:24:70: b6:67:c2:9d:5e:dd:3f:2e:f7:b6:1a:18:48:77:4e:47:19:a2: a4:86:31:12:01:3d:a7:f9:32:a0:ad:c3:e0:97:66:0b:91:79: 81:d3:5a:8b -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWErZNl5HIKJumAaIDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk MjJmOGZkNjYtMzUxMC00MjM2LWEzNjgtOTJjNjA5OWJhNDA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlL+OpxyEbF7uI56EwkIZBvidlPYmPz3fTnIP TE8o2V/Fg8VhAMs8MUuuUluIH4rWNcKcR9ZJLlf+jqoihVZo7m//cNrJ6e9zNc3Y /L5Srt4EjikQQeT/c9rVekFNVQkykCUcilo3bGpUkwyYTFndWHjp0VtG9NKjBKKJ LjVNZ6KJeKLohu69sUvZdPHfnrZPDeObB/HCeC9t6Wmn730cNqNlLi/xTLjc3dMG SvEBBikP053boIiBOUed7f6XfGl1rXhb3M8fXwQeRHYdwoNNJQabFq8hu8cCH4xv tjc7sfFACalauVzdkdXto9yD93XhDE3LPYiHDUi9nuML5HoslwIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFPbTauC+tWbupLVB1EMHkPX5xw1fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZGRhMzYyZjktMjIwMi0z ZGU3LWI0MzUtNjk4ZTFmMzFhYTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEEGBQB APUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAxD9XJv1t6WnMIppiJ2g9ssvWqHNCdHa7BiaLwNVPwsMO/znB B0vVV4+yt8fBcxXMZaiTWw8dwBMV9+WyG9GRQBRDfMzHJ4PFJzcj3WF2Fu0WKOcp Ggp19yKUVV/j3aVYvsJAY97B8J8MZbZfy5nXSkMa7QuZDkgrHEh7Zx2SLA662nP4 RcGDEIKyojM1GeQ8eMT2WTV0IdvOh9zO0vxIPR+IuJGmWLjm/ERUljpKbnzDarnY DhNAfwW59F5IFaUdaItk8A77kRSAqMfs6pcRPEQJ+rYdBiRwtmfCnV7dPy73thoY SHdORxmipIYxEgE9p/kyoK3D4JdmC5F5gdNaiw== -----END CERTIFICATE-----Generated at Sat Aug 23 16:53:58 2025 by rpki-client