$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3f960fbb-6b3e-3439-81cd-c697095f3666.roa File: 3f960fbb-6b3e-3439-81cd-c697095f3666.roa (raw, json) Hash identifier: 67hVTYnqIMMXFBu/ZFaCOBVIHk9QjJWiHfjbwtU3rIU= Subject key identifier: C7:71:9A:AF:CC:6E:EB:44:3F:2C:45:19:57:1E:07:EC:5A:F0:28:15 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584BB2F816539622B78F4D235680 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3f960fbb-6b3e-3439-81cd-c697095f3666.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 397236 IP address blocks: 2001:500:3682::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f8:16:53:96:22:b7:8f:4d:23:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=f252613f-3def-4667-ad56-b52fd2880451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3d:9c:45:71:5d:f5:ae:b7:3a:7e:3e:52:4f: 61:7a:23:18:8d:5d:d1:f2:51:8f:a8:db:61:08:1d: 99:81:0f:18:57:9c:cf:c6:dd:eb:48:19:0b:7d:6c: 9e:f4:45:0e:50:fa:00:2b:29:86:08:e3:88:10:84: f6:e3:16:b9:f1:71:c1:94:97:14:09:4a:4f:55:cd: af:ca:83:d2:48:d0:64:29:39:c9:98:9b:c8:ea:f9: 72:ec:0f:51:7d:2a:65:04:4a:56:f6:0f:e3:88:2a: 49:17:3d:2e:a8:ef:26:f7:3a:e8:38:21:14:4a:e3: d5:1f:d6:99:73:fe:56:11:f4:60:17:3e:72:e7:a2: 4e:68:60:1b:86:1a:99:15:62:c9:e1:13:5f:c8:5e: 83:0a:50:1e:23:15:92:69:97:af:38:e3:42:9a:37: fe:3a:d0:73:bb:cb:28:4f:a9:d7:51:d7:b8:e3:3c: 9a:bf:4b:27:6c:34:d5:9a:8b:1e:00:04:3c:2d:88: 18:8d:92:17:36:7b:07:53:4c:08:bc:b5:8e:d2:30: 98:5a:c6:b0:a4:40:c1:30:38:94:d4:d1:8b:c0:fb: 9c:80:d5:f5:02:7d:89:ec:93:02:eb:a1:6c:67:21: d1:06:41:08:a9:17:a7:ab:9a:91:fd:14:99:7e:33: 8c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:71:9A:AF:CC:6E:EB:44:3F:2C:45:19:57:1E:07:EC:5A:F0:28:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3f960fbb-6b3e-3439-81cd-c697095f3666.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:3682::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:f7:e1:4c:dc:5d:f8:27:a0:07:8d:97:e3:1e:67:78:dc:dc: 90:b7:dd:42:66:7d:b9:6f:75:d1:a7:80:87:6f:49:ca:d8:7f: 54:7a:8e:d1:ae:51:c2:d9:28:30:39:52:53:b6:4c:a9:67:7d: a9:97:72:34:39:57:a2:1d:ac:54:9c:16:39:f7:2d:70:ab:32: 48:56:6d:b0:a3:33:3e:c0:64:ea:d6:c1:46:c6:84:50:21:43: 60:72:38:0b:dd:6f:c0:9f:75:e8:de:8c:7e:52:13:a5:27:fc: a3:d6:e9:48:c1:03:32:a4:79:09:3f:3a:21:f0:4a:2b:7a:fb: 43:1f:46:c3:d7:8e:16:f6:66:73:2a:4c:55:90:1b:25:ae:68: 2d:82:66:06:ae:4b:43:86:1d:4f:4e:58:c4:36:5d:17:ae:1d: cb:5d:27:66:12:1c:c7:59:b4:92:aa:64:5a:00:50:38:8c:43: 03:66:96:35:61:94:7e:5b:14:7d:12:a5:a3:34:f7:0a:3e:74: 23:1b:73:a9:c7:55:8a:e6:36:90:31:44:26:ef:6a:a2:04:68: 50:24:52:fa:c1:c5:bf:b7:af:37:26:97:1e:3d:93:61:1b:74: b7:db:15:4e:09:27:8e:42:e0:9a:cf:91:e6:7c:0b:c5:b4:7f: 5b:1a:ca:ff -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuy+BZTliK3j00jVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk ZjI1MjYxM2YtM2RlZi00NjY3LWFkNTYtYjUyZmQyODgwNDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmz2cRXFd9a63On4+Uk9heiMYjV3R8lGPqNth CB2ZgQ8YV5zPxt3rSBkLfWye9EUOUPoAKymGCOOIEIT24xa58XHBlJcUCUpPVc2v yoPSSNBkKTnJmJvI6vly7A9RfSplBEpW9g/jiCpJFz0uqO8m9zroOCEUSuPVH9aZ c/5WEfRgFz5y56JOaGAbhhqZFWLJ4RNfyF6DClAeIxWSaZevOONCmjf+OtBzu8so T6nXUde44zyav0snbDTVmoseAAQ8LYgYjZIXNnsHU0wIvLWO0jCYWsawpEDBMDiU 1NGLwPucgNX1An2J7JMC66FsZyHRBkEIqRenq5qR/RSZfjOMIwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMdxmq/MbutEPyxFGVceB+xa8CgVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvM2Y5NjBmYmItNmIzZS0z NDM5LTgxY2QtYzY5NzA5NWYzNjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFADaC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFH34UzcXfgnoAeNl+MeZ3jc3JC33UJmfblvddGngIdvScrYf1R6 jtGuUcLZKDA5UlO2TKlnfamXcjQ5V6IdrFScFjn3LXCrMkhWbbCjMz7AZOrWwUbG hFAhQ2ByOAvdb8CfdejejH5SE6Un/KPW6UjBAzKkeQk/OiHwSit6+0MfRsPXjhb2 ZnMqTFWQGyWuaC2CZgauS0OGHU9OWMQ2XReuHctdJ2YSHMdZtJKqZFoAUDiMQwNm ljVhlH5bFH0SpaM09wo+dCMbc6nHVYrmNpAxRCbvaqIEaFAkUvrBxb+3rzcmlx49 k2EbdLfbFU4JJ45C4JrPkeZ8C8W0f1sayv8= -----END CERTIFICATE-----Generated at Mon Nov 3 03:16:26 2025 by rpki-client