$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/3d7c3eff-2ea6-36cd-8adf-94c767930e79.roa File: 3d7c3eff-2ea6-36cd-8adf-94c767930e79.roa (raw, json) Hash identifier: eHdYicTsJ1qVb/8+wmjkzR6Y1jHYBNhRbWj21U/GLlo= Subject key identifier: 48:B0:93:74:56:D0:82:8B:1A:1C:2A:9C:2E:CF:D7:89:02:CB:4A:C0 Certificate issuer: /CN=18a928eb-48a5-4560-a217-36cb1ea32648 Certificate serial: 010D0C9F4328584B2CF6ED49C6715830A40BCF00 Authority key identifier: F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/3d7c3eff-2ea6-36cd-8adf-94c767930e79.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 63150 IP address blocks: 2602:f988:88::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:ed:49:c6:71:58:30:a4:0b:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18a928eb-48a5-4560-a217-36cb1ea32648 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=1bf31bc1-a566-49f5-9cc3-a4178bc59f9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:46:49:05:21:c6:e3:53:9a:e8:61:4d:28:42: f1:57:2e:22:61:e5:fc:7e:a7:e2:6c:73:3e:13:12: be:c4:3f:b2:0f:e6:69:8b:ad:64:38:7c:25:f5:c1: 1b:8e:92:5d:8a:aa:c1:a3:c5:f3:98:21:c4:a6:75: 0b:51:09:d0:85:06:0d:fc:b4:53:ad:23:cc:96:35: 1e:aa:54:99:e0:68:39:ea:8b:97:ee:1e:3f:15:ca: 4d:64:b3:1d:0e:0c:05:de:25:ed:f9:bb:11:b8:0d: 4f:ba:7c:a9:41:75:d6:c6:26:f5:34:ad:ac:cc:ab: f2:73:37:45:03:05:08:0e:68:a8:f7:8b:4a:82:97: 8b:10:23:8c:ec:7e:37:d2:98:fe:fe:69:f7:5f:2c: f4:d4:e5:0d:96:64:1b:e5:db:7a:23:17:7c:d4:97: 14:44:31:0c:70:09:6f:98:f9:34:59:00:6e:4d:2f: 1b:0f:00:b4:44:ab:7d:7f:a2:8d:40:10:91:fe:6d: d4:19:b0:55:35:60:7c:9f:65:35:1c:94:12:7e:d9: f4:e9:9e:b0:1c:88:1d:50:88:98:80:f0:97:78:d5: 83:b7:a2:5a:42:94:21:a8:ce:2a:77:2e:be:32:45: cd:e4:ff:42:4b:9a:e2:32:87:cf:d9:65:f1:07:03: 68:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:B0:93:74:56:D0:82:8B:1A:1C:2A:9C:2E:CF:D7:89:02:CB:4A:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/3d7c3eff-2ea6-36cd-8adf-94c767930e79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl X509v3 Authority Key Identifier: keyid:F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer sbgp-ipAddrBlock: critical IPv6: 2602:f988:88::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:ea:30:52:67:18:c1:a6:d0:2e:c9:0b:e0:cb:e8:86:14:cd: a2:9f:d3:98:1c:9e:51:d3:a2:bc:e9:d1:9f:8a:16:6f:7b:89: e9:5e:3c:14:af:77:d9:78:2f:32:dd:63:9a:7b:18:d0:b0:59: ec:ee:0a:46:ca:c0:22:b6:0f:08:77:17:ad:05:9b:6e:2c:67: ba:8a:55:2e:f3:11:03:c4:f2:d3:29:fa:59:c7:e7:5f:85:40: bd:64:6a:2e:b1:01:69:f2:e2:c6:4e:ab:20:30:ba:fb:32:80: e8:48:da:30:a2:da:42:da:74:2b:f1:4d:4e:ff:51:3e:f4:5f: c8:0c:ff:61:3e:64:9f:88:1e:e3:67:02:87:97:d5:df:22:f4: 1e:a8:f4:a7:28:30:5c:d5:ec:fc:10:3d:64:5c:89:21:e1:d6: 78:75:1c:b2:dd:b8:25:82:c5:37:bf:33:7b:41:34:14:d8:e2: dc:4e:5e:ef:89:53:26:49:0f:cf:4f:90:f4:0e:7b:70:9c:c5: 35:3c:85:ac:c6:e2:6a:65:0e:64:f0:8d:e2:2f:0a:9f:bb:8e: d6:6c:52:53:8c:9d:be:7b:25:70:b7:e7:09:05:56:99:13:ca: 90:df:ad:2f:ad:60:a9:ed:83:d0:5a:b0:5b:3a:88:ba:d1:c1: 68:46:b7:e0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEss9u1JxnFYMKQLzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMThhOTI4ZWItNDhhNS00NTYwLWEyMTctMzZjYjFlYTMy NjQ4MB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk MWJmMzFiYzEtYTU2Ni00OWY1LTljYzMtYTQxNzhiYzU5ZjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEZJBSHG41Oa6GFNKELxVy4iYeX8fqfibHM+ ExK+xD+yD+Zpi61kOHwl9cEbjpJdiqrBo8XzmCHEpnULUQnQhQYN/LRTrSPMljUe qlSZ4Gg56ouX7h4/FcpNZLMdDgwF3iXt+bsRuA1PunypQXXWxib1NK2szKvyczdF AwUIDmio94tKgpeLECOM7H430pj+/mn3Xyz01OUNlmQb5dt6Ixd81JcURDEMcAlv mPk0WQBuTS8bDwC0RKt9f6KNQBCR/m3UGbBVNWB8n2U1HJQSftn06Z6wHIgdUIiY gPCXeNWDt6JaQpQhqM4qdy6+MkXN5P9CS5riMofP2WXxBwNoRwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEiwk3RW0IKLGhwqnC7P14kCy0rAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xOGE5 MjhlYi00OGE1LTQ1NjAtYTIxNy0zNmNiMWVhMzI2NDgvM2Q3YzNlZmYtMmVhNi0z NmNkLThhZGYtOTRjNzY3OTMwZTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMThhOTI4ZWItNDhhNS00NTYwLWEy MTctMzZjYjFlYTMyNjQ4LzE4YTkyOGViLTQ4YTUtNDU2MC1hMjE3LTM2Y2IxZWEz MjY0OC5jcmwwHwYDVR0jBBgwFoAU9H6x3C6P5f0Uj3qixMZGdbQwqzgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xOGE5MjhlYi00OGE1LTQ1NjAtYTIxNy0zNmNi MWVhMzI2NDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5iACI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGbqMFJnGMGm0C7JC+DL6IYUzaKf05gcnlHTorzp0Z+KFm97iele PBSvd9l4LzLdY5p7GNCwWezuCkbKwCK2Dwh3F60Fm24sZ7qKVS7zEQPE8tMp+lnH 51+FQL1kai6xAWny4sZOqyAwuvsygOhI2jCi2kLadCvxTU7/UT70X8gM/2E+ZJ+I HuNnAoeX1d8i9B6o9KcoMFzV7PwQPWRciSHh1nh1HLLduCWCxTe/M3tBNBTY4txO Xu+JUyZJD89PkPQOe3CcxTU8hazG4mplDmTwjeIvCp+7jtZsUlOMnb57JXC35wkF VpkTypDfrS+tYKntg9BasFs6iLrRwWhGt+A= -----END CERTIFICATE-----Generated at Mon Oct 20 02:14:24 2025 by rpki-client