$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1ee14d2c-bab1-3488-ade8-679fa306a629.roa File: 1ee14d2c-bab1-3488-ade8-679fa306a629.roa (raw, json) Hash identifier: mfP7x5JOarppv1dAAWKkSpaOx/GkU/6flD7D0KxYitU= Subject key identifier: CE:5F:A7:82:A5:46:C1:60:22:B8:01:29:D4:DD:5A:7C:35:ED:C0:82 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BB88D27A03353832BF1623F40 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1ee14d2c-bab1-3488-ade8-679fa306a629.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 1225 IP address blocks: 2001:418:1456:b0a::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:27:a0:33:53:83:2b:f1:62:3f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=dc8eb1d6-b837-45b1-81c3-1391c5e5d5e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:13:b4:8b:30:7b:1b:5c:99:b6:c4:7c:38:a4: b7:11:14:4e:95:16:b9:f9:d1:fb:fa:71:73:a0:dc: ee:30:f1:32:63:c0:9f:60:3a:ff:30:b3:97:23:80: cd:0e:56:60:4a:0d:7c:26:0f:ff:fe:3f:fd:c9:dc: 9a:08:70:aa:66:55:02:64:73:a2:a6:d1:a2:68:ad: 7a:4d:70:2d:8c:15:aa:d2:cb:12:72:cb:43:40:80: a7:a4:13:72:9e:63:16:21:74:51:08:b1:6f:34:df: 47:c0:ad:35:c7:cd:26:f2:5c:67:bb:2d:9c:ec:85: 9d:2f:21:d8:5c:cc:10:eb:a7:82:2c:b0:50:a8:dc: ab:79:bc:d4:2c:4d:85:85:28:99:f5:87:4a:1b:8a: 46:4b:6e:0e:78:77:15:5c:c5:1a:0c:4a:27:0d:07: 0e:88:91:ad:af:b7:a4:25:70:25:da:fd:a7:73:86: c4:7b:e2:4c:a8:36:ad:8e:d5:2a:f3:c6:42:9e:16: 0b:3b:1a:a0:6f:41:46:1f:38:4f:f8:55:59:bd:4f: 26:be:83:a0:ba:dd:80:01:fb:2f:dc:c4:6c:fd:f2: 28:d2:37:68:bc:3d:e9:bd:d8:4f:2d:e8:f1:f1:19: 85:82:a0:82:4b:10:90:1f:a2:43:9e:77:17:4e:34: a0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:5F:A7:82:A5:46:C1:60:22:B8:01:29:D4:DD:5A:7C:35:ED:C0:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1ee14d2c-bab1-3488-ade8-679fa306a629.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:1456:b0a::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:5c:da:4c:2e:2f:1f:e8:13:dd:2f:a7:c5:e5:81:5d:18:44: 2c:a0:74:77:63:e1:85:46:98:51:06:56:93:9a:af:34:2a:06: 32:1b:fe:de:4b:f7:56:6e:d7:f7:b6:78:23:1e:df:6d:31:7b: 73:7e:af:98:61:65:5c:5e:3c:dd:de:8a:fb:9e:39:81:1f:b2: d8:cb:5b:29:1e:33:74:05:39:08:28:bc:3e:1b:94:86:6b:6a: fe:80:f6:e0:4b:53:71:a8:52:4e:ff:36:23:97:cc:5a:1c:65: c2:f4:ee:ed:df:7d:23:fb:6a:4f:1b:8b:20:38:ec:3f:10:64: dc:1d:37:59:59:19:e7:7b:78:e8:02:13:83:3a:41:86:fb:32: 07:53:5c:75:a9:00:79:3d:22:d1:32:4d:4f:37:91:49:f3:20: 6a:85:2f:b3:e6:3c:68:5c:8c:09:51:aa:43:7b:b4:fc:8b:4c: f2:4c:04:69:ea:8d:c6:e0:34:15:d4:8e:d9:8b:08:c7:b0:30: 6f:89:17:dd:ef:d5:2f:ac:9c:2c:4e:32:81:7a:2d:f8:a6:76: f3:f2:25:e0:fc:13:e6:32:66:07:be:f5:0c:fe:60:f4:19:5c: 64:e0:cc:a7:3e:6a:6d:a8:bc:54:c9:e2:ab:a7:d4:37:ea:a8: 6f:44:65:0c -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEu4jSegM1ODK/FiP0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZGM4ZWIxZDYtYjgzNy00NWIxLTgxYzMtMTM5MWM1ZTVkNWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhO0izB7G1yZtsR8OKS3ERROlRa5+dH7+nFz oNzuMPEyY8CfYDr/MLOXI4DNDlZgSg18Jg///j/9ydyaCHCqZlUCZHOiptGiaK16 TXAtjBWq0ssScstDQICnpBNynmMWIXRRCLFvNN9HwK01x80m8lxnuy2c7IWdLyHY XMwQ66eCLLBQqNyrebzULE2FhSiZ9YdKG4pGS24OeHcVXMUaDEonDQcOiJGtr7ek JXAl2v2nc4bEe+JMqDatjtUq88ZCnhYLOxqgb0FGHzhP+FVZvU8mvoOgut2AAfsv 3MRs/fIo0jdovD3pvdhPLejx8RmFgqCCSxCQH6JDnncXTjSg2QIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFM5fp4KlRsFgIrgBKdTdWnw17cCCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMWVlMTRkMmMtYmFiMS0z NDg4LWFkZTgtNjc5ZmEzMDZhNjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEEGBRW CwowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEALlzaTC4vH+gT3S+nxeWBXRhELKB0d2PhhUaYUQZWk5qvNCoG Mhv+3kv3Vm7X97Z4Ix7fbTF7c36vmGFlXF483d6K+545gR+y2MtbKR4zdAU5CCi8 PhuUhmtq/oD24EtTcahSTv82I5fMWhxlwvTu7d99I/tqTxuLIDjsPxBk3B03WVkZ 53t46AITgzpBhvsyB1NcdakAeT0i0TJNTzeRSfMgaoUvs+Y8aFyMCVGqQ3u0/ItM 8kwEaeqNxuA0FdSO2YsIx7Awb4kX3e/VL6ycLE4ygXot+KZ28/Il4PwT5jJmB771 DP5g9BlcZODMpz5qbai8VMniq6fUN+qob0RlDA== -----END CERTIFICATE-----Generated at Sun Nov 2 23:39:23 2025 by rpki-client