$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/890d9c4a-3c30-3e1b-b295-4ae4a30a1a0f.roa File: 890d9c4a-3c30-3e1b-b295-4ae4a30a1a0f.roa (raw, json) Hash identifier: tQ3hOc+3roQBLlXbMCeuNR4eWggPHjAXxnQ4ale/vS8= Subject key identifier: 01:D9:D2:DA:65:7A:CE:6D:B6:89:3C:5A:9D:64:13:CD:F2:C2:18:3B Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584BB2F81A3BC12B0371EAD2CE00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/890d9c4a-3c30-3e1b-b295-4ae4a30a1a0f.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 397230 IP address blocks: 2001:502:2eda::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f8:1a:3b:c1:2b:03:71:ea:d2:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=a484d4d4-a7a2-4eca-b734-e5f6030c1deb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:3e:60:ff:b3:d6:4c:23:6b:96:72:bd:1b:85: 3a:65:ec:7b:7b:49:ee:ee:aa:43:5c:40:9c:37:7f: 0a:16:24:4d:5f:9f:b8:d5:c4:ca:89:6e:65:4c:91: 31:a6:d1:37:69:0d:b6:62:90:37:c5:91:9f:d7:31: 78:31:5b:7d:81:6d:92:e0:5b:5f:86:76:4f:1f:b0: 21:43:12:e5:78:e4:8e:fc:0e:27:23:0a:3f:33:67: 69:e6:f1:a1:18:d9:d5:c0:95:9a:21:4b:00:0a:1e: 74:18:2c:84:f0:26:ff:62:6e:34:f9:80:65:34:4c: 3f:49:89:78:60:47:45:9f:d6:da:1e:b9:9c:35:c1: b6:69:8c:67:87:e1:7a:72:02:9a:c8:c9:e2:a5:4c: 82:b0:e8:ee:1e:ff:cc:fe:8f:a6:e5:42:a1:ed:c5: dc:56:60:d8:4d:00:b7:3f:42:22:f5:af:a4:a2:9e: f9:c7:f2:4d:c6:0a:09:10:71:84:8c:24:8a:fc:0c: 8e:bc:93:ea:49:7c:c7:20:2b:5e:71:23:0c:44:c8: 5e:26:a5:dc:3b:e2:b5:60:5d:15:6e:e8:a7:c5:da: fa:a5:56:a0:a2:7e:35:75:d0:03:e9:e8:d6:6d:88: 38:1a:24:cb:86:27:e9:b9:59:4a:20:72:55:13:68: 57:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:D9:D2:DA:65:7A:CE:6D:B6:89:3C:5A:9D:64:13:CD:F2:C2:18:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/890d9c4a-3c30-3e1b-b295-4ae4a30a1a0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:2eda::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:db:f8:e5:e0:c1:86:32:fa:b0:1d:c7:ef:e5:2d:d4:c1:28: 97:77:e2:13:09:08:ad:fe:b1:27:b9:b2:38:14:a8:c5:fd:84: 4b:c8:77:0e:c5:a4:ea:de:84:59:68:f4:f9:6d:a7:49:03:01: 0b:f0:91:f6:41:76:4d:00:2c:bb:bc:cd:54:9c:91:22:c7:1d: 32:a3:31:f5:00:80:ff:db:15:15:5a:03:10:79:07:51:a0:d9: 78:11:03:c4:a2:18:5f:c3:ae:df:46:a0:a5:af:57:ba:15:89: 42:55:04:11:79:15:e3:39:57:37:e0:e7:66:24:5c:d6:89:02: ba:ae:44:30:ae:02:a6:58:e3:70:03:e2:7e:74:40:4e:ca:aa: e4:f8:e2:f8:14:34:c5:39:b9:27:72:92:0a:01:8d:c3:22:58: a4:dc:eb:59:9e:b0:ff:30:3b:03:1b:c3:9f:ab:c7:05:5c:ef: ca:ac:12:3c:e9:9d:73:56:95:6c:de:66:f1:bb:37:51:ce:62: 97:ea:b6:d4:46:30:7c:01:04:73:c0:b5:62:2c:a1:5c:42:56: 4f:5e:02:c2:94:b2:dc:c7:aa:af:a0:ee:26:17:22:ec:ec:b0: 50:3b:33:8a:ca:82:fa:5e:b1:a4:35:a1:72:a7:ce:9e:0b:a6: cf:ee:a0:ee -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuy+Bo7wSsDcerSzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk YTQ4NGQ0ZDQtYTdhMi00ZWNhLWI3MzQtZTVmNjAzMGMxZGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhj5g/7PWTCNrlnK9G4U6Zex7e0nu7qpDXECc N38KFiRNX5+41cTKiW5lTJExptE3aQ22YpA3xZGf1zF4MVt9gW2S4FtfhnZPH7Ah QxLleOSO/A4nIwo/M2dp5vGhGNnVwJWaIUsACh50GCyE8Cb/Ym40+YBlNEw/SYl4 YEdFn9baHrmcNcG2aYxnh+F6cgKayMnipUyCsOjuHv/M/o+m5UKh7cXcVmDYTQC3 P0Ii9a+kop75x/JNxgoJEHGEjCSK/AyOvJPqSXzHICtecSMMRMheJqXcO+K1YF0V buinxdr6pVagon41ddAD6ejWbYg4GiTLhifpuVlKIHJVE2hXiQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAHZ0tples5ttok8Wp1kE83ywhg7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvODkwZDljNGEtM2MzMC0z ZTFiLWIyOTUtNGFlNGEzMGExYTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAi7a MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAPb+OXgwYYy+rAdx+/lLdTBKJd34hMJCK3+sSe5sjgUqMX9hEvI dw7FpOrehFlo9Pltp0kDAQvwkfZBdk0ALLu8zVSckSLHHTKjMfUAgP/bFRVaAxB5 B1Gg2XgRA8SiGF/Drt9GoKWvV7oViUJVBBF5FeM5Vzfg52YkXNaJArquRDCuAqZY 43AD4n50QE7KquT44vgUNMU5uSdykgoBjcMiWKTc61mesP8wOwMbw5+rxwVc78qs EjzpnXNWlWzeZvG7N1HOYpfqttRGMHwBBHPAtWIsoVxCVk9eAsKUstzHqq+g7iYX IuzssFA7M4rKgvpesaQ1oXKnzp4Lps/uoO4= -----END CERTIFICATE-----Generated at Tue Nov 4 22:03:56 2025 by rpki-client