$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a2b1f8a2-43d6-337d-b53c-ed0f31380c50.roa File: a2b1f8a2-43d6-337d-b53c-ed0f31380c50.roa (raw, json) Hash identifier: klDIct5R2jVO4m7dm02V4+HVDlkMY+DVjgD1jyPqDrc= Subject key identifier: E5:28:12:68:56:1F:6F:DD:2F:0B:E0:60:34:18:B9:02:D4:38:C1:C9 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584BB2F8205FDDA9724074AEC280 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a2b1f8a2-43d6-337d-b53c-ed0f31380c50.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 397225 IP address blocks: 2001:502:d399::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f8:20:5f:dd:a9:72:40:74:ae:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=faadd0ec-549e-436b-847e-f44f786f34be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:63:02:b5:ea:a3:7c:ec:1a:24:0c:1b:dd:53: 99:0a:6b:93:c4:e1:ca:57:05:64:41:d3:03:ce:62: 90:47:cc:07:a8:43:76:2f:cb:2d:d5:9f:1f:64:b7: f8:eb:a3:ab:d3:6e:62:05:1f:9e:91:c0:b6:56:cd: c3:97:6f:25:76:1d:12:dd:23:98:a4:90:c9:29:82: 06:56:ec:e6:f1:4e:47:df:91:07:62:39:2c:f3:75: 8b:87:ed:94:c3:ff:9a:35:af:4b:10:e9:f7:1c:c7: 51:bd:04:65:fb:e4:2d:45:ae:93:9c:75:08:69:1a: a5:13:5a:fb:e7:a8:ea:a4:6e:e5:6c:a6:f2:d1:d6: 44:a2:7f:cb:91:bc:6e:d3:e6:10:8a:c7:fd:52:c0: a7:d5:e7:3c:e1:34:12:07:27:06:69:db:64:be:a6: 25:27:f5:ed:17:05:74:29:49:1c:97:85:26:0b:24: 0d:d1:a8:6c:33:45:58:8a:11:18:15:20:ac:dd:3d: b0:25:64:86:ea:28:94:a8:2a:6f:e6:81:04:ba:01: 00:6a:8b:e5:60:4f:3a:bc:a8:df:2f:e5:1a:33:bb: da:6c:2f:6c:3a:f4:24:67:cf:3d:7c:53:64:4c:4c: 5e:f8:74:65:11:8f:7a:d6:2d:92:3b:f6:c4:5a:cf: 0c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:28:12:68:56:1F:6F:DD:2F:0B:E0:60:34:18:B9:02:D4:38:C1:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a2b1f8a2-43d6-337d-b53c-ed0f31380c50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:d399::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:b8:18:1f:6b:36:73:cf:56:e5:ad:db:13:ca:8b:cc:dc:03: 5d:7b:01:42:72:c0:e0:ff:a2:5f:82:b6:0f:db:b6:8c:12:5b: 12:6e:1c:bd:fd:34:ed:8a:f0:81:68:a7:83:a8:87:d3:d2:38: 46:93:15:8b:19:58:7e:29:92:e0:15:f5:c5:d1:4d:d6:ac:7e: 6a:64:49:4f:c6:5e:7d:b7:0e:75:52:04:8f:34:70:75:ba:d3: 51:51:1a:be:b4:d0:7d:31:e4:ab:42:08:70:d8:0c:86:89:1b: 09:5e:39:0d:e0:c9:e7:d5:15:74:a3:1b:db:00:b4:c6:6a:af: 95:99:7a:9b:87:37:b6:88:66:87:9d:2e:92:1b:8c:fe:f4:c0: 84:b7:ad:ca:ee:38:ff:77:15:91:1d:23:10:4f:82:b4:83:4c: f3:86:47:5b:c8:77:b7:92:86:4f:2f:a1:03:79:de:0d:52:78: d7:57:8c:e1:e9:74:da:13:a3:98:f3:e0:03:15:ee:dc:f9:4d: 89:ff:fa:5e:3e:12:e5:ec:d0:24:a0:60:d3:84:e8:dc:2a:71: 80:cc:2a:c0:14:63:ec:55:16:e9:dd:cf:59:6d:e3:80:12:dc: a7:d7:c4:a1:35:12:1f:7e:72:bd:9b:59:23:6d:8e:f0:cc:96: bb:c9:47:dc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuy+CBf3alyQHSuwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk ZmFhZGQwZWMtNTQ5ZS00MzZiLTg0N2UtZjQ0Zjc4NmYzNGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmMCteqjfOwaJAwb3VOZCmuTxOHKVwVkQdMD zmKQR8wHqEN2L8st1Z8fZLf466Or025iBR+ekcC2Vs3Dl28ldh0S3SOYpJDJKYIG Vuzm8U5H35EHYjks83WLh+2Uw/+aNa9LEOn3HMdRvQRl++QtRa6TnHUIaRqlE1r7 56jqpG7lbKby0dZEon/Lkbxu0+YQisf9UsCn1ec84TQSBycGadtkvqYlJ/XtFwV0 KUkcl4UmCyQN0ahsM0VYihEYFSCs3T2wJWSG6iiUqCpv5oEEugEAaovlYE86vKjf L+UaM7vabC9sOvQkZ889fFNkTExe+HRlEY961i2SO/bEWs8MdQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOUoEmhWH2/dLwvgYDQYuQLUOMHJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYTJiMWY4YTItNDNkNi0z MzdkLWI1M2MtZWQwZjMxMzgwYzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAtOZ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHm4GB9rNnPPVuWt2xPKi8zcA117AUJywOD/ol+Ctg/btowSWxJu HL39NO2K8IFop4Ooh9PSOEaTFYsZWH4pkuAV9cXRTdasfmpkSU/GXn23DnVSBI80 cHW601FRGr600H0x5KtCCHDYDIaJGwleOQ3gyefVFXSjG9sAtMZqr5WZepuHN7aI ZoedLpIbjP70wIS3rcruOP93FZEdIxBPgrSDTPOGR1vId7eShk8voQN53g1SeNdX jOHpdNoTo5jz4AMV7tz5TYn/+l4+EuXs0CSgYNOE6NwqcYDMKsAUY+xVFundz1lt 44AS3KfXxKE1Eh9+cr2bWSNtjvDMlrvJR9w= -----END CERTIFICATE-----Generated at Mon Nov 3 10:12:16 2025 by rpki-client