$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/97053c52-5b48-3bfd-a560-711089c4c48e.roa File: 97053c52-5b48-3bfd-a560-711089c4c48e.roa (raw, json) Hash identifier: 0vP2R9KskuKarIWt/Y6k4tWiw4SbMVGXKnznw3n9UK0= Subject key identifier: 98:B7:4E:66:98:79:F7:0D:95:C2:9A:55:84:8A:4B:BF:A7:CC:C7:85 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23C19F7AB3540DD75D8DF40 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/97053c52-5b48-3bfd-a560-711089c4c48e.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397215 IP address blocks: 2001:500:3682::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:19:f7:ab:35:40:dd:75:d8:df:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=653451ec-9ddc-4834-bb6e-d01d75f73a09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:71:18:ce:fa:e7:0d:59:0d:d1:53:f1:2c:30: 50:8c:06:8d:db:10:1f:85:5d:56:84:d4:04:63:2f: 15:00:69:32:c9:cd:fd:b0:ce:a1:27:be:7d:f5:46: 31:a0:ed:6f:e9:06:08:52:57:c2:4f:88:da:f9:88: c5:ac:f7:c2:b4:64:3f:d1:19:f1:bf:95:96:37:2f: 4f:f2:89:98:ed:99:5e:b0:d9:4e:48:24:86:9d:ab: c8:69:c8:43:0f:75:6e:2e:d0:78:4e:8c:aa:7f:e5: c4:58:e9:22:da:6e:be:b7:fc:d2:3a:70:e5:10:9d: 16:53:a6:26:01:55:41:6b:8e:52:75:a1:03:bc:b2: 61:67:01:a8:81:02:22:6e:76:98:b1:8a:31:9b:fe: df:1b:08:16:0e:60:29:44:c2:4b:70:59:5d:f7:cc: d3:dc:3d:b2:1a:6c:c8:a8:6a:7f:d1:a4:35:35:cd: 58:59:93:1b:b0:84:d4:31:20:39:85:94:51:4f:c2: 11:a1:95:df:8a:81:7a:82:d6:aa:e3:7a:4a:a1:34: e9:08:ec:91:c4:ec:0a:82:a1:af:6f:c0:fb:79:de: 54:e8:f5:21:3b:7b:10:45:34:4d:d5:93:c4:68:f6: 68:5e:36:14:e0:93:87:39:dc:0c:c2:c2:95:22:eb: 71:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:B7:4E:66:98:79:F7:0D:95:C2:9A:55:84:8A:4B:BF:A7:CC:C7:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/97053c52-5b48-3bfd-a560-711089c4c48e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:3682::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:c6:81:af:a3:bb:e1:29:cf:f6:20:6e:63:33:7b:76:d5:f0: 0d:1c:14:ff:69:b3:7f:28:af:6e:b3:6d:15:06:a1:70:02:66: 82:46:1e:2f:cc:f1:bf:a0:ee:81:60:81:6f:b8:85:aa:63:31: 54:88:8b:ae:82:68:3b:fe:db:f1:c7:a8:55:32:00:7c:68:99: f6:ef:c1:b0:d2:7b:7e:56:09:fc:43:c7:74:44:08:26:77:0a: d3:24:8a:18:fe:29:c0:be:c3:49:fb:28:1d:60:09:ec:3d:21: dc:ae:c9:cc:d7:ea:0d:3d:a8:3f:38:13:25:a6:9b:c0:ca:8f: 0e:6b:96:ee:8f:df:83:e5:0b:46:ff:12:e1:4c:ba:4c:6b:0d: 54:cb:78:16:0d:52:ad:48:4c:b1:1d:bc:0d:04:bc:e7:39:10: f3:14:39:cb:af:ef:9c:bf:a6:1e:9b:fc:f9:14:86:60:fe:70: 82:37:e1:11:80:02:20:d1:39:77:8f:09:0d:49:2a:66:9e:17: 14:c1:cb:c6:b5:8d:95:34:60:56:59:f3:19:bf:16:34:7c:65: eb:dc:e9:4c:20:04:0f:18:4d:f9:f1:e6:f5:03:df:1e:99:1d: 0a:a7:f9:c0:29:57:f6:09:3a:6d:c2:39:49:b8:91:3a:cc:de: 27:9f:a4:e2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErSPBn3qzVA3XXY30AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk NjUzNDUxZWMtOWRkYy00ODM0LWJiNmUtZDAxZDc1ZjczYTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nEYzvrnDVkN0VPxLDBQjAaN2xAfhV1WhNQE Yy8VAGkyyc39sM6hJ7599UYxoO1v6QYIUlfCT4ja+YjFrPfCtGQ/0Rnxv5WWNy9P 8omY7ZlesNlOSCSGnavIachDD3VuLtB4Toyqf+XEWOki2m6+t/zSOnDlEJ0WU6Ym AVVBa45SdaEDvLJhZwGogQIibnaYsYoxm/7fGwgWDmApRMJLcFld98zT3D2yGmzI qGp/0aQ1Nc1YWZMbsITUMSA5hZRRT8IRoZXfioF6gtaq43pKoTTpCOyRxOwKgqGv b8D7ed5U6PUhO3sQRTRN1ZPEaPZoXjYU4JOHOdwMwsKVIutxmwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJi3TmaYefcNlcKaVYSKS7+nzMeFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOTcwNTNjNTItNWI0OC0z YmZkLWE1NjAtNzExMDg5YzRjNDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFADaC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD7Gga+ju+Epz/YgbmMze3bV8A0cFP9ps38or26zbRUGoXACZoJG Hi/M8b+g7oFggW+4hapjMVSIi66CaDv+2/HHqFUyAHxomfbvwbDSe35WCfxDx3RE CCZ3CtMkihj+KcC+w0n7KB1gCew9IdyuyczX6g09qD84EyWmm8DKjw5rlu6P34Pl C0b/EuFMukxrDVTLeBYNUq1ITLEdvA0EvOc5EPMUOcuv75y/ph6b/PkUhmD+cII3 4RGAAiDROXePCQ1JKmaeFxTBy8a1jZU0YFZZ8xm/FjR8Zevc6UwgBA8YTfnx5vUD 3x6ZHQqn+cApV/YJOm3COUm4kTrM3iefpOI= -----END CERTIFICATE-----Generated at Sat Aug 23 18:04:56 2025 by rpki-client