$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/619b6a5e-0cf9-3a88-808a-aa760f2ed6a0.roa File: 619b6a5e-0cf9-3a88-808a-aa760f2ed6a0.roa (raw, json) Hash identifier: Glv0hfR4Is2L5XxLO4w31Vq9xCJl1bTpriz+KoeCq+Y= Subject key identifier: 65:13:7F:58:68:24:64:02:BE:63:B7:0D:F2:91:04:81:3E:11:49:98 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584BB2F815ED1A71D978DFB876A0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/619b6a5e-0cf9-3a88-808a-aa760f2ed6a0.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 397230 IP address blocks: 2001:500:3682::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f8:15:ed:1a:71:d9:78:df:b8:76:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=413b8918-c296-49ad-800b-9611939b7766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:23:71:65:21:b1:b6:36:c6:55:72:6b:67:7b: a9:54:55:1b:e3:1c:56:15:fa:2f:54:db:f9:ff:64: b5:0a:4f:23:fc:32:ad:b9:98:46:73:ab:a7:9e:a7: ba:c2:50:12:dc:55:4f:02:f8:4c:ad:34:44:7c:50: ef:2e:98:da:1f:15:0a:00:40:6a:95:c9:d7:3c:12: f2:91:4f:85:2f:d6:45:d1:f7:31:d8:df:51:b6:db: f3:28:fe:fb:ac:89:ec:0f:84:d1:92:2a:3a:4b:bd: 21:e2:33:bc:d5:da:97:ef:a5:56:b4:fb:19:65:71: ee:a7:c9:d9:0d:28:36:d9:d5:05:a6:a1:69:40:99: bc:05:0e:86:4e:ee:b9:79:14:ac:db:d2:b6:75:95: 16:28:83:10:85:55:da:c0:06:2e:6c:ea:2a:31:d3: 4f:99:8a:31:ea:e9:ab:53:c4:98:6b:ba:24:76:6b: 30:fd:fd:c5:80:99:7c:0a:1b:b5:63:8e:94:cb:77: c0:58:b0:b4:1a:26:a0:4e:39:00:b4:26:a0:9c:ed: 7a:15:eb:ce:81:92:25:41:8b:21:f2:53:14:91:be: d0:84:f8:aa:a9:05:35:b3:ce:77:59:18:04:23:b2: a0:e7:7c:61:32:02:a9:54:00:da:ce:3c:82:ab:4a: 92:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:13:7F:58:68:24:64:02:BE:63:B7:0D:F2:91:04:81:3E:11:49:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/619b6a5e-0cf9-3a88-808a-aa760f2ed6a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:3682::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:8d:01:60:bc:54:1f:84:8c:73:2b:00:82:4e:ad:92:5b:65: 2d:ee:b4:29:d5:c8:50:16:61:3a:f5:9e:6a:5e:cc:02:a7:33: 8b:a7:89:72:a4:74:f3:0d:9d:eb:83:30:b3:8a:14:0f:c3:16: ea:83:90:83:fb:1e:30:ea:86:66:d5:29:69:58:69:ec:be:3f: 58:b4:05:bf:0b:56:43:b4:1d:0f:0f:69:44:e7:f2:b3:28:a3: 12:b1:47:d3:f9:96:90:19:0d:b5:bd:cf:b8:2f:e2:6c:f0:76: 19:41:c7:f9:57:4a:40:43:b0:ec:9b:e7:0b:96:84:59:73:c5: 93:21:f1:7e:e9:bb:37:84:ae:08:63:06:74:f6:0e:f7:9b:91: 18:0d:fd:7c:6f:65:2d:10:0a:a8:4c:a5:25:05:9c:5e:a9:94: ca:86:9e:81:08:d5:68:d8:da:47:3f:6c:9a:2a:19:0f:4e:ab: 78:bb:af:ee:ed:1f:15:59:16:0c:52:13:06:04:d6:b7:c7:b4: 9c:44:40:cb:6f:db:1c:7f:3f:6c:d8:8e:79:60:0f:4b:78:a8: 29:c8:6d:7f:f3:a0:1d:f7:9d:27:07:fd:30:af:a2:32:ff:03: ac:44:fd:3b:83:c0:49:de:bd:e0:c3:c9:a2:9b:d1:2a:5a:38: 86:46:c8:b0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuy+BXtGnHZeN+4dqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk NDEzYjg5MTgtYzI5Ni00OWFkLTgwMGItOTYxMTkzOWI3NzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiNxZSGxtjbGVXJrZ3upVFUb4xxWFfovVNv5 /2S1Ck8j/DKtuZhGc6unnqe6wlAS3FVPAvhMrTREfFDvLpjaHxUKAEBqlcnXPBLy kU+FL9ZF0fcx2N9RttvzKP77rInsD4TRkio6S70h4jO81dqX76VWtPsZZXHup8nZ DSg22dUFpqFpQJm8BQ6GTu65eRSs29K2dZUWKIMQhVXawAYubOoqMdNPmYox6umr U8SYa7okdmsw/f3FgJl8Chu1Y46Uy3fAWLC0GiagTjkAtCagnO16FevOgZIlQYsh 8lMUkb7QhPiqqQU1s853WRgEI7Kg53xhMgKpVADazjyCq0qS3QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGUTf1hoJGQCvmO3DfKRBIE+EUmYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNjE5YjZhNWUtMGNmOS0z YTg4LTgwOGEtYWE3NjBmMmVkNmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFADaC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEiNAWC8VB+EjHMrAIJOrZJbZS3utCnVyFAWYTr1nmpezAKnM4un iXKkdPMNneuDMLOKFA/DFuqDkIP7HjDqhmbVKWlYaey+P1i0Bb8LVkO0HQ8PaUTn 8rMooxKxR9P5lpAZDbW9z7gv4mzwdhlBx/lXSkBDsOyb5wuWhFlzxZMh8X7puzeE rghjBnT2DvebkRgN/XxvZS0QCqhMpSUFnF6plMqGnoEI1WjY2kc/bJoqGQ9Oq3i7 r+7tHxVZFgxSEwYE1rfHtJxEQMtv2xx/P2zYjnlgD0t4qCnIbX/zoB33nScH/TCv ojL/A6xE/TuDwEneveDDyaKb0SpaOIZGyLA= -----END CERTIFICATE-----Generated at Tue Nov 4 22:02:42 2025 by rpki-client