$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3ef936a5-f2eb-3da5-9a16-2cfdec32611a.roa File: 3ef936a5-f2eb-3da5-9a16-2cfdec32611a.roa (raw, json) Hash identifier: qb9u2GWdnfPXceKAhwEs4Qe+nHvzinLIA1ovJLirkkA= Subject key identifier: 2A:31:F4:08:F4:98:BB:19:2E:46:46:D1:EB:59:16:2E:4D:EB:78:B0 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584EF717B309B6770478AA3CA3C0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3ef936a5-f2eb-3da5-9a16-2cfdec32611a.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 397214 IP address blocks: 2001:503:e239::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:b3:09:b6:77:04:78:aa:3c:a3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=dc4fa764-f908-4438-85bc-1fbbbc066daf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:71:ac:a0:f2:db:66:1f:a9:ad:ce:df:32:f9: 03:9e:1a:89:4e:18:c9:0b:22:a3:67:92:46:08:07: 21:98:87:00:dc:f8:b1:53:aa:d1:15:c6:8b:e1:7f: 64:43:7d:e8:2b:37:99:aa:7c:ec:6c:3f:8d:cb:c4: 66:20:67:45:f0:18:a8:74:00:e1:1b:64:74:60:97: a8:db:4b:2f:26:08:d4:9e:85:4a:d3:68:02:d4:04: 38:77:08:05:84:2b:19:0c:47:72:f3:d5:04:90:a0: 3c:72:70:28:37:ce:1b:51:ea:d8:30:78:3c:15:bb: 99:49:8f:b0:97:dd:31:47:50:e9:cf:b7:36:82:e5: 2e:78:82:d6:66:8e:5a:61:96:94:0a:1b:07:d1:f0: 91:ab:0c:38:ab:fb:7a:e8:66:f9:85:14:f5:20:4b: 4a:ee:5f:fa:bf:15:51:0f:e6:4d:68:e6:fd:94:f6: da:5a:f2:6d:de:a4:7e:09:6a:41:7b:79:81:e4:6b: 1a:b4:7a:9b:50:17:c3:9f:1c:c2:ac:b4:f1:33:3d: 44:98:5e:e6:8f:a4:76:80:07:b5:4f:84:75:52:aa: 81:aa:68:d7:5e:b5:92:84:a2:a0:fd:e3:c3:aa:59: a5:cd:15:16:68:71:22:39:95:0b:60:9e:23:a1:de: 79:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:31:F4:08:F4:98:BB:19:2E:46:46:D1:EB:59:16:2E:4D:EB:78:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3ef936a5-f2eb-3da5-9a16-2cfdec32611a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:e239::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:5a:2a:c1:e6:5d:6f:53:77:e7:50:4b:6f:5d:43:c2:96:68: 79:41:29:f7:c3:b9:a1:95:3f:47:62:cc:57:c2:4d:11:a3:96: 49:92:69:36:48:0b:51:20:ea:db:45:f7:91:9a:22:9e:50:d3: 76:a0:80:1a:bf:7a:24:7d:d4:7c:80:73:87:92:26:ce:4a:a8: 9e:d2:5e:02:52:64:a9:ed:06:83:4e:fd:38:e3:d6:ad:1e:d9: 0f:06:1c:2c:ce:f6:eb:6e:50:b3:47:7c:d8:73:7f:24:ba:ed: 0f:e9:57:78:46:70:4d:53:ae:b7:7a:be:28:e3:6c:e3:5a:af: 77:08:da:27:57:ad:58:b9:5c:e7:9f:0d:9c:72:4d:27:61:cd: bd:34:37:0d:62:a3:c5:74:c8:83:17:06:2b:50:4c:a3:8a:c6: 03:58:03:7d:bf:07:49:2f:67:2f:cd:a0:f8:1c:4f:46:57:86: 40:2a:e8:b8:ad:1d:1e:be:7c:06:df:3d:07:44:d1:e1:6d:8e: 80:48:d5:a6:40:04:3e:11:f3:81:4d:1f:3d:3a:82:e7:32:38: 27:04:6c:37:a5:e9:49:b6:88:6d:af:37:9c:27:4d:57:30:26: fc:45:9e:23:73:45:53:19:15:b6:d9:97:d4:95:dd:33:14:51: e8:8c:62:ea -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE73F7MJtncEeKo8o8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk ZGM0ZmE3NjQtZjkwOC00NDM4LTg1YmMtMWZiYmJjMDY2ZGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHGsoPLbZh+prc7fMvkDnhqJThjJCyKjZ5JG CAchmIcA3PixU6rRFcaL4X9kQ33oKzeZqnzsbD+Ny8RmIGdF8BiodADhG2R0YJeo 20svJgjUnoVK02gC1AQ4dwgFhCsZDEdy89UEkKA8cnAoN84bUerYMHg8FbuZSY+w l90xR1Dpz7c2guUueILWZo5aYZaUChsH0fCRqww4q/t66Gb5hRT1IEtK7l/6vxVR D+ZNaOb9lPbaWvJt3qR+CWpBe3mB5GsatHqbUBfDnxzCrLTxMz1EmF7mj6R2gAe1 T4R1UqqBqmjXXrWShKKg/ePDqlmlzRUWaHEiOZULYJ4jod55jwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCox9Aj0mLsZLkZG0etZFi5N63iwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvM2VmOTM2YTUtZjJlYi0z ZGE1LTlhMTYtMmNmZGVjMzI2MTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA+I5 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD9aKsHmXW9Td+dQS29dQ8KWaHlBKffDuaGVP0dizFfCTRGjlkmS aTZIC1Eg6ttF95GaIp5Q03aggBq/eiR91HyAc4eSJs5KqJ7SXgJSZKntBoNO/Tjj 1q0e2Q8GHCzO9utuULNHfNhzfyS67Q/pV3hGcE1Trrd6vijjbONar3cI2idXrVi5 XOefDZxyTSdhzb00Nw1io8V0yIMXBitQTKOKxgNYA32/B0kvZy/NoPgcT0ZXhkAq 6LitHR6+fAbfPQdE0eFtjoBI1aZABD4R84FNHz06gucyOCcEbDel6Um2iG2vN5wn TVcwJvxFniNzRVMZFbbZl9SV3TMUUeiMYuo= -----END CERTIFICATE-----Generated at Sun Sep 27 10:50:06 2026 by rpki-client