$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e1823ada-d7ac-36b8-a237-4bd895db50d8.roa File: e1823ada-d7ac-36b8-a237-4bd895db50d8.roa (raw, json) Hash identifier: D/qTHw5a0rnroAnWAXm2N+j3sUe9Z1PZww5mx89Kb7I= Subject key identifier: 11:4C:D7:77:72:7C:C1:60:9A:F9:E7:2A:39:42:DD:C1:D8:84:9C:B6 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584BB2F81E08D9AE9D898AC28980 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e1823ada-d7ac-36b8-a237-4bd895db50d8.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 397222 IP address blocks: 2001:502:ad09::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f8:1e:08:d9:ae:9d:89:8a:c2:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=4d8e8bd8-9d69-4637-b5bc-e70b4c5e1094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:19:f0:6a:06:d3:83:33:df:eb:35:a1:88:45: b4:97:6c:25:45:9c:f6:3c:4d:96:0a:c6:a1:d0:17: a6:3a:d0:b9:78:75:f3:1b:a7:31:9e:2b:5c:7e:27: 27:73:dc:c5:63:e4:82:34:b3:3f:fc:34:a9:ff:09: c3:dc:cd:75:7f:a5:76:29:25:c6:8b:bd:ed:c5:d5: f2:22:d7:5e:e3:10:f1:b3:34:55:8e:d9:76:6a:b6: 93:29:5e:5f:54:06:10:06:9e:2d:65:e8:04:94:cf: c4:a5:73:44:42:b0:60:1a:68:21:af:cd:25:c8:7f: 83:52:c1:e0:98:df:3b:c1:79:fb:bd:05:59:b0:03: 7e:bf:76:01:46:77:cf:04:42:0d:ea:c1:b3:53:54: 93:14:54:28:e0:cc:41:0e:0b:fa:1c:39:b2:35:ee: ad:e5:0e:08:38:6b:fc:df:9a:5f:6a:7c:86:bf:02: f7:0f:6a:78:12:01:ff:75:78:4e:65:c2:ed:b1:df: 46:34:91:0b:09:7a:68:cf:c4:9d:6a:40:38:bd:b1: 5b:35:96:57:92:a3:a8:97:f8:ab:17:03:28:47:e5: fb:fe:73:5a:98:24:fd:25:15:40:ba:c7:64:c6:ae: 60:8d:a8:6b:e9:44:a8:ac:65:c3:ba:50:58:fb:3a: 81:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:4C:D7:77:72:7C:C1:60:9A:F9:E7:2A:39:42:DD:C1:D8:84:9C:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e1823ada-d7ac-36b8-a237-4bd895db50d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:ad09::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:3f:d8:90:66:05:f3:ca:8c:07:94:a9:d3:7a:2a:69:15:1a: 60:f1:a2:fd:90:5c:55:a2:50:62:98:7b:85:db:87:c0:67:f2: e0:6a:e7:5b:3b:0a:a4:16:7a:c1:83:65:a9:60:9e:e1:73:9c: 2c:d8:dc:11:2d:53:14:97:d7:99:da:e2:11:73:16:94:15:66: d9:fe:00:4e:12:0c:d8:9e:f1:be:39:cf:96:5d:02:74:06:47: 2d:c1:59:15:43:95:aa:49:72:5a:ad:39:70:6a:c4:d2:4c:19: f9:b9:07:24:cc:67:ac:d2:b6:2d:cf:29:64:b8:86:0e:30:c6: 67:36:fa:b4:10:c5:0c:da:fa:f8:af:99:b2:33:70:6f:3c:ff: ef:82:e4:3d:31:af:15:67:d7:77:fc:1a:74:54:7e:c8:d1:e8: aa:f4:c3:b9:20:21:98:33:cd:68:0a:5d:47:73:60:ab:71:fa: 68:d4:36:06:0d:d9:1b:de:8a:7d:dc:95:0b:2d:66:8c:6f:80: 82:f4:2b:18:c0:47:f8:62:8d:db:91:63:c4:7b:0e:e3:ca:99: 7d:51:6e:ba:19:4c:0c:22:d6:c7:0d:23:55:51:5f:16:30:d4: ac:26:41:d3:80:e2:b7:f8:ac:84:82:9d:e3:f3:a9:cf:f7:38: 08:dc:1a:3a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuy+B4I2a6diYrCiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk NGQ4ZThiZDgtOWQ2OS00NjM3LWI1YmMtZTcwYjRjNWUxMDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhnwagbTgzPf6zWhiEW0l2wlRZz2PE2WCsah 0BemOtC5eHXzG6cxnitcficnc9zFY+SCNLM//DSp/wnD3M11f6V2KSXGi73txdXy Itde4xDxszRVjtl2araTKV5fVAYQBp4tZegElM/EpXNEQrBgGmghr80lyH+DUsHg mN87wXn7vQVZsAN+v3YBRnfPBEIN6sGzU1STFFQo4MxBDgv6HDmyNe6t5Q4IOGv8 35pfanyGvwL3D2p4EgH/dXhOZcLtsd9GNJELCXpoz8SdakA4vbFbNZZXkqOol/ir FwMoR+X7/nNamCT9JRVAusdkxq5gjahr6USorGXDulBY+zqBIwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBFM13dyfMFgmvnnKjlC3cHYhJy2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZTE4MjNhZGEtZDdhYy0z NmI4LWEyMzctNGJkODk1ZGI1MGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAq0J MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG8/2JBmBfPKjAeUqdN6KmkVGmDxov2QXFWiUGKYe4Xbh8Bn8uBq 51s7CqQWesGDZalgnuFznCzY3BEtUxSX15na4hFzFpQVZtn+AE4SDNie8b45z5Zd AnQGRy3BWRVDlapJclqtOXBqxNJMGfm5ByTMZ6zSti3PKWS4hg4wxmc2+rQQxQza +vivmbIzcG88/++C5D0xrxVn13f8GnRUfsjR6Kr0w7kgIZgzzWgKXUdzYKtx+mjU NgYN2Rvein3clQstZoxvgIL0KxjAR/hijduRY8R7DuPKmX1RbroZTAwi1scNI1VR XxYw1KwmQdOA4rf4rISCnePzqc/3OAjcGjo= -----END CERTIFICATE-----Generated at Wed Nov 5 12:15:47 2025 by rpki-client