$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ddfb5616-264a-3f03-b8cd-0f93c7d35cd3.roa File: ddfb5616-264a-3f03-b8cd-0f93c7d35cd3.roa (raw, json) Hash identifier: H+8MkTDKLyNYc+7K4Dhuaqjajb2DtzmBiGUw1aoD10k= Subject key identifier: B7:12:9C:8B:EF:A4:6F:A2:C1:F4:1E:45:94:E7:45:F0:58:0B:D3:74 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23C28F64957332D6E59BA00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ddfb5616-264a-3f03-b8cd-0f93c7d35cd3.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397236 IP address blocks: 2001:502:f3ff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:28:f6:49:57:33:2d:6e:59:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=f7944113-a5be-45ec-aa25-4eab6e721566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:f8:12:aa:c4:72:de:2b:2a:53:9c:89:7c:4b: 0b:f9:26:96:ec:b7:79:c9:66:0b:c1:1c:56:66:7c: c8:b8:a9:f2:d0:7b:b1:b1:dd:b9:3f:8f:76:4e:2e: af:37:d7:b2:a5:4d:ff:04:92:ae:a5:31:a7:55:a0: 1f:cb:0e:aa:e6:2f:5b:5a:7c:07:3b:54:cc:d2:8a: ce:80:4f:98:77:6e:14:00:0c:a2:72:28:8c:25:67: 66:e8:12:d6:d6:94:08:37:39:1d:3b:03:b6:9d:34: c7:0c:ed:65:10:08:6a:3b:38:22:7b:49:ee:ab:3b: 68:76:26:28:3d:f3:52:70:5b:7b:0b:61:dd:92:be: 3d:23:8f:e1:21:f9:81:2c:05:34:68:4d:f1:a8:18: a8:73:ff:cc:fa:15:03:07:e8:02:e9:60:7a:29:1f: 1e:84:b8:ac:c2:72:59:80:fa:90:25:a7:29:c9:1b: a1:ce:8b:b5:78:a6:e6:24:31:cc:34:40:87:ad:a0: 3a:ea:0f:7b:d6:00:c9:5f:09:b1:a0:28:20:e3:01: 6e:5a:eb:52:b7:38:1e:95:67:05:e1:32:ec:0d:ad: 6c:a8:bc:b1:43:1c:15:4b:c9:b4:13:0c:98:0f:2a: e4:80:98:b7:66:8f:bc:53:64:94:8c:88:be:87:78: ed:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:12:9C:8B:EF:A4:6F:A2:C1:F4:1E:45:94:E7:45:F0:58:0B:D3:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ddfb5616-264a-3f03-b8cd-0f93c7d35cd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:f3ff::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:9b:31:21:d8:d6:f3:3f:69:9c:2b:f3:fe:5c:5f:fe:f8:40: 45:b5:41:80:e3:cc:e2:70:c3:5f:5f:3c:76:2b:04:7f:ee:83: 1c:89:2c:01:8d:ff:7a:7a:03:34:e1:86:28:43:81:d2:ee:0a: dd:cc:a2:45:9b:59:1c:fc:19:e9:3d:9f:b8:9e:4f:17:80:39: 2b:75:a5:76:d2:b2:df:bf:5e:1d:08:78:4b:2b:97:82:20:56: 88:f8:8b:ef:8a:65:dd:25:e3:a2:f6:95:46:65:52:09:93:89: 9c:1d:ca:f2:29:04:37:cf:35:77:ca:9e:6b:bb:ac:8c:69:88: c8:06:b5:ad:25:f8:06:48:58:3c:63:94:2c:a0:ac:d2:d9:8e: 7d:da:83:4b:08:05:3f:dd:d3:01:7d:f0:28:5c:06:d6:d6:a9: 35:8f:af:32:3f:c1:13:7b:a7:52:c9:f4:95:d7:b1:e7:ea:8a: 2a:a2:60:c0:2c:ad:57:4e:85:5c:26:a3:11:28:ae:f9:5f:fa: 07:7d:6c:2a:a0:4e:c1:5d:6b:d8:87:9d:c1:3e:9f:9b:60:be: fe:43:fb:bf:f9:b2:99:fc:1c:dd:0c:e2:01:c8:4e:40:23:93: 96:63:10:2b:f5:c6:c5:95:2c:56:f0:12:39:ca:e3:69:cc:2c: 19:02:dd:a4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErSPCj2SVczLW5ZugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk Zjc5NDQxMTMtYTViZS00NWVjLWFhMjUtNGVhYjZlNzIxNTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfgSqsRy3isqU5yJfEsL+SaW7Ld5yWYLwRxW ZnzIuKny0Huxsd25P492Ti6vN9eypU3/BJKupTGnVaAfyw6q5i9bWnwHO1TM0orO gE+Yd24UAAyiciiMJWdm6BLW1pQINzkdOwO2nTTHDO1lEAhqOzgie0nuqztodiYo PfNScFt7C2Hdkr49I4/hIfmBLAU0aE3xqBioc//M+hUDB+gC6WB6KR8ehLiswnJZ gPqQJacpyRuhzou1eKbmJDHMNECHraA66g971gDJXwmxoCgg4wFuWutStzgelWcF 4TLsDa1sqLyxQxwVS8m0EwyYDyrkgJi3Zo+8U2SUjIi+h3jthwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLcSnIvvpG+iwfQeRZTnRfBYC9N0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZGRmYjU2MTYtMjY0YS0z ZjAzLWI4Y2QtMGY5M2M3ZDM1Y2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAvP/ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADmbMSHY1vM/aZwr8/5cX/74QEW1QYDjzOJww19fPHYrBH/ugxyJ LAGN/3p6AzThhihDgdLuCt3MokWbWRz8Gek9n7ieTxeAOSt1pXbSst+/Xh0IeEsr l4IgVoj4i++KZd0l46L2lUZlUgmTiZwdyvIpBDfPNXfKnmu7rIxpiMgGta0l+AZI WDxjlCygrNLZjn3ag0sIBT/d0wF98ChcBtbWqTWPrzI/wRN7p1LJ9JXXsefqiiqi YMAsrVdOhVwmoxEorvlf+gd9bCqgTsFda9iHncE+n5tgvv5D+7/5spn8HN0M4gHI TkAjk5ZjECv1xsWVLFbwEjnK42nMLBkC3aQ= -----END CERTIFICATE-----Generated at Sat Aug 23 14:44:49 2025 by rpki-client