$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/98889e34-abca-3032-ab9c-7417548372a2.roa File: 98889e34-abca-3032-ab9c-7417548372a2.roa (raw, json) Hash identifier: BzgqmwDE5mDHXX51uqhg2xwZiDLVibLf2nhu1bnD3b4= Subject key identifier: 38:06:C4:97:20:90:00:70:A2:35:B5:CF:64:A2:C3:79:6B:D8:2D:02 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23C27240E17317EA4EA4B63 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/98889e34-abca-3032-ab9c-7417548372a2.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397243 IP address blocks: 2001:502:d399::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:27:24:0e:17:31:7e:a4:ea:4b:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=19962a9e-9f99-4ff2-80df-aef61d1d4c74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8c:79:b6:1d:f2:1b:de:c0:7c:b1:70:0c:05: c8:a1:d0:0d:d0:36:da:a7:5b:3b:ab:64:59:4a:24: 11:a0:33:4a:66:ae:1e:82:20:17:41:1f:25:92:a6: 21:38:f9:0d:0f:12:59:76:ba:34:ab:a4:7a:8e:cd: 2d:12:3c:40:bd:90:cf:4a:d8:d2:54:4a:07:10:4e: 70:2e:d5:d8:61:12:bb:67:3b:31:e9:08:a7:cc:f7: fc:8d:64:ee:78:43:8e:43:d7:f8:e4:f3:4c:93:c2: 60:68:bf:52:7c:e0:6d:cc:8a:a1:de:dd:8d:05:7c: 0a:b4:34:84:9d:38:b3:e0:4c:77:6d:7d:41:5b:8a: 77:36:03:79:f8:b3:e8:2b:8f:8b:ce:48:be:f6:e1: b4:f7:b9:83:71:57:73:57:79:9a:a5:56:6d:61:08: 68:2c:b8:37:88:e7:ba:38:25:27:30:86:58:ec:d2: a9:5e:1f:2c:2f:76:9e:18:31:8e:9b:de:8a:56:97: 28:0d:85:77:76:0c:4b:3f:4f:be:a6:94:0a:b9:f8: aa:8f:65:a8:aa:83:f1:b7:a2:d3:b2:ad:c0:3f:83: f5:8d:67:9d:12:96:16:a3:42:94:5f:06:02:12:f2: 38:e8:0f:15:6e:f7:29:b1:d8:ef:3d:39:d6:08:19: 53:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:06:C4:97:20:90:00:70:A2:35:B5:CF:64:A2:C3:79:6B:D8:2D:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/98889e34-abca-3032-ab9c-7417548372a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:d399::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:37:8e:e9:03:9e:ab:a2:a0:51:8b:65:e5:63:5b:98:d1:5c: 45:19:17:fe:df:66:85:63:ea:11:ac:1f:62:f5:d7:a0:25:86: 42:3e:0a:2a:05:8d:49:fe:24:7b:eb:9b:fc:e6:28:73:b5:17: fa:ce:d5:d5:3b:d2:76:47:e8:b6:09:4c:e0:2a:6c:06:ae:1a: 6e:65:d1:2a:ea:d7:bc:43:6c:5a:c6:a7:6f:f9:56:6d:2e:91: ae:66:86:65:7b:af:d7:05:f6:0d:8e:30:a4:c3:ac:92:73:28: aa:b0:be:bf:f2:02:fd:65:49:f0:50:fa:d5:67:ad:5f:df:5a: e1:b2:3c:d1:58:a7:93:99:c2:13:40:d2:cc:cb:e9:a1:29:4c: 1f:cc:68:d3:9c:53:51:99:42:f2:41:7a:f6:c4:0f:7c:8a:93: c8:94:1d:5e:44:91:a8:66:9b:88:e0:b1:6c:33:00:c3:e3:1e: b7:90:d4:1d:1e:c0:41:ee:a0:e6:88:5d:43:37:d1:ce:e1:36: 84:b4:99:f6:93:60:09:03:34:3b:58:49:ea:1e:30:b8:22:62: 12:e3:a0:02:2c:d3:69:e2:16:84:14:a8:2d:3c:14:ec:89:c2: 6e:2e:d6:4a:a4:4f:5c:42:38:7b:3f:06:20:ad:5f:38:e5:6b: d1:89:83:30 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErSPCckDhcxfqTqS2MwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk MTk5NjJhOWUtOWY5OS00ZmYyLTgwZGYtYWVmNjFkMWQ0Yzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtox5th3yG97AfLFwDAXIodAN0Dbap1s7q2RZ SiQRoDNKZq4egiAXQR8lkqYhOPkNDxJZdro0q6R6js0tEjxAvZDPStjSVEoHEE5w LtXYYRK7Zzsx6QinzPf8jWTueEOOQ9f45PNMk8JgaL9SfOBtzIqh3t2NBXwKtDSE nTiz4Ex3bX1BW4p3NgN5+LPoK4+Lzki+9uG097mDcVdzV3mapVZtYQhoLLg3iOe6 OCUnMIZY7NKpXh8sL3aeGDGOm96KVpcoDYV3dgxLP0++ppQKufiqj2WoqoPxt6LT sq3AP4P1jWedEpYWo0KUXwYCEvI46A8VbvcpsdjvPTnWCBlT1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDgGxJcgkABwojW1z2Siw3lr2C0CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOTg4ODllMzQtYWJjYS0z MDMyLWFiOWMtNzQxNzU0ODM3MmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAtOZ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAc3jukDnquioFGLZeVjW5jRXEUZF/7fZoVj6hGsH2L116AlhkI+ CioFjUn+JHvrm/zmKHO1F/rO1dU70nZH6LYJTOAqbAauGm5l0Srq17xDbFrGp2/5 Vm0uka5mhmV7r9cF9g2OMKTDrJJzKKqwvr/yAv1lSfBQ+tVnrV/fWuGyPNFYp5OZ whNA0szL6aEpTB/MaNOcU1GZQvJBevbED3yKk8iUHV5Ekahmm4jgsWwzAMPjHreQ 1B0ewEHuoOaIXUM30c7hNoS0mfaTYAkDNDtYSeoeMLgiYhLjoAIs02niFoQUqC08 FOyJwm4u1kqkT1xCOHs/BiCtXzjla9GJgzA= -----END CERTIFICATE-----Generated at Sat Aug 23 12:58:57 2025 by rpki-client