$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9ffad9b7-e774-3db4-ad67-e0c56d3594e3.roa File: 9ffad9b7-e774-3db4-ad67-e0c56d3594e3.roa (raw, json) Hash identifier: 86V08+H8oAEP2ho6hllaw93SAVj1CWblcczGsSrBYsk= Subject key identifier: 9D:CC:1D:15:27:76:9F:15:6D:CE:F9:9C:62:B9:6D:5F:83:75:35:31 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584BB2F819A37051B12FAC82FD80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9ffad9b7-e774-3db4-ad67-e0c56d3594e3.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 397221 IP address blocks: 2001:502:2eda::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f8:19:a3:70:51:b1:2f:ac:82:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=96de8f92-b767-4e18-bfc4-b7517e70e968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:91:3d:58:55:6a:d8:96:e9:36:d1:e5:aa:85: e5:89:9f:44:6b:de:66:f6:12:30:b3:0e:5e:69:2c: 6c:dc:ef:1b:08:70:16:b0:52:23:66:bf:66:96:2f: 01:c4:18:ee:fb:99:87:03:db:71:3c:61:a5:40:47: ba:ea:c9:4c:7a:4e:e4:02:90:b4:37:f3:f4:55:8b: 81:d2:0a:bc:e8:48:90:c4:8b:9d:2c:91:ce:30:65: cd:e3:a7:2a:d5:07:1e:06:38:a1:80:d6:07:87:ef: 30:0c:21:eb:46:f0:fd:0d:5f:d1:2f:76:13:23:3a: 5c:34:be:8a:d0:e3:36:8a:fb:45:77:7c:f7:c9:68: 99:71:43:90:a0:12:15:c0:24:10:36:e9:08:12:92: 77:5d:3c:55:15:49:cc:41:8a:15:b5:4e:52:9c:ef: e1:65:06:b3:66:71:ed:d3:04:95:55:f7:53:95:16: 9e:e3:4c:b3:3f:b8:58:a8:94:05:b7:a1:bd:3f:f9: 5c:96:fa:c1:1b:1a:0a:43:bb:9f:87:da:1d:66:06: 16:a5:09:06:86:06:a4:9c:dc:82:be:a4:41:13:64: 32:0c:ea:ce:3a:0f:d6:d5:46:0a:c6:33:a0:bd:0a: cd:54:ff:32:ec:22:e0:5d:d4:36:4b:f5:d2:79:12: d9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:CC:1D:15:27:76:9F:15:6D:CE:F9:9C:62:B9:6D:5F:83:75:35:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9ffad9b7-e774-3db4-ad67-e0c56d3594e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:2eda::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:7d:32:3f:3a:6f:04:f9:a9:01:68:1b:b5:07:a1:d5:98:72: a8:76:28:75:f1:ec:34:f3:2c:f6:97:99:32:11:91:de:4f:69: fc:a1:8b:4e:9b:29:ed:08:0f:bc:e0:33:5b:23:fd:5a:f0:0c: 3c:04:5d:52:1e:b6:1f:aa:cd:ad:ee:7c:5a:80:98:14:2e:37: ba:87:d7:a6:da:80:b2:ee:5c:9f:60:1a:47:26:4a:3d:88:90: 2a:95:a4:c3:26:08:ce:1a:d5:41:2d:4f:78:b9:d3:e6:26:a2: 45:72:b1:06:9b:3c:85:ac:2a:70:a1:44:26:40:f8:9f:88:3b: 49:17:e1:59:d1:9b:25:c9:9a:8c:4e:1f:14:8c:cd:42:ea:39: af:2f:43:ff:20:90:e4:bc:e6:53:fc:5d:82:83:19:27:b9:2e: 69:c5:a3:51:de:6e:9b:5e:1a:6a:c4:b9:af:c7:1f:6a:48:08: 9f:17:98:1f:0d:02:41:f6:6f:fa:5c:54:d7:c8:8d:8a:84:89: 7d:d3:67:bf:f1:07:83:c7:83:22:db:12:20:1a:83:7a:69:22: 86:23:b8:8a:60:e6:1c:42:3a:48:61:22:f3:d3:db:55:71:92: 78:e6:26:ae:be:76:54:04:2b:de:f4:d2:d1:63:d9:69:95:2a: 72:e2:29:aa -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuy+BmjcFGxL6yC/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk OTZkZThmOTItYjc2Ny00ZTE4LWJmYzQtYjc1MTdlNzBlOTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZE9WFVq2JbpNtHlqoXliZ9Ea95m9hIwsw5e aSxs3O8bCHAWsFIjZr9mli8BxBju+5mHA9txPGGlQEe66slMek7kApC0N/P0VYuB 0gq86EiQxIudLJHOMGXN46cq1QceBjihgNYHh+8wDCHrRvD9DV/RL3YTIzpcNL6K 0OM2ivtFd3z3yWiZcUOQoBIVwCQQNukIEpJ3XTxVFUnMQYoVtU5SnO/hZQazZnHt 0wSVVfdTlRae40yzP7hYqJQFt6G9P/lclvrBGxoKQ7ufh9odZgYWpQkGhgaknNyC vqRBE2QyDOrOOg/W1UYKxjOgvQrNVP8y7CLgXdQ2S/XSeRLZFwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ3MHRUndp8Vbc75nGK5bV+DdTUxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOWZmYWQ5YjctZTc3NC0z ZGI0LWFkNjctZTBjNTZkMzU5NGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAi7a MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHJ9Mj86bwT5qQFoG7UHodWYcqh2KHXx7DTzLPaXmTIRkd5Pafyh i06bKe0ID7zgM1sj/VrwDDwEXVIeth+qza3ufFqAmBQuN7qH16bagLLuXJ9gGkcm Sj2IkCqVpMMmCM4a1UEtT3i50+YmokVysQabPIWsKnChRCZA+J+IO0kX4VnRmyXJ moxOHxSMzULqOa8vQ/8gkOS85lP8XYKDGSe5LmnFo1HebpteGmrEua/HH2pICJ8X mB8NAkH2b/pcVNfIjYqEiX3TZ7/xB4PHgyLbEiAag3ppIoYjuIpg5hxCOkhhIvPT 21VxknjmJq6+dlQEK9700tFj2WmVKnLiKao= -----END CERTIFICATE-----Generated at Tue Nov 4 23:35:16 2025 by rpki-client