$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/dda362f9-2202-3de7-b435-698e1f31aa2c.roa File: dda362f9-2202-3de7-b435-698e1f31aa2c.roa (raw, json) Hash identifier: hOnetJ5Cfqw17mq51v8jBMv0IbPmTKPjIA8KVg8gwLs= Subject key identifier: 43:B2:05:E1:B9:F7:83:51:4E:7F:C5:CD:D9:2D:46:7A:D5:E6:73:22 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F43285849F87A8CC52B67462B55AC5180 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/dda362f9-2202-3de7-b435-698e1f31aa2c.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 3938 IP address blocks: 2001:418:1401:f5::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:8c:c5:2b:67:46:2b:55:ac:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=6279b2e5-dc51-4544-a48a-d1cc844cf4d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1d:10:2d:36:1b:98:ec:b8:4d:fb:fd:5f:a5: d3:a4:84:c2:31:70:14:98:08:70:9e:4d:3c:34:0c: c3:0e:dc:e4:ce:c1:0c:70:87:ab:dd:72:c5:61:39: f2:a9:d6:0b:b8:be:a8:a1:14:2a:92:55:05:a7:aa: 16:55:2e:6a:f5:4e:f3:fd:46:12:42:e9:eb:7b:a9: f4:cd:49:43:f9:ec:a2:ac:36:b3:0d:f5:3a:92:ed: 57:b1:30:8f:f9:26:52:f3:aa:94:00:d4:c2:fe:a8: fe:73:dc:84:f6:7d:90:cc:1e:44:ed:3e:e2:77:21: ff:a5:05:25:de:bf:66:1f:eb:e4:d2:85:89:c2:84: 77:eb:d0:27:08:b7:95:82:4b:be:c3:fc:ee:de:29: c2:cf:0c:99:f0:46:19:6c:68:35:8a:93:9d:b4:a2: c5:3b:7d:64:e2:e2:74:fe:e6:a5:e8:07:12:4c:51: df:cb:d1:ff:62:ac:ed:d9:9e:7e:0e:31:9e:92:b0: bc:68:31:89:6f:92:e3:dc:dd:8f:c8:9d:eb:b0:99: e8:f1:06:ff:09:b8:86:8b:3c:6b:68:bc:63:9e:7d: 76:6e:20:52:ec:45:15:f7:0f:66:93:fd:b1:dd:02: 3d:3f:dd:0e:2d:ec:db:98:46:e5:63:59:22:be:a5: be:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:B2:05:E1:B9:F7:83:51:4E:7F:C5:CD:D9:2D:46:7A:D5:E6:73:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/dda362f9-2202-3de7-b435-698e1f31aa2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:1401:f5::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:04:53:b6:f7:9a:0a:d6:c9:57:94:82:a6:47:12:68:ff:7b: 8b:98:53:27:29:18:66:cf:c0:61:f5:ac:41:e1:42:4b:17:57: 69:88:70:77:ea:0f:b4:3d:ee:2e:f9:c3:a8:ac:47:49:25:50: a8:35:44:63:49:81:57:90:6a:87:33:f9:34:5c:14:03:f8:3a: 01:2c:85:2b:f0:e3:28:89:16:c3:78:95:c9:45:ab:7f:ad:0c: 42:08:34:42:76:c9:e5:b7:b7:c5:20:e9:00:ad:5c:6b:ad:98: 13:47:e8:d2:a7:6f:65:11:81:11:1b:08:63:0c:99:6d:5e:12: f3:63:2a:c7:be:eb:d7:ea:ea:d2:1b:cc:93:2f:72:1a:5c:81: 42:47:64:4b:46:16:38:82:7e:e5:c7:0c:55:c3:25:72:b8:70: 11:af:ea:c2:04:11:46:fd:09:f9:68:5e:0c:bf:0c:d8:85:85: 3f:76:7d:75:1e:91:ad:02:c7:46:f4:82:a7:bb:90:6b:3b:2c: 3c:27:38:16:5f:ef:07:f5:02:1f:82:8f:dd:2c:1a:5c:33:76: fb:49:c3:50:ed:e8:13:20:b6:38:f8:2b:e9:53:89:44:42:e3: da:73:ab:ee:8c:08:d7:7e:4c:9e:49:29:71:74:a3:e7:bf:0f: 28:41:55:c6 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEn4eozFK2dGK1WsUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk NjI3OWIyZTUtZGM1MS00NTQ0LWE0OGEtZDFjYzg0NGNmNGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmh0QLTYbmOy4Tfv9X6XTpITCMXAUmAhwnk08 NAzDDtzkzsEMcIer3XLFYTnyqdYLuL6ooRQqklUFp6oWVS5q9U7z/UYSQunre6n0 zUlD+eyirDazDfU6ku1XsTCP+SZS86qUANTC/qj+c9yE9n2QzB5E7T7idyH/pQUl 3r9mH+vk0oWJwoR369AnCLeVgku+w/zu3inCzwyZ8EYZbGg1ipOdtKLFO31k4uJ0 /ual6AcSTFHfy9H/Yqzt2Z5+DjGekrC8aDGJb5Lj3N2PyJ3rsJno8Qb/CbiGizxr aLxjnn12biBS7EUV9w9mk/2x3QI9P90OLezbmEblY1kivqW+lwIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFEOyBeG594NRTn/FzdktRnrV5nMiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZGRhMzYyZjktMjIwMi0z ZGU3LWI0MzUtNjk4ZTFmMzFhYTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEEGBQB APUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAhQRTtveaCtbJV5SCpkcSaP97i5hTJykYZs/AYfWsQeFCSxdX aYhwd+oPtD3uLvnDqKxHSSVQqDVEY0mBV5BqhzP5NFwUA/g6ASyFK/DjKIkWw3iV yUWrf60MQgg0QnbJ5be3xSDpAK1ca62YE0fo0qdvZRGBERsIYwyZbV4S82Mqx77r 1+rq0hvMky9yGlyBQkdkS0YWOIJ+5ccMVcMlcrhwEa/qwgQRRv0J+WheDL8M2IWF P3Z9dR6RrQLHRvSCp7uQazssPCc4Fl/vB/UCH4KP3SwaXDN2+0nDUO3oEyC2OPgr 6VOJRELj2nOr7owI135MnkkpcXSj578PKEFVxg== -----END CERTIFICATE-----Generated at Sun Jun 15 15:33:17 2025 by rpki-client