$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1de59179-912f-3d21-9e9a-396b4ef9d87a.roa File: 1de59179-912f-3d21-9e9a-396b4ef9d87a.roa (raw, json) Hash identifier: 2xEweYdzt2lHF5qdLnb4LqVMBsaZ46ShGha7o0PkwB4= Subject key identifier: 4F:98:38:E9:F6:1B:07:C9:27:07:5B:41:7B:05:BE:51:DA:DF:80:33 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23C1B9F9399026C22307740 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1de59179-912f-3d21-9e9a-396b4ef9d87a.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397240 IP address blocks: 2001:500:3682::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:1b:9f:93:99:02:6c:22:30:77:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=674ce6d2-8630-48c4-a159-15f7602f6ba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:42:a2:db:c4:d2:3b:ee:6b:35:5f:df:5c:d5: 47:07:1d:d2:6e:12:b8:a9:8e:fd:2f:a0:6a:d1:65: a4:46:f2:fd:61:88:ae:ce:1d:75:8a:4c:b6:d3:dc: e6:e8:74:4a:7a:29:4a:f4:66:24:9d:d2:4c:ab:dc: 0f:f5:f8:f7:6c:1c:5c:fc:ed:dc:f3:4d:b0:35:1d: 69:b7:85:8d:a0:82:45:4b:28:5a:89:6d:94:81:43: 74:af:1b:2a:7d:fa:ec:2c:f5:a7:ce:2b:fa:30:96: 90:8a:6a:57:41:99:1e:96:a6:2a:ef:e2:87:32:ae: eb:d4:39:95:12:45:70:ff:a7:26:38:24:06:c0:1c: f6:85:9a:3e:3f:8e:6d:11:66:60:d7:ba:2f:25:8d: b1:1c:96:11:05:68:cb:3a:5c:9c:c1:2a:0a:a8:cc: 5e:30:79:ed:6c:34:25:73:77:db:1f:71:f3:88:9c: 51:01:7d:a1:7f:7d:7c:df:90:76:38:fe:9c:b1:be: 02:23:8a:5c:44:8c:37:69:81:1c:9e:41:da:a4:de: 9a:94:1a:07:dd:32:45:01:a4:0f:5b:2a:0a:cf:6a: 3d:0f:90:10:ac:f3:e0:7c:e7:b8:84:5c:1a:4c:06: ce:b7:fb:01:ea:20:7c:64:57:19:ea:ca:97:84:63: ff:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:98:38:E9:F6:1B:07:C9:27:07:5B:41:7B:05:BE:51:DA:DF:80:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1de59179-912f-3d21-9e9a-396b4ef9d87a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:3682::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:06:4b:7e:53:1d:bd:c5:ce:4f:6a:34:ed:97:3c:99:5e:f1: e6:af:c5:1f:f1:8a:98:9c:cb:88:3b:74:d5:20:5f:44:95:67: b1:db:88:22:36:e1:3b:f5:16:5c:fc:6e:31:a9:f6:33:15:c8: 4a:72:b0:a4:62:c8:44:5a:ef:5d:36:99:70:8d:8f:e1:0a:d3: 07:39:61:ba:93:9a:8e:7e:af:fe:78:da:2b:71:63:2b:10:b4: a9:cf:db:71:f4:f6:8c:fc:87:51:8f:3a:7d:ed:7c:5c:ac:c5: d3:aa:ec:03:93:87:cb:8d:8c:be:41:a4:47:cf:bc:e1:e1:bf: 22:9c:47:31:6f:fc:0d:b6:81:66:a6:46:c3:bb:4b:3b:72:05: 2c:29:cb:38:56:ec:a1:6a:70:21:ad:d9:d6:c5:4d:16:6c:a2: 2a:c0:ee:57:c6:40:4a:f7:a1:b3:0f:08:53:9e:f1:2f:41:cc: 15:43:ec:3f:cf:4f:df:f1:4c:34:d8:38:6f:b2:d6:3d:0c:87: 24:3a:40:05:c0:2a:ad:8e:2e:e1:b1:be:09:7e:1b:d8:4b:6b: 09:68:4a:34:7b:54:37:5e:cb:85:82:8d:df:9a:6f:e2:e4:ca: bc:57:6c:e0:5b:e4:c6:c7:6f:c9:92:4d:94:16:c6:99:5e:ce: 1a:5c:3e:b6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErSPBufk5kCbCIwd0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk Njc0Y2U2ZDItODYzMC00OGM0LWExNTktMTVmNzYwMmY2YmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEKi28TSO+5rNV/fXNVHBx3SbhK4qY79L6Bq 0WWkRvL9YYiuzh11iky209zm6HRKeilK9GYkndJMq9wP9fj3bBxc/O3c802wNR1p t4WNoIJFSyhaiW2UgUN0rxsqffrsLPWnziv6MJaQimpXQZkelqYq7+KHMq7r1DmV EkVw/6cmOCQGwBz2hZo+P45tEWZg17ovJY2xHJYRBWjLOlycwSoKqMxeMHntbDQl c3fbH3HziJxRAX2hf31835B2OP6csb4CI4pcRIw3aYEcnkHapN6alBoH3TJFAaQP WyoKz2o9D5AQrPPgfOe4hFwaTAbOt/sB6iB8ZFcZ6sqXhGP/swIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE+YOOn2GwfJJwdbQXsFvlHa34AzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMWRlNTkxNzktOTEyZi0z ZDIxLTllOWEtMzk2YjRlZjlkODdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFADaC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB4GS35THb3Fzk9qNO2XPJle8eavxR/xipicy4g7dNUgX0SVZ7Hb iCI24Tv1Flz8bjGp9jMVyEpysKRiyERa7102mXCNj+EK0wc5YbqTmo5+r/542itx YysQtKnP23H09oz8h1GPOn3tfFysxdOq7AOTh8uNjL5BpEfPvOHhvyKcRzFv/A22 gWamRsO7SztyBSwpyzhW7KFqcCGt2dbFTRZsoirA7lfGQEr3obMPCFOe8S9BzBVD 7D/PT9/xTDTYOG+y1j0MhyQ6QAXAKq2OLuGxvgl+G9hLawloSjR7VDdey4WCjd+a b+LkyrxXbOBb5MbHb8mSTZQWxplezhpcPrY= -----END CERTIFICATE-----Generated at Thu Oct 23 23:39:55 2025 by rpki-client