$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dc832fe5-feb0-395d-863f-00c7005c70c0.roa File: dc832fe5-feb0-395d-863f-00c7005c70c0.roa (raw, json) Hash identifier: soQYb7rcjhKKYN/tiWeGyb4N329LkYv4BwAeTRQtr2o= Subject key identifier: F1:80:FE:BC:E7:E4:B9:C4:D5:86:A7:83:2A:C3:95:19:33:43:27:9A Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23C1C28B80EEDC505E05093 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dc832fe5-feb0-395d-863f-00c7005c70c0.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397215 IP address blocks: 2001:502:100e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:1c:28:b8:0e:ed:c5:05:e0:50:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=d5eb70ad-4425-454d-a9eb-323cbe44ecbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:69:00:65:fe:21:d6:3d:8d:12:a4:7f:41:a5: 1d:ff:1c:7a:44:75:00:48:bf:1c:09:6e:23:a5:a4: 27:52:46:eb:b4:6c:e2:45:7f:5a:d3:d5:ae:af:e8: e6:84:99:11:79:45:e6:40:4a:91:e0:d2:33:4d:3b: 7f:96:2e:94:54:08:70:79:42:2f:dc:c1:b1:bb:51: 87:a8:12:a8:cf:cb:83:cc:81:05:8c:30:4c:6e:42: 55:cd:bd:da:e3:18:6a:0f:0d:d7:70:e9:58:e3:66: 82:ca:26:20:be:2f:20:f7:0e:c9:6f:f0:1b:cf:61: 20:2e:46:77:7a:05:e4:38:a8:20:75:02:e2:6a:7b: 4f:ae:f9:da:bd:a6:66:b2:24:94:fc:13:39:cf:b2: b1:6a:1f:81:93:11:0c:99:0c:42:1e:b5:99:60:72: 52:43:5a:15:5f:3a:3d:2a:6c:19:91:ba:03:33:78: f4:6a:af:66:b9:49:4b:7c:be:20:97:d7:0d:92:69: b1:c9:79:2f:57:58:1e:d6:dc:3f:67:81:49:b7:f2: 6d:03:54:cf:63:62:db:30:13:c5:f9:15:c8:f8:b3: e6:81:40:a3:a8:2e:de:0a:b4:3e:62:30:21:bb:04: 31:28:08:27:82:66:52:9d:5c:8d:ab:05:72:92:1f: 51:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:80:FE:BC:E7:E4:B9:C4:D5:86:A7:83:2A:C3:95:19:33:43:27:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dc832fe5-feb0-395d-863f-00c7005c70c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:100e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:b4:ae:8f:00:c8:e6:d6:96:f4:01:a0:eb:e7:fd:29:48:ef: d8:1b:e3:f0:fb:da:4f:d1:ef:cf:f8:a2:70:1b:63:60:53:43: d7:12:2c:0f:bd:26:0e:39:f2:0f:7e:85:f5:52:a8:65:37:f5: ac:f3:53:9e:49:ec:8c:be:7e:84:7d:f3:74:e2:63:ba:fa:58: 1c:cd:d3:69:41:f3:bc:84:90:bd:c5:4a:9c:96:99:d2:52:4f: 14:1b:57:dd:40:eb:fb:24:fe:89:11:f9:69:15:55:3e:d9:21: b3:40:fc:42:1b:4e:93:48:41:83:85:77:31:52:f6:8a:10:e2: 3f:ca:bc:ec:18:6d:bb:70:f5:ce:6b:11:a6:7e:8d:b8:3a:2f: 04:01:05:8d:aa:2f:0b:a2:51:dd:da:47:44:77:a5:3c:ed:33: 39:22:22:36:2e:fb:94:12:49:e8:e0:c2:f5:fb:4b:ea:5c:29: 70:c2:cc:40:68:e3:6a:d5:4d:35:9c:b7:73:87:fa:b4:19:5e: 02:24:8a:e6:67:0e:b6:67:e7:07:65:2e:bd:15:ab:e1:bd:fa: 2a:46:a1:16:2c:f2:f1:7d:95:8c:80:56:cb:ec:5e:68:a3:7b: fe:17:74:a2:7e:47:29:b4:9c:0b:b2:04:94:37:2a:02:6f:02: c9:17:b9:04 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErSPBwouA7txQXgUJMwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk ZDVlYjcwYWQtNDQyNS00NTRkLWE5ZWItMzIzY2JlNDRlY2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmkAZf4h1j2NEqR/QaUd/xx6RHUASL8cCW4j paQnUkbrtGziRX9a09Wur+jmhJkReUXmQEqR4NIzTTt/li6UVAhweUIv3MGxu1GH qBKoz8uDzIEFjDBMbkJVzb3a4xhqDw3XcOlY42aCyiYgvi8g9w7Jb/Abz2EgLkZ3 egXkOKggdQLiantPrvnavaZmsiSU/BM5z7Kxah+BkxEMmQxCHrWZYHJSQ1oVXzo9 KmwZkboDM3j0aq9muUlLfL4gl9cNkmmxyXkvV1ge1tw/Z4FJt/JtA1TPY2LbMBPF +RXI+LPmgUCjqC7eCrQ+YjAhuwQxKAgngmZSnVyNqwVykh9RQwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPGA/rzn5LnE1YangyrDlRkzQyeaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZGM4MzJmZTUtZmViMC0z OTVkLTg2M2YtMDBjNzAwNWM3MGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAhAO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIG0ro8AyObWlvQBoOvn/SlI79gb4/D72k/R78/4onAbY2BTQ9cS LA+9Jg458g9+hfVSqGU39azzU55J7Iy+foR983TiY7r6WBzN02lB87yEkL3FSpyW mdJSTxQbV91A6/sk/okR+WkVVT7ZIbNA/EIbTpNIQYOFdzFS9ooQ4j/KvOwYbbtw 9c5rEaZ+jbg6LwQBBY2qLwuiUd3aR0R3pTztMzkiIjYu+5QSSejgwvX7S+pcKXDC zEBo42rVTTWct3OH+rQZXgIkiuZnDrZn5wdlLr0Vq+G9+ipGoRYs8vF9lYyAVsvs Xmije/4XdKJ+Rym0nAuyBJQ3KgJvAskXuQQ= -----END CERTIFICATE-----Generated at Sat Aug 23 15:01:07 2025 by rpki-client