$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/626dfeb6-fca9-3e8a-8f43-db211bc78436.roa File: 626dfeb6-fca9-3e8a-8f43-db211bc78436.roa (raw, json) Hash identifier: 5Hx1WjLrWn//SFjV5pRhJY2oRv1ZvwUf2SbeyH+NVjU= Subject key identifier: 01:D6:B4:35:11:EB:91:54:83:6C:E8:16:A4:B0:BF:B5:9E:19:AE:34 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23C259C2851A08BBDE1D200 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/626dfeb6-fca9-3e8a-8f43-db211bc78436.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397220 IP address blocks: 2001:502:d399::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 01 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:25:9c:28:51:a0:8b:bd:e1:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=36c9ff61-1cbc-476d-8f9b-c487d6002bc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:99:1a:5d:b3:7b:61:e2:bf:ea:47:fa:ce:30: 26:eb:38:8a:87:b4:df:70:a2:7e:04:c0:65:2a:07: 11:af:63:d9:81:9c:7b:e1:70:87:2c:4d:d4:c5:5c: c8:05:7a:b6:bc:1a:b8:8a:59:de:f9:95:52:00:16: 81:6c:35:55:dd:7f:93:33:ef:ab:ce:9e:68:c0:ea: 69:78:21:bb:71:31:4c:52:1a:b5:7b:c8:9a:25:76: 78:1a:d6:eb:0c:ff:74:0e:85:c7:6e:c5:e7:f8:dd: 4e:79:b0:c9:a0:bd:56:3c:76:48:ac:7a:0d:6d:21: 6c:b1:0e:44:f4:c2:ce:d9:83:8a:ec:5e:30:05:51: c3:dd:51:59:be:88:76:3d:f9:74:13:d6:a4:dd:ff: 31:b7:18:2a:d3:cf:14:f9:5b:e5:5a:79:b4:d9:41: d8:6a:ed:37:f3:bb:b8:c0:1b:bc:f4:1e:4c:11:de: a4:5c:b3:8f:41:3d:ee:ba:74:8a:76:6a:39:61:79: 42:39:90:9a:c1:6f:53:a4:06:a3:42:cb:db:6d:36: a2:16:18:e5:a6:08:44:1f:00:eb:ec:66:2b:41:e9: ca:ec:33:49:d6:ac:b4:bb:b9:78:67:d3:34:6c:30: c9:a4:e1:3f:10:d0:38:8e:28:1e:1a:0d:9d:72:92: 34:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:D6:B4:35:11:EB:91:54:83:6C:E8:16:A4:B0:BF:B5:9E:19:AE:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/626dfeb6-fca9-3e8a-8f43-db211bc78436.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:d399::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:ae:eb:a6:3f:f5:a9:2c:a1:26:bd:24:45:49:29:1d:79:8b: fa:69:13:91:2a:cf:21:4c:d7:f6:e4:39:54:79:9c:0e:9f:79: e2:ff:72:ac:84:7b:6c:0d:18:7c:74:0c:52:69:9e:37:16:50: d7:55:5f:0d:5c:0b:80:b5:3b:12:94:04:84:4f:63:af:18:1d: e8:f7:63:84:7d:00:57:25:b7:8c:5c:ce:82:a8:ab:17:20:23: 57:1e:ae:2f:a4:ed:b6:ef:2e:67:a2:9b:14:47:a2:6a:b9:b6: 40:92:6b:33:58:b4:ff:ad:67:12:5b:a1:f8:02:42:e7:fd:e0: 40:5a:eb:73:d7:93:f4:1b:86:59:40:ab:d9:60:6d:14:9d:ed: 0d:28:e0:87:86:bd:d3:eb:eb:c6:65:68:82:ec:52:6a:03:27: e6:91:8c:c0:05:9a:ad:3f:37:f7:07:d5:4d:c1:f8:04:c8:74: 6b:1e:35:e0:e9:33:01:36:d0:1f:8b:f5:14:e9:72:14:5e:f8: f8:48:33:4b:e4:cb:0c:4a:b8:54:34:38:bf:fb:0b:17:2e:a6: fb:fa:5c:f9:62:71:bb:da:22:3c:4f:28:70:51:9c:66:48:d9: 52:ea:ba:b7:2c:31:ff:ed:20:cd:e6:7c:30:31:e2:6e:e8:d2: dc:53:3f:1b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErSPCWcKFGgi73h0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk MzZjOWZmNjEtMWNiYy00NzZkLThmOWItYzQ4N2Q2MDAyYmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJkaXbN7YeK/6kf6zjAm6ziKh7TfcKJ+BMBl KgcRr2PZgZx74XCHLE3UxVzIBXq2vBq4ilne+ZVSABaBbDVV3X+TM++rzp5owOpp eCG7cTFMUhq1e8iaJXZ4GtbrDP90DoXHbsXn+N1OebDJoL1WPHZIrHoNbSFssQ5E 9MLO2YOK7F4wBVHD3VFZvoh2Pfl0E9ak3f8xtxgq088U+VvlWnm02UHYau0387u4 wBu89B5MEd6kXLOPQT3uunSKdmo5YXlCOZCawW9TpAajQsvbbTaiFhjlpghEHwDr 7GYrQenK7DNJ1qy0u7l4Z9M0bDDJpOE/ENA4jigeGg2dcpI0rQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAHWtDUR65FUg2zoFqSwv7WeGa40MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNjI2ZGZlYjYtZmNhOS0z ZThhLThmNDMtZGIyMTFiYzc4NDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAtOZ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFuu66Y/9aksoSa9JEVJKR15i/ppE5EqzyFM1/bkOVR5nA6feeL/ cqyEe2wNGHx0DFJpnjcWUNdVXw1cC4C1OxKUBIRPY68YHej3Y4R9AFclt4xczoKo qxcgI1ceri+k7bbvLmeimxRHomq5tkCSazNYtP+tZxJbofgCQuf94EBa63PXk/Qb hllAq9lgbRSd7Q0o4IeGvdPr68ZlaILsUmoDJ+aRjMAFmq0/N/cH1U3B+ATIdGse NeDpMwE20B+L9RTpchRe+PhIM0vkywxKuFQ0OL/7Cxcupvv6XPlicbvaIjxPKHBR nGZI2VLqurcsMf/tIM3mfDAx4m7o0txTPxs= -----END CERTIFICATE-----Generated at Thu Oct 30 15:38:49 2025 by rpki-client