$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c1c9275e-3166-38df-9204-a7da58d008ca.roa File: c1c9275e-3166-38df-9204-a7da58d008ca.roa (raw, json) Hash identifier: HEDfG9sa3u8gcUEAxegqFbjHKJNy3y6Bo37f2dpGbgY= Subject key identifier: 3D:21:F5:FD:06:D3:76:96:7B:A3:67:88:31:55:59:F7:56:E4:CA:C3 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584B9CA232E3D022FA22FFD63E00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c1c9275e-3166-38df-9204-a7da58d008ca.roa Signing time: Thu 23 Oct 2025 01:00:31 +0000 ROA not before: Thu 23 Oct 2025 01:00:31 +0000 ROA not after: Wed 21 Jan 2026 02:00:31 +0000 asID: 3939 IP address blocks: 2001:418:1407::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:a2:32:e3:d0:22:fa:22:ff:d6:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Oct 23 01:00:31 2025 GMT Not After : Jan 21 02:00:31 2026 GMT Subject: CN=24097f4a-e4b9-4569-a2b0-c81c0eef3ea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:96:86:00:16:13:78:bf:05:1c:e0:dd:d9:5e: 3e:17:74:ca:6a:b4:ce:a8:96:ac:1a:db:3d:89:76: 39:96:a7:66:58:43:e2:a1:64:3e:16:8a:02:bc:e3: 44:0e:51:36:f4:6a:ad:2e:6a:a1:bc:57:46:60:b2: d9:e3:4f:cc:09:d2:a3:3b:ce:d5:54:76:bc:2f:a7: 9a:4c:e1:55:db:ac:72:e3:6c:c4:4a:86:00:81:1c: 38:23:dc:c9:7f:10:f4:ec:d2:29:09:5b:33:83:0e: b5:51:d6:eb:ae:e7:32:42:a0:2e:f4:58:f9:78:15: 65:ef:b9:37:39:97:c2:85:3b:cc:c7:0d:ca:08:9e: 43:99:9d:2f:cc:28:02:db:be:23:c1:10:a0:54:22: ba:ff:20:09:ae:6a:41:3b:63:75:d3:4a:0b:6a:e0: 2b:fc:62:ef:45:85:7d:fb:02:0d:66:cc:0c:38:54: 44:a9:9c:29:61:ff:99:e0:40:e2:5f:5a:22:07:c9: 7d:c6:21:f0:12:a2:0c:fc:94:84:40:67:d1:0d:35: 14:68:bb:90:b6:fb:fb:8d:b1:fa:16:18:e6:0c:54: 53:82:be:da:72:2b:b1:a4:3d:6f:a8:b5:ed:2c:b6: c2:c8:96:d1:b7:86:ca:80:af:5d:8e:85:eb:e6:55: 3d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:21:F5:FD:06:D3:76:96:7B:A3:67:88:31:55:59:F7:56:E4:CA:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c1c9275e-3166-38df-9204-a7da58d008ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:1407::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:f2:e8:1c:d8:0c:cf:6c:80:42:70:b1:2f:c1:27:cd:b7:cf: a5:e5:d3:05:9e:99:06:94:5b:7c:1a:f2:5d:ad:0c:f4:d3:4c: 0f:d0:ab:27:bd:d0:e7:c7:7b:b8:ab:61:6d:91:29:59:ce:4e: 43:68:c4:0d:da:7b:3f:8c:14:5a:a8:2b:69:a2:52:54:11:93: cf:dd:6e:7c:43:52:51:82:bf:9d:4d:ff:38:b6:31:11:03:0c: cb:98:b7:53:fe:57:0f:de:af:55:49:da:19:bf:a6:e5:59:5e: 27:ac:e1:88:74:41:1b:cf:7e:45:2d:86:b7:82:34:e1:29:c6: 03:8c:12:51:a7:86:91:fb:cf:1b:af:9d:3b:96:87:07:dc:99: 26:de:44:b7:c6:77:f3:bd:be:64:32:19:a6:9b:d7:86:a8:ac: 7f:59:c1:1d:7e:cd:ed:a1:d2:22:ae:9c:f8:e3:06:35:13:c8: bb:6b:fe:37:5a:c8:65:be:25:a4:5d:aa:b9:6c:48:f1:56:45: 59:6f:42:6e:d3:2d:05:95:b9:33:c6:33:38:30:f2:43:1a:15: 61:d8:27:a0:10:d0:b3:96:9c:a8:12:0c:86:4d:00:0e:3e:68: 9c:78:4c:57:5a:96:72:02:a7:15:c9:6f:c6:ca:35:fa:9c:81: 2a:77:42:de -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEucojLj0CL6Iv/WPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTAyMzAxMDAzMVoXDTI2MDEyMTAyMDAzMVowLzEtMCsGA1UEAxMk MjQwOTdmNGEtZTRiOS00NTY5LWEyYjAtYzgxYzBlZWYzZWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5aGABYTeL8FHODd2V4+F3TKarTOqJasGts9 iXY5lqdmWEPioWQ+FooCvONEDlE29GqtLmqhvFdGYLLZ40/MCdKjO87VVHa8L6ea TOFV26xy42zESoYAgRw4I9zJfxD07NIpCVszgw61UdbrrucyQqAu9Fj5eBVl77k3 OZfChTvMxw3KCJ5DmZ0vzCgC274jwRCgVCK6/yAJrmpBO2N100oLauAr/GLvRYV9 +wINZswMOFREqZwpYf+Z4EDiX1oiB8l9xiHwEqIM/JSEQGfRDTUUaLuQtvv7jbH6 FhjmDFRTgr7aciuxpD1vqLXtLLbCyJbRt4bKgK9djoXr5lU9zwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD0h9f0G03aWe6NniDFVWfdW5MrDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYzFjOTI3NWUtMzE2Ni0z OGRmLTkyMDQtYTdkYTU4ZDAwOGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEGBQH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALPy6BzYDM9sgEJwsS/BJ823z6Xl0wWemQaUW3wa8l2tDPTTTA/Q qye90OfHe7irYW2RKVnOTkNoxA3aez+MFFqoK2miUlQRk8/dbnxDUlGCv51N/zi2 MREDDMuYt1P+Vw/er1VJ2hm/puVZXies4Yh0QRvPfkUthreCNOEpxgOMElGnhpH7 zxuvnTuWhwfcmSbeRLfGd/O9vmQyGaab14aorH9ZwR1+ze2h0iKunPjjBjUTyLtr /jdayGW+JaRdqrlsSPFWRVlvQm7TLQWVuTPGMzgw8kMaFWHYJ6AQ0LOWnKgSDIZN AA4+aJx4TFdalnICpxXJb8bKNfqcgSp3Qt4= -----END CERTIFICATE-----Generated at Wed Nov 5 02:49:21 2025 by rpki-client