$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/de58a534-66be-3f5a-bf08-7f6aeec0845e.roa File: de58a534-66be-3f5a-bf08-7f6aeec0845e.roa (raw, json) Hash identifier: IujWXYDlkhjI4N+n+okEGB/a2+mbbQbJhLwBQa3ld54= Subject key identifier: 84:10:64:AA:DD:1A:41:5C:16:C7:08:C7:67:CF:83:DC:C3:7D:60:2B Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BBA104493B2E2775535A90400 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/de58a534-66be-3f5a-bf08-7f6aeec0845e.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 20940 IP address blocks: 2001:418:1401:2c::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:44:93:b2:e2:77:55:35:a9:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=c6d53003-c85a-4d4a-b25b-860c0c4d2749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:81:82:c2:74:2e:1b:fa:58:5d:6d:85:8a:16: a3:25:bd:7d:00:7e:67:0e:8a:1c:99:00:49:e5:90: 13:9c:77:ef:cc:45:ff:2c:b7:21:58:b3:ee:6b:61: 38:72:c4:66:d6:c9:dc:bf:cb:be:85:36:b5:5d:d6: f6:e9:42:84:25:8f:f9:a6:c2:7b:c4:c6:68:0c:f3: 2f:09:8a:2a:4c:4c:1c:bb:e0:22:54:48:8b:a2:73: 2b:70:04:87:30:1b:63:02:3c:16:d2:0d:45:fe:5b: 99:49:d1:51:77:7c:ac:09:8a:da:e4:72:e9:7d:f0: 95:c8:db:65:5d:6f:3b:8f:4e:86:9b:12:cb:af:97: 6e:87:44:2b:e7:3d:81:ca:d6:84:ef:0c:a1:25:c2: 2d:6d:3c:47:97:7a:1a:cf:5a:da:d0:4c:e0:1e:af: b6:31:8b:e4:a7:87:5b:5e:03:ef:e9:73:df:b7:01: 77:9d:80:b6:5e:2c:58:de:32:55:4f:e4:d5:bc:70: 3a:c0:0e:c6:b6:e2:3c:fc:5b:56:f6:fe:65:1b:48: 52:b9:15:c1:1b:0d:85:f2:cb:b4:a8:95:0f:3c:5b: f3:2e:98:54:ab:4e:45:54:4d:a6:ca:02:90:2e:3b: 69:53:27:99:b1:01:a9:05:eb:d8:62:88:f3:d9:63: 01:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:10:64:AA:DD:1A:41:5C:16:C7:08:C7:67:CF:83:DC:C3:7D:60:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/de58a534-66be-3f5a-bf08-7f6aeec0845e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:1401:2c::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:2f:79:d2:27:da:64:c2:be:b8:35:6a:b7:2a:a7:3f:54:52: 90:11:9a:77:d8:ea:04:40:a5:ed:a8:d7:4c:1b:3c:65:06:e0: c1:0a:e4:70:95:85:81:0c:e9:9c:8e:5b:f8:ac:8d:7f:b4:79: 88:bc:60:fa:d8:70:e7:43:97:1c:37:3b:70:4c:fe:db:e2:86: 9e:c5:81:ee:e1:30:b1:3a:88:2d:5c:ea:82:37:e5:ef:c9:27: 5f:de:27:60:ec:cf:d9:7f:55:29:d2:f4:31:be:ba:7e:79:81: fb:0c:0c:24:31:14:3e:bc:15:13:88:df:c4:12:64:63:ad:fe: e2:01:65:b6:2f:f0:13:0c:08:c0:da:58:e8:22:fb:05:04:59: b9:e6:13:49:1d:db:4b:1b:c5:36:85:a1:b2:19:31:a9:d9:17: 2f:44:68:6d:3b:29:9d:90:73:8c:6a:c4:dd:33:98:1f:74:0a: cf:7e:aa:69:86:11:29:ed:8f:35:b2:7c:97:f3:b5:21:e3:02: 0a:e9:ee:55:39:1f:b9:95:9c:f7:a1:b7:80:0b:b4:e8:c0:dc: de:3c:c7:72:df:91:3b:6c:4d:41:85:11:42:fa:07:71:91:06: fc:00:ef:5f:b9:62:23:ea:90:0e:93:fb:4b:c3:4a:cb:40:68: a2:b1:9a:66 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEu6EESTsuJ3VTWpBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk YzZkNTMwMDMtYzg1YS00ZDRhLWIyNWItODYwYzBjNGQyNzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYGCwnQuG/pYXW2FihajJb19AH5nDoocmQBJ 5ZATnHfvzEX/LLchWLPua2E4csRm1sncv8u+hTa1Xdb26UKEJY/5psJ7xMZoDPMv CYoqTEwcu+AiVEiLonMrcASHMBtjAjwW0g1F/luZSdFRd3ysCYra5HLpffCVyNtl XW87j06GmxLLr5duh0Qr5z2BytaE7wyhJcItbTxHl3oaz1ra0EzgHq+2MYvkp4db XgPv6XPftwF3nYC2XixY3jJVT+TVvHA6wA7GtuI8/FtW9v5lG0hSuRXBGw2F8su0 qJUPPFvzLphUq05FVE2mygKQLjtpUyeZsQGpBevYYojz2WMBVQIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFIQQZKrdGkFcFscIx2fPg9zDfWArMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZGU1OGE1MzQtNjZiZS0z ZjVhLWJmMDgtN2Y2YWVlYzA4NDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEEGBQB ACwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAwy950ifaZMK+uDVqtyqnP1RSkBGad9jqBECl7ajXTBs8ZQbg wQrkcJWFgQzpnI5b+KyNf7R5iLxg+thw50OXHDc7cEz+2+KGnsWB7uEwsTqILVzq gjfl78knX94nYOzP2X9VKdL0Mb66fnmB+wwMJDEUPrwVE4jfxBJkY63+4gFlti/w EwwIwNpY6CL7BQRZueYTSR3bSxvFNoWhshkxqdkXL0RobTspnZBzjGrE3TOYH3QK z36qaYYRKe2PNbJ8l/O1IeMCCunuVTkfuZWc96G3gAu06MDc3jzHct+RO2xNQYUR QvoHcZEG/ADvX7liI+qQDpP7S8NKy0BoorGaZg== -----END CERTIFICATE-----Generated at Tue Nov 4 23:26:27 2025 by rpki-client