$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/0952e798-9d39-3263-bdb3-03a59c0c85e4.roa File: 0952e798-9d39-3263-bdb3-03a59c0c85e4.roa (raw, json) Hash identifier: OWBxu/jWsJN8qicswhGvyhLpYDx1jy3Bwf3mXQ5JV28= Subject key identifier: 74:B0:1B:45:97:CA:89:6E:AF:F6:4C:16:8A:56:E6:DA:1F:16:84:40 Certificate issuer: /CN=48c4aba6-5e67-450a-b4a4-647523380d01 Certificate serial: 010D0C9F4328584AEB478BF1BCC79531A0F65880 Authority key identifier: E3:C5:FD:2E:5F:6F:86:F9:DC:8C:6B:4E:D5:6A:D3:37:E7:1D:2F:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/0952e798-9d39-3263-bdb3-03a59c0c85e4.roa Signing time: Wed 20 Aug 2025 12:19:53 +0000 ROA not before: Wed 20 Aug 2025 12:19:53 +0000 ROA not after: Tue 18 Nov 2025 13:19:53 +0000 asID: 14618 IP address blocks: 2602:f5df::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/48c4aba6-5e67-450a-b4a4-647523380d01.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/48c4aba6-5e67-450a-b4a4-647523380d01.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:47:8b:f1:bc:c7:95:31:a0:f6:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48c4aba6-5e67-450a-b4a4-647523380d01 Validity Not Before: Aug 20 12:19:53 2025 GMT Not After : Nov 18 13:19:53 2025 GMT Subject: CN=7dcaf341-fe6f-4af7-862e-0d9c0b990b4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d1:1c:78:c2:1c:14:5b:3a:f9:26:b3:63:97: cb:3e:3e:4e:a1:82:01:b9:b0:af:7e:39:bd:a7:eb: df:bf:12:25:33:e7:f0:94:d2:d9:96:93:ac:31:bd: a6:ac:0d:98:52:9d:84:c1:2c:a0:71:a2:41:14:50: 2e:93:15:ff:fd:26:13:c3:5c:8a:0d:6a:04:30:da: 4f:9e:7e:6c:0b:71:c4:29:90:ff:32:2a:e2:27:7a: 48:5c:f7:96:26:2e:f0:80:47:69:81:24:11:8c:21: af:6e:00:f7:17:2a:6e:e4:61:71:19:5d:2a:ad:40: 2d:ce:22:4d:34:6f:ae:ef:37:b0:39:26:b3:f1:84: 7e:0e:f4:13:e9:8f:03:37:c9:c3:12:dd:04:1c:45: 3f:a1:e2:aa:67:ef:13:b1:bd:63:66:88:7e:c2:cb: 85:09:80:d8:dd:5d:ee:c4:65:4a:c9:92:c1:0c:11: e4:64:ac:58:1f:06:57:1b:08:90:e8:1e:a5:c8:80: 49:f4:58:fb:20:ea:48:fa:f6:77:48:dc:63:be:67: 75:5b:31:80:e8:5c:a2:7b:3a:70:f4:ba:6f:77:6d: f7:93:3a:95:d8:e0:ec:4f:e4:a4:ea:c3:4e:6f:d1: 50:51:a9:98:ad:13:e5:c0:6f:95:3b:d9:15:ce:41: fe:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B0:1B:45:97:CA:89:6E:AF:F6:4C:16:8A:56:E6:DA:1F:16:84:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/0952e798-9d39-3263-bdb3-03a59c0c85e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/48c4aba6-5e67-450a-b4a4-647523380d01.crl X509v3 Authority Key Identifier: keyid:E3:C5:FD:2E:5F:6F:86:F9:DC:8C:6B:4E:D5:6A:D3:37:E7:1D:2F:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01.cer sbgp-ipAddrBlock: critical IPv6: 2602:f5df::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:4d:f7:1e:39:b4:c4:1a:97:0c:b4:55:fe:d7:63:0c:aa:e4: 20:5d:29:c1:75:47:0d:00:e7:f0:89:79:31:ea:a4:a2:58:f3: 87:f5:e4:b7:79:84:2c:44:a1:a6:7b:6b:ed:30:96:95:32:23: ef:83:da:9a:09:81:7c:93:21:d1:a7:ed:9a:bc:61:db:7f:01: ff:a7:75:b7:5a:da:2c:92:23:95:71:c2:1f:03:f6:98:be:93: 17:61:ed:18:cc:45:86:90:37:87:bc:33:fc:1a:87:b4:f2:f1: bb:ea:43:94:3a:cf:80:f7:96:5b:ad:8d:c6:8b:d3:90:f8:10: 21:70:42:68:e5:8b:eb:14:53:a9:75:74:96:e2:8f:9e:29:15: d5:95:ea:cf:4d:c3:85:a5:a8:70:c2:e4:bb:52:74:9c:be:2c: 0f:52:63:99:bd:19:c4:66:ff:09:d5:b5:99:3a:7e:e2:4b:c9: 20:d8:be:5a:53:e7:82:e6:2b:58:15:98:3d:d4:88:d7:b2:1b: 0e:60:61:51:03:c5:ae:00:1d:5b:14:c2:1e:1d:88:44:ac:54: 56:18:3f:7e:e2:26:c2:c3:8c:b4:3d:17:19:10:05:2d:b3:9d: 10:cf:41:a6:86:a0:d1:b1:db:6b:12:f8:cc:f5:9f:30:1e:de: 26:f4:29:09 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErrR4vxvMeVMaD2WIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDhjNGFiYTYtNWU2Ny00NTBhLWI0YTQtNjQ3NTIzMzgw ZDAxMB4XDTI1MDgyMDEyMTk1M1oXDTI1MTExODEzMTk1M1owLzEtMCsGA1UEAxMk N2RjYWYzNDEtZmU2Zi00YWY3LTg2MmUtMGQ5YzBiOTkwYjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9EceMIcFFs6+SazY5fLPj5OoYIBubCvfjm9 p+vfvxIlM+fwlNLZlpOsMb2mrA2YUp2EwSygcaJBFFAukxX//SYTw1yKDWoEMNpP nn5sC3HEKZD/MiriJ3pIXPeWJi7wgEdpgSQRjCGvbgD3Fypu5GFxGV0qrUAtziJN NG+u7zewOSaz8YR+DvQT6Y8DN8nDEt0EHEU/oeKqZ+8Tsb1jZoh+wsuFCYDY3V3u xGVKyZLBDBHkZKxYHwZXGwiQ6B6lyIBJ9Fj7IOpI+vZ3SNxjvmd1WzGA6Fyiezpw 9Lpvd233kzqV2ODsT+Sk6sNOb9FQUamYrRPlwG+VO9kVzkH+mQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHSwG0WXyolur/ZMFopW5tofFoRAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80OGM0 YWJhNi01ZTY3LTQ1MGEtYjRhNC02NDc1MjMzODBkMDEvMDk1MmU3OTgtOWQzOS0z MjYzLWJkYjMtMDNhNTljMGM4NWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNDhjNGFiYTYtNWU2Ny00NTBhLWI0 YTQtNjQ3NTIzMzgwZDAxLzQ4YzRhYmE2LTVlNjctNDUwYS1iNGE0LTY0NzUyMzM4 MGQwMS5jcmwwHwYDVR0jBBgwFoAU48X9Ll9vhvncjGtO1WrTN+cdL7MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80OGM0YWJhNi01ZTY3LTQ1MGEtYjRhNC02NDc1 MjMzODBkMDEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL13wAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAZk33Hjm0xBqXDLRV/tdjDKrkIF0pwXVHDQDn8Il5Meqkoljzh/Xk t3mELEShpntr7TCWlTIj74PamgmBfJMh0aftmrxh238B/6d1t1raLJIjlXHCHwP2 mL6TF2HtGMxFhpA3h7wz/BqHtPLxu+pDlDrPgPeWW62NxovTkPgQIXBCaOWL6xRT qXV0luKPnikV1ZXqz03DhaWocMLku1J0nL4sD1Jjmb0ZxGb/CdW1mTp+4kvJINi+ WlPnguYrWBWYPdSI17IbDmBhUQPFrgAdWxTCHh2IRKxUVhg/fuImwsOMtD0XGRAF LbOdEM9Bpoag0bHbaxL4zPWfMB7eJvQpCQ== -----END CERTIFICATE-----Generated at Thu Aug 21 18:59:10 2025 by rpki-client