$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/8a33a951-e355-313c-9b36-7f71a8dc82c0.roa File: 8a33a951-e355-313c-9b36-7f71a8dc82c0.roa (raw, json) Hash identifier: JHgfxuwvKgl2LjQMGeQZbFjTWKPvi4rm+h4qGW215ng= Subject key identifier: 2C:1B:AF:6F:3A:9B:47:D4:9E:27:AB:BF:A9:46:E9:D4:7C:E2:42:C7 Certificate issuer: /CN=48c4aba6-5e67-450a-b4a4-647523380d01 Certificate serial: 010D0C9F4328584AEB8A275459084C0D26A562C0 Authority key identifier: E3:C5:FD:2E:5F:6F:86:F9:DC:8C:6B:4E:D5:6A:D3:37:E7:1D:2F:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/8a33a951-e355-313c-9b36-7f71a8dc82c0.roa Signing time: Wed 20 Aug 2025 14:34:05 +0000 ROA not before: Wed 20 Aug 2025 14:34:05 +0000 ROA not after: Tue 18 Nov 2025 15:34:05 +0000 asID: 16509 IP address blocks: 2602:f5df::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/48c4aba6-5e67-450a-b4a4-647523380d01.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/48c4aba6-5e67-450a-b4a4-647523380d01.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:8a:27:54:59:08:4c:0d:26:a5:62:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48c4aba6-5e67-450a-b4a4-647523380d01 Validity Not Before: Aug 20 14:34:05 2025 GMT Not After : Nov 18 15:34:05 2025 GMT Subject: CN=01ebbd46-289f-4c35-bccb-a785286b0ac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f1:43:36:01:80:f9:e3:e4:af:49:e5:f1:62: 9f:af:f9:bf:7e:64:ae:a9:64:46:84:68:fa:c5:e6: ba:57:b5:aa:c7:d7:8f:9b:b0:64:d1:04:48:52:c0: 97:53:e2:44:c4:00:fc:2e:4e:ae:71:88:15:2f:d0: ab:28:82:dd:eb:9f:7e:24:9c:61:ba:25:e5:bb:1b: 10:a8:43:14:46:6c:e3:de:d3:fa:83:cd:d4:87:78: 28:35:7f:d5:6d:82:6e:d4:f5:48:45:f0:9b:03:80: 09:27:c6:90:3c:ee:c0:cf:5d:60:47:a4:01:f0:2f: 1a:38:9c:ec:26:d8:a6:49:4f:a7:e6:59:69:73:6f: bc:7c:35:7f:8a:95:f0:b2:b5:c8:c7:f2:79:ad:69: 91:8a:c9:04:a9:67:1e:b1:70:ae:e2:ee:80:08:23: 0f:03:d6:fd:41:02:f4:9c:56:c7:d3:12:a9:20:d4: 80:82:4c:ff:44:25:28:d5:bb:9f:76:dd:72:6e:ce: 84:be:60:49:aa:90:9e:fd:4d:75:06:c0:82:ab:5f: bd:b2:ce:f3:e7:65:3e:2d:2d:7d:54:fb:d2:29:73: e3:6b:6e:07:91:7b:84:ee:31:01:47:ea:16:58:8f: 35:79:da:2f:6d:8e:73:f0:2d:61:4b:c4:0c:92:a5: 58:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:1B:AF:6F:3A:9B:47:D4:9E:27:AB:BF:A9:46:E9:D4:7C:E2:42:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/8a33a951-e355-313c-9b36-7f71a8dc82c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/48c4aba6-5e67-450a-b4a4-647523380d01.crl X509v3 Authority Key Identifier: keyid:E3:C5:FD:2E:5F:6F:86:F9:DC:8C:6B:4E:D5:6A:D3:37:E7:1D:2F:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01.cer sbgp-ipAddrBlock: critical IPv6: 2602:f5df::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:00:4e:a4:85:89:17:7d:d6:fc:bc:fb:71:9b:c2:0e:1e:fa: 5f:1b:f8:cf:32:6a:be:2c:8b:10:b2:44:7d:4c:3a:0a:f2:f7: b5:bf:3e:2d:bd:4d:a7:24:cf:de:bc:7e:f4:4e:62:59:6b:fb: 40:6a:9c:ac:da:ec:16:7c:15:54:ae:61:a5:ff:f6:f5:3d:ab: 55:27:8a:25:3f:83:87:ae:6f:bb:53:33:57:8e:01:40:24:3b: eb:e5:9f:64:fd:9a:f2:b5:87:8c:7d:89:af:69:c5:5a:65:07: 49:2d:5c:56:e9:24:22:c8:d2:77:20:de:a2:de:d5:1a:12:ed: 9a:d9:23:95:86:19:28:98:a8:9e:8e:6d:94:a7:57:c5:1f:7a: 06:3a:66:9f:cc:54:76:10:5a:26:ee:42:a0:1a:98:a8:0c:ca: fc:56:e1:3d:1e:a8:91:5d:ab:7e:a7:d3:8a:ce:be:3f:d8:fb: 36:a4:19:d1:c4:24:87:8a:8b:71:35:05:ca:65:89:66:f8:e0: 4a:a3:9a:ae:77:60:67:6a:cc:fa:87:7b:ac:e7:d2:12:5b:04: c4:f3:b3:6b:2e:65:6d:76:71:90:6e:89:1a:a5:de:2e:2a:b8: 66:fb:af:25:69:4a:62:72:e9:70:e8:bb:52:a0:62:3c:83:32: 5f:d4:07:10 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErriidUWQhMDSalYsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDhjNGFiYTYtNWU2Ny00NTBhLWI0YTQtNjQ3NTIzMzgw ZDAxMB4XDTI1MDgyMDE0MzQwNVoXDTI1MTExODE1MzQwNVowLzEtMCsGA1UEAxMk MDFlYmJkNDYtMjg5Zi00YzM1LWJjY2ItYTc4NTI4NmIwYWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPFDNgGA+ePkr0nl8WKfr/m/fmSuqWRGhGj6 xea6V7Wqx9ePm7Bk0QRIUsCXU+JExAD8Lk6ucYgVL9CrKILd659+JJxhuiXluxsQ qEMURmzj3tP6g83Uh3goNX/VbYJu1PVIRfCbA4AJJ8aQPO7Az11gR6QB8C8aOJzs JtimSU+n5llpc2+8fDV/ipXwsrXIx/J5rWmRiskEqWcesXCu4u6ACCMPA9b9QQL0 nFbH0xKpINSAgkz/RCUo1bufdt1ybs6EvmBJqpCe/U11BsCCq1+9ss7z52U+LS19 VPvSKXPja24HkXuE7jEBR+oWWI81edovbY5z8C1hS8QMkqVYwQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCwbr286m0fUnierv6lG6dR84kLHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80OGM0 YWJhNi01ZTY3LTQ1MGEtYjRhNC02NDc1MjMzODBkMDEvOGEzM2E5NTEtZTM1NS0z MTNjLTliMzYtN2Y3MWE4ZGM4MmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNDhjNGFiYTYtNWU2Ny00NTBhLWI0 YTQtNjQ3NTIzMzgwZDAxLzQ4YzRhYmE2LTVlNjctNDUwYS1iNGE0LTY0NzUyMzM4 MGQwMS5jcmwwHwYDVR0jBBgwFoAU48X9Ll9vhvncjGtO1WrTN+cdL7MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80OGM0YWJhNi01ZTY3LTQ1MGEtYjRhNC02NDc1 MjMzODBkMDEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL13wAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAAgBOpIWJF33W/Lz7cZvCDh76Xxv4zzJqviyLELJEfUw6CvL3tb8+ Lb1NpyTP3rx+9E5iWWv7QGqcrNrsFnwVVK5hpf/29T2rVSeKJT+Dh65vu1MzV44B QCQ76+WfZP2a8rWHjH2Jr2nFWmUHSS1cVukkIsjSdyDeot7VGhLtmtkjlYYZKJio no5tlKdXxR96Bjpmn8xUdhBaJu5CoBqYqAzK/FbhPR6okV2rfqfTis6+P9j7NqQZ 0cQkh4qLcTUFymWJZvjgSqOarndgZ2rM+od7rOfSElsExPOzay5lbXZxkG6JGqXe Liq4ZvuvJWlKYnLpcOi7UqBiPIMyX9QHEA== -----END CERTIFICATE-----Generated at Sat Aug 23 10:22:18 2025 by rpki-client