$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ae636f1a-35e3-362c-a291-972d10f2a58a.roa File: ae636f1a-35e3-362c-a291-972d10f2a58a.roa (raw, json) Hash identifier: ksJHjob1UMmfYOyso1D5Tru7Cqg80mVwny0BeZUvAOY= Subject key identifier: EC:07:D3:DB:B5:00:E1:E3:EA:51:93:F8:05:7A:0A:08:C2:F2:32:CA Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584AE4611EEFDCA8A70CB0351D00 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ae636f1a-35e3-362c-a291-972d10f2a58a.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 21928 IP address blocks: 2001:4870:e00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:1e:ef:dc:a8:a7:0c:b0:35:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=ebd85f55-c298-42fa-b59a-61e834b80364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:26:e3:f8:19:c8:73:dd:79:a2:e5:2a:52:4d: 9b:2c:60:37:dd:37:48:c2:bb:b6:7b:a9:5b:47:cd: dd:c3:c8:c9:30:5b:a1:5a:ce:fb:52:dc:be:a4:d2: a7:13:fd:7b:80:8f:cf:57:07:d9:90:ee:63:28:8c: c1:81:9a:42:b3:68:bc:bb:e1:bf:7b:4e:d5:fe:94: 4c:26:c2:aa:21:a9:6c:15:36:cb:0b:d7:93:82:6e: 30:c7:c5:16:53:5c:2a:de:9b:b5:81:c4:ce:2c:da: a2:45:f1:1d:d9:b6:9d:9b:02:ba:a1:93:f5:ea:1e: d2:8b:eb:f1:07:17:7e:07:f5:f5:14:80:a9:dc:96: 06:77:09:3d:e1:62:cd:06:10:4e:8e:05:47:b4:42: 97:16:89:ed:24:52:6b:ee:47:e9:23:37:1f:5b:d5: 2d:a4:71:3d:85:ac:e9:4f:ea:d9:2f:d0:d3:67:2e: f5:6b:7e:7b:d3:da:ff:1f:2d:43:1c:bf:c0:c3:e5: fe:10:85:2d:f9:b0:52:87:d0:e3:25:d1:aa:d9:77: ad:12:9f:51:25:a6:5e:2b:ab:22:ef:8a:3a:e1:0c: 2e:72:38:15:68:c8:48:51:27:8c:db:22:bf:44:d3: e3:b1:48:19:04:ce:ae:3c:56:2c:ba:69:36:1d:68: 89:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:07:D3:DB:B5:00:E1:E3:EA:51:93:F8:05:7A:0A:08:C2:F2:32:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ae636f1a-35e3-362c-a291-972d10f2a58a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv6: 2001:4870:e00b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:02:05:76:58:a9:ca:1f:a1:f4:31:d4:67:f7:cf:2a:86:35: dc:38:29:19:66:53:32:01:3e:68:14:59:af:9d:e0:d7:04:f4: cc:a0:a7:32:e8:e8:1a:ac:1d:7d:fc:5b:53:37:44:c7:6b:8c: 38:06:e2:c0:95:c2:33:05:92:7d:f0:46:46:f4:eb:d8:8f:12: c3:b7:21:bf:15:ac:74:36:23:b3:fe:9a:5d:ca:e9:31:af:8b: 3b:4f:db:db:63:80:4e:d5:e4:08:d3:2d:a4:96:8a:ac:82:69: 12:1b:ff:1c:cd:58:3d:3e:6c:2e:3e:a6:2b:14:91:70:48:ef: 41:50:36:ce:db:ba:62:c1:bf:a6:9f:85:bb:d2:b3:0d:00:dd: cb:aa:5b:f7:27:5e:17:12:f8:03:bf:3a:a8:8f:59:b4:49:76: 75:30:81:f4:0e:ad:29:08:3f:2b:e2:c9:44:c9:1b:6f:70:91: dd:e4:1a:16:63:fd:36:43:60:51:73:87:9a:9e:66:43:df:91: bf:28:cf:42:4c:84:00:ea:15:32:cf:a6:94:e0:0f:7a:c4:b5: 6f:a2:2d:fa:f0:d7:0f:15:7e:62:5f:01:49:c7:70:ac:4e:de: af:da:0d:c2:19:b3:a1:92:a5:05:c9:0f:5a:67:c8:73:7d:74: 45:17:d6:ee -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErkYR7v3KinDLA1HQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk ZWJkODVmNTUtYzI5OC00MmZhLWI1OWEtNjFlODM0YjgwMzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSbj+BnIc915ouUqUk2bLGA33TdIwru2e6lb R83dw8jJMFuhWs77Uty+pNKnE/17gI/PVwfZkO5jKIzBgZpCs2i8u+G/e07V/pRM JsKqIalsFTbLC9eTgm4wx8UWU1wq3pu1gcTOLNqiRfEd2badmwK6oZP16h7Si+vx Bxd+B/X1FICp3JYGdwk94WLNBhBOjgVHtEKXFontJFJr7kfpIzcfW9UtpHE9hazp T+rZL9DTZy71a35709r/Hy1DHL/Aw+X+EIUt+bBSh9DjJdGq2XetEp9RJaZeK6si 74o64QwucjgVaMhIUSeM2yK/RNPjsUgZBM6uPFYsumk2HWiJ4wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOwH09u1AOHj6lGT+AV6CgjC8jLKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvYWU2MzZmMWEtMzVlMy0z NjJjLWEyOTEtOTcyZDEwZjJhNThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIcOAL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFUCBXZYqcofofQx1Gf3zyqGNdw4KRlmUzIBPmgUWa+d4NcE9Myg pzLo6BqsHX38W1M3RMdrjDgG4sCVwjMFkn3wRkb069iPEsO3Ib8VrHQ2I7P+ml3K 6TGviztP29tjgE7V5AjTLaSWiqyCaRIb/xzNWD0+bC4+pisUkXBI70FQNs7bumLB v6afhbvSsw0A3cuqW/cnXhcS+AO/OqiPWbRJdnUwgfQOrSkIPyviyUTJG29wkd3k GhZj/TZDYFFzh5qeZkPfkb8oz0JMhADqFTLPppTgD3rEtW+iLfrw1w8VfmJfAUnH cKxO3q/aDcIZs6GSpQXJD1pnyHN9dEUX1u4= -----END CERTIFICATE-----Generated at Mon Nov 3 21:57:46 2025 by rpki-client