$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/52f9b7f8-1c42-33d8-aeb7-f2c6bdb6543f.roa File: 52f9b7f8-1c42-33d8-aeb7-f2c6bdb6543f.roa (raw, json) Hash identifier: L4cdawJtjRKJwl+tUG59GioZ0U/O361G8vKpAvAzONs= Subject key identifier: 66:DB:3D:4C:AC:86:E0:85:1E:DB:05:7A:62:23:E5:B6:9E:37:D6:42 Certificate issuer: /CN=369643f4-a849-4a0c-af2a-677957de74bc Certificate serial: 010D0C9F4328584AF256796864EBB19A612C2460 Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/52f9b7f8-1c42-33d8-aeb7-f2c6bdb6543f.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 211169 IP address blocks: 2602:ffc5:168::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:79:68:64:eb:b1:9a:61:2c:24:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=bfdb0dac-4416-4d51-8341-e806e10154fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:58:a1:2b:eb:9e:60:94:86:fe:4a:2c:81:53: 24:47:b6:e1:1c:73:fc:04:0e:01:7c:da:37:81:6e: 3b:05:84:25:a0:9c:4a:8c:bf:f7:83:f4:e2:46:ba: 3b:08:a9:bd:62:4c:92:98:d7:a6:4a:1a:e0:88:b8: b8:8d:0b:2d:c6:fc:ac:0c:b6:22:e1:b8:a2:8b:46: cb:dd:8c:94:8f:9a:85:6d:69:76:c9:7b:33:f7:91: 6a:aa:3a:f3:17:5b:91:62:2b:53:76:81:67:db:79: 45:35:83:b4:1f:1d:93:c1:2e:d4:a2:29:98:8e:20: 19:f6:ac:60:5c:fc:88:11:81:e7:ea:fb:ee:06:26: a2:db:62:fe:de:a5:06:13:fc:87:91:b1:12:36:06: 61:56:e3:db:c7:c7:0a:70:1b:bc:af:89:33:7b:d8: 7f:3f:87:7b:1d:e3:86:21:a7:89:36:02:1c:76:b5: d6:17:d3:17:d1:08:31:84:9d:57:ab:7c:6c:30:dd: 4c:2f:b9:42:57:0c:bd:62:33:43:f5:0e:a9:0e:5d: 8d:91:e9:33:b0:0d:c5:aa:b5:ca:7f:22:9f:1b:f7: d0:6e:b1:f2:1d:20:5e:60:97:c1:b6:e4:e4:39:6f: 84:6d:2d:b3:d5:37:6b:8a:3d:1f:d2:35:bd:44:f3: e6:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:DB:3D:4C:AC:86:E0:85:1E:DB:05:7A:62:23:E5:B6:9E:37:D6:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/52f9b7f8-1c42-33d8-aeb7-f2c6bdb6543f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl X509v3 Authority Key Identifier: keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer sbgp-ipAddrBlock: critical IPv6: 2602:ffc5:168::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:d3:8a:8b:56:73:cb:ec:ef:00:bf:b7:03:6b:e5:29:38:fd: 3c:89:07:56:48:5c:a2:6e:d4:70:2e:69:c4:92:f5:71:91:b1: 53:55:d4:c6:da:6e:ad:de:65:6c:c3:70:e4:39:3c:5c:5a:4d: 16:32:ab:b0:d4:34:e2:00:96:d0:30:a1:9b:d3:14:86:d4:b0: 48:ee:44:83:b1:4c:20:7a:30:86:08:9d:45:4c:d8:68:02:9f: 44:7b:2c:ec:a0:13:d8:62:b6:01:59:03:80:e6:59:25:5b:3a: 33:2a:f0:d7:0d:c9:f7:9e:94:95:89:aa:a5:aa:78:0d:4d:cd: 31:15:a0:99:45:04:ff:08:da:dd:9a:ce:62:e9:af:f1:82:60: 36:2c:37:38:30:5e:54:5d:d1:ec:aa:d6:80:0b:39:a1:8f:0d: 28:c5:57:4a:4f:89:e2:54:bc:bd:94:26:5d:24:9d:25:c1:60: 7c:66:22:c1:f8:5f:e9:47:75:f4:cb:ae:ce:a5:0c:9d:7f:e6: 91:c1:69:73:e0:6b:77:46:30:0b:a8:7a:74:b4:ac:c2:25:f4: 41:45:60:4c:32:77:a0:1f:85:84:54:ad:58:84:29:07:9d:ff: f8:7b:67:9f:ba:29:ce:4c:f9:85:5b:8d:43:6e:17:f5:4d:15: 6e:98:a4:51 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEryVnloZOuxmmEsJGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY5NjQzZjQtYTg0OS00YTBjLWFmMmEtNjc3OTU3ZGU3 NGJjMB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk YmZkYjBkYWMtNDQxNi00ZDUxLTgzNDEtZTgwNmUxMDE1NGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFihK+ueYJSG/kosgVMkR7bhHHP8BA4BfNo3 gW47BYQloJxKjL/3g/TiRro7CKm9YkySmNemShrgiLi4jQstxvysDLYi4biii0bL 3YyUj5qFbWl2yXsz95FqqjrzF1uRYitTdoFn23lFNYO0Hx2TwS7UoimYjiAZ9qxg XPyIEYHn6vvuBiai22L+3qUGE/yHkbESNgZhVuPbx8cKcBu8r4kze9h/P4d7HeOG IaeJNgIcdrXWF9MX0QgxhJ1Xq3xsMN1ML7lCVwy9YjND9Q6pDl2NkekzsA3FqrXK fyKfG/fQbrHyHSBeYJfBtuTkOW+EbS2z1Tdrij0f0jW9RPPmkwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGbbPUyshuCFHtsFemIj5baeN9ZCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2 NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5NTdkZTc0YmMvNTJmOWI3ZjgtMWM0Mi0z M2Q4LWFlYjctZjJjNmJkYjY1NDNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY5NjQzZjQtYTg0OS00YTBjLWFm MmEtNjc3OTU3ZGU3NGJjLzM2OTY0M2Y0LWE4NDktNGEwYy1hZjJhLTY3Nzk1N2Rl NzRiYy5jcmwwHwYDVR0jBBgwFoAUeE6WxYfl6+Xkw5CXV0KgfPfdnKkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5 NTdkZTc0YmMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJgL/xQFo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ/TiotWc8vs7wC/twNr5Sk4/TyJB1ZIXKJu1HAuacSS9XGRsVNV 1Mbabq3eZWzDcOQ5PFxaTRYyq7DUNOIAltAwoZvTFIbUsEjuRIOxTCB6MIYInUVM 2GgCn0R7LOygE9hitgFZA4DmWSVbOjMq8NcNyfeelJWJqqWqeA1NzTEVoJlFBP8I 2t2azmLpr/GCYDYsNzgwXlRd0eyq1oALOaGPDSjFV0pPieJUvL2UJl0knSXBYHxm IsH4X+lHdfTLrs6lDJ1/5pHBaXPga3dGMAuoenS0rMIl9EFFYEwyd6AfhYRUrViE KQed//h7Z5+6Kc5M+YVbjUNuF/VNFW6YpFE= -----END CERTIFICATE-----Generated at Sat Aug 23 23:46:20 2025 by rpki-client