$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/870966ce-de2d-38d2-90d6-d20acb337f5c.roa File: 870966ce-de2d-38d2-90d6-d20acb337f5c.roa (raw, json) Hash identifier: XnChqrUxlQWe7LBo1E8Pcv3d4/kGAziWhYJ/hkajUY4= Subject key identifier: 22:DF:50:F4:0A:38:4A:09:55:81:74:87:6B:3A:85:29:F8:F9:B8:83 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584AAA7321D6D3AD29BFFECC6480 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/870966ce-de2d-38d2-90d6-d20acb337f5c.roa Signing time: Mon 28 Jul 2025 07:00:10 +0000 ROA not before: Mon 28 Jul 2025 07:00:10 +0000 ROA not after: Sun 26 Oct 2025 07:00:10 +0000 asID: 152644 IP address blocks: 2001:418:149b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:aa:73:21:d6:d3:ad:29:bf:fe:cc:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jul 28 07:00:10 2025 GMT Not After : Oct 26 07:00:10 2025 GMT Subject: CN=2d0bfbf6-3342-4fd2-95a1-54fe9e9c7f6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:79:14:b1:6b:89:c8:84:83:d1:8f:f7:9b:4b: 60:85:af:d2:9b:3e:42:75:81:e5:16:c5:86:49:46: b6:0d:f1:d0:53:b5:1a:53:cd:a3:93:9b:5a:39:1b: 0b:56:c7:6a:ca:c5:b7:02:2a:15:06:7f:2b:39:1d: 17:2c:6f:56:23:9c:72:8f:fd:2a:5a:00:b9:20:91: ec:0f:7b:8f:a7:7b:db:2d:51:d3:af:21:c9:51:cd: c5:41:8a:14:49:76:74:74:26:b1:4a:b5:18:83:fd: af:45:cf:3a:0d:9c:ab:2b:b6:bc:ce:94:a3:58:27: 72:bf:bb:76:7a:54:b5:de:34:2e:a1:5a:52:3f:98: 28:55:1f:98:d1:cd:78:a9:d3:3c:ac:21:0a:d2:62: 30:21:0a:d5:1d:02:be:14:db:29:9a:ee:4a:21:44: 0d:4a:89:72:f3:a3:c8:9e:4f:a1:e6:0f:a0:68:0f: 02:fc:c3:da:fc:40:99:e9:4d:d7:65:4b:11:a3:2c: 4c:50:46:f7:7a:cb:fa:a3:36:e7:28:f1:35:2b:ad: 79:61:9c:69:72:9b:f3:db:2e:0a:28:7d:18:4b:45: 01:48:0b:8e:25:11:87:40:43:a4:94:01:cf:8b:c3: a8:f7:3f:91:5e:5f:ff:5e:9f:cc:a1:da:0a:f0:9e: 78:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:DF:50:F4:0A:38:4A:09:55:81:74:87:6B:3A:85:29:F8:F9:B8:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/870966ce-de2d-38d2-90d6-d20acb337f5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:149b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:06:c9:22:7a:8b:07:14:fb:be:0e:7b:64:c0:e4:8f:7c:d6: 1d:14:fd:56:bc:17:67:f7:a5:5f:f2:c2:af:80:a8:73:96:92: 3d:90:a5:81:51:2d:57:c8:be:41:1f:20:20:ab:53:d9:08:ed: 06:40:68:bd:ac:3d:ed:8e:64:ec:f0:23:13:f9:8c:ae:e2:a9: be:a2:30:54:96:a9:7f:f0:df:f3:12:1f:d2:53:a9:aa:04:e2: 91:1c:61:88:94:df:d9:93:f0:c1:bb:41:dd:1f:18:4e:78:84: cb:42:51:05:6a:b6:a6:0b:76:18:d5:24:a8:4d:e2:8b:e8:fe: bc:ec:de:4b:d5:23:af:2c:c1:34:e4:b7:e8:59:f9:c8:75:9e: 2d:05:de:8d:c2:21:39:ac:ab:1a:5b:0e:70:00:72:28:ff:21: d1:93:31:89:93:a4:67:07:32:de:89:81:fb:b4:e8:7b:8f:41: f7:eb:ea:93:df:7c:1a:5b:d8:17:0d:08:68:91:46:89:d5:b6: 27:f2:aa:33:c3:83:8c:b0:44:50:c8:21:b4:2a:96:69:d4:0c: 8f:bc:c1:dc:f9:7d:75:4e:d2:31:41:e5:60:ec:5e:25:06:4d: ff:c4:6e:4c:f8:38:d1:37:a9:c6:18:4c:1d:94:e1:cb:ab:fd: 19:63:ab:f1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqqcyHW060pv/7MZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDcyODA3MDAxMFoXDTI1MTAyNjA3MDAxMFowLzEtMCsGA1UEAxMk MmQwYmZiZjYtMzM0Mi00ZmQyLTk1YTEtNTRmZTllOWM3ZjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnkUsWuJyISD0Y/3m0tgha/Smz5CdYHlFsWG SUa2DfHQU7UaU82jk5taORsLVsdqysW3AioVBn8rOR0XLG9WI5xyj/0qWgC5IJHs D3uPp3vbLVHTryHJUc3FQYoUSXZ0dCaxSrUYg/2vRc86DZyrK7a8zpSjWCdyv7t2 elS13jQuoVpSP5goVR+Y0c14qdM8rCEK0mIwIQrVHQK+FNspmu5KIUQNSoly86PI nk+h5g+gaA8C/MPa/ECZ6U3XZUsRoyxMUEb3esv6ozbnKPE1K615YZxpcpvz2y4K KH0YS0UBSAuOJRGHQEOklAHPi8Oo9z+RXl//Xp/ModoK8J54RwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCLfUPQKOEoJVYF0h2s6hSn4+biDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvODcwOTY2Y2UtZGUyZC0z OGQyLTkwZDYtZDIwYWNiMzM3ZjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEGBSb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI0GySJ6iwcU+74Oe2TA5I981h0U/Va8F2f3pV/ywq+AqHOWkj2Q pYFRLVfIvkEfICCrU9kI7QZAaL2sPe2OZOzwIxP5jK7iqb6iMFSWqX/w3/MSH9JT qaoE4pEcYYiU39mT8MG7Qd0fGE54hMtCUQVqtqYLdhjVJKhN4ovo/rzs3kvVI68s wTTkt+hZ+ch1ni0F3o3CITmsqxpbDnAAcij/IdGTMYmTpGcHMt6Jgfu06HuPQffr 6pPffBpb2BcNCGiRRonVtifyqjPDg4ywRFDIIbQqlmnUDI+8wdz5fXVO0jFB5WDs XiUGTf/Ebkz4ONE3qcYYTB2U4cur/Rljq/E= -----END CERTIFICATE-----Generated at Mon Aug 4 16:02:56 2025 by rpki-client