$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/395fce40-fe51-30d3-87dd-472a01ed1dea.roa File: 395fce40-fe51-30d3-87dd-472a01ed1dea.roa (raw, json) Hash identifier: YUsDzTe0ChqOAjvBrxFApNTHgZbZ3BQaytTFwd9ifqw= Subject key identifier: 49:63:EC:83:F0:74:CF:F8:88:E6:A5:CB:FC:95:F7:86:B8:6D:F2:0A Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23C1F12221490B7E7FCF9C0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/395fce40-fe51-30d3-87dd-472a01ed1dea.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397224 IP address blocks: 2001:502:2eda::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:1f:12:22:14:90:b7:e7:fc:f9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=b1e1ca44-67e2-492b-a3e3-206d94b1e92d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3e:ac:e2:c7:93:65:35:09:c6:8c:64:b2:52: 25:55:cb:b2:89:53:90:6d:b4:ba:23:a7:70:97:53: 67:53:4f:54:cf:b8:24:c8:28:34:7e:24:ae:dd:43: 91:ab:55:ef:2f:94:3f:dd:c6:06:2b:7f:39:3a:b7: a9:76:da:7d:c1:75:b7:af:39:68:bd:2c:82:a0:14: 7e:f2:a3:bc:ea:03:64:da:f3:89:55:9e:21:cf:e4: 3c:a1:a3:06:f7:2d:e7:46:57:29:97:0f:b2:f8:d1: b0:90:f5:2c:b0:1c:6f:d7:b0:ab:79:41:7c:61:ee: 49:6d:65:85:6e:a4:2b:e8:27:bd:e8:3e:33:f7:a3: 15:96:73:bf:31:22:98:a3:80:3d:4a:2e:8b:af:1e: c3:ba:72:76:53:35:dd:4f:8c:9e:ab:cf:4f:da:2b: c6:d4:45:23:57:17:4d:09:df:d2:01:4e:4c:fc:00: a1:0a:2d:68:4a:05:de:f6:2d:37:55:59:d7:39:76: 04:bc:a1:90:5c:2b:21:c6:ed:dd:60:63:89:07:0d: fb:c6:b1:98:ff:2b:03:98:64:d3:64:fe:e6:74:1c: e2:bf:a3:bf:d5:65:fa:97:1b:f1:53:75:7e:74:52: 5d:af:87:72:4f:05:04:c2:cc:12:7b:f1:95:8a:6a: ea:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:63:EC:83:F0:74:CF:F8:88:E6:A5:CB:FC:95:F7:86:B8:6D:F2:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/395fce40-fe51-30d3-87dd-472a01ed1dea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:2eda::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:7a:50:6a:b8:49:12:51:db:85:55:7c:67:73:bc:f6:41:64: c3:d4:ee:ce:0d:6b:7e:49:15:29:8d:a5:06:a4:af:f1:b1:7a: 70:33:38:48:25:47:ac:1a:3a:a7:62:89:3c:93:9b:12:05:c3: 07:80:49:44:06:47:e2:28:eb:87:56:f6:75:1d:c9:7a:fb:b6: da:08:20:09:f4:4e:25:77:40:1d:0f:f9:27:eb:39:02:e6:79: e5:93:b7:a8:ac:cd:0b:54:34:ee:d3:7a:e9:6c:e7:a6:3a:f5: 73:b2:66:72:2c:ab:a0:2e:87:14:90:78:b8:28:d9:4a:e7:71: c7:dd:ad:ad:bd:7f:72:60:bb:09:43:9c:61:76:ce:32:70:ed: a2:c9:b7:98:01:5b:f6:0c:f0:2a:a1:d0:db:0d:b5:4b:09:f8: b6:68:be:b0:2c:71:be:74:6d:e4:14:23:ed:21:fa:0d:b9:26: d0:a8:80:23:14:02:b8:82:00:56:ae:b9:75:55:e8:7c:46:bf: 02:1a:27:f2:29:ce:28:a6:9f:07:00:d5:b1:06:1b:f5:2d:e4: b5:19:b8:45:13:cb:9b:f7:b3:c8:5e:4b:9c:0a:db:59:0f:44: b9:e6:9a:f0:28:8a:30:ed:fc:25:4c:02:40:a0:5c:5d:52:05: a5:43:88:70 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErSPB8SIhSQt+f8+cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk YjFlMWNhNDQtNjdlMi00OTJiLWEzZTMtMjA2ZDk0YjFlOTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuz6s4seTZTUJxoxkslIlVcuyiVOQbbS6I6dw l1NnU09Uz7gkyCg0fiSu3UORq1XvL5Q/3cYGK385Orepdtp9wXW3rzlovSyCoBR+ 8qO86gNk2vOJVZ4hz+Q8oaMG9y3nRlcplw+y+NGwkPUssBxv17CreUF8Ye5JbWWF bqQr6Ce96D4z96MVlnO/MSKYo4A9Si6Lrx7DunJ2UzXdT4yeq89P2ivG1EUjVxdN Cd/SAU5M/AChCi1oSgXe9i03VVnXOXYEvKGQXCshxu3dYGOJBw37xrGY/ysDmGTT ZP7mdBziv6O/1WX6lxvxU3V+dFJdr4dyTwUEwswSe/GVimrq5wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFElj7IPwdM/4iOaly/yV94a4bfIKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMzk1ZmNlNDAtZmU1MS0z MGQzLTg3ZGQtNDcyYTAxZWQxZGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAi7a MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHt6UGq4SRJR24VVfGdzvPZBZMPU7s4Na35JFSmNpQakr/GxenAz OEglR6waOqdiiTyTmxIFwweASUQGR+Io64dW9nUdyXr7ttoIIAn0TiV3QB0P+Sfr OQLmeeWTt6iszQtUNO7Teuls56Y69XOyZnIsq6AuhxSQeLgo2Urnccfdra29f3Jg uwlDnGF2zjJw7aLJt5gBW/YM8Cqh0NsNtUsJ+LZovrAscb50beQUI+0h+g25JtCo gCMUAriCAFauuXVV6HxGvwIaJ/IpziimnwcA1bEGG/Ut5LUZuEUTy5v3s8heS5wK 21kPRLnmmvAoijDt/CVMAkCgXF1SBaVDiHA= -----END CERTIFICATE-----Generated at Sat Aug 23 17:37:34 2025 by rpki-client