$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8da0c199-220b-350c-a732-a2b9bee3c6c1.roa File: 8da0c199-220b-350c-a732-a2b9bee3c6c1.roa (raw, json) Hash identifier: UFx6oC66kbWInBLj+Y8g/gXFs1uvAQrQNCHqRklkC60= Subject key identifier: 25:DF:B5:22:8E:EF:A7:59:7A:F8:C7:F7:EA:95:D3:2B:9F:74:90:39 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584BB2F8176443EE82ABC0DE8F80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8da0c199-220b-350c-a732-a2b9bee3c6c1.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 397219 IP address blocks: 2001:502:100e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f8:17:64:43:ee:82:ab:c0:de:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=9a223bb0-bbc4-461d-864f-18e60bdb4bba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:57:5e:18:d2:c2:2b:0c:31:6d:db:49:9d:b1: b3:5a:e3:4a:8b:92:bc:9b:f2:f2:42:2c:65:51:19: ab:91:00:58:f6:a2:38:7f:ee:41:79:24:7b:4e:cb: ef:e7:47:bb:16:1e:08:6d:71:ff:5d:68:74:f1:d2: b0:e7:4b:a0:14:37:a1:aa:72:a1:93:29:6d:20:ac: 0d:93:01:0a:c6:35:7a:c8:ca:dd:f7:0f:bb:fd:6b: bd:fe:7d:3c:e5:9d:d5:1a:f3:31:2b:e2:95:1c:e3: 8f:63:57:e9:30:cf:0c:cf:dd:42:b2:fc:c1:53:4e: c1:bf:2f:57:b1:48:ee:de:33:81:c3:97:c8:9a:48: 0b:94:c0:96:6b:41:8c:da:de:39:bb:14:6a:97:04: f2:eb:ec:3f:91:f4:e3:6f:12:4f:27:d9:bf:c5:05: 49:55:a5:8e:01:9d:27:39:dc:12:05:d2:e1:c1:13: f1:e0:3d:49:62:db:d9:e8:45:92:b3:ce:27:61:f3: 61:8a:50:3b:f7:28:b0:9f:29:a3:e3:12:00:93:51: 3b:6f:88:87:c6:77:09:fb:f0:97:38:95:da:32:b3: b5:ee:df:b0:68:6c:12:67:dc:cd:94:91:df:be:87: 3d:12:57:d7:4f:30:5e:9d:10:7c:17:e3:1e:2c:52: 88:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:DF:B5:22:8E:EF:A7:59:7A:F8:C7:F7:EA:95:D3:2B:9F:74:90:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8da0c199-220b-350c-a732-a2b9bee3c6c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:100e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:1a:d8:31:5d:58:f1:bf:27:19:a8:31:a8:55:4b:00:2a:c6: 70:5c:0c:a8:23:cc:75:f6:29:eb:f2:13:bf:5a:87:bc:22:36: 61:3a:b3:2f:db:80:2b:d2:9a:e7:ae:e2:25:81:5d:89:69:32: fa:2c:87:03:63:20:4a:fd:d0:c6:f0:d1:8a:49:d9:41:d7:22: f7:3d:14:e8:82:f8:71:a8:77:d2:46:c9:81:9e:d9:ed:19:65: 8b:f3:1d:9c:15:e4:a2:75:79:78:65:22:4a:e9:c1:90:b5:1e: 51:88:10:13:57:fe:30:5c:dd:5f:e4:65:1f:fd:80:9b:68:35: b5:89:f6:e3:70:c0:8d:63:28:5b:69:8f:bd:d9:ef:36:63:04: 7a:8d:b7:74:a6:26:5e:4d:b5:3d:cf:9f:e8:7b:f5:42:c6:f0: e4:5d:4c:90:09:1b:6b:be:25:b7:cd:c1:64:89:38:76:c4:84: 17:e8:84:65:85:fe:06:f4:e1:89:1a:dc:74:6c:bd:1c:24:67: 89:f9:19:ee:d3:20:7e:86:82:28:09:63:46:fd:d4:78:58:78: ab:87:e2:09:93:d8:47:4b:f3:d2:58:d7:ed:b6:a9:a1:77:36: c2:9c:22:b6:07:f8:e5:33:03:8f:f2:47:34:7c:0d:49:a2:87: 8e:4a:2b:d9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuy+BdkQ+6Cq8Dej4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk OWEyMjNiYjAtYmJjNC00NjFkLTg2NGYtMThlNjBiZGI0YmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArldeGNLCKwwxbdtJnbGzWuNKi5K8m/LyQixl URmrkQBY9qI4f+5BeSR7Tsvv50e7Fh4IbXH/XWh08dKw50ugFDehqnKhkyltIKwN kwEKxjV6yMrd9w+7/Wu9/n085Z3VGvMxK+KVHOOPY1fpMM8Mz91CsvzBU07Bvy9X sUju3jOBw5fImkgLlMCWa0GM2t45uxRqlwTy6+w/kfTjbxJPJ9m/xQVJVaWOAZ0n OdwSBdLhwRPx4D1JYtvZ6EWSs84nYfNhilA79yiwnymj4xIAk1E7b4iHxncJ+/CX OJXaMrO17t+waGwSZ9zNlJHfvoc9ElfXTzBenRB8F+MeLFKIAQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCXftSKO76dZevjH9+qV0yufdJA5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOGRhMGMxOTktMjIwYi0z NTBjLWE3MzItYTJiOWJlZTNjNmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAhAO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHYa2DFdWPG/JxmoMahVSwAqxnBcDKgjzHX2KevyE79ah7wiNmE6 sy/bgCvSmueu4iWBXYlpMvoshwNjIEr90Mbw0YpJ2UHXIvc9FOiC+HGod9JGyYGe 2e0ZZYvzHZwV5KJ1eXhlIkrpwZC1HlGIEBNX/jBc3V/kZR/9gJtoNbWJ9uNwwI1j KFtpj73Z7zZjBHqNt3SmJl5NtT3Pn+h79ULG8ORdTJAJG2u+JbfNwWSJOHbEhBfo hGWF/gb04Yka3HRsvRwkZ4n5Ge7TIH6GgigJY0b91HhYeKuH4gmT2EdL89JY1+22 qaF3NsKcIrYH+OUzA4/yRzR8DUmih45KK9k= -----END CERTIFICATE-----Generated at Tue Nov 4 22:02:45 2025 by rpki-client