$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b28d69dd-ffd8-3970-bec5-e5be78181138.roa File: b28d69dd-ffd8-3970-bec5-e5be78181138.roa (raw, json) Hash identifier: kYOPy180DWHQy5+G0HsujInv849TZqhQ7RsNq+jBW/Q= Subject key identifier: 75:36:A0:D0:96:6F:F3:84:E0:92:40:B0:C7:F9:4E:C6:04:88:1E:E2 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23C2392A97884677B7DAF80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b28d69dd-ffd8-3970-bec5-e5be78181138.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397224 IP address blocks: 2001:502:ad09::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:23:92:a9:78:84:67:7b:7d:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=34044107-c9cf-4c65-af70-d28bc77ad7f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6c:d2:b0:2d:06:45:04:65:cc:a5:dc:5b:65: af:b4:f3:cb:4d:64:bf:65:3a:17:26:4a:2b:ea:12: a7:55:fc:42:d4:5c:ca:37:78:51:ba:a2:a0:93:ee: 89:bb:e2:d4:1d:6c:b3:2e:c5:3b:3a:9a:4d:59:ab: f1:6a:2c:ed:38:2f:89:c9:c4:b7:eb:4d:d4:29:e9: 6c:04:3d:4c:58:25:ad:00:c8:7f:11:7a:0c:6f:5d: 33:ca:98:02:1d:ec:54:52:03:9a:ce:24:6d:80:c6: 66:a4:6d:a5:90:bf:88:bc:da:b5:82:12:32:68:04: d8:84:df:08:c0:c7:f7:39:e6:21:68:93:b6:ea:6b: 57:7b:ee:8c:0f:5e:92:a2:1d:c7:30:0b:f0:94:3b: d8:f2:44:ac:20:28:12:66:ba:40:49:b8:59:7a:75: af:63:b5:9e:30:a2:20:b1:5a:e3:02:da:f7:28:9e: c3:04:9d:52:c8:d3:c9:eb:d8:9b:db:35:87:a4:07: be:43:55:29:4a:2d:8b:82:cd:2e:2b:b1:72:fc:37: 78:4e:e8:53:7c:bc:f9:d6:d9:fb:87:d7:ef:4c:46: a7:24:77:70:7d:bd:20:8c:d2:56:9e:33:62:c8:1d: 2a:47:f2:5b:fd:b9:db:00:e2:12:63:2b:92:a6:d1: 7a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:36:A0:D0:96:6F:F3:84:E0:92:40:B0:C7:F9:4E:C6:04:88:1E:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b28d69dd-ffd8-3970-bec5-e5be78181138.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:ad09::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:b7:7c:93:5f:db:a6:91:82:24:84:8b:00:12:b2:f2:a8:b3: c2:93:20:d7:5d:d6:d4:79:d6:d8:26:ad:41:ba:6d:b5:94:cd: 5a:ca:9e:ad:1d:2d:2b:0a:1b:85:fe:58:ba:f6:e4:8b:70:ad: 5c:c9:2c:31:41:08:1e:e3:69:85:c7:18:d7:5d:b7:aa:b1:73: 1e:b1:90:d6:00:9e:16:c2:37:b3:9b:8d:a2:53:58:b3:0e:27: 70:5f:02:3c:80:fc:54:9a:c3:ce:ae:c8:d0:83:4a:ef:36:9f: 5c:6a:e6:01:60:45:63:8a:80:e0:15:44:70:de:87:0a:f5:df: 11:c1:17:c6:ea:68:8f:0b:9c:c9:be:58:1d:12:e9:a4:df:e8: eb:68:a2:0e:9d:e3:3c:e7:7c:d3:83:22:1c:01:f0:cf:22:22: 20:bc:34:cc:03:e1:d3:77:96:40:7a:e9:a8:3b:b0:4d:25:f6: 38:64:ce:be:36:a8:e5:73:39:2f:9a:37:ca:57:26:fd:12:32: 05:21:4a:82:ac:6c:32:8c:85:4c:47:f4:1c:9b:91:22:52:b2: 34:99:ed:18:23:46:58:68:fc:63:5e:16:d8:26:51:70:55:25: aa:58:e4:48:5a:c9:0b:05:cb:91:e1:46:4e:19:8d:9f:17:5a: 1d:51:4b:0c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErSPCOSqXiEZ3t9r4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk MzQwNDQxMDctYzljZi00YzY1LWFmNzAtZDI4YmM3N2FkN2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmzSsC0GRQRlzKXcW2WvtPPLTWS/ZToXJkor 6hKnVfxC1FzKN3hRuqKgk+6Ju+LUHWyzLsU7OppNWavxaiztOC+JycS3603UKels BD1MWCWtAMh/EXoMb10zypgCHexUUgOaziRtgMZmpG2lkL+IvNq1ghIyaATYhN8I wMf3OeYhaJO26mtXe+6MD16Soh3HMAvwlDvY8kSsICgSZrpASbhZenWvY7WeMKIg sVrjAtr3KJ7DBJ1SyNPJ69ib2zWHpAe+Q1UpSi2Lgs0uK7Fy/Dd4TuhTfLz51tn7 h9fvTEanJHdwfb0gjNJWnjNiyB0qR/Jb/bnbAOISYyuSptF6uQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHU2oNCWb/OE4JJAsMf5TsYEiB7iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYjI4ZDY5ZGQtZmZkOC0z OTcwLWJlYzUtZTViZTc4MTgxMTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAq0J MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHy3fJNf26aRgiSEiwASsvKos8KTINdd1tR51tgmrUG6bbWUzVrK nq0dLSsKG4X+WLr25ItwrVzJLDFBCB7jaYXHGNddt6qxcx6xkNYAnhbCN7ObjaJT WLMOJ3BfAjyA/FSaw86uyNCDSu82n1xq5gFgRWOKgOAVRHDehwr13xHBF8bqaI8L nMm+WB0S6aTf6Otoog6d4zznfNODIhwB8M8iIiC8NMwD4dN3lkB66ag7sE0l9jhk zr42qOVzOS+aN8pXJv0SMgUhSoKsbDKMhUxH9BybkSJSsjSZ7RgjRlho/GNeFtgm UXBVJapY5EhayQsFy5HhRk4ZjZ8XWh1RSww= -----END CERTIFICATE-----Generated at Sat Aug 23 19:52:48 2025 by rpki-client