$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/412dd02a-e6f5-3500-835e-b0059d790aaf.roa File: 412dd02a-e6f5-3500-835e-b0059d790aaf.roa (raw, json) Hash identifier: 7lev1mwJfcR/N3rL95ds5O1cjxryN/avOTeuQJeTp5A= Subject key identifier: 7C:51:4C:9D:A2:88:5F:F9:C4:99:D9:4C:D7:CF:F9:14:C1:38:B9:32 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584A0C056E90D904557A9F9DDF20 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/412dd02a-e6f5-3500-835e-b0059d790aaf.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 2914 IP address blocks: 2001:418:0:7000::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:6e:90:d9:04:55:7a:9f:9d:df:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=4062f122-7168-4ba4-85dc-6e18d3aa250e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:05:a5:85:68:f5:4f:15:26:ec:0d:97:13:91: ae:ac:24:01:fd:98:ed:ce:a4:f7:93:4d:8f:93:d6: 97:64:e2:9b:68:af:4d:aa:b4:41:10:73:de:4f:80: 56:cd:0f:3a:b5:e4:78:8c:17:5c:8f:9a:d7:72:df: 57:1c:ce:ac:2f:94:d3:82:3f:a3:6b:41:c4:11:33: 51:15:24:08:b7:f8:2e:9d:8e:48:ea:ed:06:95:de: c5:40:b4:c7:ba:8d:d2:07:56:fb:02:43:18:18:e7: 13:65:07:0b:39:35:c8:b5:69:82:a4:bc:04:8c:42: 78:e4:4b:96:0f:f6:2a:35:25:6e:c3:4d:b7:7e:89: aa:3c:cd:12:e8:39:96:ee:f8:a3:aa:f9:69:fa:12: c4:0a:89:f4:dc:6e:d4:0a:b8:a2:75:72:ab:e1:09: 70:da:28:08:fd:b9:31:be:7a:8a:8e:26:36:79:0a: d1:b6:8d:9b:83:2b:ed:bf:d0:b5:ef:35:0a:34:1f: 4b:f8:23:ce:5a:fb:2a:f5:d5:74:ff:60:b6:3d:03: 66:b0:79:0e:a2:ce:4a:b8:80:f0:56:c1:60:2f:bd: 81:48:da:2d:8b:ad:65:a6:e2:77:b1:d9:3d:a7:26: 9a:2d:fd:00:d9:d0:8d:0d:26:5f:ed:09:81:80:66: 89:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:51:4C:9D:A2:88:5F:F9:C4:99:D9:4C:D7:CF:F9:14:C1:38:B9:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/412dd02a-e6f5-3500-835e-b0059d790aaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:0:7000::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:bf:20:da:6b:21:ae:49:54:85:ca:7a:0f:9c:60:2e:e1:49: 69:39:c7:dd:1c:ee:7a:aa:f7:29:88:e4:0d:ff:91:93:dc:d6: d8:5a:36:ca:ab:f4:e8:7a:7b:02:83:af:ce:b7:f0:80:ab:28: 6d:73:1a:86:71:29:e3:6a:bd:22:66:51:ca:bd:8e:3f:0b:7b: cd:d3:11:ef:09:dc:06:22:89:88:e4:35:65:11:b0:69:84:33: 1a:0b:15:4b:4f:ef:13:cc:a4:5b:44:12:fd:74:c4:da:ef:f8: 09:17:e5:dc:c5:2f:30:16:38:6f:84:78:a6:41:1e:42:70:ee: 93:b0:06:bd:13:1b:6c:2a:b5:ed:0d:1c:42:aa:2d:80:00:e4: 43:a7:3e:db:ca:fe:8c:16:5c:6a:e4:9c:8f:be:76:23:61:cc: 67:1e:76:f4:30:04:bb:89:de:18:ec:0b:7e:75:e0:17:7a:ab: f6:ee:aa:61:c8:6a:b4:ec:d2:a6:ce:e4:9d:b7:09:d5:3b:57: 32:4f:5a:9f:99:da:f8:a5:66:0c:d3:89:a1:02:12:67:7a:d5: cc:b6:fe:54:ba:68:8c:76:c3:e5:3a:bb:aa:ee:75:72:8c:ae: a7:62:b3:f3:44:c1:7a:9f:38:2b:65:df:5b:60:4f:b1:4d:b8: 18:9b:e9:c2 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEoMBW6Q2QRVep+d3yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk NDA2MmYxMjItNzE2OC00YmE0LTg1ZGMtNmUxOGQzYWEyNTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygWlhWj1TxUm7A2XE5GurCQB/ZjtzqT3k02P k9aXZOKbaK9NqrRBEHPeT4BWzQ86teR4jBdcj5rXct9XHM6sL5TTgj+ja0HEETNR FSQIt/gunY5I6u0Gld7FQLTHuo3SB1b7AkMYGOcTZQcLOTXItWmCpLwEjEJ45EuW D/YqNSVuw023fomqPM0S6DmW7vijqvlp+hLECon03G7UCriidXKr4Qlw2igI/bkx vnqKjiY2eQrRto2bgyvtv9C17zUKNB9L+CPOWvsq9dV0/2C2PQNmsHkOos5KuIDw VsFgL72BSNoti61lpuJ3sdk9pyaaLf0A2dCNDSZf7QmBgGaJOwIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFHxRTJ2iiF/5xJnZTNfP+RTBOLkyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNDEyZGQwMmEtZTZmNS0z NTAwLTgzNWUtYjAwNTlkNzkwYWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEEGAAA cAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAV78g2mshrklUhcp6D5xgLuFJaTnH3Rzueqr3KYjkDf+Rk9zW 2Fo2yqv06Hp7AoOvzrfwgKsobXMahnEp42q9ImZRyr2OPwt7zdMR7wncBiKJiOQ1 ZRGwaYQzGgsVS0/vE8ykW0QS/XTE2u/4CRfl3MUvMBY4b4R4pkEeQnDuk7AGvRMb bCq17Q0cQqotgADkQ6c+28r+jBZcauScj752I2HMZx529DAEu4neGOwLfnXgF3qr 9u6qYchqtOzSps7knbcJ1TtXMk9an5na+KVmDNOJoQISZ3rVzLb+VLpojHbD5Tq7 qu51coyup2Kz80TBep84K2XfW2BPsU24GJvpwg== -----END CERTIFICATE-----Generated at Sun Jun 15 13:21:00 2025 by rpki-client