$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ed112634-640b-3df6-9ab7-4dad52c20407.roa File: ed112634-640b-3df6-9ab7-4dad52c20407.roa (raw, json) Hash identifier: WsFaD4hHWYt4+dk9JNhmr1ShfCzflTqn52iXY/2BfBA= Subject key identifier: 89:F4:68:61:EA:C3:6A:EE:CD:A8:48:18:F4:2E:47:5F:E3:55:66:5C Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BBB758878A7711079D4B946E0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ed112634-640b-3df6-9ab7-4dad52c20407.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 152644 IP address blocks: 2001:418:149c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:88:78:a7:71:10:79:d4:b9:46:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=349fc39f-8c23-4259-a8f5-e3d4c1fb2d05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f1:9a:00:23:fd:c3:95:2a:3c:4b:72:15:48: 02:1e:3b:60:37:5a:40:c8:18:17:9e:46:6e:2e:8d: 60:d0:62:66:86:96:fc:03:a7:a2:18:e7:1a:57:ad: 89:0f:bf:f6:89:7b:42:8c:2e:5e:e8:8b:ce:8e:a7: 7a:1a:5e:dd:bb:e6:e3:65:69:6e:f2:a4:c4:23:4d: 0b:92:47:ad:4a:64:50:7b:4e:14:dc:5b:99:c2:ea: 99:f2:46:ca:0c:ee:29:b4:86:f2:17:06:5c:0f:fb: f1:8f:73:99:ec:f8:a7:8b:f2:e5:61:a9:05:cd:f5: 37:a1:0c:1a:db:fd:f3:b5:45:37:9f:9c:99:bf:fe: 82:a9:b1:41:c1:d8:d6:ed:e2:77:22:27:9d:1f:f5: 6c:50:80:fe:c2:c8:2c:e3:e4:95:5f:91:f5:26:af: 46:b6:9b:c6:c5:2c:14:0f:b0:da:0a:f7:98:91:99: 7d:9d:08:e5:8b:1b:43:21:78:fc:97:c5:4f:eb:2b: 2f:79:e6:b6:6a:f8:fa:71:51:62:1e:a9:5d:59:1a: 01:a9:56:23:eb:9b:94:44:8b:f4:a5:c2:59:36:e3: da:bf:a2:3f:f4:97:e6:ff:ca:65:5f:39:4f:a8:fb: 69:d1:e7:6d:e1:d6:a0:59:8d:b0:e8:c1:dd:70:53: a0:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F4:68:61:EA:C3:6A:EE:CD:A8:48:18:F4:2E:47:5F:E3:55:66:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ed112634-640b-3df6-9ab7-4dad52c20407.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:149c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:c8:d5:81:e0:50:6a:a7:76:b7:d4:44:ea:85:68:9e:0b:51: a3:e9:5d:ee:d4:ff:bf:90:d4:9b:e7:4e:23:a8:c0:0e:8d:35: d2:91:e4:f0:d9:be:a1:6e:29:6d:8d:13:b1:3d:80:90:e7:3c: ca:8f:91:f1:87:2a:da:fb:c7:cb:02:bf:ef:67:84:da:ee:43: d8:8a:d7:22:27:0f:3e:87:84:28:61:e7:f4:91:14:d5:b5:ac: 55:89:7d:9a:27:44:7d:84:ea:9f:17:63:37:a0:b0:e7:5a:fe: 08:17:aa:01:d7:c4:ac:0d:45:94:10:8e:37:64:a1:f1:16:9f: 96:64:09:9b:b9:3a:35:b2:91:74:39:52:8a:9a:2b:d8:02:7b: 10:c8:0c:8c:03:2f:55:10:f2:ff:02:31:c7:f2:01:7b:48:8f: a9:25:52:75:4a:76:1c:d3:12:8d:d5:4c:a7:10:f9:b8:20:d6: 6d:ca:04:ef:49:7b:cd:80:e5:86:4f:56:ad:ec:da:00:a3:d7: e2:13:ed:16:41:19:68:f7:ad:be:a3:89:d4:fb:c4:56:14:30: 4d:02:61:8a:07:29:92:a7:e6:65:62:55:6f:2c:ad:58:b3:b6: b1:1f:79:dc:4a:e1:ca:d8:75:22:35:9a:d7:34:c9:a5:e0:92: 9c:d4:18:99 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu7dYh4p3EQedS5RuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk MzQ5ZmMzOWYtOGMyMy00MjU5LWE4ZjUtZTNkNGMxZmIyZDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfGaACP9w5UqPEtyFUgCHjtgN1pAyBgXnkZu Lo1g0GJmhpb8A6eiGOcaV62JD7/2iXtCjC5e6IvOjqd6Gl7du+bjZWlu8qTEI00L kketSmRQe04U3FuZwuqZ8kbKDO4ptIbyFwZcD/vxj3OZ7Pini/LlYakFzfU3oQwa 2/3ztUU3n5yZv/6CqbFBwdjW7eJ3IiedH/VsUID+wsgs4+SVX5H1Jq9GtpvGxSwU D7DaCveYkZl9nQjlixtDIXj8l8VP6ysveea2avj6cVFiHqldWRoBqVYj65uURIv0 pcJZNuPav6I/9Jfm/8plXzlPqPtp0edt4dagWY2w6MHdcFOg+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIn0aGHqw2ruzahIGPQuR1/jVWZcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZWQxMTI2MzQtNjQwYi0z ZGY2LTlhYjctNGRhZDUyYzIwNDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEGBSc MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFXI1YHgUGqndrfUROqFaJ4LUaPpXe7U/7+Q1JvnTiOowA6NNdKR 5PDZvqFuKW2NE7E9gJDnPMqPkfGHKtr7x8sCv+9nhNruQ9iK1yInDz6HhChh5/SR FNW1rFWJfZonRH2E6p8XYzegsOda/ggXqgHXxKwNRZQQjjdkofEWn5ZkCZu5OjWy kXQ5UoqaK9gCexDIDIwDL1UQ8v8CMcfyAXtIj6klUnVKdhzTEo3VTKcQ+bgg1m3K BO9Je82A5YZPVq3s2gCj1+IT7RZBGWj3rb6jidT7xFYUME0CYYoHKZKn5mViVW8s rViztrEfedxK4crYdSI1mtc0yaXgkpzUGJk= -----END CERTIFICATE-----Generated at Tue Nov 4 23:25:57 2025 by rpki-client