$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ddfb5616-264a-3f03-b8cd-0f93c7d35cd3.roa File: ddfb5616-264a-3f03-b8cd-0f93c7d35cd3.roa (raw, json) Hash identifier: GDoxnLbQZujZjmpUbjnsIvTrJ56MvzDh5wOU6/IiLoE= Subject key identifier: DA:62:95:14:34:2A:76:DE:1C:D2:E9:41:F7:B3:5B:BA:B0:44:AB:3E Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584BB2F8234A4DDF9FFFA7206B60 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ddfb5616-264a-3f03-b8cd-0f93c7d35cd3.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 397236 IP address blocks: 2001:502:f3ff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f8:23:4a:4d:df:9f:ff:a7:20:6b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=62b77e0a-2e7a-495d-acc2-f3450a684747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:97:cf:d1:ad:67:3e:ea:5c:81:83:30:dd:54: 88:44:fd:9c:38:8e:26:53:4e:78:14:e3:ec:e3:e4: cb:6c:69:b0:bd:82:64:fb:e6:57:73:69:69:83:cc: 45:83:e0:3c:24:a7:52:81:8a:77:92:26:1b:05:24: 8a:94:17:5f:bc:be:d0:7c:fa:54:28:f0:18:cd:34: 61:4b:a6:2b:81:ba:1c:d6:dc:08:0b:fb:95:f3:bf: 60:c0:2f:6b:83:ad:75:27:a3:73:22:5e:91:1b:74: 0a:35:8d:ec:04:3a:7c:3e:5b:b0:bf:5b:f2:e2:e0: e3:2c:8c:1f:ed:47:09:0d:10:25:2a:bb:e2:6c:97: df:cb:b3:46:ba:24:d3:aa:ee:b7:98:df:26:6b:2b: bf:16:55:ab:49:6f:ad:fb:b0:a0:ef:bf:67:e5:42: 82:d6:01:45:90:75:e2:40:15:6c:91:0c:e8:21:ad: 5d:29:ba:7e:91:bd:fc:5b:a1:f9:32:a4:c9:03:56: fc:8a:00:68:28:e8:46:8e:fa:b1:d3:2e:0a:ef:b9: d7:44:96:f6:91:06:e2:51:cc:1f:ba:4a:4b:fe:20: 52:1e:90:68:f6:e7:74:a9:5f:66:e2:0a:f9:f8:d8: 01:ee:92:9d:1c:3e:60:76:9f:8d:9d:34:f1:b6:c9: db:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:62:95:14:34:2A:76:DE:1C:D2:E9:41:F7:B3:5B:BA:B0:44:AB:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ddfb5616-264a-3f03-b8cd-0f93c7d35cd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:f3ff::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:90:b9:43:c0:65:1c:62:7d:73:b6:b6:3d:60:fb:52:21:57: c4:4d:ef:5a:ee:00:3b:60:3b:3c:c9:70:12:f9:a8:d9:97:42: b2:5e:c9:78:66:12:fe:bd:07:96:e5:78:d7:6d:5c:37:48:db: 54:36:ca:47:af:a2:dc:4f:ee:db:65:4c:17:06:80:a7:d7:89: de:54:b4:f5:a7:b9:2f:2d:7b:71:3d:95:d5:6c:3e:9b:67:51: b3:f9:32:94:8f:e3:5e:9e:7c:1a:4f:90:66:66:d7:df:32:90: c6:d8:f1:d7:01:f1:4d:f0:c6:fd:3b:12:b6:8a:5b:d1:1c:ec: 14:6c:4a:c5:75:96:a1:70:39:0d:a0:1d:be:9d:81:ca:ae:89: 40:8e:fa:6f:c4:96:cd:ca:4f:8e:74:e1:96:3f:8f:57:93:63: 7f:6d:88:c2:95:50:58:f4:45:a0:c9:39:97:88:09:bd:4d:68: bf:2b:44:ad:e6:0c:54:cc:16:65:e5:0f:2f:c5:09:c3:c5:5b: 51:6e:d4:a6:05:78:6d:65:17:20:d9:87:01:aa:cb:04:30:a1: dc:a5:b2:55:fa:00:2d:9d:c2:ec:ac:58:c8:cf:eb:74:c1:55: ee:68:b8:23:a0:97:eb:4c:63:63:fa:ba:02:72:59:27:ac:de: 0c:c6:53:27 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuy+CNKTd+f/6cga2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk NjJiNzdlMGEtMmU3YS00OTVkLWFjYzItZjM0NTBhNjg0NzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZfP0a1nPupcgYMw3VSIRP2cOI4mU054FOPs 4+TLbGmwvYJk++ZXc2lpg8xFg+A8JKdSgYp3kiYbBSSKlBdfvL7QfPpUKPAYzTRh S6Yrgboc1twIC/uV879gwC9rg611J6NzIl6RG3QKNY3sBDp8Pluwv1vy4uDjLIwf 7UcJDRAlKrvibJffy7NGuiTTqu63mN8mayu/FlWrSW+t+7Cg779n5UKC1gFFkHXi QBVskQzoIa1dKbp+kb38W6H5MqTJA1b8igBoKOhGjvqx0y4K77nXRJb2kQbiUcwf ukpL/iBSHpBo9ud0qV9m4gr5+NgB7pKdHD5gdp+NnTTxtsnbyQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNpilRQ0KnbeHNLpQfezW7qwRKs+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZGRmYjU2MTYtMjY0YS0z ZjAzLWI4Y2QtMGY5M2M3ZDM1Y2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAvP/ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGqQuUPAZRxifXO2tj1g+1IhV8RN71ruADtgOzzJcBL5qNmXQrJe yXhmEv69B5bleNdtXDdI21Q2ykevotxP7ttlTBcGgKfXid5UtPWnuS8te3E9ldVs PptnUbP5MpSP416efBpPkGZm198ykMbY8dcB8U3wxv07EraKW9Ec7BRsSsV1lqFw OQ2gHb6dgcquiUCO+m/Els3KT4504ZY/j1eTY39tiMKVUFj0RaDJOZeICb1NaL8r RK3mDFTMFmXlDy/FCcPFW1Fu1KYFeG1lFyDZhwGqywQwodylslX6AC2dwuysWMjP 63TBVe5ouCOgl+tMY2P6ugJyWSes3gzGUyc= -----END CERTIFICATE-----Generated at Mon Nov 3 10:06:19 2025 by rpki-client