$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/da0f38d0-56e9-37dc-9150-0d3f80ec5543.roa File: da0f38d0-56e9-37dc-9150-0d3f80ec5543.roa (raw, json) Hash identifier: pNmj8d7xy1Udr27n1dKWj9jt5spck2X7CLsBDe5DJto= Subject key identifier: F6:12:60:07:28:AC:F5:42:56:0C:37:CC:65:25:89:29:A2:7D:A8:9F Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584B05E140D5DC444047B0C34C40 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/da0f38d0-56e9-37dc-9150-0d3f80ec5543.roa Signing time: Sat 30 Aug 2025 01:00:34 +0000 ROA not before: Sat 30 Aug 2025 01:00:34 +0000 ROA not after: Fri 28 Nov 2025 02:00:34 +0000 asID: 1225 IP address blocks: 2001:418:1401:a2::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:05:e1:40:d5:dc:44:40:47:b0:c3:4c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 30 01:00:34 2025 GMT Not After : Nov 28 02:00:34 2025 GMT Subject: CN=a50c0971-695d-4f4d-b863-ac09265bc055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:56:b4:48:0e:87:42:4d:20:cb:12:37:ca:35: a3:f9:15:a2:82:ba:b2:ad:0d:20:1f:85:64:33:ae: 63:9b:f2:6f:cb:01:ac:1d:89:62:ee:2b:55:e3:25: e0:3d:26:d7:b3:de:ec:3d:2f:be:88:47:53:06:b6: 8d:f0:e8:8c:57:e3:e1:8b:77:e6:3d:b6:7a:3e:70: 47:87:0b:47:51:b1:51:44:38:0c:44:b4:d7:ce:48: 6f:35:92:a9:74:da:ca:0b:34:cf:b0:2f:9a:33:16: 50:ab:51:0c:b5:4c:8a:f7:67:20:71:b9:79:fe:d8: c6:aa:2e:ac:88:86:9b:2f:d0:98:26:5d:f4:7d:fd: 2e:69:6a:5a:9d:55:9b:5f:54:49:4c:d4:13:ff:46: fe:e3:9d:1f:f9:b0:88:b0:0e:e1:85:f4:e4:97:17: e0:99:5b:c4:8b:fb:15:5c:29:84:10:b4:84:0d:43: 81:d2:7a:02:78:fb:6d:8f:69:b5:37:d6:36:eb:07: fd:fb:9c:6e:bc:68:87:5f:3f:48:e8:4d:48:9f:5b: 86:72:ea:65:7c:79:ea:5a:f2:83:8d:4e:f7:c5:44: 36:fa:a0:62:50:b3:2e:38:c5:eb:cd:2e:61:6f:74: df:1f:91:a8:b2:bd:1a:6b:60:5d:90:58:2e:e9:20: f1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:12:60:07:28:AC:F5:42:56:0C:37:CC:65:25:89:29:A2:7D:A8:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/da0f38d0-56e9-37dc-9150-0d3f80ec5543.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:1401:a2::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:bf:ad:9c:ba:9d:f6:0d:15:ad:d7:67:c5:40:b5:42:c5:6f: d5:6f:02:ea:e9:b5:93:fb:c1:44:62:3b:f6:45:39:b7:0b:94: 18:8e:40:73:5d:2f:75:5d:3a:64:5b:17:1b:d6:34:5d:31:fa: 9f:03:40:bc:db:ba:f4:f7:86:8d:05:ff:f3:3f:8e:e9:b4:d1: 9a:f1:21:99:fb:b9:e3:52:63:a1:62:51:4d:9d:52:65:f3:b9: da:c9:c2:b0:a5:b4:20:79:5e:63:b2:4e:c9:01:47:80:74:25: eb:31:1a:6f:52:e0:a3:03:13:19:0b:f8:72:7f:c4:f5:1e:4e: c9:a9:e4:1e:5a:9f:90:50:71:ad:c5:a0:d6:69:c7:cf:d9:7c: f6:37:30:5b:2b:91:3b:b4:7e:c8:55:83:fc:54:6e:19:28:b6: 61:6d:47:10:01:60:b6:ea:5b:d6:e9:03:ca:23:35:d4:1c:2a: e0:85:a3:e3:23:66:46:4a:ba:5c:15:bb:e9:29:f2:83:e1:75: 22:df:7a:d8:d5:c2:f7:9f:5e:f9:af:da:96:97:e7:06:fb:fc: 85:b9:b5:b7:7c:a4:60:0b:c1:8d:cf:a4:37:7d:4a:9b:8e:fd: fe:b7:e4:2f:d3:f8:40:20:32:63:86:26:1b:5d:00:ae:eb:8d: 9c:e1:d5:15 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEsF4UDV3ERAR7DDTEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDgzMDAxMDAzNFoXDTI1MTEyODAyMDAzNFowLzEtMCsGA1UEAxMk YTUwYzA5NzEtNjk1ZC00ZjRkLWI4NjMtYWMwOTI2NWJjMDU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArla0SA6HQk0gyxI3yjWj+RWigrqyrQ0gH4Vk M65jm/JvywGsHYli7itV4yXgPSbXs97sPS++iEdTBraN8OiMV+Phi3fmPbZ6PnBH hwtHUbFRRDgMRLTXzkhvNZKpdNrKCzTPsC+aMxZQq1EMtUyK92cgcbl5/tjGqi6s iIabL9CYJl30ff0uaWpanVWbX1RJTNQT/0b+450f+bCIsA7hhfTklxfgmVvEi/sV XCmEELSEDUOB0noCePttj2m1N9Y26wf9+5xuvGiHXz9I6E1In1uGcuplfHnqWvKD jU73xUQ2+qBiULMuOMXrzS5hb3TfH5Gosr0aa2BdkFgu6SDx4wIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFPYSYAcorPVCVgw3zGUliSmifaifMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZGEwZjM4ZDAtNTZlOS0z N2RjLTkxNTAtMGQzZjgwZWM1NTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEEGBQB AKIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAS7+tnLqd9g0VrddnxUC1QsVv1W8C6um1k/vBRGI79kU5twuU GI5Ac10vdV06ZFsXG9Y0XTH6nwNAvNu69PeGjQX/8z+O6bTRmvEhmfu541JjoWJR TZ1SZfO52snCsKW0IHleY7JOyQFHgHQl6zEab1LgowMTGQv4cn/E9R5OyankHlqf kFBxrcWg1mnHz9l89jcwWyuRO7R+yFWD/FRuGSi2YW1HEAFgtupb1ukDyiM11Bwq 4IWj4yNmRkq6XBW76Snyg+F1It962NXC959e+a/alpfnBvv8hbm1t3ykYAvBjc+k N31Km479/rfkL9P4QCAyY4YmG10AruuNnOHVFQ== -----END CERTIFICATE-----Generated at Sat Nov 1 19:50:17 2025 by rpki-client