$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bcc31c08-1368-3bd3-a890-bedad0c0ca23.roa File: bcc31c08-1368-3bd3-a890-bedad0c0ca23.roa (raw, json) Hash identifier: av3B4gwrbDzPb2ffuqa2tUHpD5mXknnR+iIb63L//Ko= Subject key identifier: CA:3F:06:D3:5F:8F:8B:31:9B:B0:FF:5E:F9:0D:5B:40:4F:65:2A:D9 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BBA1044D5D83711A817E5B980 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bcc31c08-1368-3bd3-a890-bedad0c0ca23.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 397601 IP address blocks: 2001:418:1456:b21::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:44:d5:d8:37:11:a8:17:e5:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=d6953521-6c6d-4799-8e34-64fce4fe3551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b6:2b:b3:5d:d4:6d:f6:69:fe:f2:66:7b:c6: 89:bf:c5:ee:5f:1e:5e:11:9b:08:57:d7:f0:ed:78: c0:f6:35:f8:b5:71:06:b2:e7:31:cb:89:37:54:e4: 51:9f:84:dd:8e:0c:b9:e4:f9:b1:16:9d:cd:d3:88: 5c:c6:80:56:7d:82:12:e1:94:01:5d:e0:e9:31:27: 7f:48:a7:2d:5a:3f:73:7e:d3:52:2a:77:9c:79:e4: 2b:21:96:0e:71:69:ce:05:88:f5:52:8e:8d:69:75: d2:09:7c:d0:06:05:cb:65:3c:38:ae:bf:c4:81:a1: 7b:57:dc:2b:1b:3b:ad:a6:5b:52:c9:fa:ac:79:85: 21:e1:96:20:23:ff:83:ea:99:10:cc:2a:43:ef:b0: 54:9b:33:c1:d1:39:32:2c:02:3a:ca:a5:7b:d2:99: 14:70:cf:1a:7a:e9:40:ee:62:ed:80:5d:8f:16:44: 31:05:66:66:df:36:7c:d4:78:8d:3b:3c:62:01:ee: 73:3d:15:b4:bb:08:e6:f2:7a:ef:43:bf:38:8e:31: 70:94:ef:b3:5e:17:62:36:f2:14:53:8e:93:f3:bc: 5e:25:b3:ca:e1:b6:e1:92:d4:b8:71:34:36:23:8b: 90:b2:40:2e:50:73:ec:b5:7d:60:0b:9f:a4:2d:40: 5c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:3F:06:D3:5F:8F:8B:31:9B:B0:FF:5E:F9:0D:5B:40:4F:65:2A:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bcc31c08-1368-3bd3-a890-bedad0c0ca23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:1456:b21::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:dc:25:50:be:c7:75:61:4c:66:3d:66:3e:26:fd:e8:2c:a2: 15:29:0d:05:fd:45:8b:c9:78:08:7d:24:49:9e:f1:ee:98:e0: af:93:40:38:11:2b:52:62:2b:83:3f:ef:ec:4b:14:5f:dd:15: 18:8f:58:40:3f:36:fd:73:d6:11:59:d8:c9:a3:5c:6d:a1:0f: c8:30:a7:79:c3:a0:7d:0e:93:30:fa:0c:c2:85:e5:8e:85:3b: d8:66:87:2b:c2:7d:d6:4e:60:0d:c3:24:f1:66:bf:7c:04:1d: 88:20:28:39:a9:21:13:05:cc:ae:1f:25:19:5a:31:86:ca:b1: ac:19:92:74:e6:f4:c1:1e:f0:3b:f2:58:e4:bf:83:8e:cf:8a: 83:99:3a:62:b1:07:06:32:b0:c0:80:95:54:c9:b7:04:98:28: be:07:a2:de:f4:4a:db:6b:15:96:2a:40:d7:e6:fb:b4:0a:5d: be:42:c6:38:08:45:c1:55:64:be:7a:50:5c:26:97:3e:11:32: 6d:8b:28:b4:30:9e:bc:34:38:53:a8:51:24:b7:cd:4c:11:6b: 75:6c:92:71:4d:a3:20:0f:bc:a4:a8:fd:4e:a6:ba:60:84:bc: e1:a3:ac:6f:4f:30:16:f8:c1:16:b8:c2:7d:50:a4:19:99:99: 0f:1b:6b:d5 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEu6EETV2DcRqBfluYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk ZDY5NTM1MjEtNmM2ZC00Nzk5LThlMzQtNjRmY2U0ZmUzNTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7Yrs13UbfZp/vJme8aJv8XuXx5eEZsIV9fw 7XjA9jX4tXEGsucxy4k3VORRn4Tdjgy55PmxFp3N04hcxoBWfYIS4ZQBXeDpMSd/ SKctWj9zftNSKneceeQrIZYOcWnOBYj1Uo6NaXXSCXzQBgXLZTw4rr/EgaF7V9wr GzutpltSyfqseYUh4ZYgI/+D6pkQzCpD77BUmzPB0TkyLAI6yqV70pkUcM8aeulA 7mLtgF2PFkQxBWZm3zZ81HiNOzxiAe5zPRW0uwjm8nrvQ784jjFwlO+zXhdiNvIU U46T87xeJbPK4bbhktS4cTQ2I4uQskAuUHPstX1gC5+kLUBczwIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFMo/BtNfj4sxm7D/XvkNW0BPZSrZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYmNjMzFjMDgtMTM2OC0z YmQzLWE4OTAtYmVkYWQwYzBjYTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEEGBRW CyEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAHNwlUL7HdWFMZj1mPib96CyiFSkNBf1Fi8l4CH0kSZ7x7pjg r5NAOBErUmIrgz/v7EsUX90VGI9YQD82/XPWEVnYyaNcbaEPyDCnecOgfQ6TMPoM woXljoU72GaHK8J91k5gDcMk8Wa/fAQdiCAoOakhEwXMrh8lGVoxhsqxrBmSdOb0 wR7wO/JY5L+Djs+Kg5k6YrEHBjKwwICVVMm3BJgovgei3vRK22sVlipA1+b7tApd vkLGOAhFwVVkvnpQXCaXPhEybYsotDCevDQ4U6hRJLfNTBFrdWyScU2jIA+8pKj9 Tqa6YIS84aOsb08wFvjBFrjCfVCkGZmZDxtr1Q== -----END CERTIFICATE-----Generated at Tue Nov 4 09:42:07 2025 by rpki-client