$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2ac23c8e-9f17-3a25-80a3-9ec4bcfcd69c.roa File: 2ac23c8e-9f17-3a25-80a3-9ec4bcfcd69c.roa (raw, json) Hash identifier: ApKi86pNP8Hg5jN+f39Zsl/Ok080Tq2mEgH6xW4O0+E= Subject key identifier: AB:C7:02:E8:65:85:4A:7C:0D:77:E4:F9:72:3C:A2:3C:14:33:F7:29 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584BB2F8181E32870FA77126C680 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2ac23c8e-9f17-3a25-80a3-9ec4bcfcd69c.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 397230 IP address blocks: 2001:502:100e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f8:18:1e:32:87:0f:a7:71:26:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=14d8bbda-0e38-40aa-8470-574a68c489d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:6b:24:50:ee:8f:d9:39:22:9b:46:4a:23:fc: 6e:83:be:83:ab:d9:03:9a:58:a8:82:a1:8a:9f:34: 8d:8b:b9:c6:73:c3:c7:2d:3f:64:11:b1:68:d1:9a: 06:5d:f9:b7:3e:dc:f5:4c:73:6a:d9:ad:67:41:03: b6:11:1c:c6:bd:d1:f5:21:23:f5:ca:a5:f6:28:1d: 4f:c6:c5:50:06:13:67:4d:4f:1e:4d:ed:58:7e:bd: 00:70:2a:92:ec:9c:9f:44:99:f5:01:57:e2:4a:dc: 0f:4f:79:6d:1b:fb:50:31:fe:87:43:5e:5b:3c:4e: 0c:26:5a:a4:7f:fa:2c:ec:9b:91:50:71:06:04:45: 1e:b7:5f:ef:79:07:a1:7e:d4:c0:29:3f:01:de:8c: a8:52:12:cd:b3:97:39:d1:8e:fd:a9:fd:93:e0:b6: 47:e5:04:d7:29:39:ae:c0:1d:57:d7:9d:0f:34:52: 6d:39:03:1e:2f:c9:bf:27:d6:10:d8:ae:fa:ec:84: 5e:a3:cf:ac:6f:c7:69:ab:c2:4b:7e:e1:42:81:62: 72:1b:c1:f0:99:f5:a3:1c:7d:e1:9c:53:2e:14:11: 81:aa:fd:68:71:cf:16:24:fe:9a:b1:74:0a:42:a5: 36:3b:fa:ee:b0:f6:08:c3:f7:40:94:e9:0f:17:9c: d9:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:C7:02:E8:65:85:4A:7C:0D:77:E4:F9:72:3C:A2:3C:14:33:F7:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2ac23c8e-9f17-3a25-80a3-9ec4bcfcd69c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:100e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:7e:5a:66:19:a9:95:9b:10:57:e9:5b:d4:8f:a6:ec:91:16: 3c:8f:09:0c:aa:02:7a:db:d2:b5:93:68:f0:6f:40:13:2c:ef: 56:94:28:6a:87:a3:fd:9f:bc:59:18:a7:e5:54:bc:11:f6:20: 73:c2:cd:86:04:0e:da:49:2f:16:15:7f:0f:27:61:19:82:bf: 72:b8:b3:b9:93:25:9d:1d:5a:53:61:97:62:48:7b:2b:e3:60: b5:7f:50:b2:6c:ee:84:e8:bb:1a:74:0b:f0:75:6c:ec:94:b9: a6:1e:09:a6:99:6e:5f:bf:82:9e:69:76:f1:fe:13:26:85:23: 18:ba:de:84:64:ef:74:f4:29:70:a6:be:2b:67:a7:f5:d8:fe: b7:ab:f2:01:cd:57:b4:79:e6:14:07:20:7b:5f:b7:f9:84:d2: 97:28:3d:9b:56:0d:1b:fa:0c:2e:e8:d9:4e:29:cd:24:a1:f9: df:f1:8c:43:a0:a6:bb:86:b4:35:e7:2a:a4:fa:0a:cd:c7:87: 64:77:72:c1:af:98:32:70:48:2f:a1:1a:5a:7b:5f:20:e9:e4: 7a:cd:8e:cd:45:fc:2c:63:18:f0:1e:1f:29:4b:5f:c3:14:11: fa:57:46:cd:e6:2f:c5:e8:41:50:b7:f3:be:64:f9:dc:fe:2d: d9:10:56:92 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuy+BgeMocPp3EmxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk MTRkOGJiZGEtMGUzOC00MGFhLTg0NzAtNTc0YTY4YzQ4OWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2skUO6P2Tkim0ZKI/xug76Dq9kDmliogqGK nzSNi7nGc8PHLT9kEbFo0ZoGXfm3Ptz1THNq2a1nQQO2ERzGvdH1ISP1yqX2KB1P xsVQBhNnTU8eTe1Yfr0AcCqS7JyfRJn1AVfiStwPT3ltG/tQMf6HQ15bPE4MJlqk f/os7JuRUHEGBEUet1/veQehftTAKT8B3oyoUhLNs5c50Y79qf2T4LZH5QTXKTmu wB1X150PNFJtOQMeL8m/J9YQ2K767IReo8+sb8dpq8JLfuFCgWJyG8HwmfWjHH3h nFMuFBGBqv1occ8WJP6asXQKQqU2O/rusPYIw/dAlOkPF5zZuwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKvHAuhlhUp8DXfk+XI8ojwUM/cpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMmFjMjNjOGUtOWYxNy0z YTI1LTgwYTMtOWVjNGJjZmNkNjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAhAO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAl+WmYZqZWbEFfpW9SPpuyRFjyPCQyqAnrb0rWTaPBvQBMs71aU KGqHo/2fvFkYp+VUvBH2IHPCzYYEDtpJLxYVfw8nYRmCv3K4s7mTJZ0dWlNhl2JI eyvjYLV/ULJs7oTouxp0C/B1bOyUuaYeCaaZbl+/gp5pdvH+EyaFIxi63oRk73T0 KXCmvitnp/XY/rer8gHNV7R55hQHIHtft/mE0pcoPZtWDRv6DC7o2U4pzSSh+d/x jEOgpruGtDXnKqT6Cs3Hh2R3csGvmDJwSC+hGlp7XyDp5HrNjs1F/CxjGPAeHylL X8MUEfpXRs3mL8XoQVC3875k+dz+LdkQVpI= -----END CERTIFICATE-----Generated at Wed Nov 5 12:11:56 2025 by rpki-client