$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a6952362-d9d6-3d01-adb2-77812c8af057.roa File: a6952362-d9d6-3d01-adb2-77812c8af057.roa (raw, json) Hash identifier: iLfLtGesn1auiiKEClG+ZFgSu8JcTtMxo+rqB7Di0ts= Subject key identifier: 17:72:98:76:15:56:3A:79:23:AA:6C:D3:76:93:03:33:45:85:17:D5 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23C25774736F31D79A6F940 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a6952362-d9d6-3d01-adb2-77812c8af057.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397218 IP address blocks: 2001:502:d399::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:25:77:47:36:f3:1d:79:a6:f9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=c287c723-9321-4480-b1ef-9b45378393ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e3:e4:cb:71:40:33:d5:c3:94:57:a6:5b:19: b0:6b:39:cb:b0:d3:86:4f:a1:1d:41:9f:1c:c0:b1: da:78:d4:cb:80:47:15:3f:a5:86:61:1c:69:14:ec: 4b:12:68:e6:3f:5d:6b:6d:65:af:a5:d3:e1:9d:27: 3e:07:a7:f4:c0:0d:a6:52:7a:96:cf:8f:dc:b2:64: 8e:37:9a:6c:39:b5:6d:68:bc:ed:c0:e0:be:73:71: c8:34:30:57:d5:92:e6:89:8b:a2:88:fe:d3:35:63: e1:fe:f1:31:95:6f:d4:b7:3c:c4:0a:5f:53:6a:c9: e6:3d:f4:35:83:af:16:4a:3a:75:94:07:a0:63:6c: 1f:2c:ed:60:35:d4:8b:e2:f4:f7:57:27:d7:8f:08: 07:f4:bf:7b:ba:39:8a:a9:79:53:d8:88:f6:df:b9: 49:dd:d7:e8:8f:06:de:48:55:03:09:22:3a:bf:14: a7:cf:b0:b2:1c:2f:37:31:ce:7e:37:d4:da:50:d4: 1e:93:62:77:91:73:ac:7a:b1:fd:b7:3d:de:af:5c: d7:2d:0f:93:42:96:79:7b:10:50:fc:c0:1c:59:02: 59:b4:78:a8:da:fb:77:4f:42:9e:66:35:8f:cc:10: ef:e2:a4:1a:0a:21:9c:88:5d:6a:47:8d:8c:a2:b4: c7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:72:98:76:15:56:3A:79:23:AA:6C:D3:76:93:03:33:45:85:17:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a6952362-d9d6-3d01-adb2-77812c8af057.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:d399::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:3f:47:cd:21:7d:51:d4:51:e2:e2:ca:f8:18:3d:e1:2c:d7: f9:28:96:bb:96:1b:4b:ee:cf:4d:10:3a:82:c2:75:6b:9c:1b: b6:e8:3c:03:3b:ff:08:da:dc:0f:3f:e1:73:9a:40:eb:1d:a9: c2:ba:9f:8c:c0:77:74:4c:3d:89:af:c7:24:be:fe:d1:96:78: 38:99:2a:18:32:cd:d4:16:e9:48:70:0c:f4:f9:e5:da:aa:ab: b4:da:09:e6:02:0d:9d:33:2c:54:42:6b:e7:82:3b:3d:be:84: df:ba:d3:bb:50:2b:33:93:e9:99:5f:bc:3c:b7:38:f6:61:44: d1:30:d3:a3:d5:79:e8:bd:30:84:e2:ec:5b:25:00:8a:ff:6d: 2b:bd:77:a0:02:cb:72:64:32:a5:d1:c7:49:00:5a:f4:ad:26: fd:bc:dd:a8:85:51:cd:b0:3e:4e:7e:23:3c:d6:11:ac:10:bc: 1a:5b:7c:49:79:23:84:7a:93:9b:c6:40:cc:80:26:6e:cc:92: c3:67:46:d8:79:38:da:dd:36:7b:39:0b:08:21:f8:0b:da:12: 40:02:be:05:b2:82:cf:4e:e9:54:b2:98:c9:17:25:ac:96:25: e4:3e:f3:2c:ac:a9:ec:16:28:63:e7:37:52:54:ac:30:49:a6: 6e:60:b3:9a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErSPCV3RzbzHXmm+UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk YzI4N2M3MjMtOTMyMS00NDgwLWIxZWYtOWI0NTM3ODM5M2VmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkePky3FAM9XDlFemWxmwaznLsNOGT6EdQZ8c wLHaeNTLgEcVP6WGYRxpFOxLEmjmP11rbWWvpdPhnSc+B6f0wA2mUnqWz4/csmSO N5psObVtaLztwOC+c3HINDBX1ZLmiYuiiP7TNWPh/vExlW/UtzzECl9TasnmPfQ1 g68WSjp1lAegY2wfLO1gNdSL4vT3VyfXjwgH9L97ujmKqXlT2Ij237lJ3dfojwbe SFUDCSI6vxSnz7CyHC83Mc5+N9TaUNQek2J3kXOserH9tz3er1zXLQ+TQpZ5exBQ /MAcWQJZtHio2vt3T0KeZjWPzBDv4qQaCiGciF1qR42MorTH7wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBdymHYVVjp5I6ps03aTAzNFhRfVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYTY5NTIzNjItZDlkNi0z ZDAxLWFkYjItNzc4MTJjOGFmMDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAtOZ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAA/R80hfVHUUeLiyvgYPeEs1/kolruWG0vuz00QOoLCdWucG7bo PAM7/wja3A8/4XOaQOsdqcK6n4zAd3RMPYmvxyS+/tGWeDiZKhgyzdQW6UhwDPT5 5dqqq7TaCeYCDZ0zLFRCa+eCOz2+hN+607tQKzOT6ZlfvDy3OPZhRNEw06PVeei9 MITi7FslAIr/bSu9d6ACy3JkMqXRx0kAWvStJv283aiFUc2wPk5+IzzWEawQvBpb fEl5I4R6k5vGQMyAJm7MksNnRth5ONrdNns5Cwgh+AvaEkACvgWygs9O6VSymMkX JayWJeQ+8yysqewWKGPnN1JUrDBJpm5gs5o= -----END CERTIFICATE-----Generated at Sat Aug 23 14:54:10 2025 by rpki-client