$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0cd10490-545a-3dcc-9c02-de8a90dee89c.roa File: 0cd10490-545a-3dcc-9c02-de8a90dee89c.roa (raw, json) Hash identifier: U4KA3TNLyAJtPkwGPI9EaJbk/tohKqftKU+3kPrpUwg= Subject key identifier: 1F:A1:D4:CB:E8:8D:35:8A:E8:44:15:11:43:79:5E:1B:12:FD:25:6C Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23C1D5E490DE9122067FB40 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0cd10490-545a-3dcc-9c02-de8a90dee89c.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397233 IP address blocks: 2001:502:100e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:1d:5e:49:0d:e9:12:20:67:fb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=ec0b4a57-4360-4211-89b0-56c4b4a17bef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:9c:88:c8:a2:2b:ce:76:0d:51:d3:93:33:ea: ca:18:70:ea:a9:23:ba:c0:04:96:a4:76:ee:29:1c: c4:2e:2b:a8:3d:66:9d:e8:09:2d:9a:7b:c4:ba:7c: 7d:c2:aa:dc:f3:d6:13:38:93:88:76:20:72:d0:cc: 3c:e2:dd:80:6d:0f:59:17:0d:54:ab:c4:14:e4:a6: 15:58:55:bc:20:bf:1d:79:b0:ee:f9:cb:7b:6b:7c: d2:f8:d4:50:00:1c:50:fd:46:b3:29:6b:ea:10:b3: 37:9e:d2:7b:6d:bf:1e:49:30:7e:4f:59:f9:2e:a7: 3b:52:43:68:33:cd:6c:3f:55:62:b4:6f:e0:ad:91: 4f:da:64:bb:9c:0c:2e:a7:16:9c:66:e3:18:aa:dc: d5:23:81:f4:03:f5:7d:ed:f4:a7:e3:c0:e1:1d:d3: bd:b1:d3:45:c6:6c:65:f2:97:0f:6d:3e:d1:4e:30: 9c:9d:c6:bb:49:55:6f:ef:5b:53:81:3d:fa:34:43: 06:50:da:36:22:21:1c:cb:6e:e3:1c:bc:d6:d0:28: 18:3e:cc:99:ad:09:23:c6:34:74:55:3f:d7:1a:a0: 73:9b:59:ca:67:c7:71:41:d4:99:11:e3:ee:49:a9: ee:07:89:5c:96:50:b3:40:7a:38:c9:29:a8:5f:db: a6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:A1:D4:CB:E8:8D:35:8A:E8:44:15:11:43:79:5E:1B:12:FD:25:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0cd10490-545a-3dcc-9c02-de8a90dee89c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:100e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:8a:a2:5f:83:b8:ac:b5:1c:03:b1:94:8f:5f:14:f8:f2:19: f1:98:ba:b4:0c:0f:64:b3:46:85:1b:12:6f:58:5b:3f:e2:38: 56:46:0f:4f:a2:61:ff:f7:3f:1c:f9:64:9d:3d:4c:3c:55:75: f2:ed:0b:bc:b0:23:8d:2a:ab:cc:51:07:6e:ca:e0:d9:e0:ac: b0:e2:6c:06:96:8e:3d:21:0a:71:c2:17:0c:7a:03:cc:f7:f5: 8d:ef:f0:0e:36:5b:f5:c3:b1:42:53:e2:0d:7a:a0:51:ff:d2: 8c:06:e4:1a:a3:eb:82:91:33:22:8b:01:6a:08:02:86:d3:35: c6:e8:10:2f:f6:d1:34:f6:b8:d6:d6:bb:43:bb:b1:bc:84:55: d9:1e:85:10:04:b4:a9:a8:6d:41:82:b4:4e:dc:e0:84:55:e2: bf:f5:a2:49:8f:8d:41:92:e4:a5:e2:ab:e2:f2:bc:7c:8a:76: 4f:2e:dc:89:7c:04:47:10:e8:cf:40:c6:1f:44:a7:de:60:05: d0:52:c0:24:3d:19:28:e8:e2:63:d9:be:9b:eb:b1:91:eb:25: bf:09:b3:bc:97:82:05:a7:4a:27:34:bf:0c:74:dd:e8:25:90: 47:ec:ff:0a:d8:a7:5c:4c:21:3c:0c:22:fa:4e:69:b1:ac:68: f8:ba:a4:89 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErSPB1eSQ3pEiBn+0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk ZWMwYjRhNTctNDM2MC00MjExLTg5YjAtNTZjNGI0YTE3YmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5yIyKIrznYNUdOTM+rKGHDqqSO6wASWpHbu KRzELiuoPWad6AktmnvEunx9wqrc89YTOJOIdiBy0Mw84t2AbQ9ZFw1Uq8QU5KYV WFW8IL8debDu+ct7a3zS+NRQABxQ/UazKWvqELM3ntJ7bb8eSTB+T1n5Lqc7UkNo M81sP1VitG/grZFP2mS7nAwupxacZuMYqtzVI4H0A/V97fSn48DhHdO9sdNFxmxl 8pcPbT7RTjCcnca7SVVv71tTgT36NEMGUNo2IiEcy27jHLzW0CgYPsyZrQkjxjR0 VT/XGqBzm1nKZ8dxQdSZEePuSanuB4lcllCzQHo4ySmoX9umcwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB+h1MvojTWK6EQVEUN5XhsS/SVsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMGNkMTA0OTAtNTQ1YS0z ZGNjLTljMDItZGU4YTkwZGVlODljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAhAO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADqKol+DuKy1HAOxlI9fFPjyGfGYurQMD2SzRoUbEm9YWz/iOFZG D0+iYf/3Pxz5ZJ09TDxVdfLtC7ywI40qq8xRB27K4NngrLDibAaWjj0hCnHCFwx6 A8z39Y3v8A42W/XDsUJT4g16oFH/0owG5Bqj64KRMyKLAWoIAobTNcboEC/20TT2 uNbWu0O7sbyEVdkehRAEtKmobUGCtE7c4IRV4r/1okmPjUGS5KXiq+LyvHyKdk8u 3Il8BEcQ6M9Axh9Ep95gBdBSwCQ9GSjo4mPZvpvrsZHrJb8Js7yXggWnSic0vwx0 3eglkEfs/wrYp1xMITwMIvpOabGsaPi6pIk= -----END CERTIFICATE-----Generated at Sat Aug 23 14:49:57 2025 by rpki-client