$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d398b9cb-7c97-3d8d-9259-4b2f174b4308.roa File: d398b9cb-7c97-3d8d-9259-4b2f174b4308.roa (raw, json) Hash identifier: ocWyPXmNXXkp91bE75e9wDC+plsd++xW4wl/46X/MEk= Subject key identifier: F2:49:BF:B1:46:C6:E5:48:73:1A:42:61:53:DE:62:F3:6D:D9:0F:C0 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23C27C85D3B488BA98C0A00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d398b9cb-7c97-3d8d-9259-4b2f174b4308.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397219 IP address blocks: 2001:502:f3ff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:27:c8:5d:3b:48:8b:a9:8c:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=526749be-7587-46d5-9a3f-145d5ced5a80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:38:15:df:4e:ee:70:62:37:e8:3a:cd:e8:e8: 5f:c0:8e:9a:7c:cd:62:29:f7:17:ab:26:b5:ce:05: aa:ee:45:fa:e9:e2:6e:2a:64:35:62:89:7d:05:21: 26:70:7c:c1:03:bd:aa:10:08:54:84:a5:bc:48:c7: 45:7b:21:a1:37:0c:b3:77:aa:38:80:40:ba:aa:c0: f4:39:9f:d3:1c:58:15:c9:12:3a:6c:ea:cb:cd:48: 93:33:75:29:e0:13:85:62:f1:9f:e7:2f:ad:c7:3d: 86:4a:0f:37:16:b0:a0:54:fc:4a:21:21:85:37:32: ad:22:e1:41:07:e4:1a:cc:92:97:e3:db:cb:d8:50: 81:db:bd:18:e5:e5:56:19:a5:16:8b:57:94:b5:77: ce:bf:87:f8:89:72:ba:89:57:5e:91:5e:66:4b:3b: ef:85:f8:df:a4:1b:d7:1f:d9:28:cc:83:1d:56:f2: 5f:ad:96:57:82:3d:ef:96:be:fa:ef:df:67:55:e9: 46:dd:32:5f:26:07:51:33:c5:4e:b3:d7:66:71:5c: 7d:e4:59:0b:f3:ce:3d:d1:b3:99:ea:81:8e:c8:5a: 45:c0:7d:c8:94:50:d7:73:50:90:aa:48:e4:96:22: ba:e8:5d:b3:41:66:1c:06:59:35:f6:ee:ff:a9:ed: d6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:49:BF:B1:46:C6:E5:48:73:1A:42:61:53:DE:62:F3:6D:D9:0F:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d398b9cb-7c97-3d8d-9259-4b2f174b4308.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:f3ff::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:ac:f7:78:4c:a0:71:a9:89:d7:d5:49:ad:d4:3a:7f:02:de: 77:43:06:23:93:3d:54:76:ba:36:67:0a:c3:f0:65:34:d0:95: d4:69:8c:dd:95:88:0e:00:dd:0d:76:1a:b4:cd:7d:de:73:62: 73:f4:f8:b9:ba:df:eb:7f:12:68:1d:ed:58:c7:ad:0b:b0:30: 33:10:bb:5a:79:bf:58:2a:44:df:bb:17:a2:a7:3a:15:ff:74: b7:15:64:b8:23:60:70:d6:8f:59:6a:e8:9c:01:0e:87:88:a4: 17:0e:fc:f4:db:de:63:1c:77:e0:2b:3e:8a:90:8a:3d:d0:b5: 8b:37:78:5b:9b:ec:eb:19:cc:00:31:ad:2d:ab:eb:61:ec:1a: ef:5a:50:e3:db:95:d9:a7:fb:04:c3:dd:2f:e0:5f:ab:9b:23: 6b:c5:fb:96:07:ba:ca:6a:79:85:d4:85:b0:ac:1a:eb:ef:97: fb:76:a8:d8:fc:99:14:f2:e1:ea:04:38:c4:0b:ba:fe:b1:fe: e5:e8:4a:47:ad:d2:dc:a0:5e:05:2a:ee:68:3f:1a:61:b2:31: d7:dc:52:29:e3:f8:a1:e9:1d:b9:ed:0f:11:a9:59:ca:d7:90: b9:e3:4f:9c:77:7a:49:08:65:a6:a0:13:80:66:11:b9:94:0b: df:13:db:ac -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErSPCfIXTtIi6mMCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk NTI2NzQ5YmUtNzU4Ny00NmQ1LTlhM2YtMTQ1ZDVjZWQ1YTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TgV307ucGI36DrN6OhfwI6afM1iKfcXqya1 zgWq7kX66eJuKmQ1Yol9BSEmcHzBA72qEAhUhKW8SMdFeyGhNwyzd6o4gEC6qsD0 OZ/THFgVyRI6bOrLzUiTM3Up4BOFYvGf5y+txz2GSg83FrCgVPxKISGFNzKtIuFB B+QazJKX49vL2FCB270Y5eVWGaUWi1eUtXfOv4f4iXK6iVdekV5mSzvvhfjfpBvX H9kozIMdVvJfrZZXgj3vlr76799nVelG3TJfJgdRM8VOs9dmcVx95FkL88490bOZ 6oGOyFpFwH3IlFDXc1CQqkjkliK66F2zQWYcBlk19u7/qe3WsQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPJJv7FGxuVIcxpCYVPeYvNt2Q/AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZDM5OGI5Y2ItN2M5Ny0z ZDhkLTkyNTktNGIyZjE3NGI0MzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAvP/ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH6s93hMoHGpidfVSa3UOn8C3ndDBiOTPVR2ujZnCsPwZTTQldRp jN2ViA4A3Q12GrTNfd5zYnP0+Lm63+t/Emgd7VjHrQuwMDMQu1p5v1gqRN+7F6Kn OhX/dLcVZLgjYHDWj1lq6JwBDoeIpBcO/PTb3mMcd+ArPoqQij3QtYs3eFub7OsZ zAAxrS2r62HsGu9aUOPbldmn+wTD3S/gX6ubI2vF+5YHuspqeYXUhbCsGuvvl/t2 qNj8mRTy4eoEOMQLuv6x/uXoSket0tygXgUq7mg/GmGyMdfcUinj+KHpHbntDxGp WcrXkLnjT5x3ekkIZaagE4BmEbmUC98T26w= -----END CERTIFICATE-----Generated at Sat Aug 23 15:06:38 2025 by rpki-client