$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f836070d-3c4d-3589-98f1-0a4917c78fe6.roa File: f836070d-3c4d-3589-98f1-0a4917c78fe6.roa (raw, json) Hash identifier: gFN/Jmefiksu9068dngCmPRuB1YrMtHJ/CR2DXb2oVg= Subject key identifier: E1:E4:7A:08:21:A4:1C:A3:A9:E8:05:4C:22:6C:96:AB:E5:8F:D7:16 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23C1BD4B1C2C062349494F0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f836070d-3c4d-3589-98f1-0a4917c78fe6.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397243 IP address blocks: 2001:500:3682::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:1b:d4:b1:c2:c0:62:34:94:94:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=b3b929cd-bcae-4af3-b6ae-4a4080342359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:36:cf:92:f0:a8:96:8a:9e:1f:53:22:9d:15: 5f:5a:8d:7a:32:0e:fa:d5:87:52:5d:1d:08:9c:be: 20:a4:e1:f5:14:62:91:77:d1:df:77:13:4e:3c:8d: 48:0c:40:a5:f6:04:e3:0e:65:05:f8:a2:1c:ea:fb: 3a:32:da:12:ba:f0:d2:c0:6b:11:c4:2a:13:9f:e2: cf:97:e8:ed:fe:22:35:87:7e:61:88:e8:c0:e0:94: 14:64:09:63:73:08:37:2a:84:47:b6:37:b4:85:56: 0d:30:d9:40:33:21:19:f8:08:87:8d:81:19:47:81: bc:24:84:04:16:cc:89:0c:85:c7:5e:80:41:ff:73: f3:03:8e:08:60:af:38:63:c4:65:68:53:f2:d5:f1: be:91:85:c8:42:fc:0d:18:d2:fc:02:65:3a:03:9b: fd:57:ed:38:63:89:a0:22:52:8c:16:de:55:fa:4a: 96:36:00:8e:47:36:5f:3e:bf:36:c9:7f:f1:79:31: 9c:e3:d8:33:de:ab:e9:85:71:ff:a3:f5:bd:92:ed: 8c:2f:b4:57:45:df:65:08:9c:98:bc:be:08:25:fe: b9:59:cd:bc:52:12:33:58:09:44:96:6b:40:7b:91: 40:8f:92:39:2d:02:89:ae:9c:d7:36:6c:94:f3:a2: ce:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:E4:7A:08:21:A4:1C:A3:A9:E8:05:4C:22:6C:96:AB:E5:8F:D7:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f836070d-3c4d-3589-98f1-0a4917c78fe6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:3682::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:a9:c0:fb:d1:18:6a:b4:d7:34:43:74:10:85:e8:e8:c1:cc: 94:ee:ac:d9:47:43:ee:0e:62:3a:03:ee:fd:84:92:83:10:78: 89:a5:82:67:96:2e:55:41:45:8e:67:f6:10:1c:c2:3d:cd:f7: 91:ff:d5:03:3c:e9:a1:c7:50:f9:6d:15:29:36:70:72:4f:f8: a0:cb:14:ff:1a:45:bf:26:bd:e4:5f:7c:1e:cd:f5:b0:c6:3e: d6:bb:be:a1:48:aa:2c:4a:52:e9:75:94:6b:56:6e:74:b8:2d: 41:77:9b:50:cf:d4:de:d9:63:71:bd:c6:13:bd:3b:5f:0d:e0: 3e:fd:f3:19:2f:7b:6f:75:92:57:e2:51:4d:1e:03:7b:76:70: 12:da:80:20:f8:02:67:78:93:63:1f:30:70:9c:a2:ee:17:33: 92:6b:fc:55:6d:34:ec:f1:da:0e:2a:81:95:11:57:bf:61:ee: 0a:b4:01:82:60:25:c5:02:86:3f:ed:46:7f:31:6b:dc:88:64: 63:ca:8b:85:96:7f:d0:c8:73:c5:40:ab:e0:eb:02:40:f9:08: c4:e7:99:c4:02:12:9a:9d:73:96:a5:a0:58:c5:00:4d:62:e4: 64:48:af:db:8c:28:03:c3:b2:3a:c1:88:f1:f0:e2:e1:3e:04: 71:84:e5:5a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErSPBvUscLAYjSUlPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk YjNiOTI5Y2QtYmNhZS00YWYzLWI2YWUtNGE0MDgwMzQyMzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDbPkvColoqeH1MinRVfWo16Mg761YdSXR0I nL4gpOH1FGKRd9HfdxNOPI1IDECl9gTjDmUF+KIc6vs6MtoSuvDSwGsRxCoTn+LP l+jt/iI1h35hiOjA4JQUZAljcwg3KoRHtje0hVYNMNlAMyEZ+AiHjYEZR4G8JIQE FsyJDIXHXoBB/3PzA44IYK84Y8RlaFPy1fG+kYXIQvwNGNL8AmU6A5v9V+04Y4mg IlKMFt5V+kqWNgCORzZfPr82yX/xeTGc49gz3qvphXH/o/W9ku2ML7RXRd9lCJyY vL4IJf65Wc28UhIzWAlElmtAe5FAj5I5LQKJrpzXNmyU86LOUwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOHkegghpByjqegFTCJslqvlj9cWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZjgzNjA3MGQtM2M0ZC0z NTg5LTk4ZjEtMGE0OTE3Yzc4ZmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFADaC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFqpwPvRGGq01zRDdBCF6OjBzJTurNlHQ+4OYjoD7v2EkoMQeIml gmeWLlVBRY5n9hAcwj3N95H/1QM86aHHUPltFSk2cHJP+KDLFP8aRb8mveRffB7N 9bDGPta7vqFIqixKUul1lGtWbnS4LUF3m1DP1N7ZY3G9xhO9O18N4D798xkve291 klfiUU0eA3t2cBLagCD4Amd4k2MfMHCcou4XM5Jr/FVtNOzx2g4qgZURV79h7gq0 AYJgJcUChj/tRn8xa9yIZGPKi4WWf9DIc8VAq+DrAkD5CMTnmcQCEpqdc5aloFjF AE1i5GRIr9uMKAPDsjrBiPHw4uE+BHGE5Vo= -----END CERTIFICATE-----Generated at Sat Aug 23 13:10:58 2025 by rpki-client