$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/2403fe1f-aff1-3ce3-aa85-cff51a2b67c4.roa File: 2403fe1f-aff1-3ce3-aa85-cff51a2b67c4.roa (raw, json) Hash identifier: nGh0lo93SL1wAt8uOMCmPiTNZbu3g7Qw2kOxENPzxDk= Subject key identifier: 58:B2:29:BD:FE:BD:B6:28:24:5B:18:C0:46:95:7B:D5:CF:E0:5C:FB Certificate issuer: /CN=53d9715a-5edc-4d9f-a9a2-830a16826131 Certificate serial: 010D0C9F4328584ADECBA919EA74614BC76DDA80 Authority key identifier: 67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/2403fe1f-aff1-3ce3-aa85-cff51a2b67c4.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 62787 IP address blocks: 2602:f6d0:e8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:a9:19:ea:74:61:4b:c7:6d:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53d9715a-5edc-4d9f-a9a2-830a16826131 Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=fb533ff8-54a5-4e16-9cdc-e0a09f5ed888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:94:26:07:2f:bb:92:bc:7d:d4:a2:0c:5b:67: 99:cb:fa:32:95:17:53:cf:eb:eb:97:0b:b4:36:a9: c9:1f:2f:4b:9e:cc:23:99:a7:ed:07:25:b2:74:0c: ef:d7:62:be:b0:6c:70:14:2d:db:ab:73:7a:4d:77: f6:61:aa:ff:0a:3e:0d:6c:f4:bd:00:31:ee:eb:ea: 14:90:f4:be:cb:2b:e6:b7:56:eb:5a:a9:c1:b7:ab: 58:92:a7:54:9d:db:28:5c:56:70:16:7f:98:46:ff: b5:30:e5:14:56:07:97:25:b9:86:ce:d1:ea:1d:15: 2d:d5:ed:2d:4c:44:44:2a:b7:80:d8:42:bc:e0:fa: a3:0f:ec:46:04:56:60:49:f2:36:1d:53:98:11:e7: 78:4b:85:73:79:08:fd:a8:c5:e0:f4:b4:01:7d:59: 72:fb:4e:af:d8:8a:9b:0a:d8:08:a2:da:42:2c:29: 84:25:84:06:de:a4:ea:ca:51:f5:07:ad:39:93:e8: 8c:5e:2d:47:c2:1c:c0:31:fb:47:f7:1d:d3:32:ec: eb:ee:bb:a8:c7:33:0b:97:97:aa:63:50:2f:fc:60: 5b:7d:cc:e9:f3:b1:ba:7c:4f:96:71:3e:89:00:bd: f9:da:60:cd:6d:dd:a5:31:b8:88:60:fb:f1:3b:57: 1b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:B2:29:BD:FE:BD:B6:28:24:5B:18:C0:46:95:7B:D5:CF:E0:5C:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/2403fe1f-aff1-3ce3-aa85-cff51a2b67c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl X509v3 Authority Key Identifier: keyid:67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer sbgp-ipAddrBlock: critical IPv6: 2602:f6d0:e8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:21:b5:a2:a4:6f:40:ae:e5:d8:c5:cb:f1:fd:73:b4:71:31: 31:c1:15:f7:b4:6e:9e:18:b2:56:8f:7b:98:68:56:fa:16:25: f9:60:f7:ca:8e:39:b2:5b:0a:60:0d:38:3a:91:80:cd:67:6c: 95:d7:66:e6:3e:0a:fb:db:57:d7:57:6b:d0:f8:f6:d2:c1:0a: 4c:18:ea:34:85:34:00:29:16:5d:76:85:d9:66:08:99:40:e9: 95:a8:99:8a:f1:68:1a:f4:71:10:aa:bd:66:54:97:e5:d1:9d: 03:d7:42:ac:16:c0:24:0a:71:f3:5a:1c:3c:8f:43:a3:62:a0: f9:31:8e:1f:be:3e:a7:27:ac:44:4f:4e:31:79:39:eb:77:86: 5e:ff:7b:8a:f5:9a:d3:0b:4b:72:25:7d:c3:11:cc:06:6a:d9: 49:a5:6f:ea:64:5b:61:a6:c2:52:b9:e5:c6:43:ce:52:7c:54: af:88:3b:f5:19:fe:d6:16:b4:6f:3b:0d:64:7a:7a:e1:76:0b: 53:e8:25:1d:07:5a:9f:8c:0d:87:9a:28:96:7d:36:c0:10:a6: d2:f8:1c:a3:17:31:52:67:d1:c6:ba:f6:2b:5a:2c:64:a6:36: 76:be:d4:9d:3d:9d:ac:29:4d:e3:ab:d6:08:f3:a3:2a:d3:e9: e9:9d:8b:c4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErey6kZ6nRhS8dt2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNkOTcxNWEtNWVkYy00ZDlmLWE5YTItODMwYTE2ODI2 MTMxMB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk ZmI1MzNmZjgtNTRhNS00ZTE2LTljZGMtZTBhMDlmNWVkODg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJQmBy+7krx91KIMW2eZy/oylRdTz+vrlwu0 NqnJHy9LnswjmaftByWydAzv12K+sGxwFC3bq3N6TXf2Yar/Cj4NbPS9ADHu6+oU kPS+yyvmt1brWqnBt6tYkqdUndsoXFZwFn+YRv+1MOUUVgeXJbmGztHqHRUt1e0t TEREKreA2EK84PqjD+xGBFZgSfI2HVOYEed4S4VzeQj9qMXg9LQBfVly+06v2Iqb CtgIotpCLCmEJYQG3qTqylH1B605k+iMXi1HwhzAMftH9x3TMuzr7ruoxzMLl5eq Y1Av/GBbfczp87G6fE+WcT6JAL352mDNbd2lMbiIYPvxO1cbcQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFiyKb3+vbYoJFsYwEaVe9XP4Fz7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81M2Q5 NzE1YS01ZWRjLTRkOWYtYTlhMi04MzBhMTY4MjYxMzEvMjQwM2ZlMWYtYWZmMS0z Y2UzLWFhODUtY2ZmNTFhMmI2N2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNTNkOTcxNWEtNWVkYy00ZDlmLWE5 YTItODMwYTE2ODI2MTMxLzUzZDk3MTVhLTVlZGMtNGQ5Zi1hOWEyLTgzMGExNjgy NjEzMS5jcmwwHwYDVR0jBBgwFoAUZwucipDtk9MgM+wjN5eQ+ihFt5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81M2Q5NzE1YS01ZWRjLTRkOWYtYTlhMi04MzBh MTY4MjYxMzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL20ADo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFMhtaKkb0Cu5djFy/H9c7RxMTHBFfe0bp4YslaPe5hoVvoWJflg 98qOObJbCmANODqRgM1nbJXXZuY+CvvbV9dXa9D49tLBCkwY6jSFNAApFl12hdlm CJlA6ZWomYrxaBr0cRCqvWZUl+XRnQPXQqwWwCQKcfNaHDyPQ6NioPkxjh++Pqcn rERPTjF5Oet3hl7/e4r1mtMLS3IlfcMRzAZq2Umlb+pkW2GmwlK55cZDzlJ8VK+I O/UZ/tYWtG87DWR6euF2C1PoJR0HWp+MDYeaKJZ9NsAQptL4HKMXMVJn0ca69ita LGSmNna+1J09nawpTeOr1gjzoyrT6emdi8Q= -----END CERTIFICATE-----Generated at Sun Aug 24 07:10:56 2025 by rpki-client