$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/029f5dc1-35d2-387a-8660-1f0ab6a68ff2.roa File: 029f5dc1-35d2-387a-8660-1f0ab6a68ff2.roa (raw, json) Hash identifier: JtJ6Qiq9V1sOMB7mbGt2iwtGfXa2L8/Ql3VtR6IA89U= Subject key identifier: 36:D7:FE:71:E7:2E:A2:15:FD:30:0A:3D:E2:CC:0F:B9:40:BF:6C:2F Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23C22091579607FCA53FA80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/029f5dc1-35d2-387a-8660-1f0ab6a68ff2.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397234 IP address blocks: 2001:502:4612::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:22:09:15:79:60:7f:ca:53:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=fc958b16-a2df-43f1-8e97-517b1903f402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:10:27:5a:4a:ab:7d:34:d1:b0:18:d2:ed:06: 69:8b:26:bb:84:f2:67:c9:44:5d:f6:14:7c:0f:4f: c1:92:a0:8d:66:cb:f9:fe:b9:09:9b:f2:22:c1:22: cd:4b:87:e5:5c:ee:1b:2f:cf:3d:d4:bf:0f:09:0d: 09:1c:61:b9:2a:39:b3:f8:33:64:36:56:13:3a:3d: c5:9e:04:cd:05:0f:0e:35:d5:4e:06:49:35:68:d7: db:b7:34:c6:2a:67:be:62:a4:6d:c7:e6:89:ba:60: 8a:ed:42:de:92:d5:85:b1:71:59:fb:08:e7:ef:31: db:09:56:1c:f5:b2:13:2a:51:c6:96:2b:49:7c:3c: e5:5d:67:5c:35:49:51:9c:70:6a:80:9f:25:6b:08: 18:a8:7a:d0:eb:c4:e6:2f:8e:1f:48:6f:c5:8c:51: 8b:ff:df:b7:7b:b7:88:13:78:aa:e1:6d:85:fe:cb: 53:e3:81:9b:74:95:10:75:c7:67:33:0c:33:cb:3f: b9:2a:44:d1:90:b3:f5:91:78:94:3c:f6:c4:7c:a4: 1b:35:f4:4e:f7:3c:9c:d2:a6:ab:53:61:21:13:f2: 14:f7:2d:1c:01:b3:52:f4:4c:a6:b4:fc:a8:8c:1f: 1d:73:6c:c1:5f:16:c2:5a:56:80:06:3d:ae:31:d9: a1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:D7:FE:71:E7:2E:A2:15:FD:30:0A:3D:E2:CC:0F:B9:40:BF:6C:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/029f5dc1-35d2-387a-8660-1f0ab6a68ff2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:4612::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:a8:08:5a:35:3a:fb:bd:37:a7:86:c8:3f:5b:42:b9:39:78: 13:37:5c:68:ca:5c:7e:05:0f:6f:9b:6c:c5:ee:27:2d:dd:b1: 5e:a0:36:53:b3:2f:3b:c7:4c:01:73:cf:e8:8d:40:b9:b0:f7: 65:e0:42:6b:1a:0d:e9:fb:33:c1:43:fa:6c:47:31:1a:99:34: 31:48:ec:a9:95:fe:8a:19:f4:6e:90:e9:54:95:01:fd:4b:b7: 57:b9:ff:64:79:43:cf:78:2e:8f:95:56:a3:26:a2:a9:ef:30: 28:fd:d4:6f:d3:97:36:8d:8e:4f:b7:c2:ed:a6:39:a7:ce:47: 11:97:3f:6f:3f:e7:a0:b6:f2:c7:24:a1:76:e0:fa:92:af:be: 8a:ae:27:21:bc:ab:0d:93:42:22:87:00:1c:69:1a:55:c1:a2: 25:a0:6e:9a:70:4a:77:d5:48:89:60:b1:cb:c5:11:5b:25:1a: 92:8c:2e:31:b1:5a:cb:06:c7:1e:d9:ea:6c:6e:c0:85:7e:86: 3a:4b:21:c3:e7:ff:48:e5:b3:64:b0:8d:a6:8e:9c:1e:3b:5f: 84:b9:71:5f:7f:d9:e6:36:da:4b:da:fe:f5:aa:fa:dd:0b:aa: 70:bf:da:54:71:97:9d:d5:a2:26:c6:e7:44:3f:7c:f6:aa:78: b8:f7:9a:f5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErSPCIJFXlgf8pT+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk ZmM5NThiMTYtYTJkZi00M2YxLThlOTctNTE3YjE5MDNmNDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhAnWkqrfTTRsBjS7QZpiya7hPJnyURd9hR8 D0/BkqCNZsv5/rkJm/IiwSLNS4flXO4bL8891L8PCQ0JHGG5Kjmz+DNkNlYTOj3F ngTNBQ8ONdVOBkk1aNfbtzTGKme+YqRtx+aJumCK7ULektWFsXFZ+wjn7zHbCVYc 9bITKlHGlitJfDzlXWdcNUlRnHBqgJ8lawgYqHrQ68TmL44fSG/FjFGL/9+3e7eI E3iq4W2F/stT44GbdJUQdcdnMwwzyz+5KkTRkLP1kXiUPPbEfKQbNfRO9zyc0qar U2EhE/IU9y0cAbNS9EymtPyojB8dc2zBXxbCWlaABj2uMdmhvwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDbX/nHnLqIV/TAKPeLMD7lAv2wvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMDI5ZjVkYzEtMzVkMi0z ODdhLTg2NjAtMWYwYWI2YTY4ZmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAkYS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADeoCFo1Ovu9N6eGyD9bQrk5eBM3XGjKXH4FD2+bbMXuJy3dsV6g NlOzLzvHTAFzz+iNQLmw92XgQmsaDen7M8FD+mxHMRqZNDFI7KmV/ooZ9G6Q6VSV Af1Lt1e5/2R5Q894Lo+VVqMmoqnvMCj91G/TlzaNjk+3wu2mOafORxGXP28/56C2 8sckoXbg+pKvvoquJyG8qw2TQiKHABxpGlXBoiWgbppwSnfVSIlgscvFEVslGpKM LjGxWssGxx7Z6mxuwIV+hjpLIcPn/0jls2SwjaaOnB47X4S5cV9/2eY22kva/vWq +t0LqnC/2lRxl53VoibG50Q/fPaqeLj3mvU= -----END CERTIFICATE-----Generated at Sat Aug 23 15:01:18 2025 by rpki-client