$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/632aa5d8-eab3-3508-8a87-4e75f23552b4.roa File: 632aa5d8-eab3-3508-8a87-4e75f23552b4.roa (raw, json) Hash identifier: XN60MeSRkAT/Eq6v7+COR+rXTQeOfyFLl6n6geV0VWY= Subject key identifier: 22:00:A9:8B:F0:AF:43:89:A2:C4:E0:F6:6A:BB:C5:3E:93:7B:7B:58 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584B970CEF3DA78888B281E62280 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/632aa5d8-eab3-3508-8a87-4e75f23552b4.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 3938 IP address blocks: 2001:418:1450::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:ef:3d:a7:88:88:b2:81:e6:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=8974f792-dd07-4275-a37d-98431c8b5b69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1a:f7:df:6f:26:83:df:78:f6:68:8e:e9:d4: ce:c0:e6:4d:1e:39:e2:c6:e0:60:ff:e6:e5:cf:df: 6e:bb:5e:4d:45:0b:73:f2:f3:95:b0:89:35:d1:e9: 1f:93:c7:81:44:33:4f:f6:89:97:eb:89:5f:f1:33: 29:13:77:db:aa:90:fe:ec:b6:23:4f:b5:c9:e8:36: 0c:66:60:bb:39:70:fa:33:b7:47:3e:b1:78:b5:10: bd:3c:9e:ce:e8:c2:55:ba:03:51:78:4f:10:de:54: a8:7f:96:61:9e:34:17:e1:4d:ba:71:9a:8b:44:12: a9:69:09:d1:a2:ec:eb:31:63:ef:d6:5e:16:a8:ab: f2:ca:39:43:12:82:57:b3:2c:6b:29:8c:4a:00:d8: 31:55:b0:f4:db:f5:7e:0f:21:f6:39:fe:7c:a6:58: 3c:79:be:22:a9:c3:96:4f:2c:4b:d3:4d:9a:b1:47: 57:9c:2d:1c:72:98:0e:d8:c1:dd:48:9d:40:af:a4: 4b:90:79:9c:5b:4f:6f:75:4d:5a:d7:88:4c:c7:8f: 14:5f:d5:a4:68:64:9a:53:43:a3:f9:f3:4b:55:07: 3d:5a:fa:34:9d:2f:56:fc:a4:30:53:95:22:5c:df: 5d:3e:dc:9c:db:19:a4:6a:c6:a6:24:c1:56:41:ca: 89:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:00:A9:8B:F0:AF:43:89:A2:C4:E0:F6:6A:BB:C5:3E:93:7B:7B:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/632aa5d8-eab3-3508-8a87-4e75f23552b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:1450::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:53:2c:85:ba:6b:56:7e:7b:9a:50:6e:57:8e:96:59:de:b7: 15:17:32:e3:04:be:d1:88:e7:24:43:76:c3:4b:bf:ae:c9:76: 8f:a0:67:83:a6:44:ba:21:aa:af:68:75:cb:7e:74:3b:e0:6a: 7a:bc:6d:7d:66:38:07:d8:0e:fa:f7:d7:e5:88:c0:c8:eb:4a: 15:7c:44:62:1b:5f:01:38:0f:f4:1f:cf:57:cd:70:c0:3f:0c: 98:7b:a4:15:9a:8d:e0:2d:fa:e3:45:d2:ee:2d:75:b3:83:80: da:9e:47:28:db:06:79:84:e2:df:66:c7:41:73:25:58:e2:6d: e2:ab:e2:fe:ca:b5:54:31:d3:fe:52:90:df:84:98:c3:4b:26: d6:36:ba:f3:f7:56:a1:32:75:2b:54:b9:29:76:de:95:42:b4: 3c:12:55:5c:0b:1d:35:a3:36:95:f0:e6:f3:ae:6a:1d:f9:fb: 73:ef:3c:78:36:74:70:ed:06:4f:01:de:8a:bf:b8:54:06:e4: 9e:f1:27:99:f0:e2:3f:47:74:cc:45:d8:ba:0b:06:2f:b0:9c: 96:c9:68:f1:62:19:ef:8d:96:6b:4b:dc:a8:0b:46:16:ee:3b: 92:d9:21:63:e4:a7:a5:67:fa:88:71:95:8e:84:7b:ba:27:fd: ef:46:e1:19 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuXDO89p4iIsoHmIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk ODk3NGY3OTItZGQwNy00Mjc1LWEzN2QtOTg0MzFjOGI1YjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRr3328mg9949miO6dTOwOZNHjnixuBg/+bl z99uu15NRQtz8vOVsIk10ekfk8eBRDNP9omX64lf8TMpE3fbqpD+7LYjT7XJ6DYM ZmC7OXD6M7dHPrF4tRC9PJ7O6MJVugNReE8Q3lSof5ZhnjQX4U26cZqLRBKpaQnR ouzrMWPv1l4WqKvyyjlDEoJXsyxrKYxKANgxVbD02/V+DyH2Of58plg8eb4iqcOW TyxL002asUdXnC0ccpgO2MHdSJ1Ar6RLkHmcW09vdU1a14hMx48UX9WkaGSaU0Oj +fNLVQc9Wvo0nS9W/KQwU5UiXN9dPtyc2xmkasamJMFWQcqJ+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCIAqYvwr0OJosTg9mq7xT6Te3tYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNjMyYWE1ZDgtZWFiMy0z NTA4LThhODctNGU3NWYyMzU1MmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEGBRQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHdTLIW6a1Z+e5pQbleOllnetxUXMuMEvtGI5yRDdsNLv67Jdo+g Z4OmRLohqq9odct+dDvganq8bX1mOAfYDvr31+WIwMjrShV8RGIbXwE4D/Qfz1fN cMA/DJh7pBWajeAt+uNF0u4tdbODgNqeRyjbBnmE4t9mx0FzJVjibeKr4v7KtVQx 0/5SkN+EmMNLJtY2uvP3VqEydStUuSl23pVCtDwSVVwLHTWjNpXw5vOuah35+3Pv PHg2dHDtBk8B3oq/uFQG5J7xJ5nw4j9HdMxF2LoLBi+wnJbJaPFiGe+NlmtL3KgL RhbuO5LZIWPkp6Vn+ohxlY6Ee7on/e9G4Rk= -----END CERTIFICATE-----Generated at Wed Nov 5 01:00:57 2025 by rpki-client