$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/71fbf7c2-8e9a-3455-b2ec-ce03203c3157.roa File: 71fbf7c2-8e9a-3455-b2ec-ce03203c3157.roa (raw, json) Hash identifier: p/MDAXWKvJeFjzySIbkGq+qJFIKaSEpmpKN6iQOgFsw= Subject key identifier: BC:08:D9:2E:E2:1A:50:F8:42:72:9F:92:23:6E:D0:62:14:B9:29:62 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23C19C39B50A16A2FC11C10 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/71fbf7c2-8e9a-3455-b2ec-ce03203c3157.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 19905 IP address blocks: 2001:500:3682::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:19:c3:9b:50:a1:6a:2f:c1:1c:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=4c1e8a5c-f85a-414c-9205-9295c599832a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9f:1a:44:53:24:f2:7d:12:26:cc:41:da:a0: bd:a6:d9:94:ad:75:15:3d:00:a5:97:32:45:0d:3f: 8d:e2:1e:4a:07:a5:65:d2:a0:8a:b2:02:bb:f5:6a: c4:92:4e:e4:5e:79:62:ed:00:cc:c1:bc:55:4c:09: d9:84:bc:97:a3:23:fc:52:3f:a6:03:1c:9c:d5:44: c5:0b:0b:35:fb:50:b6:30:9e:8a:0c:3a:f4:d0:e7: f6:de:23:24:55:82:0c:96:82:cd:e9:4d:a0:1e:88: 3f:70:c8:9c:14:99:2c:a6:36:a1:d6:a4:7d:da:42: 6b:dd:4c:f1:c4:ae:17:af:8e:87:bc:ab:6e:90:fb: 88:38:84:86:20:73:59:77:65:f0:c0:b0:b4:26:3d: b7:c5:76:fd:e4:92:ae:8b:fd:54:87:d7:1d:39:f2: 18:c9:86:88:4e:f8:c5:22:78:60:8a:41:b1:9c:ed: 64:ac:fc:54:e1:87:c3:c8:5b:ca:3a:73:89:8e:39: 49:6d:3a:44:d6:db:6a:e4:12:90:47:d6:9c:d0:c9: 9e:44:14:81:29:44:78:73:cf:dc:1a:6d:64:5c:32: 53:46:44:03:1e:53:da:48:76:ab:2f:0e:d7:82:30: cd:b0:6c:3e:fb:e7:39:83:2a:64:86:53:4f:f4:2b: 10:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:08:D9:2E:E2:1A:50:F8:42:72:9F:92:23:6E:D0:62:14:B9:29:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/71fbf7c2-8e9a-3455-b2ec-ce03203c3157.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:3682::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:7f:1f:57:63:f7:44:24:b9:4f:77:77:00:e6:89:7d:81:3a: 0a:75:22:3f:42:67:7c:b1:a5:e8:ed:21:db:1e:64:26:85:8b: cb:f7:40:69:30:64:4a:08:39:4c:1c:11:93:30:32:fe:0c:eb: c0:04:e8:57:62:be:d9:6a:43:4d:81:5f:86:0c:ee:f7:ee:b5: 67:cd:17:7b:3f:7d:df:f5:61:5c:6b:0b:24:bd:e0:62:e3:ba: 1e:c4:68:c2:92:3e:0e:20:63:df:6c:4d:6f:89:e9:87:98:f1: 2b:07:36:90:22:9a:77:01:85:64:fa:0e:d5:45:09:60:71:86: ee:24:0f:e1:40:be:2e:3c:31:e5:bf:1a:45:01:34:29:b4:36: a6:ef:0f:f9:be:5b:16:e0:2c:09:0f:3e:64:d6:d0:ac:21:d6: 11:20:59:a2:c5:ac:f8:e2:f0:37:8b:fa:5e:76:50:e7:18:53: f3:32:50:ef:22:00:bd:ff:a6:c0:95:c1:bf:1c:76:4b:d0:6b: 60:f9:ef:da:2b:36:da:5b:b6:55:48:91:88:6a:a6:c2:0e:da: cd:28:24:3d:ca:8c:b3:44:df:13:60:76:7a:59:68:b8:2a:83: 8d:33:b0:97:de:3b:9d:a5:6e:8e:b2:d5:f6:f6:db:98:92:07: 95:45:00:e4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErSPBnDm1Chai/BHBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk NGMxZThhNWMtZjg1YS00MTRjLTkyMDUtOTI5NWM1OTk4MzJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJ8aRFMk8n0SJsxB2qC9ptmUrXUVPQCllzJF DT+N4h5KB6Vl0qCKsgK79WrEkk7kXnli7QDMwbxVTAnZhLyXoyP8Uj+mAxyc1UTF Cws1+1C2MJ6KDDr00Of23iMkVYIMloLN6U2gHog/cMicFJkspjah1qR92kJr3Uzx xK4Xr46HvKtukPuIOISGIHNZd2XwwLC0Jj23xXb95JKui/1Uh9cdOfIYyYaITvjF InhgikGxnO1krPxU4YfDyFvKOnOJjjlJbTpE1ttq5BKQR9ac0MmeRBSBKUR4c8/c Gm1kXDJTRkQDHlPaSHarLw7XgjDNsGw+++c5gypkhlNP9CsQywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLwI2S7iGlD4QnKfkiNu0GIUuSliMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNzFmYmY3YzItOGU5YS0z NDU1LWIyZWMtY2UwMzIwM2MzMTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFADaC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHt/H1dj90QkuU93dwDmiX2BOgp1Ij9CZ3yxpejtIdseZCaFi8v3 QGkwZEoIOUwcEZMwMv4M68AE6FdivtlqQ02BX4YM7vfutWfNF3s/fd/1YVxrCyS9 4GLjuh7EaMKSPg4gY99sTW+J6YeY8SsHNpAimncBhWT6DtVFCWBxhu4kD+FAvi48 MeW/GkUBNCm0NqbvD/m+WxbgLAkPPmTW0Kwh1hEgWaLFrPji8DeL+l52UOcYU/My UO8iAL3/psCVwb8cdkvQa2D579orNtpbtlVIkYhqpsIO2s0oJD3KjLNE3xNgdnpZ aLgqg40zsJfeO52lbo6y1fb225iSB5VFAOQ= -----END CERTIFICATE-----Generated at Sat Aug 23 10:30:19 2025 by rpki-client