$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3e53b78e-2ab8-3b67-b6b3-698393a631a5.roa File: 3e53b78e-2ab8-3b67-b6b3-698393a631a5.roa (raw, json) Hash identifier: tdwB3lHMpnL2CCxaxpDJ9IvBzv1K6wFZjratTIO+PFw= Subject key identifier: A9:75:90:B0:4F:4C:FA:5A:4A:22:6C:90:77:B3:FF:7D:ED:D4:F8:3A Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BBA1042CAB416E93A591E6440 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3e53b78e-2ab8-3b67-b6b3-698393a631a5.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 20940 IP address blocks: 2001:418:1401:25::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:42:ca:b4:16:e9:3a:59:1e:64:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=f10c1ddc-5cbf-43b2-b243-98a26bfefd89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c3:3f:21:c8:89:e8:a6:40:6d:35:bd:49:46: e3:be:fc:4a:0b:c5:57:86:f0:58:84:85:9c:40:2d: 47:eb:cb:a3:ca:d7:7b:56:fd:4e:62:a0:4c:e1:7d: 90:c0:b1:c9:6b:d6:26:15:2a:e5:71:18:2b:d1:95: b4:95:32:a9:ca:31:53:1d:2d:73:87:b6:4d:a0:ec: 8e:20:94:94:dd:dd:87:6f:7f:26:e7:83:f6:d8:c4: bd:e7:01:f0:21:17:c9:5e:b6:1e:8f:51:67:22:f8: 6b:91:08:2f:f0:35:e8:fd:95:ad:ee:7f:de:bc:df: 09:50:46:91:be:25:7e:69:5d:91:3e:13:48:4f:55: f7:60:7d:7b:6a:5a:93:75:88:86:29:1c:88:9d:19: 1e:ca:5a:80:2e:af:0b:e7:d1:db:43:37:13:8d:cd: 6d:c6:c2:58:31:88:0b:57:ef:6c:dd:62:22:f3:fa: 65:8e:4f:7a:7a:25:bb:e6:87:ce:a8:30:67:f1:71: 1e:17:90:21:92:c4:b5:cc:6d:dc:dd:b5:de:2d:16: 36:b4:39:b2:c7:76:a2:cf:f9:04:22:1c:ee:cd:27: c9:c1:bb:e7:ad:a0:16:2e:b0:d8:07:da:4e:51:c9: 7a:72:0b:eb:4a:28:9d:a4:15:73:27:7a:10:21:04: 2e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:75:90:B0:4F:4C:FA:5A:4A:22:6C:90:77:B3:FF:7D:ED:D4:F8:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3e53b78e-2ab8-3b67-b6b3-698393a631a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:1401:25::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:0a:93:94:ad:49:75:b1:31:95:3e:b8:39:b1:7c:b5:d4:17: ab:56:97:a1:e1:08:94:a6:fc:62:ca:f5:6c:6a:92:cd:ce:1f: cd:5f:43:13:3f:8a:30:e2:23:24:8b:64:3b:bb:ae:c9:6e:48: d0:2f:2b:09:fb:90:15:ce:03:e1:3f:db:fd:b9:e1:32:0f:9e: 26:fb:a5:a0:29:d8:18:4e:3a:85:95:70:4c:6a:dc:1f:d2:5f: a8:a3:72:e6:84:da:a0:57:27:0f:13:1a:2e:2b:ba:a9:69:3d: b0:23:78:bc:fa:14:98:93:e9:dc:ee:8d:b9:3a:e2:77:c7:7b: 29:13:eb:02:0b:f8:fe:7d:c0:b8:86:5e:e0:c3:e2:ef:2a:d0: d8:43:91:1c:30:43:4b:93:8d:14:95:ef:ef:96:dc:31:36:a1: 7e:ef:3d:ee:72:2a:e3:00:61:25:78:52:e2:ad:64:49:d3:ba: 50:53:f2:82:85:fb:8a:26:cd:05:ae:e6:7e:a4:f4:f8:c0:57: f4:20:77:4c:1f:93:23:7b:ab:3f:b6:83:a6:2c:2c:90:2e:be: b9:f4:b7:a0:67:77:18:12:d5:20:74:10:7a:83:92:6f:d4:bd: b0:30:e3:7d:32:9b:ad:77:56:94:4e:86:b9:f4:69:11:ff:2d: 3d:05:20:2c -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEu6EELKtBbpOlkeZEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk ZjEwYzFkZGMtNWNiZi00M2IyLWIyNDMtOThhMjZiZmVmZDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMM/IciJ6KZAbTW9SUbjvvxKC8VXhvBYhIWc QC1H68ujytd7Vv1OYqBM4X2QwLHJa9YmFSrlcRgr0ZW0lTKpyjFTHS1zh7ZNoOyO IJSU3d2Hb38m54P22MS95wHwIRfJXrYej1FnIvhrkQgv8DXo/ZWt7n/evN8JUEaR viV+aV2RPhNIT1X3YH17alqTdYiGKRyInRkeylqALq8L59HbQzcTjc1txsJYMYgL V+9s3WIi8/pljk96eiW75ofOqDBn8XEeF5AhksS1zG3c3bXeLRY2tDmyx3aiz/kE IhzuzSfJwbvnraAWLrDYB9pOUcl6cgvrSiidpBVzJ3oQIQQuRwIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFKl1kLBPTPpaSiJskHez/33t1Pg6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvM2U1M2I3OGUtMmFiOC0z YjY3LWI2YjMtNjk4MzkzYTYzMWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEEGBQB ACUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAXgqTlK1JdbExlT64ObF8tdQXq1aXoeEIlKb8Ysr1bGqSzc4f zV9DEz+KMOIjJItkO7uuyW5I0C8rCfuQFc4D4T/b/bnhMg+eJvuloCnYGE46hZVw TGrcH9JfqKNy5oTaoFcnDxMaLiu6qWk9sCN4vPoUmJPp3O6NuTrid8d7KRPrAgv4 /n3AuIZe4MPi7yrQ2EORHDBDS5ONFJXv75bcMTahfu897nIq4wBhJXhS4q1kSdO6 UFPygoX7iibNBa7mfqT0+MBX9CB3TB+TI3urP7aDpiwskC6+ufS3oGd3GBLVIHQQ eoOSb9S9sDDjfTKbrXdWlE6GufRpEf8tPQUgLA== -----END CERTIFICATE-----Generated at Tue Nov 4 23:15:20 2025 by rpki-client