$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/597e8b95-4e24-3354-9fcb-db00d429883c.roa File: 597e8b95-4e24-3354-9fcb-db00d429883c.roa (raw, json) Hash identifier: 9PpQPEHn9kIcw/S9YcGa9K9kHlMGInXmOEQ7+IQ6UJ0= Subject key identifier: BD:7B:CA:C5:B0:27:F8:B2:59:27:52:2A:15:ED:06:79:D9:C0:8F:B3 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584BB2F820E6D13EB944691C8080 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/597e8b95-4e24-3354-9fcb-db00d429883c.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 397233 IP address blocks: 2001:502:d399::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f8:20:e6:d1:3e:b9:44:69:1c:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=33b989c8-7815-486f-9503-f91a05da8876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5d:46:83:54:0b:97:d2:b3:01:e7:d9:1d:03: c8:60:c4:14:7a:64:34:14:2e:a4:30:7b:a2:a4:77: 35:43:83:f9:4a:58:cc:68:bd:41:8f:3e:82:2f:a3: 15:36:ab:4c:dc:d0:7f:7e:bc:bd:f7:b1:46:f9:3b: a8:0a:09:86:2d:26:25:f9:57:91:5a:5a:f7:b8:d9: ea:4e:f1:2c:19:b9:3c:ba:dc:77:be:7e:fb:1d:3e: dc:ce:bb:05:b6:1e:30:6c:a4:17:78:28:4b:6a:9e: 3e:c7:6b:fa:c6:1b:c6:8d:77:35:3e:3b:1d:15:32: 63:b0:a8:20:4f:28:53:bb:26:0a:df:d3:c9:57:96: cb:e5:66:47:d1:fd:ab:9b:bb:7f:2c:a1:c5:b9:3d: bb:1d:59:c2:d5:51:81:1a:d4:ed:6d:f2:a4:b9:ef: bc:fe:4d:c2:b7:62:dc:f6:74:55:15:78:86:d4:80: c2:3f:67:70:ab:93:93:d7:c0:88:b4:4a:fc:0a:b9: 91:1f:18:57:30:4b:fa:42:13:24:1f:b5:2d:88:cd: 4d:07:80:af:02:fd:3b:b8:b8:36:78:ac:f5:73:55: 30:b5:8d:a9:fc:07:1f:2f:74:f8:46:52:1e:37:9b: 8c:0d:16:c6:12:b8:92:1c:51:a4:95:58:ac:db:8d: af:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:7B:CA:C5:B0:27:F8:B2:59:27:52:2A:15:ED:06:79:D9:C0:8F:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/597e8b95-4e24-3354-9fcb-db00d429883c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:d399::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:96:c2:96:75:99:dd:55:af:22:9b:0e:b7:98:82:c0:5c:47: a8:83:b7:d0:cd:b3:95:f4:8c:03:cb:5b:72:dd:ce:c4:c8:11: 35:ee:10:46:38:16:c9:5d:e5:7e:5f:66:72:b6:5a:6d:1f:52: fa:5e:e4:8c:83:44:dc:0d:48:c3:02:8d:c5:71:aa:21:ba:fc: 24:e6:ed:55:a2:0d:28:92:bc:b2:77:d5:94:33:b3:c5:26:69: 2a:26:39:7d:bc:ca:fb:a9:00:66:c9:9b:0d:80:48:42:01:e1: ff:d8:af:39:d0:70:85:73:89:96:7e:dd:17:b7:e1:b2:3b:f5: 1a:92:71:61:7b:3c:f0:c2:4e:e6:e0:01:e8:4c:3f:55:7f:be: 3f:ad:03:b4:21:36:13:bf:47:30:3d:aa:50:62:cf:4f:ac:98: 2a:60:cc:22:d5:0b:d8:cd:d9:b5:ab:35:c3:e9:44:27:6d:c0: c1:6b:7a:d3:1d:6e:0e:00:e1:ef:1a:0a:10:a4:5e:7c:34:4f: e9:48:1d:e0:24:af:60:bd:75:4b:58:f0:af:dd:51:fd:58:35: 72:e5:8d:21:2d:1d:43:57:54:1c:4b:b7:96:45:2b:99:9e:80: 45:e0:73:45:03:ca:b3:2d:69:e1:3b:c3:3c:27:27:d5:b7:04: 97:bd:84:5d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuy+CDm0T65RGkcgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk MzNiOTg5YzgtNzgxNS00ODZmLTk1MDMtZjkxYTA1ZGE4ODc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwV1Gg1QLl9KzAefZHQPIYMQUemQ0FC6kMHui pHc1Q4P5SljMaL1Bjz6CL6MVNqtM3NB/fry997FG+TuoCgmGLSYl+VeRWlr3uNnq TvEsGbk8utx3vn77HT7czrsFth4wbKQXeChLap4+x2v6xhvGjXc1PjsdFTJjsKgg TyhTuyYK39PJV5bL5WZH0f2rm7t/LKHFuT27HVnC1VGBGtTtbfKkue+8/k3Ct2Lc 9nRVFXiG1IDCP2dwq5OT18CItEr8CrmRHxhXMEv6QhMkH7UtiM1NB4CvAv07uLg2 eKz1c1UwtY2p/AcfL3T4RlIeN5uMDRbGEriSHFGklVis242viQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL17ysWwJ/iyWSdSKhXtBnnZwI+zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNTk3ZThiOTUtNGUyNC0z MzU0LTlmY2ItZGIwMGQ0Mjk4ODNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAtOZ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAaWwpZ1md1VryKbDreYgsBcR6iDt9DNs5X0jAPLW3LdzsTIETXu EEY4Fsld5X5fZnK2Wm0fUvpe5IyDRNwNSMMCjcVxqiG6/CTm7VWiDSiSvLJ31ZQz s8UmaSomOX28yvupAGbJmw2ASEIB4f/YrznQcIVziZZ+3Re34bI79RqScWF7PPDC TubgAehMP1V/vj+tA7QhNhO/RzA9qlBiz0+smCpgzCLVC9jN2bWrNcPpRCdtwMFr etMdbg4A4e8aChCkXnw0T+lIHeAkr2C9dUtY8K/dUf1YNXLljSEtHUNXVBxLt5ZF K5megEXgc0UDyrMtaeE7wzwnJ9W3BJe9hF0= -----END CERTIFICATE-----Generated at Mon Nov 3 10:12:16 2025 by rpki-client