$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d398b9cb-7c97-3d8d-9259-4b2f174b4308.roa File: d398b9cb-7c97-3d8d-9259-4b2f174b4308.roa (raw, json) Hash identifier: nGCIxJhCTB2iEKb7/GlfMHAgzu1x39aOD7WAb4sFPF4= Subject key identifier: 10:33:F0:D9:C7:28:70:97:A9:D8:3E:FD:8D:33:CC:DD:F5:06:AF:27 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584EF717B1CAFA7FD677A8B69580 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d398b9cb-7c97-3d8d-9259-4b2f174b4308.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 397219 IP address blocks: 2001:502:f3ff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:b1:ca:fa:7f:d6:77:a8:b6:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=0bbbf23b-6101-4ad0-89a5-378a9fc060cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:be:51:c3:30:98:35:39:8a:a1:ad:62:1b:61: 8e:1f:92:9d:ad:7e:ad:73:ab:d3:be:47:03:20:1d: aa:ac:25:cd:fa:aa:49:57:08:a5:e2:d2:6b:81:5a: f6:8e:b8:a0:f8:07:23:13:cd:b0:ab:4f:79:d2:7a: 61:5e:86:9d:e5:03:52:69:db:bc:45:48:66:34:12: 68:f1:e6:3d:4d:ae:33:e3:c8:93:9c:a2:78:98:2c: 3d:22:e6:1f:5e:f8:c5:6f:02:b8:5a:50:f9:5d:5d: eb:b3:6e:91:a6:37:a8:50:a8:e4:5c:c3:d7:19:cc: 99:e5:44:cb:e4:ec:7e:ad:e4:a8:ca:47:2e:d5:5a: 29:5e:d5:63:e5:86:1b:cc:69:75:93:c4:5f:ea:1f: b9:1d:eb:ac:8e:50:f2:5d:f7:65:07:7a:99:4d:0d: c0:d3:87:67:82:00:04:e0:9a:5e:bb:fa:be:6f:1f: 9b:8f:78:fb:9e:20:1a:e8:ed:9e:04:2e:6a:89:7b: d8:90:15:2e:a4:70:d4:c0:56:ee:82:65:00:35:6d: 47:a5:12:db:b3:69:8c:d8:6d:7d:f4:6c:11:25:d4: ea:3d:55:1f:35:5a:1a:1d:c8:97:6f:60:46:5f:fb: d5:ab:69:98:8f:17:cf:9d:38:ad:68:9f:b8:bb:67: 70:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:33:F0:D9:C7:28:70:97:A9:D8:3E:FD:8D:33:CC:DD:F5:06:AF:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d398b9cb-7c97-3d8d-9259-4b2f174b4308.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:f3ff::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:1a:fc:2a:70:35:b5:77:f2:12:de:5a:a6:ca:ad:b5:d7:0f: c1:76:ab:98:25:a3:a7:8c:3a:c5:80:49:81:19:a1:e1:8c:8f: 15:f0:cd:f3:89:07:46:3b:0b:1c:08:e5:69:4d:5e:10:de:91: 17:b7:4b:3f:74:29:69:aa:58:f3:42:41:c1:34:3c:9f:82:4e: 25:45:de:ac:ae:f5:d0:fc:50:02:c8:c7:80:77:b2:ca:27:6f: 6f:cc:3a:fa:d6:d1:1e:3d:f3:d0:cb:1e:35:e2:96:6b:04:fc: 8a:22:68:c5:28:7f:7d:4d:0f:39:60:07:5c:76:a5:66:07:7c: 33:a2:9a:21:27:3b:72:b6:39:59:c5:0b:32:52:5f:88:75:cc: e9:1e:1e:16:86:f1:b3:eb:80:67:e2:fb:23:8f:be:3a:1a:d6: 1f:25:ee:ed:04:a9:e5:ce:58:45:de:84:b1:05:2c:ee:67:fa: d1:a0:a9:58:cf:af:64:3a:26:07:f3:01:e7:a1:41:64:ad:f1: 3e:69:3d:05:5a:2b:df:ef:84:ed:df:9b:d2:c1:d5:22:ae:c3: f7:05:f9:c8:ff:a8:4c:56:44:e5:3b:36:58:aa:2a:79:38:5e: 51:1c:1a:b7:04:7f:a2:cc:c2:5d:46:a1:38:1a:53:10:17:f1: f5:5f:32:eb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE73F7HK+n/Wd6i2lYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk MGJiYmYyM2ItNjEwMS00YWQwLTg5YTUtMzc4YTlmYzA2MGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkL5RwzCYNTmKoa1iG2GOH5KdrX6tc6vTvkcD IB2qrCXN+qpJVwil4tJrgVr2jrig+AcjE82wq0950nphXoad5QNSadu8RUhmNBJo 8eY9Ta4z48iTnKJ4mCw9IuYfXvjFbwK4WlD5XV3rs26RpjeoUKjkXMPXGcyZ5UTL 5Ox+reSoykcu1VopXtVj5YYbzGl1k8Rf6h+5HeusjlDyXfdlB3qZTQ3A04dnggAE 4Jpeu/q+bx+bj3j7niAa6O2eBC5qiXvYkBUupHDUwFbugmUANW1HpRLbs2mM2G19 9GwRJdTqPVUfNVoaHciXb2BGX/vVq2mYjxfPnTitaJ+4u2dwTQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBAz8NnHKHCXqdg+/Y0zzN31Bq8nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZDM5OGI5Y2ItN2M5Ny0z ZDhkLTkyNTktNGIyZjE3NGI0MzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAvP/ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABka/CpwNbV38hLeWqbKrbXXD8F2q5glo6eMOsWASYEZoeGMjxXw zfOJB0Y7CxwI5WlNXhDekRe3Sz90KWmqWPNCQcE0PJ+CTiVF3qyu9dD8UALIx4B3 ssonb2/MOvrW0R4989DLHjXilmsE/IoiaMUof31NDzlgB1x2pWYHfDOimiEnO3K2 OVnFCzJSX4h1zOkeHhaG8bPrgGfi+yOPvjoa1h8l7u0EqeXOWEXehLEFLO5n+tGg qVjPr2Q6JgfzAeehQWSt8T5pPQVaK9/vhO3fm9LB1SKuw/cF+cj/qExWROU7Nliq Knk4XlEcGrcEf6LMwl1GoTgaUxAX8fVfMus= -----END CERTIFICATE-----Generated at Tue Sep 22 04:17:36 2026 by rpki-client