$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3a696e09-7384-38e4-8936-c5171efb8159.roa File: 3a696e09-7384-38e4-8936-c5171efb8159.roa (raw, json) Hash identifier: UQVAUJd5bD6YY91DPArWljU2Wvaz0bOLN4K6WZdLDMk= Subject key identifier: EA:E1:12:10:C1:07:CE:DE:07:C4:54:A9:04:92:8E:64:57:8F:67:F3 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BB88D1CC562C929EA9AC1D840 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3a696e09-7384-38e4-8936-c5171efb8159.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 1225 IP address blocks: 2001:418:1401:12::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:1c:c5:62:c9:29:ea:9a:c1:d8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=41dd0aa5-3e3f-4661-96ea-8545ff0d2505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:1b:71:a3:9f:e7:15:08:d0:5b:5b:5c:e7:93: 04:d0:cc:38:10:f9:21:03:15:c0:97:8a:54:3c:29: cd:91:4d:81:5f:5e:3b:7e:4b:0c:2a:a5:e5:72:c4: 0a:03:01:47:5b:0b:cc:c5:0b:d2:9a:f9:8a:00:1a: 2f:b4:24:b5:ea:e1:0b:59:3f:76:b1:94:07:2b:49: ee:79:d8:4f:a2:5f:37:67:a5:f8:1f:a1:c8:1b:c2: df:84:f3:ed:d7:a5:08:5f:8d:53:db:43:ec:08:2b: 45:10:9b:1e:18:04:fb:d6:ed:c2:b3:70:31:b1:f9: ea:dc:ff:ea:07:43:39:57:91:56:e1:6d:dc:a4:ba: 0d:1e:93:66:a2:13:f5:a7:b7:e9:02:ba:50:cf:eb: 1c:64:24:22:3d:c3:a5:1b:75:e3:1e:32:d7:02:a8: 46:9e:a9:ec:3d:51:e7:45:26:c9:e1:54:07:05:f6: 1f:ac:d2:f9:a6:35:00:da:45:18:4d:98:be:a3:ea: 06:2a:89:58:e6:ec:83:69:11:ba:a5:2a:eb:d2:fb: e4:10:09:23:51:37:70:41:d0:34:29:a1:a3:d9:63: cd:48:1a:85:bf:54:ae:02:6e:fa:a1:a9:d1:a1:21: 12:ae:c0:68:b2:07:9d:93:b8:af:ed:e0:7d:82:78: 29:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:E1:12:10:C1:07:CE:DE:07:C4:54:A9:04:92:8E:64:57:8F:67:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3a696e09-7384-38e4-8936-c5171efb8159.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:1401:12::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:ba:3a:1a:2b:56:e7:f5:24:40:48:0f:bd:4f:f6:25:10:08: 60:5b:13:c8:fe:c9:ad:d4:3e:43:0e:90:a2:3a:93:27:a3:f0: 86:54:81:27:25:6d:30:dd:bc:17:2f:05:a4:af:a0:72:11:56: 13:d9:95:12:d4:8c:ad:fc:d1:65:e1:d6:ef:5e:1b:3d:9f:16: 84:56:cc:84:11:a9:20:56:6c:c0:7e:53:9e:2f:32:15:e2:08: 33:85:60:18:2e:b1:c8:41:0a:e4:61:d2:84:f8:cf:49:df:93: 3e:9e:bb:92:ff:4f:cd:60:f9:8f:a9:65:7a:b8:24:50:0d:1a: 00:62:58:f4:e5:1e:1c:88:1d:7d:0a:ba:52:c8:c2:23:e2:83: dc:6d:13:7c:7d:68:5a:25:68:bd:45:35:ec:50:81:a0:0b:bd: 1e:9b:f6:98:ad:e7:18:51:75:1e:87:8c:47:2b:f2:71:e8:de: 0a:4d:47:29:6d:df:d5:ac:95:61:6e:b7:1f:75:34:35:72:1d: f8:48:a6:28:d7:06:d2:5c:b9:a3:1a:2c:16:35:78:51:b0:b4: 82:84:d3:b4:5e:19:2c:87:26:9e:5b:65:41:8e:2b:1b:25:58: 41:9f:68:ac:40:01:d5:a9:a2:40:1e:64:47:a3:23:1b:c0:20: 5d:e9:80:1a -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEu4jRzFYskp6prB2EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk NDFkZDBhYTUtM2UzZi00NjYxLTk2ZWEtODU0NWZmMGQyNTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhtxo5/nFQjQW1tc55ME0Mw4EPkhAxXAl4pU PCnNkU2BX147fksMKqXlcsQKAwFHWwvMxQvSmvmKABovtCS16uELWT92sZQHK0nu edhPol83Z6X4H6HIG8LfhPPt16UIX41T20PsCCtFEJseGAT71u3Cs3Axsfnq3P/q B0M5V5FW4W3cpLoNHpNmohP1p7fpArpQz+scZCQiPcOlG3XjHjLXAqhGnqnsPVHn RSbJ4VQHBfYfrNL5pjUA2kUYTZi+o+oGKolY5uyDaRG6pSrr0vvkEAkjUTdwQdA0 KaGj2WPNSBqFv1SuAm76oanRoSESrsBosgedk7iv7eB9gngp+wIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFOrhEhDBB87eB8RUqQSSjmRXj2fzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvM2E2OTZlMDktNzM4NC0z OGU0LTg5MzYtYzUxNzFlZmI4MTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEEGBQB ABIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAJbo6GitW5/UkQEgPvU/2JRAIYFsTyP7JrdQ+Qw6QojqTJ6Pw hlSBJyVtMN28Fy8FpK+gchFWE9mVEtSMrfzRZeHW714bPZ8WhFbMhBGpIFZswH5T ni8yFeIIM4VgGC6xyEEK5GHShPjPSd+TPp67kv9PzWD5j6llergkUA0aAGJY9OUe HIgdfQq6UsjCI+KD3G0TfH1oWiVovUU17FCBoAu9Hpv2mK3nGFF1HoeMRyvyceje Ck1HKW3f1ayVYW63H3U0NXId+EimKNcG0ly5oxosFjV4UbC0goTTtF4ZLIcmnltl QY4rGyVYQZ9orEAB1amiQB5kR6MjG8AgXemAGg== -----END CERTIFICATE-----Generated at Wed Nov 5 04:44:12 2025 by rpki-client