$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e95c7538-0a44-3c6d-9640-0733b0687263.roa File: e95c7538-0a44-3c6d-9640-0733b0687263.roa (raw, json) Hash identifier: pI1hBojKzpcf2+Ll91IUdTd/jKFhBI7mQj6h5ktMb5Q= Subject key identifier: 43:49:23:8B:39:0C:C2:76:D3:F5:36:CD:9D:CD:D8:61:16:BF:67:B9 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23C1B15E380527ED725B360 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e95c7538-0a44-3c6d-9640-0733b0687263.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397232 IP address blocks: 2001:500:3682::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:1b:15:e3:80:52:7e:d7:25:b3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=342a337b-ce09-4014-a5eb-b787ef2408fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:cb:f9:c8:53:0a:c9:b4:49:49:2a:99:f9:5f: 59:f7:3a:19:a2:0b:e6:ff:66:6d:57:6c:56:ee:ee: 4c:8e:19:d4:a9:82:e8:c4:fb:b2:03:cc:75:f2:a6: 68:e4:b2:ed:3d:19:cc:da:6b:81:2d:dc:4b:46:d1: 36:22:3b:ff:a4:a9:69:6b:b1:24:2b:da:28:11:1f: 60:65:8e:b0:9b:3b:c5:18:e8:7d:fc:68:3d:0a:39: 8e:eb:41:99:9e:32:f1:22:ea:74:a5:17:76:6e:0d: 40:bb:0c:95:c7:c2:4e:b0:7a:ce:13:ac:f4:90:ef: 3c:8b:b4:cf:dd:9f:04:32:01:f2:48:be:04:f1:61: 9a:ae:c9:d8:ec:29:27:cc:92:23:b9:42:d8:25:52: c0:8b:1e:8c:f2:b0:a1:d8:3d:ae:5a:35:2e:d5:1c: 92:f8:63:2d:01:80:be:65:14:4b:53:eb:82:67:7a: 43:cf:d4:60:e8:31:67:60:82:17:6e:68:60:28:a0: 56:83:82:5a:9b:75:3d:67:55:e4:d5:22:d8:90:81: 3d:b1:05:b3:02:6a:f7:3c:88:78:7e:74:d9:54:e2: ce:2f:28:d6:18:c9:60:d6:33:5c:1c:be:d3:65:83: 60:7f:e0:5c:d4:34:32:a7:54:12:50:d3:58:4f:8e: 6f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:49:23:8B:39:0C:C2:76:D3:F5:36:CD:9D:CD:D8:61:16:BF:67:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e95c7538-0a44-3c6d-9640-0733b0687263.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:3682::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:2b:46:d4:1e:fd:c9:a5:a6:4e:f0:5b:83:f0:45:14:fb:60: a2:76:71:76:53:03:74:52:76:93:9a:73:b4:6a:31:b3:9e:10: fb:89:dd:03:f1:9d:04:41:63:22:48:80:86:7e:76:3c:ce:bf: 9e:84:c5:74:d9:58:fc:55:86:64:6a:60:6b:73:e5:34:f4:83: d0:cd:00:39:a0:ff:e2:f7:0e:01:b2:93:99:ff:e4:74:70:53: 94:90:68:60:18:14:4e:96:5c:ee:ee:bd:23:e7:93:a1:dd:3e: fa:19:2b:6f:d8:d1:7f:04:58:8a:a5:ca:d8:61:fd:fd:2f:d4: fd:c6:1d:df:52:2a:29:3f:f1:27:11:26:f3:1b:e5:65:a5:02: 08:be:9b:7a:7e:52:a5:f5:9b:6a:2d:ef:c0:e7:ec:c2:39:37: a5:ea:54:3a:93:c2:47:a2:56:97:8b:6b:0c:35:b6:60:28:d5: 26:1e:d3:bb:42:6b:cd:fc:a6:f2:f0:a8:08:d6:c3:eb:bd:0d: 3a:82:97:25:d3:ab:d4:48:b2:2b:79:3b:e1:20:75:a0:70:cf: 3d:d8:08:66:cb:db:a1:c8:45:40:d0:47:62:c8:7b:4e:d0:47: a4:41:73:42:f2:5f:85:c0:cc:5b:ff:36:94:c5:48:08:98:71: fa:37:2e:44 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErSPBsV44BSftcls2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk MzQyYTMzN2ItY2UwOS00MDE0LWE1ZWItYjc4N2VmMjQwOGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08v5yFMKybRJSSqZ+V9Z9zoZogvm/2ZtV2xW 7u5MjhnUqYLoxPuyA8x18qZo5LLtPRnM2muBLdxLRtE2Ijv/pKlpa7EkK9ooER9g ZY6wmzvFGOh9/Gg9CjmO60GZnjLxIup0pRd2bg1AuwyVx8JOsHrOE6z0kO88i7TP 3Z8EMgHySL4E8WGarsnY7CknzJIjuULYJVLAix6M8rCh2D2uWjUu1RyS+GMtAYC+ ZRRLU+uCZ3pDz9Rg6DFnYIIXbmhgKKBWg4Jam3U9Z1Xk1SLYkIE9sQWzAmr3PIh4 fnTZVOLOLyjWGMlg1jNcHL7TZYNgf+Bc1DQyp1QSUNNYT45vYQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFENJI4s5DMJ20/U2zZ3N2GEWv2e5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZTk1Yzc1MzgtMGE0NC0z YzZkLTk2NDAtMDczM2IwNjg3MjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFADaC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHArRtQe/cmlpk7wW4PwRRT7YKJ2cXZTA3RSdpOac7RqMbOeEPuJ 3QPxnQRBYyJIgIZ+djzOv56ExXTZWPxVhmRqYGtz5TT0g9DNADmg/+L3DgGyk5n/ 5HRwU5SQaGAYFE6WXO7uvSPnk6HdPvoZK2/Y0X8EWIqlythh/f0v1P3GHd9SKik/ 8ScRJvMb5WWlAgi+m3p+UqX1m2ot78Dn7MI5N6XqVDqTwkeiVpeLaww1tmAo1SYe 07tCa838pvLwqAjWw+u9DTqClyXTq9RIsit5O+EgdaBwzz3YCGbL26HIRUDQR2LI e07QR6RBc0LyX4XAzFv/NpTFSAiYcfo3LkQ= -----END CERTIFICATE-----Generated at Sat Aug 23 13:45:41 2025 by rpki-client