$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a8303ebc-039e-305e-a2d8-95ea84c6d3d3.roa File: a8303ebc-039e-305e-a2d8-95ea84c6d3d3.roa (raw, json) Hash identifier: Uja5jnJr5jbiqG9YhiX19Ow+E+vleem1paVOcgeLh2I= Subject key identifier: 08:8D:7E:8A:5A:C6:F7:53:37:C2:65:90:00:61:7D:E0:0F:D1:EA:26 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584BB2F825A4125C04A6ECC96280 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a8303ebc-039e-305e-a2d8-95ea84c6d3d3.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 397240 IP address blocks: 2001:503:e239::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f8:25:a4:12:5c:04:a6:ec:c9:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=3b1667f5-cca1-4416-a9ff-ae3c8fa34e81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9e:5b:ce:b3:f9:99:22:81:14:ef:67:39:8e: 92:05:36:7f:db:1a:84:c5:27:7e:8e:b9:3a:b8:b4: f7:e3:d5:cd:b9:df:12:2e:14:b5:f4:48:16:30:0c: 4a:8e:35:75:08:af:77:1f:6d:74:d7:12:71:95:f6: b1:8c:63:aa:52:c0:35:3c:5e:c1:19:1f:cd:7c:83: 66:11:c2:45:24:94:3d:4e:14:48:1a:4c:87:ec:05: 91:d4:7e:68:03:c8:e2:64:39:b6:9f:be:a2:24:4c: 40:b8:77:5a:22:c1:25:20:60:94:57:c3:28:4c:4c: 2d:cf:44:6f:44:19:7a:a8:80:da:3a:53:cd:a2:02: 35:6b:c8:e7:c1:91:0b:59:e7:09:a3:de:0a:0e:6c: 8f:64:f1:1d:6c:1f:f9:b4:10:7a:b2:be:58:0a:d8: 29:a6:ca:aa:37:cb:11:28:bb:5d:ce:04:a7:5f:c5: 9c:b6:39:b3:55:5e:e3:68:94:06:47:ab:39:a9:1d: 08:45:14:23:ea:cc:a2:08:c5:3e:c1:ed:cf:e6:41: 1a:d9:c5:72:71:1b:2d:17:65:56:86:af:50:f7:f1: b5:59:e7:78:5d:ec:1e:9d:fb:af:1a:92:24:4b:03: 41:0e:40:89:98:69:8f:d7:d5:02:50:cc:ae:d5:87: 43:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:8D:7E:8A:5A:C6:F7:53:37:C2:65:90:00:61:7D:E0:0F:D1:EA:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a8303ebc-039e-305e-a2d8-95ea84c6d3d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:e239::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:4e:aa:d2:d2:d3:71:d1:36:d6:50:bc:82:fd:73:73:da:2b: 91:4d:4b:0f:a8:79:3c:f4:13:46:fe:f8:ba:a7:e1:04:90:4f: ec:1e:0e:36:4f:c1:0d:a6:dc:51:55:55:74:f7:f5:50:21:46: 99:53:46:19:21:9d:94:14:12:e7:46:94:d3:c1:15:00:b2:28: 8c:fe:ed:6c:6d:a7:03:37:8e:f9:53:ac:e1:9d:53:ff:4e:ec: 86:06:2c:61:4b:a3:73:fc:ae:d1:cc:35:bc:52:d2:db:88:03: dc:d3:b6:17:59:77:21:f0:31:0f:74:56:16:0e:be:30:a1:10: ba:ae:89:17:e9:6b:8b:62:cc:e2:d2:cb:47:67:d4:56:d1:31: f1:c3:d9:dc:cf:c4:f7:7b:91:79:d1:76:55:52:f7:3b:f5:ff: 0e:bf:20:d6:64:d7:4d:95:56:f2:72:7a:0a:ce:96:ed:29:7d: 88:16:5e:c5:d1:1d:96:b9:3c:78:90:d4:61:00:d3:61:0c:ae: 20:d3:af:9a:10:ad:de:bc:4b:9b:d1:b2:2f:80:39:d5:11:8f: 37:87:41:a6:32:9f:97:70:43:ad:a1:8b:ab:b0:aa:5c:52:b2: fa:3d:70:5b:bd:02:2b:ac:85:e1:cd:69:78:09:43:e3:aa:c6: dc:48:72:5c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuy+CWkElwEpuzJYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk M2IxNjY3ZjUtY2NhMS00NDE2LWE5ZmYtYWUzYzhmYTM0ZTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwp5bzrP5mSKBFO9nOY6SBTZ/2xqExSd+jrk6 uLT349XNud8SLhS19EgWMAxKjjV1CK93H2101xJxlfaxjGOqUsA1PF7BGR/NfINm EcJFJJQ9ThRIGkyH7AWR1H5oA8jiZDm2n76iJExAuHdaIsElIGCUV8MoTEwtz0Rv RBl6qIDaOlPNogI1a8jnwZELWecJo94KDmyPZPEdbB/5tBB6sr5YCtgppsqqN8sR KLtdzgSnX8WctjmzVV7jaJQGR6s5qR0IRRQj6syiCMU+we3P5kEa2cVycRstF2VW hq9Q9/G1Wed4XewenfuvGpIkSwNBDkCJmGmP19UCUMyu1YdDpwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAiNfopaxvdTN8JlkABhfeAP0eomMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYTgzMDNlYmMtMDM5ZS0z MDVlLWEyZDgtOTVlYTg0YzZkM2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA+I5 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGVOqtLS03HRNtZQvIL9c3PaK5FNSw+oeTz0E0b++Lqn4QSQT+we DjZPwQ2m3FFVVXT39VAhRplTRhkhnZQUEudGlNPBFQCyKIz+7WxtpwM3jvlTrOGd U/9O7IYGLGFLo3P8rtHMNbxS0tuIA9zTthdZdyHwMQ90VhYOvjChELquiRfpa4ti zOLSy0dn1FbRMfHD2dzPxPd7kXnRdlVS9zv1/w6/INZk102VVvJyegrOlu0pfYgW XsXRHZa5PHiQ1GEA02EMriDTr5oQrd68S5vRsi+AOdURjzeHQaYyn5dwQ62hi6uw qlxSsvo9cFu9AiusheHNaXgJQ+OqxtxIclw= -----END CERTIFICATE-----Generated at Wed Nov 5 01:08:45 2025 by rpki-client