$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2b1f86e9-5349-3a59-9f35-36f0b729f5d1.roa File: 2b1f86e9-5349-3a59-9f35-36f0b729f5d1.roa (raw, json) Hash identifier: XfAN5av3woWTZO5FazbRH+HHAs9WeRlzUI9OHSI8B8o= Subject key identifier: 31:59:15:9C:CC:54:BC:B6:FC:C1:FE:90:29:4A:34:F8:51:8D:9D:7E Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23C270160FD6AAA64BBE3C0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2b1f86e9-5349-3a59-9f35-36f0b729f5d1.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397241 IP address blocks: 2001:502:d399::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:27:01:60:fd:6a:aa:64:bb:e3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=093c2eba-440b-47da-8f52-58a34ec5b183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8f:c9:a5:87:12:23:c1:c9:42:7d:91:a6:c4: 47:67:0b:cd:29:9e:e3:66:7a:c2:9b:cb:a3:3c:4d: ba:97:4f:c3:39:79:ff:f6:ef:33:cd:42:83:d9:f6: 5b:a1:a2:a8:66:fa:ae:47:a8:9e:09:4c:26:07:b9: 2b:63:e0:26:2b:0f:89:12:6f:d6:1d:13:5e:7f:7b: 6e:1c:70:3f:da:d5:15:0a:ae:9c:3a:6e:6f:fb:dd: af:fb:3b:44:c5:2a:de:7d:66:e5:92:48:08:4f:1b: e6:cb:18:1b:55:eb:5d:9c:9b:c0:6e:c6:53:e1:31: 28:33:3f:ba:df:61:52:d4:ce:08:78:66:fa:15:ab: 73:30:83:9a:04:d9:52:e2:02:76:62:bd:54:6f:2e: 40:72:31:18:67:de:90:09:63:8b:f0:39:d7:13:40: 30:e9:0c:76:31:58:a9:d9:3a:27:64:40:7d:a5:5b: e8:2e:96:bd:c0:f0:d5:ec:6b:5a:0a:04:2e:f6:0d: 24:4f:0a:95:c0:3c:d5:8f:1a:c3:80:70:37:7d:b3: 6b:c1:20:42:76:c2:fb:30:34:48:ce:4d:c0:d7:f8: 72:f8:f6:31:81:dc:86:7e:85:38:86:67:c0:ac:10: 90:b5:a1:35:42:ec:1a:0f:49:0d:17:24:60:de:19: 47:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:59:15:9C:CC:54:BC:B6:FC:C1:FE:90:29:4A:34:F8:51:8D:9D:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2b1f86e9-5349-3a59-9f35-36f0b729f5d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:d399::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:e2:bf:46:94:6d:02:1d:1e:83:5b:0b:58:99:4b:7c:c4:91: 8a:75:f8:2a:55:75:9d:c0:31:a9:c6:4b:f4:70:e4:05:51:e8: 6b:55:8d:76:32:cd:78:4a:35:bf:5c:26:75:d1:6c:cd:f1:bb: 51:0f:e2:7a:fe:0b:86:a2:2b:3c:cf:f6:b1:a4:d7:23:e1:da: 77:24:90:53:27:d8:4a:24:5f:6f:a0:c0:10:9e:21:55:82:71: be:2c:f3:a8:56:59:e4:4f:33:a3:f0:89:48:46:b5:3f:3f:70: df:db:2e:08:b0:df:c7:4b:6c:01:4c:bf:73:ad:cd:72:fb:ed: 0c:6c:ea:20:e8:e8:d5:84:af:e9:0c:ff:f2:f8:2c:c3:ce:12: bc:c3:95:1a:30:f0:92:96:86:a4:c8:6d:01:32:a6:b3:75:6f: ef:24:0b:16:8f:26:ee:03:a1:13:3f:0e:cc:9a:93:30:9b:75: ce:fc:f2:b5:69:76:f4:ae:7b:2f:fa:06:aa:22:04:fe:48:1a: b3:f7:f4:3f:c9:b2:9e:cd:80:f0:e9:77:d3:d9:1d:cc:a6:0f: 25:f0:72:2a:ac:48:e2:da:00:86:52:d2:1e:b2:73:36:f9:71: f1:59:95:2b:86:f9:15:79:b8:b5:56:13:d4:f7:a1:80:95:8b: 2e:4f:2e:2f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErSPCcBYP1qqmS748AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk MDkzYzJlYmEtNDQwYi00N2RhLThmNTItNThhMzRlYzViMTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4/JpYcSI8HJQn2RpsRHZwvNKZ7jZnrCm8uj PE26l0/DOXn/9u8zzUKD2fZboaKoZvquR6ieCUwmB7krY+AmKw+JEm/WHRNef3tu HHA/2tUVCq6cOm5v+92v+ztExSrefWblkkgITxvmyxgbVetdnJvAbsZT4TEoMz+6 32FS1M4IeGb6FatzMIOaBNlS4gJ2Yr1Uby5AcjEYZ96QCWOL8DnXE0Aw6Qx2MVip 2TonZEB9pVvoLpa9wPDV7GtaCgQu9g0kTwqVwDzVjxrDgHA3fbNrwSBCdsL7MDRI zk3A1/hy+PYxgdyGfoU4hmfArBCQtaE1QuwaD0kNFyRg3hlHkQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDFZFZzMVLy2/MH+kClKNPhRjZ1+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMmIxZjg2ZTktNTM0OS0z YTU5LTlmMzUtMzZmMGI3MjlmNWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAtOZ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEHiv0aUbQIdHoNbC1iZS3zEkYp1+CpVdZ3AManGS/Rw5AVR6GtV jXYyzXhKNb9cJnXRbM3xu1EP4nr+C4aiKzzP9rGk1yPh2nckkFMn2EokX2+gwBCe IVWCcb4s86hWWeRPM6PwiUhGtT8/cN/bLgiw38dLbAFMv3OtzXL77Qxs6iDo6NWE r+kM//L4LMPOErzDlRow8JKWhqTIbQEyprN1b+8kCxaPJu4DoRM/DsyakzCbdc78 8rVpdvSuey/6BqoiBP5IGrP39D/Jsp7NgPDpd9PZHcymDyXwciqsSOLaAIZS0h6y czb5cfFZlSuG+RV5uLVWE9T3oYCViy5PLi8= -----END CERTIFICATE-----Generated at Sat Aug 23 15:01:29 2025 by rpki-client