$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/970cda91-a3c5-3853-8805-9d771de3f267.roa File: 970cda91-a3c5-3853-8805-9d771de3f267.roa (raw, json) Hash identifier: XDAecWXFTZga6hpZiNQ+8pC+Z99ZbSjHRXU+9xqX3Cw= Subject key identifier: 3C:1D:3D:1C:32:36:D2:EA:ED:A8:01:A9:0F:57:11:D5:2B:40:5F:B6 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584BB2F8192EE5CA8B7D9382CE80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/970cda91-a3c5-3853-8805-9d771de3f267.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 397214 IP address blocks: 2001:502:2eda::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f8:19:2e:e5:ca:8b:7d:93:82:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=4ba6b22a-e062-42ee-b80f-281cf18a0321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:74:2c:6b:16:1b:7c:30:55:e6:a9:a6:92:8c: 03:ec:89:e4:c8:74:1e:04:74:7a:84:9c:e1:a9:3b: 10:a6:ee:7c:57:6c:7c:86:64:d7:d9:5c:11:2e:55: 14:22:ca:1b:dd:11:9e:08:21:c7:0f:64:5a:88:95: d8:cb:78:21:ee:13:7c:d8:c0:e0:89:29:8a:d7:15: 8d:a1:5e:cc:43:07:cb:39:ac:0a:e1:50:da:49:c6: ec:99:43:10:c6:fd:c1:cc:e2:8a:9d:b1:67:db:0e: b8:04:d6:63:40:f7:46:be:17:42:38:a0:f4:d4:5b: b0:3e:89:02:30:5b:85:8b:b1:da:d2:23:86:97:5d: c1:68:09:0c:8b:fc:1a:65:33:30:79:73:2e:e0:84: c1:ea:58:14:02:c6:53:6a:de:c9:68:fb:74:fd:cb: bf:09:af:74:8a:f5:65:84:72:07:45:1c:21:bf:00: 90:38:c4:fe:49:84:d4:cb:a4:e2:85:89:b0:e6:09: c2:10:48:a7:bb:2f:03:fa:5c:4f:db:f0:a0:f0:e5: ec:c6:b9:8e:5e:05:94:46:a7:3b:a4:bc:49:ef:95: c7:09:72:8a:19:60:79:9b:48:bb:ca:06:c5:6f:18: e9:e8:4e:4f:da:28:23:38:e1:c9:ef:3c:a9:35:66: 86:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:1D:3D:1C:32:36:D2:EA:ED:A8:01:A9:0F:57:11:D5:2B:40:5F:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/970cda91-a3c5-3853-8805-9d771de3f267.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:2eda::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:3e:93:8d:07:b5:aa:33:88:66:7b:73:f4:ef:f6:ca:18:29: 7b:f7:60:36:72:3f:f2:36:15:6a:14:d8:8a:c0:d6:38:9e:64: f6:ca:c6:1f:1e:e2:89:8c:61:51:b4:a0:03:fd:1d:87:4d:7d: 80:37:42:e0:0e:e6:2e:b2:4a:06:4c:72:e5:87:8e:50:ed:86: 3f:78:4c:4b:06:49:7a:2a:63:75:d3:25:3b:e3:fb:fc:3f:08: 92:ba:d1:90:b0:78:c4:71:7e:33:2b:ac:d8:08:c6:98:f1:24: a5:df:ab:70:f5:70:42:cc:14:93:be:82:3c:14:48:7e:ec:b8: ab:a3:42:e1:7b:f1:68:27:8f:34:d0:56:d3:11:aa:33:e0:50: 81:09:17:51:1d:6b:e0:64:82:3d:9f:dd:ea:85:44:65:e7:1a: f6:d5:50:15:6c:b6:da:0b:19:d1:d1:f2:cb:fe:9b:e1:a8:0a: 02:a8:80:0f:6d:c8:d5:a4:29:13:a5:65:e2:7c:f4:bc:1d:0a: a6:67:98:af:50:a1:08:e1:8d:3e:43:9f:ac:d1:91:c4:b8:e7: 5b:1f:eb:d3:85:30:cb:96:8f:2c:0c:2e:c1:b9:4e:38:8b:01: fc:22:cd:11:50:85:ad:f3:5f:c7:db:a7:a7:3b:bd:3c:8b:10: 21:85:ea:6e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuy+Bku5cqLfZOCzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk NGJhNmIyMmEtZTA2Mi00MmVlLWI4MGYtMjgxY2YxOGEwMzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nQsaxYbfDBV5qmmkowD7InkyHQeBHR6hJzh qTsQpu58V2x8hmTX2VwRLlUUIsob3RGeCCHHD2RaiJXYy3gh7hN82MDgiSmK1xWN oV7MQwfLOawK4VDaScbsmUMQxv3BzOKKnbFn2w64BNZjQPdGvhdCOKD01FuwPokC MFuFi7Ha0iOGl13BaAkMi/waZTMweXMu4ITB6lgUAsZTat7JaPt0/cu/Ca90ivVl hHIHRRwhvwCQOMT+SYTUy6TihYmw5gnCEEinuy8D+lxP2/Cg8OXsxrmOXgWURqc7 pLxJ75XHCXKKGWB5m0i7ygbFbxjp6E5P2igjOOHJ7zypNWaG3wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDwdPRwyNtLq7agBqQ9XEdUrQF+2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOTcwY2RhOTEtYTNjNS0z ODUzLTg4MDUtOWQ3NzFkZTNmMjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAi7a MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACw+k40HtaoziGZ7c/Tv9soYKXv3YDZyP/I2FWoU2IrA1jieZPbK xh8e4omMYVG0oAP9HYdNfYA3QuAO5i6ySgZMcuWHjlDthj94TEsGSXoqY3XTJTvj +/w/CJK60ZCweMRxfjMrrNgIxpjxJKXfq3D1cELMFJO+gjwUSH7suKujQuF78Wgn jzTQVtMRqjPgUIEJF1Eda+Bkgj2f3eqFRGXnGvbVUBVsttoLGdHR8sv+m+GoCgKo gA9tyNWkKROlZeJ89LwdCqZnmK9QoQjhjT5Dn6zRkcS451sf69OFMMuWjywMLsG5 TjiLAfwizRFQha3zX8fbp6c7vTyLECGF6m4= -----END CERTIFICATE-----Generated at Mon Nov 3 03:19:09 2025 by rpki-client