$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/25a3f96b-f856-375c-8a3e-fcd2dad590ec.roa File: 25a3f96b-f856-375c-8a3e-fcd2dad590ec.roa (raw, json) Hash identifier: 6fY7OejAAN5vRWLodU+PR1dfJ9XX7MEoQOmc68jJUb4= Subject key identifier: 4B:E5:AA:E3:92:28:DA:7D:B6:F0:0F:27:02:2F:D2:60:A5:3A:D8:9E Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584BB2F819614C56AE70B9F8E800 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/25a3f96b-f856-375c-8a3e-fcd2dad590ec.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 397217 IP address blocks: 2001:502:2eda::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f8:19:61:4c:56:ae:70:b9:f8:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=70724112-2841-4a01-add9-d5632245f4c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c4:57:11:c8:2f:c6:51:95:21:99:85:cc:10: 4a:95:e8:33:9f:b7:77:58:f2:00:90:c7:f7:02:f9: f6:ee:64:58:4c:ca:4d:5a:41:4a:1b:80:46:0c:22: c1:74:80:9a:5a:92:4a:07:8a:89:e4:88:20:3c:16: cd:46:8c:a7:4a:62:34:a0:b4:e2:7f:6d:41:df:62: 66:00:34:57:5e:6c:a5:70:ae:ab:b0:ad:9c:a2:94: d8:de:c6:54:f7:74:5c:6c:70:b3:53:2d:45:cd:1c: 1c:9a:39:ec:28:fc:f5:4a:a5:6b:4c:dc:f4:ea:92: ea:94:6f:e3:04:0f:9b:40:67:eb:29:4b:28:f9:74: e3:d5:45:b0:da:92:8b:b5:19:02:73:e9:e6:31:ec: 8a:c9:27:19:f0:93:2c:d6:c1:cb:4f:ac:cb:de:ad: 70:95:b7:7e:08:66:8e:21:01:5c:ba:68:83:67:33: 5a:24:28:44:a0:77:58:79:bc:94:ac:e0:f6:4f:52: 4e:d2:9d:42:17:95:80:2b:b8:c8:be:ca:a8:d9:75: 3b:b0:2b:d0:e7:7c:8e:ca:d4:d0:c0:1d:96:68:09: 06:1a:8b:0d:28:96:95:43:88:6d:b1:8e:5d:31:9b: 79:90:07:c5:d8:01:0d:75:36:dc:94:7e:8d:21:04: 50:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:E5:AA:E3:92:28:DA:7D:B6:F0:0F:27:02:2F:D2:60:A5:3A:D8:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/25a3f96b-f856-375c-8a3e-fcd2dad590ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:2eda::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:3e:57:4d:b6:15:5d:94:18:68:77:a7:3e:ec:21:c5:8e:35: 88:07:38:fe:6b:2d:08:06:9b:12:99:e3:8f:75:b9:6b:9f:5f: 88:fe:ce:1d:6c:a8:8a:de:4c:67:21:82:71:0f:e5:28:2e:8e: a8:a3:38:61:a3:de:b2:cd:14:9e:81:52:67:82:c3:3e:94:ab: 11:b6:93:cb:ad:a5:1e:36:17:1d:ea:54:4c:75:1c:52:eb:dd: fa:b7:c4:6d:78:45:0a:bd:18:b4:89:ba:72:e6:ec:52:1a:08: 26:7d:19:9c:1a:51:b0:96:f6:24:56:f1:88:ae:58:47:83:b3: 7b:10:33:60:ff:57:54:02:40:50:1e:02:80:03:39:fb:bf:2f: 0a:3b:2c:b7:03:52:cd:2c:1b:47:da:5b:d1:01:b0:06:50:88: 35:d3:c2:25:81:d2:01:4b:5b:2b:94:66:af:cd:73:84:00:a3: 26:44:c4:03:f1:79:eb:51:28:e7:c4:f9:d0:5a:47:ab:6f:7e: 27:78:0d:18:a0:3a:10:55:2a:5f:79:07:6d:6f:35:73:d0:7a: da:c5:3a:e6:fc:47:fb:f3:f0:cf:c7:cb:82:b8:75:34:ff:7b: ab:81:54:77:da:15:36:94:45:a6:eb:2f:52:f2:9f:17:81:f2: 41:89:29:8b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuy+BlhTFaucLn46AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk NzA3MjQxMTItMjg0MS00YTAxLWFkZDktZDU2MzIyNDVmNGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8RXEcgvxlGVIZmFzBBKlegzn7d3WPIAkMf3 Avn27mRYTMpNWkFKG4BGDCLBdICaWpJKB4qJ5IggPBbNRoynSmI0oLTif21B32Jm ADRXXmylcK6rsK2copTY3sZU93RcbHCzUy1FzRwcmjnsKPz1SqVrTNz06pLqlG/j BA+bQGfrKUso+XTj1UWw2pKLtRkCc+nmMeyKyScZ8JMs1sHLT6zL3q1wlbd+CGaO IQFcumiDZzNaJChEoHdYebyUrOD2T1JO0p1CF5WAK7jIvsqo2XU7sCvQ53yOytTQ wB2WaAkGGosNKJaVQ4htsY5dMZt5kAfF2AENdTbclH6NIQRQHQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEvlquOSKNp9tvAPJwIv0mClOtieMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMjVhM2Y5NmItZjg1Ni0z NzVjLThhM2UtZmNkMmRhZDU5MGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAi7a MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEI+V022FV2UGGh3pz7sIcWONYgHOP5rLQgGmxKZ4491uWufX4j+ zh1sqIreTGchgnEP5SgujqijOGGj3rLNFJ6BUmeCwz6UqxG2k8utpR42Fx3qVEx1 HFLr3fq3xG14RQq9GLSJunLm7FIaCCZ9GZwaUbCW9iRW8YiuWEeDs3sQM2D/V1QC QFAeAoADOfu/Lwo7LLcDUs0sG0faW9EBsAZQiDXTwiWB0gFLWyuUZq/Nc4QAoyZE xAPxeetRKOfE+dBaR6tvfid4DRigOhBVKl95B21vNXPQetrFOub8R/vz8M/Hy4K4 dTT/e6uBVHfaFTaURabrL1LynxeB8kGJKYs= -----END CERTIFICATE-----Generated at Mon Nov 3 03:14:32 2025 by rpki-client