$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3de9f0e2-58ae-33a4-818c-a93128a77f2d.roa File: 3de9f0e2-58ae-33a4-818c-a93128a77f2d.roa (raw, json) Hash identifier: eHc0KNKqUVUu4KZDdlSXpPKbk97wEQAeuW5VGpvOvjk= Subject key identifier: 67:25:07:12:DA:5C:1E:0E:AD:D5:D5:AF:1E:AF:E5:81:58:5A:FB:D0 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23C1A1B6F0C4D1E4A568440 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3de9f0e2-58ae-33a4-818c-a93128a77f2d.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397217 IP address blocks: 2001:500:3682::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:1a:1b:6f:0c:4d:1e:4a:56:84:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=d0d93026-4e51-478a-9b2c-34fcf69c5ce8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:18:01:c2:33:ef:0e:74:e5:3d:10:0d:92:5e: 75:67:75:62:59:f4:28:f2:fb:c1:6a:eb:fe:c2:28: 03:91:27:84:31:d7:81:d7:b7:74:97:5f:4b:db:af: 24:f2:06:e4:19:3c:77:1e:86:7a:d2:d5:48:4b:1c: 58:85:d5:0f:30:ba:f2:41:aa:3c:e6:b0:8f:8c:0a: c2:10:78:8c:d2:1b:03:ac:4c:5c:de:1d:9b:c6:a6: d8:e3:97:c1:16:c6:65:88:fe:a9:8e:a1:e0:48:7a: 48:7f:13:da:e8:2c:8d:41:a9:5a:27:75:79:e1:5d: d6:07:97:e0:9a:48:78:33:53:aa:43:b5:f3:94:dd: 08:b2:99:85:f3:50:59:f0:7e:52:3f:26:8d:f5:d6: ff:e0:2a:6a:27:60:87:38:cd:da:c0:89:b7:0e:a6: 3e:e4:d7:2c:f3:b1:b5:e3:9c:10:7a:8d:0a:01:c0: 99:e8:88:e2:d1:37:d7:b2:96:04:0a:d1:5d:c5:78: 81:94:f4:0b:48:5e:0b:ee:a9:44:dc:39:1a:f1:04: c9:ee:4c:1b:6c:d6:ea:82:66:48:0e:d6:03:fd:ad: 1f:1d:f7:b3:b3:f6:a8:64:18:8b:08:a9:ff:d4:dc: 45:2e:bd:dc:dd:0f:fe:3b:48:b0:61:4b:74:48:31: 9c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:25:07:12:DA:5C:1E:0E:AD:D5:D5:AF:1E:AF:E5:81:58:5A:FB:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3de9f0e2-58ae-33a4-818c-a93128a77f2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:3682::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:24:11:a5:9f:6f:01:73:22:c1:3a:ed:8e:2d:31:d5:44:31: 0d:9b:6f:d4:60:a5:8d:52:df:94:e5:d6:f8:e1:86:af:3c:83: 96:16:26:48:03:9c:34:42:98:f6:1a:e1:b3:19:a1:a6:13:af: 54:2e:59:22:3c:02:71:24:d8:fb:08:cf:a2:d1:8d:1c:2c:93: 9e:db:69:b5:70:a5:9b:e1:3a:95:d6:77:c2:e0:78:a5:93:00: a4:86:86:f1:65:46:fc:37:d8:9c:8b:24:e1:50:ee:c6:66:71: c5:c8:94:1c:11:65:c2:5a:88:05:b5:77:20:b1:55:9a:f7:1e: 66:bc:39:00:42:38:69:60:12:e6:f9:78:39:4c:27:5e:4b:16: 26:a5:fe:b8:72:5d:18:12:8c:68:77:0b:1d:3b:b4:3e:70:3d: fe:d0:0c:6b:b9:f8:8e:69:2e:24:b3:43:3e:0d:65:8f:84:cf: 1f:b3:2e:08:53:8e:05:0b:46:a3:12:cd:7e:bd:1f:02:b0:4f: 86:25:b1:38:c7:56:cf:6d:f2:0a:13:bb:57:aa:6d:9b:c8:78: 93:4c:3a:ea:4d:a4:97:c5:a8:ef:84:9d:93:70:be:c3:a4:79: c4:dd:7d:e1:de:43:4e:8d:37:7e:36:f9:b5:f8:29:b5:39:45: 19:4a:2b:7c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErSPBobbwxNHkpWhEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk ZDBkOTMwMjYtNGU1MS00NzhhLTliMmMtMzRmY2Y2OWM1Y2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihgBwjPvDnTlPRANkl51Z3ViWfQo8vvBauv+ wigDkSeEMdeB17d0l19L268k8gbkGTx3HoZ60tVISxxYhdUPMLryQao85rCPjArC EHiM0hsDrExc3h2bxqbY45fBFsZliP6pjqHgSHpIfxPa6CyNQalaJ3V54V3WB5fg mkh4M1OqQ7XzlN0IspmF81BZ8H5SPyaN9db/4CpqJ2CHOM3awIm3DqY+5Ncs87G1 45wQeo0KAcCZ6Iji0TfXspYECtFdxXiBlPQLSF4L7qlE3Dka8QTJ7kwbbNbqgmZI DtYD/a0fHfezs/aoZBiLCKn/1NxFLr3c3Q/+O0iwYUt0SDGcBwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGclBxLaXB4OrdXVrx6v5YFYWvvQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvM2RlOWYwZTItNThhZS0z M2E0LTgxOGMtYTkzMTI4YTc3ZjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFADaC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG0kEaWfbwFzIsE67Y4tMdVEMQ2bb9RgpY1S35Tl1vjhhq88g5YW JkgDnDRCmPYa4bMZoaYTr1QuWSI8AnEk2PsIz6LRjRwsk57babVwpZvhOpXWd8Lg eKWTAKSGhvFlRvw32JyLJOFQ7sZmccXIlBwRZcJaiAW1dyCxVZr3Hma8OQBCOGlg Eub5eDlMJ15LFial/rhyXRgSjGh3Cx07tD5wPf7QDGu5+I5pLiSzQz4NZY+Ezx+z LghTjgULRqMSzX69HwKwT4YlsTjHVs9t8goTu1eqbZvIeJNMOupNpJfFqO+EnZNw vsOkecTdfeHeQ06NN342+bX4KbU5RRlKK3w= -----END CERTIFICATE-----Generated at Sat Aug 23 14:49:50 2025 by rpki-client