$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c1be40a5-f440-3c11-ae35-7cde6493ff42.roa File: c1be40a5-f440-3c11-ae35-7cde6493ff42.roa (raw, json) Hash identifier: aORaIEovaoBC0uIjvtwiuMVQ58KRwAVw7dAWA/30sqE= Subject key identifier: 0A:2C:C6:33:BE:48:75:53:C9:34:7A:07:78:2F:2E:9F:12:3E:A5:94 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584BB2F81B0456DED5E2D8022980 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c1be40a5-f440-3c11-ae35-7cde6493ff42.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 397242 IP address blocks: 2001:502:2eda::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f8:1b:04:56:de:d5:e2:d8:02:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=df5e5fda-993a-4ecc-abb0-d4bb6e08e217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:28:f7:b3:89:fc:ca:09:69:df:f9:6c:05:fc: dd:92:36:8f:9b:72:d0:38:6b:5c:8c:57:5d:5e:de: 4d:e0:b1:67:9a:8f:10:8f:a6:a6:01:ee:42:a2:c6: a9:0a:16:f3:e9:64:49:5e:ca:1d:39:b7:7f:e5:1f: ec:e5:ec:fe:91:fb:60:79:1b:30:53:a6:db:94:ca: b0:75:ec:08:08:21:d9:29:b0:c8:18:b1:5c:b2:e3: fe:be:38:0c:c8:a8:7d:47:f6:19:c4:90:0c:5e:30: 5c:ed:31:5d:77:b4:f4:55:b0:93:79:77:9d:19:4c: 43:ef:94:16:69:43:70:ff:08:46:ef:11:32:0e:65: 51:35:c8:c3:75:28:99:cc:49:74:4e:fc:9a:55:5c: cd:08:99:3c:73:e7:72:fb:d1:c3:52:43:4a:b8:31: 42:73:7e:55:64:09:26:cf:d0:61:91:ef:a6:ad:88: d8:f4:b0:58:f9:bc:bd:e8:25:74:1c:0d:67:b4:fc: 04:2f:57:6a:88:0c:03:68:64:6d:65:bf:94:ac:1d: 90:27:99:78:68:79:c6:55:c0:2d:75:d6:60:fc:e9: 87:53:d1:f9:a6:c6:51:e0:68:ed:aa:ea:c6:5e:f6: 44:14:95:e8:01:97:55:70:76:3e:c7:63:fb:01:15: eb:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:2C:C6:33:BE:48:75:53:C9:34:7A:07:78:2F:2E:9F:12:3E:A5:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c1be40a5-f440-3c11-ae35-7cde6493ff42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:2eda::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:71:65:ef:a1:4e:87:95:3e:e9:be:5f:af:b6:9e:f1:fc:37: fa:55:65:5e:19:ee:97:c7:c8:ad:e2:87:33:93:f7:60:22:15: 57:35:ad:5f:e0:aa:64:9c:73:ad:28:43:71:fc:52:75:03:05: 40:3a:1b:fd:ac:e3:0b:0d:bb:1d:08:3a:6e:f8:fe:3e:9e:bb: 78:42:3a:d5:19:3c:18:ff:91:e8:0a:7e:b9:cd:23:6a:04:70: f0:04:3b:94:cf:42:a5:30:8c:85:01:11:ef:35:66:f6:16:87: 56:a4:88:36:a2:67:af:35:81:d3:0e:6f:03:35:c0:0d:e0:03: 93:84:3b:01:62:cc:b7:fd:5d:48:e2:11:e9:8f:08:50:f7:95: 90:1c:6b:08:10:fb:bd:94:a7:59:10:46:0f:0f:a9:70:2f:d9: 19:31:25:9a:ee:31:3f:41:17:93:86:80:ff:bc:50:8e:ec:1f: c7:c6:12:32:e2:be:36:85:7f:82:7a:f3:db:fe:fc:8e:56:16: eb:05:c7:85:05:b4:60:8a:e6:bf:b9:0f:56:21:8b:df:18:eb: 4d:83:a8:59:43:1d:89:5f:be:2f:c6:eb:f5:59:43:55:ad:b3: 0d:c3:e6:00:35:8d:26:13:38:97:1c:ad:23:1c:69:b6:9c:5d: fc:d2:95:70 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuy+BsEVt7V4tgCKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk ZGY1ZTVmZGEtOTkzYS00ZWNjLWFiYjAtZDRiYjZlMDhlMjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCj3s4n8yglp3/lsBfzdkjaPm3LQOGtcjFdd Xt5N4LFnmo8Qj6amAe5CosapChbz6WRJXsodObd/5R/s5ez+kftgeRswU6bblMqw dewICCHZKbDIGLFcsuP+vjgMyKh9R/YZxJAMXjBc7TFdd7T0VbCTeXedGUxD75QW aUNw/whG7xEyDmVRNcjDdSiZzEl0TvyaVVzNCJk8c+dy+9HDUkNKuDFCc35VZAkm z9Bhke+mrYjY9LBY+by96CV0HA1ntPwEL1dqiAwDaGRtZb+UrB2QJ5l4aHnGVcAt ddZg/OmHU9H5psZR4GjtqurGXvZEFJXoAZdVcHY+x2P7ARXr+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAosxjO+SHVTyTR6B3gvLp8SPqWUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYzFiZTQwYTUtZjQ0MC0z YzExLWFlMzUtN2NkZTY0OTNmZjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAi7a MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADpxZe+hToeVPum+X6+2nvH8N/pVZV4Z7pfHyK3ihzOT92AiFVc1 rV/gqmScc60oQ3H8UnUDBUA6G/2s4wsNux0IOm74/j6eu3hCOtUZPBj/kegKfrnN I2oEcPAEO5TPQqUwjIUBEe81ZvYWh1akiDaiZ681gdMObwM1wA3gA5OEOwFizLf9 XUjiEemPCFD3lZAcawgQ+72Up1kQRg8PqXAv2RkxJZruMT9BF5OGgP+8UI7sH8fG EjLivjaFf4J689v+/I5WFusFx4UFtGCK5r+5D1Yhi98Y602DqFlDHYlfvi/G6/VZ Q1Wtsw3D5gA1jSYTOJccrSMcabacXfzSlXA= -----END CERTIFICATE-----Generated at Mon Nov 3 03:14:43 2025 by rpki-client