$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cb158168-be66-3762-a25a-65c101671bb4.roa File: cb158168-be66-3762-a25a-65c101671bb4.roa (raw, json) Hash identifier: xt4HyP8Tedfg8ekvYzwaDJsLXugnC2rzfXr7W4dVcz0= Subject key identifier: 2A:EA:FD:FB:BC:E6:3B:E6:F9:21:B9:0D:0E:DE:03:DD:84:CE:56:F7 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23C26F00377C153EC41A944 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cb158168-be66-3762-a25a-65c101671bb4.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397240 IP address blocks: 2001:502:d399::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:26:f0:03:77:c1:53:ec:41:a9:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=0ce15092-e5c3-44d7-a502-0ab9a3554f13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8e:11:cf:ed:8f:9a:f6:0a:ee:10:15:20:24: f9:16:62:11:9f:9c:d7:1a:5b:ee:de:59:dc:10:3f: bd:5a:c6:fc:73:1c:0e:cb:99:04:f6:bd:9e:08:7f: 6a:b6:4a:6c:0f:0b:51:8e:16:71:a3:c3:41:fb:87: 39:9b:be:5a:fc:26:9a:35:3e:f5:fa:23:d7:e9:09: d0:c2:8b:70:e1:80:5e:6b:72:ac:f3:c8:fd:4a:90: c2:f1:29:f1:a0:c0:6c:76:5a:92:70:93:0d:b0:0d: 78:2a:8f:e3:2b:b7:db:ce:82:be:2b:f9:e6:f6:7b: 5d:69:93:36:a4:a8:72:b7:78:77:ac:7b:df:23:f6: 43:d5:22:62:33:d9:47:27:46:55:04:56:1b:bc:fa: de:8d:61:e5:62:3a:96:1e:a2:4a:81:d8:05:18:13: 28:d4:b5:2d:c3:b1:7b:8f:9b:85:b9:a9:79:6a:07: a2:be:f8:81:f2:12:a7:ca:e6:3e:f6:88:fa:8a:4c: 2d:f1:8f:b3:2e:ec:17:52:5a:b8:ff:63:9e:3d:37: b3:a3:2e:ca:4e:5c:db:b9:ce:dc:b5:42:94:d9:58: fb:c8:35:be:6f:c4:e5:82:e5:f0:6a:4b:c0:ae:ec: 12:cf:b7:42:67:1a:83:e0:fd:e1:5b:b7:6e:eb:e2: 55:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:EA:FD:FB:BC:E6:3B:E6:F9:21:B9:0D:0E:DE:03:DD:84:CE:56:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cb158168-be66-3762-a25a-65c101671bb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:d399::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:99:e1:2f:54:6a:ce:59:19:1b:a3:f0:36:a0:45:5b:0f:0e: 0d:fe:7d:cd:aa:74:0e:59:f2:41:4e:1b:13:bc:22:12:53:31: e9:c4:ae:d1:45:56:1f:5e:c6:06:db:1e:5b:d0:c9:db:8c:dc: 15:91:ab:c3:0d:d9:3f:e3:c3:9a:d9:33:b7:21:18:88:65:39: da:86:9d:12:50:a0:e6:06:f7:ec:d8:2e:9f:cf:0e:64:d0:e2: 2e:25:43:f0:ec:ce:e1:c7:4c:89:eb:f9:10:1b:29:aa:46:1e: 49:28:1b:16:1d:8b:c5:45:3f:3a:5d:3e:2b:ba:bb:5e:53:07: 93:d2:45:4a:66:9c:78:be:58:f7:e3:93:73:59:32:89:ce:24: 3b:a4:67:5b:7b:82:dd:e6:7b:aa:79:83:45:62:a8:5a:c7:96: d0:fb:69:84:a8:ba:fa:9d:43:d7:55:83:2b:40:ff:35:32:eb: f5:a4:c1:27:9a:ac:f9:a5:55:75:06:f6:ba:23:8f:2c:46:18: 8f:0a:3b:0a:08:92:28:04:3d:43:57:d7:45:ec:e8:6b:0e:ee: 39:02:9a:c4:5c:39:cf:c1:2a:18:05:21:15:6a:20:48:64:d4: 03:30:db:38:ec:ba:c7:0e:80:3c:65:31:51:d2:f2:a4:82:ce: 50:0e:08:17 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErSPCbwA3fBU+xBqUQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk MGNlMTUwOTItZTVjMy00NGQ3LWE1MDItMGFiOWEzNTU0ZjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoI4Rz+2PmvYK7hAVICT5FmIRn5zXGlvu3lnc ED+9Wsb8cxwOy5kE9r2eCH9qtkpsDwtRjhZxo8NB+4c5m75a/CaaNT71+iPX6QnQ wotw4YBea3Ks88j9SpDC8SnxoMBsdlqScJMNsA14Ko/jK7fbzoK+K/nm9ntdaZM2 pKhyt3h3rHvfI/ZD1SJiM9lHJ0ZVBFYbvPrejWHlYjqWHqJKgdgFGBMo1LUtw7F7 j5uFual5ageivviB8hKnyuY+9oj6ikwt8Y+zLuwXUlq4/2OePTezoy7KTlzbuc7c tUKU2Vj7yDW+b8TlguXwakvAruwSz7dCZxqD4P3hW7du6+JVuwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCrq/fu85jvm+SG5DQ7eA92Ezlb3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvY2IxNTgxNjgtYmU2Ni0z NzYyLWEyNWEtNjVjMTAxNjcxYmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAtOZ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHKZ4S9Uas5ZGRuj8DagRVsPDg3+fc2qdA5Z8kFOGxO8IhJTMenE rtFFVh9exgbbHlvQyduM3BWRq8MN2T/jw5rZM7chGIhlOdqGnRJQoOYG9+zYLp/P DmTQ4i4lQ/DszuHHTInr+RAbKapGHkkoGxYdi8VFPzpdPiu6u15TB5PSRUpmnHi+ WPfjk3NZMonOJDukZ1t7gt3me6p5g0ViqFrHltD7aYSouvqdQ9dVgytA/zUy6/Wk wSearPmlVXUG9rojjyxGGI8KOwoIkigEPUNX10Xs6GsO7jkCmsRcOc/BKhgFIRVq IEhk1AMw2zjsuscOgDxlMVHS8qSCzlAOCBc= -----END CERTIFICATE-----Generated at Sat Aug 23 16:31:50 2025 by rpki-client