$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/98e886f1-cc44-3839-b7f0-048f0f3f04af.roa File: 98e886f1-cc44-3839-b7f0-048f0f3f04af.roa (raw, json) Hash identifier: XrPZv4MGK3rJrDtlV5m77MBeyBrFFquIo0O47+pTjmc= Subject key identifier: F6:6D:15:91:3E:DA:E9:D7:33:05:65:4E:CE:A2:CF:AC:57:1A:D1:6B Certificate issuer: /CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee Certificate serial: 010D0C9F4328584AF521274F9B89C35900E312D4 Authority key identifier: 9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/98e886f1-cc44-3839-b7f0-048f0f3f04af.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 206018 IP address blocks: 2602:fc09:f80::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:27:4f:9b:89:c3:59:00:e3:12:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=b5a9df78-fe70-4966-8744-c64332732bba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:58:5a:03:a0:d8:6b:b3:7b:ea:7e:24:44:09: 8e:55:32:28:25:e1:e6:fc:19:25:12:2a:4e:a1:62: 66:ad:e9:b3:0f:19:9a:23:15:5a:d5:01:de:36:7b: d5:d4:32:b7:f0:0f:5c:34:4f:c1:37:7a:96:7a:36: ae:66:f1:69:0f:bf:0f:01:41:54:b9:f1:f2:0e:08: 07:32:55:65:5b:e6:7d:1c:fb:d6:d7:2d:83:1a:4a: e6:02:99:5b:45:9e:d9:00:bb:4e:6b:a2:11:1f:c4: f3:aa:7e:e3:7c:9b:57:d5:f3:dd:fd:c5:52:f6:14: 20:76:9d:db:fe:61:98:f4:95:b7:a0:5e:98:71:22: 4c:57:70:11:5b:79:fa:d0:08:a5:54:e2:0d:75:f4: fe:66:dc:c7:48:b2:7e:90:46:1b:59:06:e4:45:f5: b6:17:65:0b:33:43:3e:86:b4:d6:04:95:8d:be:0c: 2f:bb:06:79:28:8c:bd:55:14:7d:27:2a:d2:83:58: af:ec:19:26:88:57:59:94:12:e5:bc:54:2b:cb:8e: b2:96:51:21:27:65:27:a3:52:39:90:8f:60:f6:67: 90:6f:8e:26:4c:52:f9:ee:fd:5d:3e:fb:24:aa:6f: d0:09:6d:9c:4b:b8:79:7f:21:1d:2c:66:68:a0:0b: cd:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:6D:15:91:3E:DA:E9:D7:33:05:65:4E:CE:A2:CF:AC:57:1A:D1:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/98e886f1-cc44-3839-b7f0-048f0f3f04af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl X509v3 Authority Key Identifier: keyid:9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc09:f80::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:b1:3b:a8:4c:a8:6f:1f:ac:ae:b4:b8:2e:40:ab:07:ca:1c: e7:58:55:c9:3b:f7:8a:ab:b7:c1:8c:5a:74:e0:85:0d:0b:52: 9d:30:9a:cf:24:01:c6:2d:fc:ed:b1:cf:7c:3b:92:7e:4b:2d: fb:e0:52:d9:fe:54:81:ae:01:e0:d6:bb:b1:df:ca:e3:e2:29: 8a:ba:26:70:8b:c1:04:c3:94:5d:07:3d:23:b3:a4:9b:8f:2c: 80:67:de:49:dc:ce:5a:1b:77:bf:0a:f4:39:e8:db:e2:9a:40: 1e:0c:d0:5d:d9:14:6c:bb:54:2a:d1:51:ce:2f:ce:01:41:c9: 9d:8c:78:0e:11:c5:82:04:99:f0:b2:94:52:46:98:e8:23:c2: 72:9f:c2:8f:9e:50:33:d0:5b:f4:1d:c8:03:fa:44:d3:2d:78: 7b:eb:3b:d5:b3:ed:e8:a9:f9:11:53:b2:d1:d7:08:fa:92:ea: 1a:4b:d5:82:01:2a:25:48:12:09:0f:d9:34:00:3b:c8:2d:25: 4c:3a:af:5f:20:de:e2:ba:67:4c:4b:f1:71:8c:3b:26:67:b7: a9:78:36:b3:3f:03:48:73:e7:32:09:1d:0f:b2:43:62:e3:5f: 5b:37:31:4a:74:87:3d:62:5d:7d:83:31:a2:88:fc:95:87:0f: 99:26:c6:21 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr1ISdPm4nDWQDjEtQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJlN2I5NmQtMGFhNS00MDJhLWIyZmUtMzM3ZDdjMjA3 ZWVlMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk YjVhOWRmNzgtZmU3MC00OTY2LTg3NDQtYzY0MzMyNzMyYmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFhaA6DYa7N76n4kRAmOVTIoJeHm/BklEipO oWJmremzDxmaIxVa1QHeNnvV1DK38A9cNE/BN3qWejauZvFpD78PAUFUufHyDggH MlVlW+Z9HPvW1y2DGkrmAplbRZ7ZALtOa6IRH8Tzqn7jfJtX1fPd/cVS9hQgdp3b /mGY9JW3oF6YcSJMV3ARW3n60AilVOINdfT+ZtzHSLJ+kEYbWQbkRfW2F2ULM0M+ hrTWBJWNvgwvuwZ5KIy9VRR9JyrSg1iv7BkmiFdZlBLlvFQry46yllEhJ2Uno1I5 kI9g9meQb44mTFL57v1dPvskqm/QCW2cS7h5fyEdLGZooAvN7wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPZtFZE+2unXMwVlTs6iz6xXGtFrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MmU3 Yjk2ZC0wYWE1LTQwMmEtYjJmZS0zMzdkN2MyMDdlZWUvOThlODg2ZjEtY2M0NC0z ODM5LWI3ZjAtMDQ4ZjBmM2YwNGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTJlN2I5NmQtMGFhNS00MDJhLWIy ZmUtMzM3ZDdjMjA3ZWVlLzUyZTdiOTZkLTBhYTUtNDAyYS1iMmZlLTMzN2Q3YzIw N2VlZS5jcmwwHwYDVR0jBBgwFoAUm2pshpw0IMSPY6IRpANBGtJdnzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MmU3Yjk2ZC0wYWE1LTQwMmEtYjJmZS0zMzdk N2MyMDdlZWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL8CQ+A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFyxO6hMqG8frK60uC5AqwfKHOdYVck794qrt8GMWnTghQ0LUp0w ms8kAcYt/O2xz3w7kn5LLfvgUtn+VIGuAeDWu7HfyuPiKYq6JnCLwQTDlF0HPSOz pJuPLIBn3knczlobd78K9Dno2+KaQB4M0F3ZFGy7VCrRUc4vzgFByZ2MeA4RxYIE mfCylFJGmOgjwnKfwo+eUDPQW/QdyAP6RNMteHvrO9Wz7eip+RFTstHXCPqS6hpL 1YIBKiVIEgkP2TQAO8gtJUw6r18g3uK6Z0xL8XGMOyZnt6l4NrM/A0hz5zIJHQ+y Q2LjX1s3MUp0hz1iXX2DMaKI/JWHD5kmxiE= -----END CERTIFICATE-----Generated at Tue Sep 16 08:54:35 2025 by rpki-client