$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d503fba6-d5e1-395c-bee8-95e6a63f0958.roa File: d503fba6-d5e1-395c-bee8-95e6a63f0958.roa (raw, json) Hash identifier: XmMVmCPb9KliImxNkpyCRMlZ8HBGQyQgj7susE8/DRk= Subject key identifier: B4:F9:33:96:09:8B:38:00:C5:E1:98:AB:5D:D8:3C:B5:C0:C8:82:24 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23C2CC3616096DE7001B500 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d503fba6-d5e1-395c-bee8-95e6a63f0958.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397227 IP address blocks: 2620:74:1b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 01 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:2c:c3:61:60:96:de:70:01:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=4d753666-e24e-468f-a68a-af851ff9f49b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:60:51:5b:b1:30:00:52:df:bb:96:e7:9e:20: 34:3b:01:5f:61:a1:b3:e5:6a:ab:57:84:16:37:a1: 00:d4:b7:3f:10:20:4d:b9:22:82:96:8f:07:36:33: 76:6b:20:1e:ab:bf:e5:14:34:2a:75:e5:fa:60:84: 2e:dd:ab:96:0b:d1:bf:81:bb:21:7a:d6:a8:06:59: 6b:f4:ae:61:1f:6e:06:c2:a9:ed:b6:d2:f8:44:f6: ac:47:22:90:4c:58:67:22:ba:03:fd:f8:5e:32:4a: d0:5e:a3:b4:69:6f:2f:00:ba:54:1e:92:71:04:59: f9:4d:36:cf:d8:91:65:5b:62:0a:ac:05:7d:40:bf: 37:69:87:89:ef:6e:9d:3a:a6:3e:fb:33:81:82:3f: aa:80:03:6e:79:c0:fd:ed:33:99:5f:a0:77:58:d4: 06:7e:37:c7:ba:36:e9:7e:8a:8d:ab:b4:f5:ae:c6: 2d:c8:da:e7:e9:a7:15:70:ba:12:52:d6:38:6f:c3: 05:77:bd:77:2d:a5:11:56:7c:af:7d:48:18:67:e6: 7d:8d:11:b4:2a:1c:c9:b1:8c:9e:67:bb:19:65:ed: e1:b3:05:0f:db:22:f7:9a:09:75:a5:05:4b:ec:d5: a9:e2:8d:d4:50:9b:8b:ee:ac:e9:7b:de:87:42:4b: 10:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:F9:33:96:09:8B:38:00:C5:E1:98:AB:5D:D8:3C:B5:C0:C8:82:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d503fba6-d5e1-395c-bee8-95e6a63f0958.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:1b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:82:ba:96:08:fd:9b:4b:41:7a:0f:a0:8e:00:89:1c:b5:5b: 1e:f1:93:2f:12:0b:53:97:0f:d5:86:e8:a1:8d:28:eb:14:2c: 12:8e:3b:33:41:0a:e9:f2:6d:00:79:72:69:e0:12:59:41:a3: fd:81:9f:db:91:20:7b:6d:5f:68:d0:23:59:48:f6:59:56:42: 2b:3b:6b:3b:8c:a9:c1:17:77:67:13:4f:2b:33:43:47:e5:4f: 26:3b:2d:d4:02:97:fd:51:77:63:49:71:5e:be:c3:11:0c:4a: a0:c0:41:5e:54:2f:52:e6:da:ac:a6:bb:66:86:46:1f:5b:14: ea:e5:d7:f3:b0:91:85:63:83:38:ef:60:a5:11:08:73:6b:e4: fc:09:d5:eb:45:1d:89:ad:e6:23:bc:01:60:81:aa:ad:e3:eb: 42:f6:73:38:23:fe:31:ca:6c:e7:b6:23:ee:d9:c6:96:e1:90: 9f:b6:dc:62:2e:0e:f4:e0:22:1b:5f:6a:dd:27:5b:b7:d2:3e: e6:cd:6b:e6:73:17:d7:48:b9:9f:6d:3f:fc:d4:33:53:7f:54: 98:a8:d8:60:88:74:f7:50:14:1c:52:cb:52:ba:d0:fb:c9:12: 0d:d1:b2:5e:2a:5b:79:7c:ed:0f:9a:97:04:1b:4c:14:e8:df: f7:af:2c:03 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErSPCzDYWCW3nABtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk NGQ3NTM2NjYtZTI0ZS00NjhmLWE2OGEtYWY4NTFmZjlmNDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWBRW7EwAFLfu5bnniA0OwFfYaGz5WqrV4QW N6EA1Lc/ECBNuSKClo8HNjN2ayAeq7/lFDQqdeX6YIQu3auWC9G/gbshetaoBllr 9K5hH24GwqntttL4RPasRyKQTFhnIroD/fheMkrQXqO0aW8vALpUHpJxBFn5TTbP 2JFlW2IKrAV9QL83aYeJ726dOqY++zOBgj+qgANuecD97TOZX6B3WNQGfjfHujbp foqNq7T1rsYtyNrn6acVcLoSUtY4b8MFd713LaURVnyvfUgYZ+Z9jRG0KhzJsYye Z7sZZe3hswUP2yL3mgl1pQVL7NWp4o3UUJuL7qzpe96HQksQawIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLT5M5YJizgAxeGYq13YPLXAyIIkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZDUwM2ZiYTYtZDVlMS0z OTVjLWJlZTgtOTVlNmE2M2YwOTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAESCupYI/ZtLQXoPoI4AiRy1Wx7xky8SC1OXD9WG6KGNKOsULBKO OzNBCunybQB5cmngEllBo/2Bn9uRIHttX2jQI1lI9llWQis7azuMqcEXd2cTTysz Q0flTyY7LdQCl/1Rd2NJcV6+wxEMSqDAQV5UL1Lm2qymu2aGRh9bFOrl1/OwkYVj gzjvYKURCHNr5PwJ1etFHYmt5iO8AWCBqq3j60L2czgj/jHKbOe2I+7ZxpbhkJ+2 3GIuDvTgIhtfat0nW7fSPubNa+ZzF9dIuZ9tP/zUM1N/VJio2GCIdPdQFBxSy1K6 0PvJEg3Rsl4qW3l87Q+alwQbTBTo3/evLAM= -----END CERTIFICATE-----Generated at Thu Oct 30 15:42:24 2025 by rpki-client