$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b9592586-6ac6-3a7b-b963-6b4efdd8a405.roa File: b9592586-6ac6-3a7b-b963-6b4efdd8a405.roa (raw, json) Hash identifier: SSNf+oZ08+hr3t7s9KvGvVN1XPD/IveASa9GPpJhbGo= Subject key identifier: D9:43:8C:5B:E1:33:96:88:0C:C1:1C:4C:45:BA:58:54:18:C6:E1:F2 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BB02CFEE209037B3DF31ABD40 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b9592586-6ac6-3a7b-b963-6b4efdd8a405.roa Signing time: Thu 30 Oct 2025 01:00:30 +0000 ROA not before: Thu 30 Oct 2025 01:00:30 +0000 ROA not after: Wed 28 Jan 2026 02:00:30 +0000 asID: 396350 IP address blocks: 2001:418:1416::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:2c:fe:e2:09:03:7b:3d:f3:1a:bd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Oct 30 01:00:30 2025 GMT Not After : Jan 28 02:00:30 2026 GMT Subject: CN=32c8d123-a275-4cca-afdb-51a97dc808a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:57:67:bc:4a:19:f7:1c:bd:25:57:21:90:fe: 3e:3a:2b:45:f1:e8:1c:9d:5a:3a:f2:37:08:c8:2e: 93:4e:d1:20:de:1d:f1:cf:bf:e2:98:22:52:e1:18: fe:53:d5:ae:9c:69:a1:a0:9d:8b:4b:84:db:16:80: 44:2f:ba:8d:34:9d:94:19:e6:64:04:33:4a:69:31: 83:5c:92:90:28:4a:20:20:79:47:9b:50:2e:67:13: 96:b6:62:94:3a:68:0e:80:df:0c:8b:1b:df:8c:ec: 46:ca:f8:af:5d:32:f4:98:dd:67:20:09:26:a4:14: 53:79:66:ed:12:81:d0:ed:5e:bb:46:94:cf:8e:20: 6b:49:a4:59:f9:6d:83:c7:2a:61:d2:5a:6c:be:77: 4a:55:02:f6:14:cd:6e:02:7e:49:97:89:90:bd:dd: 1b:d3:7f:ea:a6:58:d5:03:64:8e:62:f2:98:53:24: 99:6f:05:15:4f:1f:ae:3a:22:59:5e:86:43:39:81: eb:80:77:51:4d:3e:49:86:2a:ee:9c:6b:34:a1:10: d2:2d:0b:27:3e:81:94:a9:b5:b9:17:7d:99:54:8a: bb:e3:86:ef:b2:4a:5d:57:eb:71:87:b7:43:25:8f: 48:64:5f:9b:fb:63:3e:57:2b:a3:8d:c2:02:2f:e5: 9c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:43:8C:5B:E1:33:96:88:0C:C1:1C:4C:45:BA:58:54:18:C6:E1:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b9592586-6ac6-3a7b-b963-6b4efdd8a405.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:1416::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:3c:d8:ec:ba:2f:5a:36:9d:86:79:84:f3:0b:9e:63:89:5f: 1e:fb:ae:a1:90:71:11:c2:ef:98:b4:47:cd:96:f2:33:09:70: 94:51:07:1b:3e:b1:49:ce:56:b7:74:51:5f:43:3f:74:2d:19: ce:f7:bd:f4:77:9a:3a:03:84:76:b8:bc:0e:c0:8b:7b:da:5b: 3b:7f:ff:c1:16:3e:3a:b5:40:c0:d4:0d:c4:26:46:33:10:e8: 16:cd:d8:ff:ba:c0:8f:ab:9a:ff:15:c5:3e:c7:66:ec:25:7a: 8b:e5:94:a5:f1:a9:92:c7:0f:85:61:d3:d7:bb:1e:a9:9a:a6: ab:e4:65:af:9f:4e:b3:57:44:70:aa:94:f4:be:eb:be:14:dd: f4:06:de:52:ce:36:1f:d7:3d:f0:21:39:88:83:9b:e5:ee:30: d0:d2:5c:41:6a:92:4a:28:67:b8:ca:36:e5:47:47:fe:e4:eb: 63:88:a6:de:47:ef:35:fa:67:29:9f:7e:d5:dd:ae:55:6e:f7: cb:a3:a0:f6:38:7b:8c:b2:f0:ac:b9:ff:d2:e0:ad:be:35:e8: db:76:f9:f9:bc:f1:99:6a:81:4d:86:0f:fe:56:73:0b:ea:80: e9:40:39:db:81:9a:05:fc:c1:69:01:b9:eb:17:68:8d:48:be: d6:41:fc:a1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuwLP7iCQN7PfMavUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk MzJjOGQxMjMtYTI3NS00Y2NhLWFmZGItNTFhOTdkYzgwOGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1dnvEoZ9xy9JVchkP4+OitF8egcnVo68jcI yC6TTtEg3h3xz7/imCJS4Rj+U9WunGmhoJ2LS4TbFoBEL7qNNJ2UGeZkBDNKaTGD XJKQKEogIHlHm1AuZxOWtmKUOmgOgN8MixvfjOxGyvivXTL0mN1nIAkmpBRTeWbt EoHQ7V67RpTPjiBrSaRZ+W2Dxyph0lpsvndKVQL2FM1uAn5Jl4mQvd0b03/qpljV A2SOYvKYUySZbwUVTx+uOiJZXoZDOYHrgHdRTT5JhirunGs0oRDSLQsnPoGUqbW5 F32ZVIq744bvskpdV+txh7dDJY9IZF+b+2M+VyujjcICL+WcpwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNlDjFvhM5aIDMEcTEW6WFQYxuHyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYjk1OTI1ODYtNmFjNi0z YTdiLWI5NjMtNmI0ZWZkZDhhNDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEGBQW MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEo82Oy6L1o2nYZ5hPMLnmOJXx77rqGQcRHC75i0R82W8jMJcJRR Bxs+sUnOVrd0UV9DP3QtGc73vfR3mjoDhHa4vA7Ai3vaWzt//8EWPjq1QMDUDcQm RjMQ6BbN2P+6wI+rmv8VxT7HZuwleovllKXxqZLHD4Vh09e7HqmapqvkZa+fTrNX RHCqlPS+674U3fQG3lLONh/XPfAhOYiDm+XuMNDSXEFqkkooZ7jKNuVHR/7k62OI pt5H7zX6ZymfftXdrlVu98ujoPY4e4yy8Ky5/9Lgrb416Nt2+fm88ZlqgU2GD/5W cwvqgOlAOduBmgX8wWkBuesXaI1IvtZB/KE= -----END CERTIFICATE-----Generated at Sat Nov 1 19:55:46 2025 by rpki-client