$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/dda362f9-2202-3de7-b435-698e1f31aa2c.roa File: dda362f9-2202-3de7-b435-698e1f31aa2c.roa (raw, json) Hash identifier: bWmO9rNZTXtFK09rHi7T18bb2iNUQm8gNKg43F/TjsU= Subject key identifier: 5F:2F:81:08:38:CC:32:48:30:AA:53:4B:96:0B:CA:95:AA:78:14:96 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BBA10444F5DA926059BBE2E80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/dda362f9-2202-3de7-b435-698e1f31aa2c.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 3938 IP address blocks: 2001:418:1401:f5::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:44:4f:5d:a9:26:05:9b:be:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=bc378d05-6c5b-4ca8-81e2-c36f6e473ff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7f:18:e1:0a:7a:41:94:7a:9c:61:87:74:46: ae:6d:12:e2:f7:44:dd:2a:c8:c7:5a:41:04:19:54: 29:53:72:f0:65:06:5f:b2:9e:c9:75:fb:24:9a:e2: 72:29:28:f8:9b:26:f7:37:a9:86:f6:d7:ba:e2:e4: 29:2b:35:9b:7e:87:48:3b:7c:9d:6f:3e:2a:8e:f1: 5d:4a:fe:87:a2:4d:18:c3:50:a3:62:b6:71:1f:08: 7f:3f:ef:c8:90:a1:bb:54:79:c9:50:35:45:85:44: e4:89:f3:7d:cb:43:c8:95:61:b5:f2:8f:c2:5f:22: a5:1a:ea:f3:7f:16:17:21:0e:a6:c6:64:0d:7c:44: d8:d9:11:d6:56:62:f2:28:74:c8:33:6f:2e:68:eb: d8:a1:67:ca:bc:51:bc:b2:7d:31:48:8c:74:75:13: 49:66:a0:b3:6d:75:74:3c:1c:98:c6:e2:0e:28:d0: 27:27:bd:ea:f6:4b:56:ec:1f:54:de:fa:3d:7d:33: 20:37:21:c8:fa:69:f0:61:11:30:d6:7b:f6:39:b3: 37:eb:1c:50:9b:d7:3f:31:a6:66:74:1d:17:f7:bb: 2c:6e:10:fd:22:9d:8b:09:eb:72:ac:b3:d2:d3:03: 40:02:e9:a9:7b:5a:58:af:80:50:2d:d7:17:d3:ee: ee:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:2F:81:08:38:CC:32:48:30:AA:53:4B:96:0B:CA:95:AA:78:14:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/dda362f9-2202-3de7-b435-698e1f31aa2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:1401:f5::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:33:5d:ea:d6:11:3b:44:16:89:0d:04:12:da:36:b7:f2:a2: ba:10:c5:32:92:e8:1a:aa:f5:d7:ed:96:80:ae:36:1e:4b:1b: cf:86:9a:2d:46:cd:bf:81:41:25:51:d6:69:89:4f:2f:6d:be: 4b:b7:2e:73:81:ec:ac:f2:a1:77:da:bd:23:de:19:72:da:63: ea:78:7a:13:aa:05:77:46:8d:74:36:d4:b1:49:50:a7:fb:d1: 9d:78:4d:e6:17:2d:dd:1c:e7:ef:de:40:6c:b6:14:0e:1b:49: 4d:eb:83:73:88:e5:99:bb:cc:c4:a1:c4:fb:4f:92:8d:67:5b: dc:ba:f1:11:e2:f2:22:c2:01:4b:48:e3:e4:da:c3:0f:d7:19: 37:4b:4c:7b:35:4e:58:cb:b3:ba:00:12:fd:e8:7e:5c:e3:f0: 0c:d7:c2:5c:b6:e7:e3:b2:03:1c:d9:c3:ca:f4:7a:0a:be:bf: 63:0c:ad:fd:d1:83:3c:78:2a:cb:8a:a8:be:ed:95:5e:47:9a: e3:39:1c:54:6f:50:7d:aa:89:00:b5:35:82:52:ae:c6:cd:29: 4f:9d:d2:80:db:64:e3:d1:ee:55:80:09:40:5d:ab:6a:72:4e: fa:9f:ca:a5:64:a7:55:c5:1e:fa:2a:2e:c3:c4:67:26:52:8c: f8:85:d7:73 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEu6EERPXakmBZu+LoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk YmMzNzhkMDUtNmM1Yi00Y2E4LTgxZTItYzM2ZjZlNDczZmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmn8Y4Qp6QZR6nGGHdEaubRLi90TdKsjHWkEE GVQpU3LwZQZfsp7JdfskmuJyKSj4myb3N6mG9te64uQpKzWbfodIO3ydbz4qjvFd Sv6Hok0Yw1CjYrZxHwh/P+/IkKG7VHnJUDVFhUTkifN9y0PIlWG18o/CXyKlGurz fxYXIQ6mxmQNfETY2RHWVmLyKHTIM28uaOvYoWfKvFG8sn0xSIx0dRNJZqCzbXV0 PByYxuIOKNAnJ73q9ktW7B9U3vo9fTMgNyHI+mnwYREw1nv2ObM36xxQm9c/MaZm dB0X97ssbhD9Ip2LCetyrLPS0wNAAumpe1pYr4BQLdcX0+7uTQIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFF8vgQg4zDJIMKpTS5YLypWqeBSWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZGRhMzYyZjktMjIwMi0z ZGU3LWI0MzUtNjk4ZTFmMzFhYTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEEGBQB APUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAMjNd6tYRO0QWiQ0EEto2t/KiuhDFMpLoGqr11+2WgK42Hksb z4aaLUbNv4FBJVHWaYlPL22+S7cuc4HsrPKhd9q9I94Zctpj6nh6E6oFd0aNdDbU sUlQp/vRnXhN5hct3Rzn795AbLYUDhtJTeuDc4jlmbvMxKHE+0+SjWdb3LrxEeLy IsIBS0jj5NrDD9cZN0tMezVOWMuzugAS/eh+XOPwDNfCXLbn47IDHNnDyvR6Cr6/ Ywyt/dGDPHgqy4qovu2VXkea4zkcVG9QfaqJALU1glKuxs0pT53SgNtk49HuVYAJ QF2ranJO+p/KpWSnVcUe+iouw8RnJlKM+IXXcw== -----END CERTIFICATE-----Generated at Tue Nov 4 23:14:41 2025 by rpki-client