$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/8a33a951-e355-313c-9b36-7f71a8dc82c0.roa File: 8a33a951-e355-313c-9b36-7f71a8dc82c0.roa (raw, json) Hash identifier: rvoNf7kidsYR1zsIWyfu2Nl1uWiFVCUESbdrI7laF04= Subject key identifier: CD:68:88:98:9D:9C:34:16:B2:67:AE:12:76:9A:D8:F0:9C:90:55:3D Certificate issuer: /CN=48c4aba6-5e67-450a-b4a4-647523380d01 Certificate serial: 010D0C9F4328584E6DD4CB8C4C96AAE613702200 Authority key identifier: E3:C5:FD:2E:5F:6F:86:F9:DC:8C:6B:4E:D5:6A:D3:37:E7:1D:2F:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/8a33a951-e355-313c-9b36-7f71a8dc82c0.roa Signing time: Wed 08 Jul 2026 09:00:12 +0000 ROA not before: Wed 08 Jul 2026 09:00:12 +0000 ROA not after: Tue 06 Oct 2026 09:00:12 +0000 asID: 16509 IP address blocks: 2602:f5df::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/48c4aba6-5e67-450a-b4a4-647523380d01.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/48c4aba6-5e67-450a-b4a4-647523380d01.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6d:d4:cb:8c:4c:96:aa:e6:13:70:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48c4aba6-5e67-450a-b4a4-647523380d01 Validity Not Before: Jul 8 09:00:12 2026 GMT Not After : Oct 6 09:00:12 2026 GMT Subject: CN=ab7a4d68-df09-4f7c-a721-42e3aa0e0ac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e8:b2:ee:3c:6d:81:12:7f:6c:66:28:99:51: 35:9c:3a:dd:b7:4e:2e:5d:50:c2:c5:49:1c:aa:32: f6:59:09:dd:68:84:12:5b:c0:43:a9:7c:ea:83:92: 08:b3:38:fd:d4:df:d0:e8:de:f0:44:cf:09:19:0c: 70:0f:3d:7f:04:e0:28:a4:22:5b:43:8d:d0:2a:1c: 34:e2:73:b4:c1:01:e1:68:73:a5:1a:65:fb:89:ec: b8:bb:9d:44:36:22:4c:17:41:58:5e:5e:c9:5f:b1: b9:9d:c4:fb:c4:4a:40:de:1f:ab:22:f8:d8:a4:4a: 30:74:67:92:6f:09:ee:30:9f:b6:03:8b:b9:e1:75: ae:58:3a:66:c7:07:5d:72:10:87:8f:7c:2e:27:52: 19:ac:0e:9b:95:1c:a0:d4:54:3b:2b:98:29:8a:b3: 1a:c2:d7:50:da:43:2a:ca:98:3e:47:21:8a:ca:7c: a2:88:1f:c3:06:34:3b:9d:6b:b8:5a:5c:b0:b6:91: 66:0d:7d:87:21:de:58:ea:ce:64:2a:99:37:69:81: 3f:32:59:0c:01:14:67:50:4d:93:7a:7f:25:a4:eb: 96:64:06:de:2e:0a:bb:c7:44:22:d8:9c:23:97:58: e5:6d:04:f5:46:b6:1f:61:c1:76:d9:8d:fa:88:d6: 5c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:68:88:98:9D:9C:34:16:B2:67:AE:12:76:9A:D8:F0:9C:90:55:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/8a33a951-e355-313c-9b36-7f71a8dc82c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/48c4aba6-5e67-450a-b4a4-647523380d01.crl X509v3 Authority Key Identifier: keyid:E3:C5:FD:2E:5F:6F:86:F9:DC:8C:6B:4E:D5:6A:D3:37:E7:1D:2F:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01.cer sbgp-ipAddrBlock: critical IPv6: 2602:f5df::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:b2:87:73:51:7b:70:81:e4:32:37:d6:c6:8d:cc:c3:5d:77: c9:de:85:b2:af:9b:c9:7f:73:c5:1d:7c:ee:46:42:71:89:bc: 9d:a2:e1:25:76:c0:78:e8:9e:bc:9b:bc:44:e9:2e:39:c9:18: 56:0e:bd:f8:3f:be:72:38:5d:b1:89:1b:7a:a2:8f:89:7e:57: bb:25:de:1f:e9:5e:39:7d:18:ab:ef:9c:ea:5b:38:92:6b:04: 54:f3:7c:34:5e:81:c5:cf:1d:a0:41:e9:de:57:9c:a8:e6:ac: f0:31:46:80:99:34:58:c4:60:0c:98:53:c9:4f:44:59:44:69: 1f:9f:dd:00:3f:8c:38:e7:74:17:7d:54:75:83:9e:dc:67:0a: 13:f4:c9:58:82:3d:b3:f3:84:0d:02:3f:94:1d:5a:06:69:67: b4:99:ce:62:d5:b6:a4:fb:ff:a8:9c:1f:08:75:c0:c6:6e:f2: 70:21:63:33:b8:ec:47:47:86:59:95:25:84:9a:7d:7b:e9:c1: f5:35:70:72:4c:42:64:89:47:38:8c:59:c5:a4:fe:37:ed:3d: 5b:9f:34:fa:e3:3e:48:84:b4:eb:35:fe:8a:62:e8:20:55:d7: ab:dc:fd:55:74:fd:31:5f:b9:9f:21:39:74:69:f6:bc:91:a8: 5c:38:6b:2b -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE5t1MuMTJaq5hNwIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDhjNGFiYTYtNWU2Ny00NTBhLWI0YTQtNjQ3NTIzMzgw ZDAxMB4XDTI2MDcwODA5MDAxMloXDTI2MTAwNjA5MDAxMlowLzEtMCsGA1UEAxMk YWI3YTRkNjgtZGYwOS00ZjdjLWE3MjEtNDJlM2FhMGUwYWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeiy7jxtgRJ/bGYomVE1nDrdt04uXVDCxUkc qjL2WQndaIQSW8BDqXzqg5IIszj91N/Q6N7wRM8JGQxwDz1/BOAopCJbQ43QKhw0 4nO0wQHhaHOlGmX7iey4u51ENiJMF0FYXl7JX7G5ncT7xEpA3h+rIvjYpEowdGeS bwnuMJ+2A4u54XWuWDpmxwddchCHj3wuJ1IZrA6blRyg1FQ7K5gpirMawtdQ2kMq ypg+RyGKynyiiB/DBjQ7nWu4WlywtpFmDX2HId5Y6s5kKpk3aYE/MlkMARRnUE2T en8lpOuWZAbeLgq7x0Qi2Jwjl1jlbQT1RrYfYcF22Y36iNZc5wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFM1oiJidnDQWsmeuEnaa2PCckFU9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80OGM0 YWJhNi01ZTY3LTQ1MGEtYjRhNC02NDc1MjMzODBkMDEvOGEzM2E5NTEtZTM1NS0z MTNjLTliMzYtN2Y3MWE4ZGM4MmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNDhjNGFiYTYtNWU2Ny00NTBhLWI0 YTQtNjQ3NTIzMzgwZDAxLzQ4YzRhYmE2LTVlNjctNDUwYS1iNGE0LTY0NzUyMzM4 MGQwMS5jcmwwHwYDVR0jBBgwFoAU48X9Ll9vhvncjGtO1WrTN+cdL7MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80OGM0YWJhNi01ZTY3LTQ1MGEtYjRhNC02NDc1 MjMzODBkMDEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL13wAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAW7KHc1F7cIHkMjfWxo3Mw113yd6Fsq+byX9zxR187kZCcYm8naLh JXbAeOievJu8ROkuOckYVg69+D++cjhdsYkbeqKPiX5XuyXeH+leOX0Yq++c6ls4 kmsEVPN8NF6Bxc8doEHp3lecqOas8DFGgJk0WMRgDJhTyU9EWURpH5/dAD+MOOd0 F31UdYOe3GcKE/TJWII9s/OEDQI/lB1aBmlntJnOYtW2pPv/qJwfCHXAxm7ycCFj M7jsR0eGWZUlhJp9e+nB9TVwckxCZIlHOIxZxaT+N+09W580+uM+SIS06zX+imLo IFXXq9z9VXT9MV+5nyE5dGn2vJGoXDhrKw== -----END CERTIFICATE-----Generated at Tue Jul 21 15:56:48 2026 by rpki-client