$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abe802f2-fc55-3284-b2d5-3eaed511600a.roa File: abe802f2-fc55-3284-b2d5-3eaed511600a.roa (raw, json) Hash identifier: hrKRXm7VzDvZg4Km/xoIy4qS9giPmJzQymMrF4Hk7oI= Subject key identifier: 54:28:68:20:8B:4C:69:0E:1B:D0:58:0D:61:94:F9:6E:A8:92:EE:34 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584EF717B09116C622920AAFB500 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abe802f2-fc55-3284-b2d5-3eaed511600a.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 397224 IP address blocks: 2001:502:d399::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:b0:91:16:c6:22:92:0a:af:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=73141ebb-286e-4086-bd9b-a3291f270b83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:01:be:81:95:c3:3a:14:40:3e:a5:41:24:6b: e9:e0:a9:71:61:11:fd:41:86:1c:dd:9c:5e:8e:58: 85:44:51:90:30:f6:ce:fc:1a:0c:d9:ff:04:31:6a: 4b:a7:1d:00:34:ac:fc:52:da:ca:0d:ec:6b:f1:b6: 60:ca:52:9e:5b:19:f4:b4:27:21:73:9a:1c:b0:cc: e0:70:78:96:42:b1:ac:10:b5:53:fb:ac:50:37:fa: 15:77:da:45:c2:b0:79:69:94:16:b5:2f:89:8e:86: 07:be:8b:ae:b5:dd:51:3e:37:59:0e:3e:1b:17:18: b3:b3:ed:ac:92:06:a2:fc:1d:96:1b:15:6b:ed:c1: 48:fe:e8:2f:c8:6b:e8:13:dd:35:34:e8:48:8c:08: 30:63:91:77:c9:27:ef:3e:e2:01:d0:8a:09:a8:8b: 02:25:5f:0f:82:7e:c8:54:46:33:9a:24:8a:bb:1a: 8b:25:ab:bc:2c:65:79:48:6a:11:a4:57:e3:53:e6: d0:a4:5f:96:41:96:20:3c:26:ec:42:54:ce:5a:17: 06:9e:cc:82:a4:4e:20:e8:57:69:e5:04:5a:d6:e9: 96:c6:68:be:e4:87:a5:6d:50:b1:95:b8:84:ab:b2: 4a:ae:dd:0e:42:c0:74:57:49:92:c5:eb:40:48:ec: 23:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:28:68:20:8B:4C:69:0E:1B:D0:58:0D:61:94:F9:6E:A8:92:EE:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abe802f2-fc55-3284-b2d5-3eaed511600a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:d399::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:de:60:52:a0:2e:50:6d:28:c6:5f:4c:bb:a1:4b:4d:43:c1: d1:1f:7d:9a:56:58:a4:5e:a6:9a:3c:0a:7c:da:4e:f4:0d:7c: 6e:4f:3d:43:40:83:48:81:0d:b6:b7:09:17:73:b9:d0:b7:aa: ed:e4:59:80:01:89:64:2b:7f:f1:76:d9:ad:3a:de:e5:54:e0: 38:7c:b2:6d:4b:55:b9:f1:ea:e8:87:bf:2c:82:10:eb:d6:75: 8c:99:9c:8d:08:22:86:e1:1a:dc:d5:a9:32:61:09:0d:49:e8: 35:40:66:d6:06:cf:fe:39:50:71:26:b1:ae:5f:74:98:71:5e: ef:77:53:bc:95:9f:95:90:66:02:c2:4c:8a:2d:f9:ac:23:28: 94:40:57:3f:66:6d:b0:db:65:58:0b:85:07:74:5e:51:01:e8: a7:3d:7c:47:1e:32:23:51:78:7d:c1:0a:93:a0:81:38:ee:d1: 8d:2e:87:bf:8b:70:80:fd:9e:42:b4:8c:3a:6e:5d:72:a9:e3: b4:c9:d3:65:5b:d0:5d:eb:0a:ec:9f:8f:9e:08:aa:3b:53:a4: 4b:52:6e:ce:f0:7e:4c:36:86:1e:ac:24:98:e9:2c:bb:39:dd: 78:99:93:63:19:b3:98:28:20:e2:d4:88:da:fb:60:46:06:66: b0:16:bd:17 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE73F7CRFsYikgqvtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk NzMxNDFlYmItMjg2ZS00MDg2LWJkOWItYTMyOTFmMjcwYjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwG+gZXDOhRAPqVBJGvp4KlxYRH9QYYc3Zxe jliFRFGQMPbO/BoM2f8EMWpLpx0ANKz8UtrKDexr8bZgylKeWxn0tCchc5ocsMzg cHiWQrGsELVT+6xQN/oVd9pFwrB5aZQWtS+JjoYHvouutd1RPjdZDj4bFxizs+2s kgai/B2WGxVr7cFI/ugvyGvoE901NOhIjAgwY5F3ySfvPuIB0IoJqIsCJV8Pgn7I VEYzmiSKuxqLJau8LGV5SGoRpFfjU+bQpF+WQZYgPCbsQlTOWhcGnsyCpE4g6Fdp 5QRa1umWxmi+5IelbVCxlbiEq7JKrt0OQsB0V0mSxetASOwjMwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFQoaCCLTGkOG9BYDWGU+W6oku40MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYWJlODAyZjItZmM1NS0z Mjg0LWIyZDUtM2VhZWQ1MTE2MDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAtOZ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGXeYFKgLlBtKMZfTLuhS01DwdEffZpWWKReppo8CnzaTvQNfG5P PUNAg0iBDba3CRdzudC3qu3kWYABiWQrf/F22a063uVU4Dh8sm1LVbnx6uiHvyyC EOvWdYyZnI0IIobhGtzVqTJhCQ1J6DVAZtYGz/45UHEmsa5fdJhxXu93U7yVn5WQ ZgLCTIot+awjKJRAVz9mbbDbZVgLhQd0XlEB6Kc9fEceMiNReH3BCpOggTju0Y0u h7+LcID9nkK0jDpuXXKp47TJ02Vb0F3rCuyfj54IqjtTpEtSbs7wfkw2hh6sJJjp LLs53XiZk2MZs5goIOLUiNr7YEYGZrAWvRc= -----END CERTIFICATE-----Generated at Tue Sep 29 11:54:34 2026 by rpki-client