$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c7c7b0cb-bdc7-3921-ae1a-5f178b969d9e.roa File: c7c7b0cb-bdc7-3921-ae1a-5f178b969d9e.roa (raw, json) Hash identifier: PIwuWEuVQAvsjm/kX5doMk+b67/gzfMeL1470PTF8vA= Subject key identifier: 21:77:59:56:C1:55:36:11:41:A5:3E:CC:35:1A:8E:B6:AB:4F:F7:AA Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BBA104402F9113F3325A7C800 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c7c7b0cb-bdc7-3921-ae1a-5f178b969d9e.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 20940 IP address blocks: 2001:418:1430:100::/56 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:44:02:f9:11:3f:33:25:a7:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=29214b00-ffcb-4e44-898e-094dd14a014d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c9:ea:85:dc:36:a3:a1:88:4f:f3:66:ce:52: e6:86:f0:be:1f:0a:44:a4:4b:f1:c8:cc:ef:f8:d0: 81:95:34:ba:72:b3:d3:5e:24:c3:3c:78:0d:50:ce: 9a:48:47:1d:c0:cd:2d:bb:04:87:d2:41:a5:57:e5: 11:d5:cb:e2:dc:f7:2a:cc:e2:53:fe:bd:54:13:bf: 94:15:8c:d2:67:ed:32:2e:dc:10:80:b5:33:97:97: 91:2e:78:04:91:50:bf:bb:3f:9d:63:37:21:db:e6: 29:fc:00:32:6e:28:1d:2f:8e:d7:43:bb:7a:1a:59: 50:d0:8f:44:a9:c9:10:86:b0:3d:f4:9a:f1:be:9e: 02:11:be:b6:c2:76:ed:ce:49:66:7a:92:97:4a:33: 45:c0:ef:f0:e8:09:c5:b5:c0:4e:28:db:ac:75:ea: 25:37:32:9b:9f:01:d3:dc:6e:69:a0:ff:ae:16:22: ce:50:fa:73:bb:67:8e:cd:e7:df:0a:6b:90:d3:3b: 9e:38:92:e1:0b:13:47:2a:93:f6:3a:41:bd:41:c4: 21:82:a0:b2:e5:95:0f:e2:49:9d:2b:8f:6c:18:72: 5f:74:ff:f4:1c:3e:0e:67:0a:01:10:e6:ff:11:94: 34:92:19:35:10:d5:cd:0c:dc:24:62:6c:1c:67:24: 24:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:77:59:56:C1:55:36:11:41:A5:3E:CC:35:1A:8E:B6:AB:4F:F7:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c7c7b0cb-bdc7-3921-ae1a-5f178b969d9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:1430:100::/56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:77:3b:04:20:59:10:48:1a:72:f9:a5:d8:9a:17:34:86:d6: 6e:e2:0a:4a:4b:dc:99:27:70:57:ad:53:77:a1:7c:11:1f:03: c3:dc:a2:98:28:62:ba:95:18:06:d2:f0:4f:0f:49:45:3c:7f: e4:c2:27:56:a9:91:b0:78:91:c6:1d:61:b7:3e:8e:c9:95:f2: e0:b8:49:52:a3:90:fb:43:96:d3:5f:2b:9f:06:3a:20:8d:8b: 3b:f9:bb:56:77:12:65:59:95:ba:3e:6f:83:c9:f1:e9:e2:6d: d3:80:4f:9d:e1:0e:82:f4:a3:52:53:6a:9a:86:2c:0e:07:91: 59:40:b7:9a:82:2a:19:24:6e:a1:0a:a7:e4:ca:ff:56:ff:e9: 6e:11:2e:62:ec:50:d5:f1:5c:f2:ea:d0:3d:4f:b1:42:ba:65: cf:d3:8b:de:ff:cd:b0:2e:8c:37:3e:0a:8a:11:48:75:34:2b: b2:58:c9:9f:72:0d:67:fc:13:fb:82:3c:45:ea:cb:f1:22:a1: 96:2a:92:46:7b:98:b1:b7:e4:fa:ec:98:57:8c:18:7d:b2:b1: fc:0a:d7:6f:07:83:e5:f8:a3:48:06:89:84:94:38:7f:b5:8c: e7:5a:36:66:e7:8b:6f:a6:eb:f3:46:e2:3f:6b:3e:71:4b:88: 5e:72:40:2b -----BEGIN CERTIFICATE----- MIIGRzCCBS+gAwIBAgIUAQ0Mn0MoWEu6EEQC+RE/MyWnyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk MjkyMTRiMDAtZmZjYi00ZTQ0LTg5OGUtMDk0ZGQxNGEwMTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMnqhdw2o6GIT/NmzlLmhvC+HwpEpEvxyMzv +NCBlTS6crPTXiTDPHgNUM6aSEcdwM0tuwSH0kGlV+UR1cvi3PcqzOJT/r1UE7+U FYzSZ+0yLtwQgLUzl5eRLngEkVC/uz+dYzch2+Yp/AAybigdL47XQ7t6GllQ0I9E qckQhrA99Jrxvp4CEb62wnbtzklmepKXSjNFwO/w6AnFtcBOKNusdeolNzKbnwHT 3G5poP+uFiLOUPpzu2eOzeffCmuQ0zueOJLhCxNHKpP2OkG9QcQhgqCy5ZUP4kmd K49sGHJfdP/0HD4OZwoBEOb/EZQ0khk1ENXNDNwkYmwcZyQk/wIDAQABo4IDWTCC A1UwHQYDVR0OBBYEFCF3WVbBVTYRQaU+zDUajrarT/eqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYzdjN2IwY2ItYmRjNy0z OTIxLWFlMWEtNWYxNzhiOTY5ZDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAAjAKAwgAIAEEGBQw ATBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQChdzsEIFkQSBpy+aXYmhc0htZu4gpKS9yZJ3BXrVN3oXwRHwPD 3KKYKGK6lRgG0vBPD0lFPH/kwidWqZGweJHGHWG3Po7JlfLguElSo5D7Q5bTXyuf BjogjYs7+btWdxJlWZW6Pm+DyfHp4m3TgE+d4Q6C9KNSU2qahiwOB5FZQLeagioZ JG6hCqfkyv9W/+luES5i7FDV8Vzy6tA9T7FCumXP04ve/82wLow3PgqKEUh1NCuy WMmfcg1n/BP7gjxF6svxIqGWKpJGe5ixt+T67JhXjBh9srH8CtdvB4Pl+KNIBomE lDh/tYznWjZm54tvpuvzRuI/az5xS4heckAr -----END CERTIFICATE-----Generated at Tue Nov 4 21:23:51 2025 by rpki-client