$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a8303ebc-039e-305e-a2d8-95ea84c6d3d3.roa File: a8303ebc-039e-305e-a2d8-95ea84c6d3d3.roa (raw, json) Hash identifier: 5j2vCx7mSjg9g771+9Rq1vb1ILwmbgMIm/+d8ck5RRI= Subject key identifier: BA:78:D3:38:F0:AC:08:FF:C5:09:2C:34:25:28:72:D6:6E:11:1A:DC Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23C2B73D29B31EE3303D500 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a8303ebc-039e-305e-a2d8-95ea84c6d3d3.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397240 IP address blocks: 2001:503:e239::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:2b:73:d2:9b:31:ee:33:03:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=1cc2b534-d89c-4cd9-8442-f5185162ffb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:02:6f:6b:66:97:5c:a8:d6:9c:2a:e2:28:28: 21:f9:ff:24:8a:b5:d7:13:d0:d2:04:9a:d7:0c:33: f9:2a:1e:f0:73:12:f2:f4:74:54:ca:8d:1c:d3:16: 7f:0a:cf:74:71:30:03:24:51:8b:01:63:3e:50:09: 87:2c:eb:75:f1:66:6c:d2:77:dd:dc:e3:9d:31:9a: fe:b7:dc:30:57:fe:36:ea:00:8c:51:12:bb:4f:84: bb:2b:10:b9:ba:b9:a0:a5:32:32:5a:10:72:17:bf: e5:74:43:0e:62:fa:e0:c8:c0:ae:15:a8:a7:d5:89: 81:13:91:c3:07:10:2f:8d:bd:c2:8c:7c:62:09:52: 4c:41:1f:6a:74:0f:da:1e:bd:e9:38:a0:ac:6a:20: 12:d2:cc:4d:0a:f2:f1:64:59:d3:bb:2f:c0:45:b2: 8d:cb:c6:35:1e:be:12:46:2e:08:9e:59:61:21:c0: 4d:a6:b4:1a:b2:88:5b:1d:b9:69:f9:e5:0f:8b:dd: 9f:cb:64:73:a3:42:dc:44:5f:49:65:a7:71:58:2e: 98:33:3a:72:d7:b6:7d:3b:a6:85:c3:12:7b:ae:63: 39:83:82:9c:45:c6:13:68:00:4b:e4:db:fa:48:77: 8b:af:a3:2d:d4:f1:f4:19:9f:5c:40:1d:f4:24:a7: 49:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:78:D3:38:F0:AC:08:FF:C5:09:2C:34:25:28:72:D6:6E:11:1A:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a8303ebc-039e-305e-a2d8-95ea84c6d3d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:e239::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:34:32:63:56:aa:7f:a1:55:14:b4:dd:74:82:43:a9:f9:20: 91:52:66:7c:6b:d7:1e:5e:f2:58:30:f3:62:5b:1b:50:7c:5f: 98:25:bd:44:66:49:67:06:15:e6:1a:01:b7:8a:e3:76:d1:46: 2c:93:b4:5c:d7:95:29:f1:84:96:81:31:12:2a:37:48:2b:25: 0c:94:3f:9d:b8:5c:d9:64:ea:15:ce:db:87:44:24:ab:ab:c0: 16:70:c7:9b:64:fa:c5:6f:7a:b6:63:00:de:cd:81:c1:28:5a: a1:ed:f5:20:f5:cf:43:1f:f9:ff:97:6c:59:f4:83:e4:50:b1: 84:d3:c4:a2:be:43:08:3e:19:35:dd:3f:3b:fa:e0:9a:a7:ff: d5:e2:11:c3:a8:5e:32:c8:80:c0:2e:e5:ea:ba:53:ba:b7:7b: d2:79:5a:00:f4:a3:94:6f:98:97:33:06:53:b8:42:6b:1a:46: 5f:9e:e4:ad:03:55:04:06:0a:eb:22:31:19:94:82:26:29:45: e4:cb:7f:4a:13:b6:46:49:55:e0:41:23:7e:29:ef:b6:83:a7: b3:e8:78:c4:f1:64:43:51:e6:2b:80:7b:73:ec:76:ca:3b:5f: 2c:40:fc:47:1b:81:65:b6:ec:fc:82:82:63:52:f8:ca:ce:98: 29:b2:62:45 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErSPCtz0psx7jMD1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk MWNjMmI1MzQtZDg5Yy00Y2Q5LTg0NDItZjUxODUxNjJmZmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAJva2aXXKjWnCriKCgh+f8kirXXE9DSBJrX DDP5Kh7wcxLy9HRUyo0c0xZ/Cs90cTADJFGLAWM+UAmHLOt18WZs0nfd3OOdMZr+ t9wwV/426gCMURK7T4S7KxC5urmgpTIyWhByF7/ldEMOYvrgyMCuFain1YmBE5HD BxAvjb3CjHxiCVJMQR9qdA/aHr3pOKCsaiAS0sxNCvLxZFnTuy/ARbKNy8Y1Hr4S Ri4InllhIcBNprQasohbHblp+eUPi92fy2Rzo0LcRF9JZadxWC6YMzpy17Z9O6aF wxJ7rmM5g4KcRcYTaABL5Nv6SHeLr6Mt1PH0GZ9cQB30JKdJjQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLp40zjwrAj/xQksNCUoctZuERrcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYTgzMDNlYmMtMDM5ZS0z MDVlLWEyZDgtOTVlYTg0YzZkM2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA+I5 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGI0MmNWqn+hVRS03XSCQ6n5IJFSZnxr1x5e8lgw82JbG1B8X5gl vURmSWcGFeYaAbeK43bRRiyTtFzXlSnxhJaBMRIqN0grJQyUP524XNlk6hXO24dE JKurwBZwx5tk+sVverZjAN7NgcEoWqHt9SD1z0Mf+f+XbFn0g+RQsYTTxKK+Qwg+ GTXdPzv64Jqn/9XiEcOoXjLIgMAu5eq6U7q3e9J5WgD0o5RvmJczBlO4QmsaRl+e 5K0DVQQGCusiMRmUgiYpReTLf0oTtkZJVeBBI34p77aDp7PoeMTxZENR5iuAe3Ps dso7XyxA/EcbgWW27PyCgmNS+MrOmCmyYkU= -----END CERTIFICATE-----Generated at Sat Aug 23 17:03:42 2025 by rpki-client