$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/8a33a951-e355-313c-9b36-7f71a8dc82c0.roa File: 8a33a951-e355-313c-9b36-7f71a8dc82c0.roa (raw, json) Hash identifier: 6cfUU7U75B8KFB0ePHfeR1oHph/GqIAMJUQ/h1wPEck= Subject key identifier: 6A:4B:36:68:71:57:1B:7E:B2:40:22:EE:41:0A:5C:D8:F6:AF:62:E6 Certificate issuer: /CN=48c4aba6-5e67-450a-b4a4-647523380d01 Certificate serial: 010D0C9F4328584BCC3599D5217F30F1FC935A80 Authority key identifier: E3:C5:FD:2E:5F:6F:86:F9:DC:8C:6B:4E:D5:6A:D3:37:E7:1D:2F:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/8a33a951-e355-313c-9b36-7f71a8dc82c0.roa Signing time: Sun 09 Nov 2025 02:00:31 +0000 ROA not before: Sun 09 Nov 2025 02:00:31 +0000 ROA not after: Sat 07 Feb 2026 02:00:31 +0000 asID: 16509 IP address blocks: 2602:f5df::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/48c4aba6-5e67-450a-b4a4-647523380d01.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/48c4aba6-5e67-450a-b4a4-647523380d01.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cc:35:99:d5:21:7f:30:f1:fc:93:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48c4aba6-5e67-450a-b4a4-647523380d01 Validity Not Before: Nov 9 02:00:31 2025 GMT Not After : Feb 7 02:00:31 2026 GMT Subject: CN=b0d08824-d3b8-485c-8620-5b0fac96f775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5f:1d:2a:62:3f:a5:c5:fe:88:ab:0e:a0:10: c9:40:f5:65:c7:40:1f:ec:89:a2:90:b4:85:38:e0: 1d:0a:cb:28:e5:cf:fe:ac:b0:d3:56:42:31:15:46: 4b:66:fd:38:46:ca:ed:a6:3b:a1:89:76:bd:27:99: 1c:0e:da:d4:91:dd:91:49:7a:bf:78:47:5f:6b:1d: 87:9c:29:44:b6:02:7b:74:1f:11:11:64:14:de:d2: 4a:3e:be:e6:86:b8:a6:79:21:7b:91:42:e4:a6:c0: 13:a9:4d:c7:c9:96:e4:2b:50:ca:7b:56:b9:3c:d0: 39:52:55:fd:c4:db:8f:a1:fc:2e:9d:2f:7b:de:a3: 7d:dd:39:34:a8:8a:c8:d4:0b:8c:c2:fe:f2:43:7b: ba:f3:a5:5e:5e:95:ef:ae:26:f8:3f:12:af:72:c1: 76:df:1c:f3:55:19:62:75:6c:35:5f:bd:78:ae:69: d5:09:63:39:3f:2f:f3:87:1a:0c:c8:39:c1:71:45: 2e:7b:4e:c6:b8:5b:37:d3:78:b1:5f:ad:d9:f1:8b: 68:5b:40:48:23:98:43:6f:4d:66:ce:c6:ff:53:23: 25:c1:a5:71:f7:ec:70:90:0c:37:72:11:44:9a:a4: ca:71:a6:56:66:85:d3:48:dd:52:6a:0c:38:72:bb: 9e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:4B:36:68:71:57:1B:7E:B2:40:22:EE:41:0A:5C:D8:F6:AF:62:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/8a33a951-e355-313c-9b36-7f71a8dc82c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/48c4aba6-5e67-450a-b4a4-647523380d01.crl X509v3 Authority Key Identifier: keyid:E3:C5:FD:2E:5F:6F:86:F9:DC:8C:6B:4E:D5:6A:D3:37:E7:1D:2F:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01.cer sbgp-ipAddrBlock: critical IPv6: 2602:f5df::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:63:a0:4d:0e:92:71:d8:bc:1a:08:90:3b:a8:b7:90:b9:c7: 9d:68:59:f6:e7:36:4d:91:ec:74:ef:01:02:72:46:2e:11:6d: 6d:4d:75:df:06:3e:d9:13:f2:7e:b7:b5:14:d2:16:7c:8c:7e: 85:b6:e8:96:5d:10:af:5b:fb:04:10:d5:b0:ee:aa:65:35:0a: a6:61:a8:30:01:bc:b5:b8:7c:c7:a4:55:a5:fd:cc:ba:fc:ff: 08:6a:a0:ce:f2:b4:d3:9e:76:f0:93:83:61:05:c4:c2:3d:7b: 2f:c6:8f:e7:29:64:7e:de:ac:9b:eb:39:42:33:12:29:4f:b3: a3:ad:e6:30:08:c4:5d:c2:78:82:1c:29:29:79:aa:27:9c:d0: c1:61:00:49:54:d8:90:fb:09:51:c9:8c:e3:fa:42:56:f9:4e: 33:52:3d:02:99:3c:4e:da:ca:09:a5:f0:75:ec:b7:bb:00:9e: a7:b2:78:e7:ba:e8:fc:0e:dc:dc:23:c0:58:ba:49:47:90:9b: 41:7d:c8:ce:9d:98:ce:ee:1a:f8:d0:57:a1:44:fe:9e:a7:38: d5:b3:09:9c:26:1c:80:cf:c0:00:eb:c4:8f:99:8c:57:cc:b4: 3f:f3:db:41:42:90:47:97:ee:ab:f2:c3:ee:09:8a:07:ec:28: b0:97:36:ca -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEvMNZnVIX8w8fyTWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDhjNGFiYTYtNWU2Ny00NTBhLWI0YTQtNjQ3NTIzMzgw ZDAxMB4XDTI1MTEwOTAyMDAzMVoXDTI2MDIwNzAyMDAzMVowLzEtMCsGA1UEAxMk YjBkMDg4MjQtZDNiOC00ODVjLTg2MjAtNWIwZmFjOTZmNzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyF8dKmI/pcX+iKsOoBDJQPVlx0Af7ImikLSF OOAdCsso5c/+rLDTVkIxFUZLZv04RsrtpjuhiXa9J5kcDtrUkd2RSXq/eEdfax2H nClEtgJ7dB8REWQU3tJKPr7mhrimeSF7kULkpsATqU3HyZbkK1DKe1a5PNA5UlX9 xNuPofwunS973qN93Tk0qIrI1AuMwv7yQ3u686VeXpXvrib4PxKvcsF23xzzVRli dWw1X714rmnVCWM5Py/zhxoMyDnBcUUue07GuFs303ixX63Z8YtoW0BII5hDb01m zsb/UyMlwaVx9+xwkAw3chFEmqTKcaZWZoXTSN1Sagw4crue6wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGpLNmhxVxt+skAi7kEKXNj2r2LmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80OGM0 YWJhNi01ZTY3LTQ1MGEtYjRhNC02NDc1MjMzODBkMDEvOGEzM2E5NTEtZTM1NS0z MTNjLTliMzYtN2Y3MWE4ZGM4MmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNDhjNGFiYTYtNWU2Ny00NTBhLWI0 YTQtNjQ3NTIzMzgwZDAxLzQ4YzRhYmE2LTVlNjctNDUwYS1iNGE0LTY0NzUyMzM4 MGQwMS5jcmwwHwYDVR0jBBgwFoAU48X9Ll9vhvncjGtO1WrTN+cdL7MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80OGM0YWJhNi01ZTY3LTQ1MGEtYjRhNC02NDc1 MjMzODBkMDEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL13wAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAXWOgTQ6Scdi8GgiQO6i3kLnHnWhZ9uc2TZHsdO8BAnJGLhFtbU11 3wY+2RPyfre1FNIWfIx+hbboll0Qr1v7BBDVsO6qZTUKpmGoMAG8tbh8x6RVpf3M uvz/CGqgzvK005528JODYQXEwj17L8aP5ylkft6sm+s5QjMSKU+zo63mMAjEXcJ4 ghwpKXmqJ5zQwWEASVTYkPsJUcmM4/pCVvlOM1I9Apk8TtrKCaXwdey3uwCep7J4 57ro/A7c3CPAWLpJR5CbQX3Izp2Yzu4a+NBXoUT+nqc41bMJnCYcgM/AAOvEj5mM V8y0P/PbQUKQR5fuq/LD7gmKB+wosJc2yg== -----END CERTIFICATE-----Generated at Tue Nov 18 09:37:21 2025 by rpki-client