$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c4ff7efa-2bd3-369f-84ab-fd0f64ddf321.roa File: c4ff7efa-2bd3-369f-84ab-fd0f64ddf321.roa (raw, json) Hash identifier: MTM0p++rr8gvYGMuKqv/EQ2uzYs6Y7LQTW1Lt3kBV/U= Subject key identifier: CA:0D:3E:49:68:11:25:99:BB:AB:D0:68:1D:35:57:13:BD:73:09:01 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23C1A7455E158771DA70200 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c4ff7efa-2bd3-369f-84ab-fd0f64ddf321.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397222 IP address blocks: 2001:500:3682::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:1a:74:55:e1:58:77:1d:a7:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=bfbe26c2-cba8-41f5-943f-13ed6e03f169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b6:c4:d6:61:51:9b:33:3b:b1:f5:ed:68:c5: 8e:c7:05:c1:41:ae:f3:3a:9a:b7:2e:9c:42:b5:6b: 43:c6:cf:77:b1:2d:27:f8:8b:d5:6e:3d:df:1f:29: 77:5d:fe:44:59:4e:79:98:4f:8a:97:82:90:a6:d0: f4:eb:d5:0a:bb:de:06:de:b1:ca:b4:5c:a1:10:11: 9e:f3:80:80:36:a0:97:95:4f:25:91:e1:8f:45:3a: 2f:39:93:33:6a:24:3b:6e:ea:24:25:49:bc:02:85: 80:72:1b:43:f5:44:33:23:57:23:46:39:3a:d0:35: 3a:5a:b4:be:ef:81:e3:6a:ee:44:07:70:c2:ea:a9: ed:1f:b3:1b:1f:72:75:db:97:ee:15:5e:d5:06:df: 9d:bf:09:e0:6a:e1:a9:2a:11:a0:07:88:b3:95:5f: 23:ac:a5:54:f0:64:3c:24:b4:85:79:a5:f9:73:d9: 79:81:86:f5:2b:e5:af:63:f5:da:b6:f7:77:76:49: 07:50:92:4c:36:4b:dc:8d:55:91:3a:d7:c6:80:fe: 1c:fe:7b:cd:67:96:d6:28:d8:26:59:5a:9e:f6:9c: a1:08:9b:f7:13:d1:07:cd:67:97:36:8c:ca:ab:c0: 10:a5:99:d7:6b:46:2d:37:bc:61:5b:43:20:65:be: 80:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:0D:3E:49:68:11:25:99:BB:AB:D0:68:1D:35:57:13:BD:73:09:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c4ff7efa-2bd3-369f-84ab-fd0f64ddf321.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:3682::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:58:ac:69:6c:a3:50:14:bf:cb:7c:22:94:f8:78:ce:90:d6: ef:f7:10:15:37:e5:a0:f5:81:f8:cf:43:9c:da:57:1e:fb:a4: af:76:fa:df:c6:dd:1c:23:f9:92:83:94:59:67:56:29:8e:0d: 00:a1:68:39:53:47:c6:e3:64:bc:72:b6:cf:52:9d:86:e2:85: a1:ec:e6:fe:1e:86:89:16:0b:f7:8d:47:18:09:94:cf:49:b0: 69:44:0c:5e:5f:4c:b4:24:b1:82:20:3c:1c:84:80:94:bf:19: ae:8c:99:2c:78:4d:bb:ed:f4:90:45:e0:4e:b1:97:73:95:05: 8e:ce:89:91:67:6e:f4:a6:f0:a3:ee:90:6b:80:b0:e3:ab:48: 0e:24:97:1f:8a:12:1e:df:c5:73:a3:0a:11:f1:3c:fc:ea:8d: 04:8d:57:32:4c:f1:05:70:d9:ea:b3:6a:c4:8a:14:ae:47:b0: 5b:6c:69:3b:f6:f4:19:91:4f:24:62:5d:1c:b1:45:c2:df:2b: 47:9c:49:96:fb:5c:e9:e2:d7:29:d6:ad:a6:e5:df:3f:58:55: 74:84:71:1c:01:7a:00:f6:14:42:15:b2:0c:42:17:25:3c:d5: e9:6d:ad:b9:8a:af:44:75:bf:6a:f1:05:d9:19:35:c7:30:fd: f0:42:f1:bd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErSPBp0VeFYdx2nAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk YmZiZTI2YzItY2JhOC00MWY1LTk0M2YtMTNlZDZlMDNmMTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrbE1mFRmzM7sfXtaMWOxwXBQa7zOpq3LpxC tWtDxs93sS0n+IvVbj3fHyl3Xf5EWU55mE+Kl4KQptD069UKu94G3rHKtFyhEBGe 84CANqCXlU8lkeGPRTovOZMzaiQ7buokJUm8AoWAchtD9UQzI1cjRjk60DU6WrS+ 74Hjau5EB3DC6qntH7MbH3J125fuFV7VBt+dvwngauGpKhGgB4izlV8jrKVU8GQ8 JLSFeaX5c9l5gYb1K+WvY/Xatvd3dkkHUJJMNkvcjVWROtfGgP4c/nvNZ5bWKNgm WVqe9pyhCJv3E9EHzWeXNozKq8AQpZnXa0YtN7xhW0MgZb6A7QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMoNPkloESWZu6vQaB01VxO9cwkBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYzRmZjdlZmEtMmJkMy0z NjlmLTg0YWItZmQwZjY0ZGRmMzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFADaC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABJYrGlso1AUv8t8IpT4eM6Q1u/3EBU35aD1gfjPQ5zaVx77pK92 +t/G3Rwj+ZKDlFlnVimODQChaDlTR8bjZLxyts9SnYbihaHs5v4ehokWC/eNRxgJ lM9JsGlEDF5fTLQksYIgPByEgJS/Ga6MmSx4Tbvt9JBF4E6xl3OVBY7OiZFnbvSm 8KPukGuAsOOrSA4klx+KEh7fxXOjChHxPPzqjQSNVzJM8QVw2eqzasSKFK5HsFts aTv29BmRTyRiXRyxRcLfK0ecSZb7XOni1ynWrabl3z9YVXSEcRwBegD2FEIVsgxC FyU81eltrbmKr0R1v2rxBdkZNccw/fBC8b0= -----END CERTIFICATE-----Generated at Sat Aug 23 19:50:28 2025 by rpki-client