$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3d3312db-2532-3170-be24-795b5d0e7f32.roa File: 3d3312db-2532-3170-be24-795b5d0e7f32.roa (raw, json) Hash identifier: meTMFFOiD0BjbdQxwcNZVCApC318hbX9e6PrLUMS5gM= Subject key identifier: 1A:3D:84:15:DF:6E:68:39:B3:5B:38:07:EB:76:C1:2E:61:D0:0D:95 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584EF717B32D822B3B92E45C7100 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3d3312db-2532-3170-be24-795b5d0e7f32.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 397217 IP address blocks: 2001:503:e239::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:b3:2d:82:2b:3b:92:e4:5c:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=80f11845-c1ab-4d5d-9591-c9c27f1ea516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c1:50:ad:89:67:56:25:38:e8:34:f4:4e:15: 2d:12:66:c7:b2:7a:24:d3:95:5b:e5:eb:20:e0:c7: 95:0d:8f:3b:13:dd:8d:53:af:10:28:22:c4:84:0d: c1:a8:7c:91:ec:a9:d5:58:b0:37:40:90:49:b4:4a: 2c:31:5c:43:9e:28:51:62:ed:29:58:9f:de:23:8d: c7:1c:ba:bd:75:0d:c8:64:83:7d:bc:20:aa:cb:f0: a3:0c:d4:ea:76:39:7f:0f:b8:28:11:1a:f6:87:a5: 64:1a:be:b4:20:bd:21:5c:a5:f1:09:be:a9:67:cb: c3:06:18:b4:54:32:e5:c2:fb:78:ac:4a:b5:c2:f6: 32:14:cb:dd:d8:ee:c5:da:4b:14:25:01:1b:24:da: 21:40:64:10:5b:fe:60:7f:1b:eb:94:ca:ac:0f:37: 46:55:62:09:6b:06:aa:e8:0f:51:d4:06:8d:c3:a3: ad:36:30:0b:37:f3:1d:ac:8b:39:48:9f:58:6e:5b: 6c:1a:29:4e:89:6e:c8:67:ae:bb:a4:28:99:94:25: 29:43:38:4f:e1:15:72:c4:ca:9a:7f:6f:07:d8:61: e9:36:0f:95:b9:14:a5:18:2b:84:f3:a8:3a:0b:01: 99:f2:43:a2:fd:e5:04:6b:37:a7:07:ab:20:4b:1a: 2f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:3D:84:15:DF:6E:68:39:B3:5B:38:07:EB:76:C1:2E:61:D0:0D:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3d3312db-2532-3170-be24-795b5d0e7f32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:e239::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:19:56:07:99:03:c2:10:05:b9:c7:c2:da:11:72:4b:8a:8e: b8:83:50:ed:10:d4:8a:97:86:bd:dc:df:0b:95:56:01:b3:10: 24:52:a1:11:f6:e2:7e:45:15:3e:17:0f:63:07:aa:0c:7d:6a: 00:96:a8:18:2a:bf:42:0c:90:10:71:74:3d:71:80:22:5c:60: 7f:1e:4a:a6:91:52:eb:29:24:23:eb:ea:7b:3c:aa:9e:73:30: 14:5a:85:09:ab:c1:67:2d:de:e8:1e:61:c6:13:f8:6d:aa:0a: 43:d2:65:bf:8c:91:c4:3f:e3:f0:5b:1c:4a:af:b8:65:a1:cc: 8a:3c:03:58:2d:58:a5:ce:04:12:24:3a:d9:b1:6f:7e:f7:8e: 99:a5:9f:37:c0:08:91:3a:07:12:86:5e:14:80:d1:db:9e:47: 2b:89:83:d4:aa:6a:a5:33:4c:93:05:f3:15:a1:60:ab:7e:a9: 2a:a7:4d:9c:10:c8:cf:ba:58:36:0c:30:d5:0f:d2:18:63:67: ab:e3:74:93:19:1e:98:e0:38:15:0b:1e:98:32:cd:5f:ab:0e: c1:94:b0:29:1f:04:a2:a1:41:77:a1:81:be:4f:5f:02:84:f6: 73:93:e9:4a:f8:4f:48:44:e4:fc:fc:84:bb:e3:af:cd:3e:fb: 21:62:2a:fa -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE73F7Mtgis7kuRccQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk ODBmMTE4NDUtYzFhYi00ZDVkLTk1OTEtYzljMjdmMWVhNTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcFQrYlnViU46DT0ThUtEmbHsnok05Vb5esg 4MeVDY87E92NU68QKCLEhA3BqHyR7KnVWLA3QJBJtEosMVxDnihRYu0pWJ/eI43H HLq9dQ3IZIN9vCCqy/CjDNTqdjl/D7goERr2h6VkGr60IL0hXKXxCb6pZ8vDBhi0 VDLlwvt4rEq1wvYyFMvd2O7F2ksUJQEbJNohQGQQW/5gfxvrlMqsDzdGVWIJawaq 6A9R1AaNw6OtNjALN/MdrIs5SJ9YbltsGilOiW7IZ667pCiZlCUpQzhP4RVyxMqa f28H2GHpNg+VuRSlGCuE86g6CwGZ8kOi/eUEazenB6sgSxov0wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBo9hBXfbmg5s1s4B+t2wS5h0A2VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvM2QzMzEyZGItMjUzMi0z MTcwLWJlMjQtNzk1YjVkMGU3ZjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA+I5 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIUZVgeZA8IQBbnHwtoRckuKjriDUO0Q1IqXhr3c3wuVVgGzECRS oRH24n5FFT4XD2MHqgx9agCWqBgqv0IMkBBxdD1xgCJcYH8eSqaRUuspJCPr6ns8 qp5zMBRahQmrwWct3ugeYcYT+G2qCkPSZb+MkcQ/4/BbHEqvuGWhzIo8A1gtWKXO BBIkOtmxb373jpmlnzfACJE6BxKGXhSA0dueRyuJg9SqaqUzTJMF8xWhYKt+qSqn TZwQyM+6WDYMMNUP0hhjZ6vjdJMZHpjgOBULHpgyzV+rDsGUsCkfBKKhQXehgb5P XwKE9nOT6Ur4T0hE5Pz8hLvjr80++yFiKvo= -----END CERTIFICATE-----Generated at Sun Sep 27 06:26:34 2026 by rpki-client