$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8cdf7e74-2091-3b0e-a650-3ebe2b9f6c4b.roa File: 8cdf7e74-2091-3b0e-a650-3ebe2b9f6c4b.roa (raw, json) Hash identifier: 3uSSn8Kf7Ljp7PKN5zMKM+FbzU0JLQNY0F2bmIG4Ldk= Subject key identifier: 10:A2:B0:03:D9:20:29:2A:17:00:F9:DA:81:0A:9E:8A:42:2D:A7:1F Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D7470122847972CDBD145A980 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8cdf7e74-2091-3b0e-a650-3ebe2b9f6c4b.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 397225 IP address blocks: 2001:502:ad09::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:70:12:28:47:97:2c:db:d1:45:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=3460ea58-fcaa-4eed-bfbd-74a459a2df44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d9:2a:41:e1:a9:b2:36:e8:5d:dd:29:5c:8f: 47:d2:53:c2:fd:e9:7c:7f:9e:95:e3:59:1b:54:74: 8f:c3:50:ad:02:82:9f:ce:4b:4f:66:e4:57:8d:10: 4f:93:5f:11:23:d8:a6:b9:0a:15:77:dc:0b:c9:ba: 69:44:d3:db:a3:ff:fb:55:52:40:7d:38:86:6e:64: 0d:53:ce:69:05:42:52:32:f1:1b:12:3b:c7:17:00: 13:ab:4a:11:a9:54:b9:65:b1:e6:54:10:6e:cf:fe: 91:a9:d4:11:0f:c4:6e:f8:50:0e:b6:88:39:af:97: 32:08:4c:45:82:21:80:91:ee:3f:9e:fa:c4:b8:01: 38:f1:b5:3f:7b:24:cf:d9:50:0a:68:da:57:c4:c9: bb:be:68:f2:ef:8b:a8:da:71:ca:0e:e2:e3:05:7c: dd:55:65:e9:03:65:38:2b:d0:1a:65:fe:75:5f:35: f4:de:ec:56:fe:37:a3:cf:85:29:19:95:8d:16:69: fa:8f:22:3f:97:35:35:ff:9b:e5:f4:19:10:41:b0: b8:4c:3b:cf:f5:b7:77:ef:31:56:13:5c:5b:c8:0f: dd:f8:9e:e1:fe:67:b1:79:e4:e6:a5:ba:3d:1e:9c: 43:d7:e6:55:88:b8:33:38:9d:b3:91:9d:3f:09:6d: 95:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A2:B0:03:D9:20:29:2A:17:00:F9:DA:81:0A:9E:8A:42:2D:A7:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8cdf7e74-2091-3b0e-a650-3ebe2b9f6c4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:ad09::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:12:67:5b:97:92:0a:f7:0b:8c:a6:4c:34:90:6b:31:9c:00: f2:89:d6:bb:1f:1d:4a:bd:9f:94:87:bd:dc:ad:57:78:8f:84: c9:b2:50:82:01:41:5f:67:aa:f5:47:d5:34:d9:ba:99:00:d2: 30:82:40:08:a0:a7:18:97:0d:c8:20:0f:a1:4e:da:0e:93:ca: 5c:64:29:40:90:44:90:5e:de:59:b2:19:01:c1:bb:50:52:4d: 2d:af:50:4b:84:bd:85:bb:7a:d0:bb:d3:e5:f7:1a:99:68:18: 13:84:0f:e1:5d:67:ef:4c:74:af:59:96:4b:2f:a2:a0:93:e2: b0:45:f9:08:05:32:d5:fb:2f:45:b9:bc:b0:d1:93:ce:21:55: 34:0b:63:60:d1:11:9c:77:83:e9:b3:79:be:9e:37:c5:b8:ff: ef:0b:34:61:b4:8f:ac:c1:ec:39:37:16:77:d4:41:d9:77:0b: a6:e4:66:1a:a5:15:76:4f:1d:6b:0f:a8:4a:ad:8b:d9:b8:c2: a5:66:3a:5e:cb:33:e6:b8:26:c9:e1:e1:68:29:1d:f3:c5:2a: 36:39:e0:1e:56:97:be:b6:38:4d:d1:d2:7b:6b:45:25:d8:6c: b7:3c:74:0f:9b:21:13:13:6b:f8:4a:9d:a5:81:40:38:3b:df: b4:64:90:af -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE10cBIoR5cs29FFqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk MzQ2MGVhNTgtZmNhYS00ZWVkLWJmYmQtNzRhNDU5YTJkZjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9kqQeGpsjboXd0pXI9H0lPC/el8f56V41kb VHSPw1CtAoKfzktPZuRXjRBPk18RI9imuQoVd9wLybppRNPbo//7VVJAfTiGbmQN U85pBUJSMvEbEjvHFwATq0oRqVS5ZbHmVBBuz/6RqdQRD8Ru+FAOtog5r5cyCExF giGAke4/nvrEuAE48bU/eyTP2VAKaNpXxMm7vmjy74uo2nHKDuLjBXzdVWXpA2U4 K9AaZf51XzX03uxW/jejz4UpGZWNFmn6jyI/lzU1/5vl9BkQQbC4TDvP9bd37zFW E1xbyA/d+J7h/mexeeTmpbo9HpxD1+ZViLgzOJ2zkZ0/CW2VlwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBCisAPZICkqFwD52oEKnopCLacfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOGNkZjdlNzQtMjA5MS0z YjBlLWE2NTAtM2ViZTJiOWY2YzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAq0J MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIASZ1uXkgr3C4ymTDSQazGcAPKJ1rsfHUq9n5SHvdytV3iPhMmy UIIBQV9nqvVH1TTZupkA0jCCQAigpxiXDcggD6FO2g6TylxkKUCQRJBe3lmyGQHB u1BSTS2vUEuEvYW7etC70+X3GploGBOED+FdZ+9MdK9ZlksvoqCT4rBF+QgFMtX7 L0W5vLDRk84hVTQLY2DREZx3g+mzeb6eN8W4/+8LNGG0j6zB7Dk3FnfUQdl3C6bk ZhqlFXZPHWsPqEqti9m4wqVmOl7LM+a4Jsnh4WgpHfPFKjY54B5Wl762OE3R0ntr RSXYbLc8dA+bIRMTa/hKnaWBQDg737RkkK8= -----END CERTIFICATE-----Generated at Fri Apr 17 19:23:07 2026 by rpki-client