$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/de58a534-66be-3f5a-bf08-7f6aeec0845e.roa File: de58a534-66be-3f5a-bf08-7f6aeec0845e.roa (raw, json) Hash identifier: yFQjH6cFM4Z7d1Omli1sj4DSwZEfMS/3LNzgHJO5Bho= Subject key identifier: 34:9F:2F:C9:B0:84:11:6F:A5:AA:06:16:25:ED:22:B3:23:72:AD:9A Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584AD9365E9DDCAF73512F599E80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/de58a534-66be-3f5a-bf08-7f6aeec0845e.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 20940 IP address blocks: 2001:418:1401:2c::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:5e:9d:dc:af:73:51:2f:59:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=95bd2ea6-c585-4c4d-a780-ce9f6fde4867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b0:29:12:d0:68:e0:11:d2:73:56:4c:39:f4: cd:24:66:ed:99:82:cc:3a:1b:e1:27:4b:0e:37:63: 31:b2:31:73:35:90:c4:e9:ef:a2:b9:2e:13:0a:30: aa:98:e3:58:23:d7:2e:a3:18:bf:15:55:80:b6:a3: 38:0e:b7:00:54:a8:c5:ea:2c:76:74:7c:b4:cd:71: d1:59:97:34:e6:12:b7:25:fc:5a:21:43:99:2b:50: 2c:a2:84:ab:9e:3c:71:4a:b1:49:57:eb:74:4f:0f: de:57:d9:f3:79:60:fa:ed:09:11:d3:0b:d4:3e:f4: e2:61:c0:e9:4b:72:03:59:7f:0d:63:ed:e7:17:56: cb:75:c5:7c:e0:49:66:d9:f4:0b:0d:63:ba:15:c2: f4:c6:1b:8e:fe:03:47:0d:a4:48:7b:f7:56:91:44: 74:fb:4a:09:6c:14:27:00:62:c5:f2:f0:5e:66:5e: 46:ff:f4:f1:18:50:90:cf:6b:36:09:de:14:04:d2: b7:78:7d:72:e2:74:b6:67:17:7c:e5:ab:33:f1:aa: 10:a5:d2:bf:b5:9f:1c:98:26:27:db:a8:93:49:ed: f7:16:04:46:e6:46:cf:fa:1f:f8:46:be:59:70:31: 47:6e:63:cb:88:80:0c:8b:9a:51:9e:3f:d2:13:11: 05:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:9F:2F:C9:B0:84:11:6F:A5:AA:06:16:25:ED:22:B3:23:72:AD:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/de58a534-66be-3f5a-bf08-7f6aeec0845e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:1401:2c::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:3c:3e:32:45:f1:dd:dc:98:29:d8:0b:d1:6a:7c:fc:cc:f5: c6:0c:b0:01:d9:14:2a:7e:6f:84:2b:6e:37:42:6c:f7:c7:95: be:99:6c:01:5f:25:5a:bd:c0:06:b1:6c:ad:33:7a:d0:ff:11: 7d:f3:88:5f:4b:60:33:92:e1:8c:f6:5f:1d:07:b2:45:45:78: 95:ba:8a:b7:cb:4e:3b:bb:3e:12:76:a7:db:fc:2a:07:2e:ef: 50:15:17:fd:10:34:f5:55:99:94:79:f1:e6:83:e3:35:47:0f: 33:0c:54:f6:69:ce:9c:73:83:ed:18:99:4f:b8:3a:b7:69:b8: 88:6a:d9:29:1d:75:8e:c4:d0:39:bf:13:15:67:48:f9:88:e7: 6d:03:a7:12:11:20:91:9c:2a:0d:44:72:48:00:37:d6:f8:d4: ac:ef:1e:a3:8c:45:8c:50:86:a9:b6:0a:5e:7d:1a:a2:6f:06: 4a:17:38:97:20:fe:92:26:c5:ea:7c:5f:9e:ad:e5:a6:47:d6: b8:48:2f:1b:85:4d:51:90:da:7a:f8:a0:ee:3c:c7:43:7b:36: 30:28:08:57:a4:a6:38:7c:17:16:a8:48:ec:68:38:c3:af:1a: 76:b8:b5:ba:67:e8:4f:23:3a:63:44:cb:8b:e1:eb:af:9e:69: bf:68:ff:8c -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWErZNl6d3K9zUS9ZnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk OTViZDJlYTYtYzU4NS00YzRkLWE3ODAtY2U5ZjZmZGU0ODY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLApEtBo4BHSc1ZMOfTNJGbtmYLMOhvhJ0sO N2MxsjFzNZDE6e+iuS4TCjCqmONYI9cuoxi/FVWAtqM4DrcAVKjF6ix2dHy0zXHR WZc05hK3JfxaIUOZK1AsooSrnjxxSrFJV+t0Tw/eV9nzeWD67QkR0wvUPvTiYcDp S3IDWX8NY+3nF1bLdcV84Elm2fQLDWO6FcL0xhuO/gNHDaRIe/dWkUR0+0oJbBQn AGLF8vBeZl5G//TxGFCQz2s2Cd4UBNK3eH1y4nS2Zxd85asz8aoQpdK/tZ8cmCYn 26iTSe33FgRG5kbP+h/4Rr5ZcDFHbmPLiIAMi5pRnj/SExEF3wIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFDSfL8mwhBFvpaoGFiXtIrMjcq2aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZGU1OGE1MzQtNjZiZS0z ZjVhLWJmMDgtN2Y2YWVlYzA4NDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEEGBQB ACwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAoDw+MkXx3dyYKdgL0Wp8/Mz1xgywAdkUKn5vhCtuN0Js98eV vplsAV8lWr3ABrFsrTN60P8RffOIX0tgM5LhjPZfHQeyRUV4lbqKt8tOO7s+Enan 2/wqBy7vUBUX/RA09VWZlHnx5oPjNUcPMwxU9mnOnHOD7RiZT7g6t2m4iGrZKR11 jsTQOb8TFWdI+YjnbQOnEhEgkZwqDURySAA31vjUrO8eo4xFjFCGqbYKXn0aom8G Shc4lyD+kibF6nxfnq3lpkfWuEgvG4VNUZDaevig7jzHQ3s2MCgIV6SmOHwXFqhI 7Gg4w68adri1umfoTyM6Y0TLi+Hrr55pv2j/jA== -----END CERTIFICATE-----Generated at Sat Aug 23 13:11:04 2025 by rpki-client