$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/39082d99-77be-3fe3-913c-c7e261b6f620.roa File: 39082d99-77be-3fe3-913c-c7e261b6f620.roa (raw, json) Hash identifier: bEC5R0g+ak1NV9ENjE2IWmPyv5YE9iw+0rK6f6k+nSg= Subject key identifier: 09:EF:F5:39:09:28:28:05:D0:D3:B0:8D:C1:98:25:5B:69:14:79:B9 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584BB2F820D601842F20253B5640 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/39082d99-77be-3fe3-913c-c7e261b6f620.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 397232 IP address blocks: 2001:502:d399::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f8:20:d6:01:84:2f:20:25:3b:56:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=38d4d934-5eeb-4147-8437-04c77f3a536a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d1:87:ba:49:f9:be:c3:e6:8f:bf:dd:23:3e: 09:0a:91:03:38:a7:22:cc:21:a8:da:1d:af:82:6c: 3d:8a:2a:31:55:ee:96:fd:29:6e:e4:4c:31:54:95: b3:f5:82:46:0f:c9:fa:93:6e:31:87:b1:52:78:8d: a7:c7:b1:9f:4b:e1:70:4c:64:8f:4e:65:d6:8e:e0: e1:2e:b9:10:91:85:bd:21:44:f8:7d:41:fb:6d:b2: 53:4a:cc:d9:d9:f8:eb:07:29:35:6a:9e:7b:17:7d: 3a:42:5f:67:22:4c:03:a4:1b:7d:c4:b7:41:34:23: e5:e5:7e:8d:ca:b0:d2:b8:90:bb:e1:08:1c:43:3f: 74:03:d7:72:e6:a3:2b:f2:e9:9b:52:25:dc:0c:cc: a8:c9:68:f9:18:34:1c:9a:0d:9c:5d:23:40:2c:55: 5c:1e:c9:dd:7d:ef:43:d9:a9:33:fd:d6:bb:b2:15: 21:26:d8:53:e4:b3:99:f4:48:15:c6:19:00:d2:16: 7b:d0:81:2e:86:21:70:6e:41:36:04:23:7d:8c:31: cf:66:8f:c0:fb:b5:66:8d:a7:62:5f:9a:93:28:04: 08:b9:10:5b:44:c9:b9:33:ce:7e:6b:8b:71:9d:a3: eb:f2:85:0b:c5:10:11:3f:f6:4a:fe:8b:a0:b8:5a: 3b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:EF:F5:39:09:28:28:05:D0:D3:B0:8D:C1:98:25:5B:69:14:79:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/39082d99-77be-3fe3-913c-c7e261b6f620.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:d399::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:0f:02:a5:af:e1:d5:16:3b:b4:e3:1c:c2:a8:05:af:56:3e: 71:a1:15:68:58:de:b1:f0:83:63:f7:ef:e9:1f:04:ca:3c:ab: 46:dd:33:0f:e1:d7:08:a4:74:5f:5c:fc:89:c8:54:d7:c3:74: d1:bf:c6:ac:3a:1c:76:62:3e:44:09:24:6e:08:2f:15:1e:e7: e0:60:49:79:08:4e:97:ff:87:94:36:0a:3d:98:43:bf:28:cf: 58:28:4f:c5:b1:92:18:71:c1:ca:58:c0:01:54:f7:b1:50:90: 6d:e9:78:a0:83:e2:0a:f8:3a:c3:dd:31:90:f8:df:46:a0:57: c4:ee:10:d6:a0:55:b6:85:8a:3c:a0:27:fe:e0:fa:e6:82:bf: 19:09:ec:6d:8c:be:9f:2d:70:74:05:9c:41:5f:d7:33:af:9a: 67:c7:01:5c:f5:26:ab:56:24:b1:ff:8e:80:eb:87:99:2c:26: 35:c8:28:5a:b9:d9:48:d8:e5:ff:6c:d6:9a:0b:54:6d:1f:bf: 3f:f6:f0:56:61:d8:84:94:5f:24:ea:90:a4:a0:8f:b9:c2:ec: 6b:36:87:c1:8e:73:0d:f9:16:67:65:e1:40:b9:ec:90:23:de: af:f2:c9:dc:93:69:b3:ab:f7:4e:30:d4:99:a1:20:c6:2f:46: 81:71:d6:27 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuy+CDWAYQvICU7VkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk MzhkNGQ5MzQtNWVlYi00MTQ3LTg0MzctMDRjNzdmM2E1MzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19GHukn5vsPmj7/dIz4JCpEDOKcizCGo2h2v gmw9iioxVe6W/Slu5EwxVJWz9YJGD8n6k24xh7FSeI2nx7GfS+FwTGSPTmXWjuDh LrkQkYW9IUT4fUH7bbJTSszZ2fjrByk1ap57F306Ql9nIkwDpBt9xLdBNCPl5X6N yrDSuJC74QgcQz90A9dy5qMr8umbUiXcDMyoyWj5GDQcmg2cXSNALFVcHsndfe9D 2akz/da7shUhJthT5LOZ9EgVxhkA0hZ70IEuhiFwbkE2BCN9jDHPZo/A+7Vmjadi X5qTKAQIuRBbRMm5M85+a4txnaPr8oULxRARP/ZK/ouguFo7HwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAnv9TkJKCgF0NOwjcGYJVtpFHm5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMzkwODJkOTktNzdiZS0z ZmUzLTkxM2MtYzdlMjYxYjZmNjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAtOZ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC8PAqWv4dUWO7TjHMKoBa9WPnGhFWhY3rHwg2P37+kfBMo8q0bd Mw/h1wikdF9c/InIVNfDdNG/xqw6HHZiPkQJJG4ILxUe5+BgSXkITpf/h5Q2Cj2Y Q78oz1goT8WxkhhxwcpYwAFU97FQkG3peKCD4gr4OsPdMZD430agV8TuENagVbaF ijygJ/7g+uaCvxkJ7G2Mvp8tcHQFnEFf1zOvmmfHAVz1JqtWJLH/joDrh5ksJjXI KFq52UjY5f9s1poLVG0fvz/28FZh2ISUXyTqkKSgj7nC7Gs2h8GOcw35Fmdl4UC5 7JAj3q/yydyTabOr904w1JmhIMYvRoFx1ic= -----END CERTIFICATE-----Generated at Tue Nov 4 22:03:35 2025 by rpki-client