$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/dde03462-bea1-3694-8eff-b21c9b05836f.roa File: dde03462-bea1-3694-8eff-b21c9b05836f.roa (raw, json) Hash identifier: QybnAiqxY022x9sC01tIALxqoVyR7ibDcCwXzDkIBF8= Subject key identifier: 7C:25:A2:60:1C:7E:5B:62:D6:9C:D2:74:45:F8:80:48:70:EE:05:B8 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584AD7D11749921362999B4EDBC0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/dde03462-bea1-3694-8eff-b21c9b05836f.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 1225 IP address blocks: 2001:418:3ff:4::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:17:49:92:13:62:99:9b:4e:db:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=5da70717-8ab2-49d5-bdb0-00a1125329e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:22:9a:04:42:ae:04:87:7d:6c:dc:6f:65:ac: 0d:cb:be:b3:6b:c5:73:8d:eb:2e:a7:c7:76:06:be: 06:60:5d:f4:cc:5c:0e:9b:f8:24:16:aa:42:9c:54: 99:63:19:01:14:3c:e8:5c:13:34:99:79:12:55:cc: d0:71:4b:41:83:33:d4:02:5c:21:be:15:3b:0f:ec: d9:fc:7a:6b:19:42:07:5f:46:5c:02:66:c8:9b:c3: b9:14:92:71:28:a7:bc:59:92:a3:8e:cf:fa:8e:87: b5:28:6a:5e:69:56:ae:97:6a:8a:2e:cf:14:7a:b1: 85:57:d1:c8:31:9b:22:34:33:0c:b3:8d:70:65:24: 87:9c:cd:f5:da:05:79:d1:e5:3e:6f:d0:8a:bc:6b: 98:73:73:c4:11:91:46:1c:c1:a3:fb:3e:24:64:d5: f9:f7:60:25:63:65:14:4e:bb:50:fa:89:78:74:5b: ca:96:95:88:b2:30:c3:e0:4b:eb:1f:cd:6b:a9:d6: 7d:99:d6:21:d1:c6:4b:45:0a:e4:e2:6c:1e:3b:bc: 93:9a:66:ac:44:31:94:5c:d9:da:a0:0c:7d:4a:08: c1:5c:2b:cf:08:36:68:7c:24:4a:47:ed:93:86:e0: 0e:92:d9:21:44:7a:fa:1f:36:6e:f8:27:f5:56:95: 99:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:25:A2:60:1C:7E:5B:62:D6:9C:D2:74:45:F8:80:48:70:EE:05:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/dde03462-bea1-3694-8eff-b21c9b05836f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:3ff:4::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:6b:66:ce:89:75:c0:f9:13:d7:52:b6:54:ab:2e:26:9f:3e: 32:63:5d:fc:d5:ad:b8:7c:ed:78:91:1c:f6:9d:86:02:d1:31: 7a:ce:7e:9d:10:6a:f1:b7:e8:b8:37:d7:84:30:15:e8:7c:02: b0:09:ed:af:21:6d:9b:bf:18:ff:c0:63:d4:c5:ad:e2:f1:9b: c5:ae:b8:e9:10:67:c4:c3:85:05:4d:a8:a2:67:d3:9c:a5:53: 86:c6:b2:e2:59:87:90:76:1f:b8:a9:8b:03:e9:77:32:c6:44: 81:5c:3c:97:86:fc:40:6b:f7:1b:04:4f:4b:4a:81:a3:a5:e9: d0:d3:82:a2:fa:99:06:47:ce:19:14:f5:f5:da:e9:9f:a6:10: 20:4f:4c:40:6c:f8:1a:4e:72:b5:c1:ad:a6:21:74:be:73:8c: b7:22:2b:00:73:fd:71:c5:96:77:e3:64:19:a4:9f:f6:b3:22: a1:33:b0:5a:47:9a:1b:30:e8:22:4e:83:64:78:32:a6:53:c9: e9:6e:5a:b4:e7:ba:95:4a:b8:95:91:93:94:16:74:a0:e3:20: dc:a6:90:1b:57:53:0b:47:5e:b5:8b:31:58:e3:6b:13:59:3a: 2a:c0:63:ef:a3:fc:3a:05:90:c1:de:e8:06:ab:b8:19:03:8b: ff:76:0b:c9 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWErX0RdJkhNimZtO28AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk NWRhNzA3MTctOGFiMi00OWQ1LWJkYjAtMDBhMTEyNTMyOWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCKaBEKuBId9bNxvZawNy76za8Vzjesup8d2 Br4GYF30zFwOm/gkFqpCnFSZYxkBFDzoXBM0mXkSVczQcUtBgzPUAlwhvhU7D+zZ /HprGUIHX0ZcAmbIm8O5FJJxKKe8WZKjjs/6joe1KGpeaVaul2qKLs8UerGFV9HI MZsiNDMMs41wZSSHnM312gV50eU+b9CKvGuYc3PEEZFGHMGj+z4kZNX592AlY2UU TrtQ+ol4dFvKlpWIsjDD4EvrH81rqdZ9mdYh0cZLRQrk4mweO7yTmmasRDGUXNna oAx9SgjBXCvPCDZofCRKR+2ThuAOktkhRHr6HzZu+Cf1VpWZAQIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFHwlomAcflti1pzSdEX4gEhw7gW4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZGRlMDM0NjItYmVhMS0z Njk0LThlZmYtYjIxYzliMDU4MzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEEGAP/ AAQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAemtmzol1wPkT11K2VKsuJp8+MmNd/NWtuHzteJEc9p2GAtEx es5+nRBq8bfouDfXhDAV6HwCsAntryFtm78Y/8Bj1MWt4vGbxa646RBnxMOFBU2o omfTnKVThsay4lmHkHYfuKmLA+l3MsZEgVw8l4b8QGv3GwRPS0qBo6Xp0NOCovqZ BkfOGRT19drpn6YQIE9MQGz4Gk5ytcGtpiF0vnOMtyIrAHP9ccWWd+NkGaSf9rMi oTOwWkeaGzDoIk6DZHgyplPJ6W5atOe6lUq4lZGTlBZ0oOMg3KaQG1dTC0detYsx WONrE1k6KsBj76P8OgWQwd7oBqu4GQOL/3YLyQ== -----END CERTIFICATE-----Generated at Sat Aug 23 18:01:05 2025 by rpki-client