$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/3f7e0d16-021d-374b-b2b4-3923362ea427.roa File: 3f7e0d16-021d-374b-b2b4-3923362ea427.roa (raw, json) Hash identifier: DtZ4T9RUkx97Fn/R0mnHDhKpxYrqrv4I8NDQC51rt20= Subject key identifier: 7A:80:34:90:AF:F2:E5:B6:9E:C0:51:81:A7:9A:7A:EB:2C:29:47:61 Certificate issuer: /CN=48c4aba6-5e67-450a-b4a4-647523380d01 Certificate serial: 010D0C9F4328584EEA878BA9A48F57E5686D7600 Authority key identifier: E3:C5:FD:2E:5F:6F:86:F9:DC:8C:6B:4E:D5:6A:D3:37:E7:1D:2F:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/3f7e0d16-021d-374b-b2b4-3923362ea427.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 15169 IP address blocks: 2602:f5df:200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/48c4aba6-5e67-450a-b4a4-647523380d01.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/48c4aba6-5e67-450a-b4a4-647523380d01.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:8b:a9:a4:8f:57:e5:68:6d:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48c4aba6-5e67-450a-b4a4-647523380d01 Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=eec041ba-ddb7-4ce1-a680-3a3d294dbba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e7:81:d5:5b:f1:6e:7b:90:36:0a:4f:7a:ce: 8e:e0:49:c5:b9:80:14:97:05:0c:5d:4d:5d:9a:40: e9:c0:8b:9a:4f:37:ec:55:51:10:94:0a:58:31:5a: c4:b6:2e:fc:c0:36:5f:2f:a7:35:8c:df:fc:55:26: a7:17:ef:fa:97:ef:f7:2e:a6:b6:c8:34:f7:dd:90: 6f:49:29:fb:57:a9:7b:8d:a6:98:b5:49:2c:85:e5: 80:44:06:81:24:cd:d7:c0:a9:a3:9d:d5:24:95:ac: 75:c0:c5:ce:45:de:a3:a0:c5:a0:de:c7:75:bb:99: 4a:bc:e3:22:e8:e4:f7:e8:41:f8:c5:b0:03:46:4b: 04:64:9d:8e:37:b4:1b:ab:36:cc:c2:46:b6:d0:e0: 9a:47:75:13:6d:16:4d:af:6c:4a:85:21:9d:e1:be: 0b:8b:62:bb:69:aa:da:57:1d:d6:b9:65:91:2f:02: 54:bc:13:ea:f2:55:c6:07:d0:da:95:e6:51:79:a5: 03:31:66:45:4b:37:6e:1d:79:8f:53:21:1b:ad:70: 72:74:df:7a:70:dc:3e:cf:63:f7:6f:e3:e1:0c:17: 8f:8b:7c:e3:fd:82:69:f3:b0:fe:07:f8:6c:5d:3b: e7:5d:05:44:47:ed:4a:8c:07:c2:38:9c:ef:53:36: f2:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:80:34:90:AF:F2:E5:B6:9E:C0:51:81:A7:9A:7A:EB:2C:29:47:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/3f7e0d16-021d-374b-b2b4-3923362ea427.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/48c4aba6-5e67-450a-b4a4-647523380d01.crl X509v3 Authority Key Identifier: keyid:E3:C5:FD:2E:5F:6F:86:F9:DC:8C:6B:4E:D5:6A:D3:37:E7:1D:2F:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01.cer sbgp-ipAddrBlock: critical IPv6: 2602:f5df:200::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:6a:70:40:e4:04:cf:5c:23:16:5d:cc:de:4c:88:81:7e:9f: 5f:b3:79:3e:a3:50:d2:41:c5:cc:01:8a:ae:09:6a:fc:a5:be: ef:37:07:6f:85:a1:ed:c6:50:ae:02:79:11:84:6c:d5:d9:ee: b6:58:eb:ce:f4:4c:f6:49:b9:85:c9:58:b6:68:dd:a5:c1:46: 79:ee:25:3f:11:1e:b8:ed:c2:6e:cd:c1:d2:5d:70:d9:d4:e1: 09:ec:ff:a7:69:a0:a1:f5:48:61:91:bf:58:9c:e5:1e:d1:7f: 4b:9d:3f:d2:14:99:4a:56:ba:7c:6c:6c:f6:cb:fb:67:c6:4e: 2f:51:c5:35:38:0c:c4:3d:5a:b4:e3:c4:55:c2:e6:b5:83:9c: 98:e6:42:d2:08:42:f6:79:f4:bb:22:71:47:cd:a7:62:34:6f: b7:8c:b0:d5:f3:4f:ff:a0:eb:cd:48:03:cf:e3:ae:31:5d:8d: 8d:b9:28:8b:5a:d8:f5:85:6f:af:e6:c7:86:b4:e6:d4:9e:91: 30:22:78:02:2e:20:b7:fd:fc:a9:6f:27:fa:9c:4f:bd:fc:bd: d5:f0:2b:65:93:c1:ed:63:d1:02:64:19:f2:81:57:b2:5a:2d: 0d:55:a3:09:f7:29:60:bf:10:4b:b4:85:83:5a:6f:70:2b:eb: 9f:40:f2:27 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE7qh4uppI9X5WhtdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDhjNGFiYTYtNWU2Ny00NTBhLWI0YTQtNjQ3NTIzMzgw ZDAxMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk ZWVjMDQxYmEtZGRiNy00Y2UxLWE2ODAtM2EzZDI5NGRiYmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieeB1VvxbnuQNgpPes6O4EnFuYAUlwUMXU1d mkDpwIuaTzfsVVEQlApYMVrEti78wDZfL6c1jN/8VSanF+/6l+/3Lqa2yDT33ZBv SSn7V6l7jaaYtUksheWARAaBJM3XwKmjndUklax1wMXORd6joMWg3sd1u5lKvOMi 6OT36EH4xbADRksEZJ2ON7QbqzbMwka20OCaR3UTbRZNr2xKhSGd4b4Li2K7aara Vx3WuWWRLwJUvBPq8lXGB9DaleZReaUDMWZFSzduHXmPUyEbrXBydN96cNw+z2P3 b+PhDBePi3zj/YJp87D+B/hsXTvnXQVER+1KjAfCOJzvUzbyXQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHqANJCv8uW2nsBRgaeaeussKUdhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80OGM0 YWJhNi01ZTY3LTQ1MGEtYjRhNC02NDc1MjMzODBkMDEvM2Y3ZTBkMTYtMDIxZC0z NzRiLWIyYjQtMzkyMzM2MmVhNDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNDhjNGFiYTYtNWU2Ny00NTBhLWI0 YTQtNjQ3NTIzMzgwZDAxLzQ4YzRhYmE2LTVlNjctNDUwYS1iNGE0LTY0NzUyMzM4 MGQwMS5jcmwwHwYDVR0jBBgwFoAU48X9Ll9vhvncjGtO1WrTN+cdL7MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80OGM0YWJhNi01ZTY3LTQ1MGEtYjRhNC02NDc1 MjMzODBkMDEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL13wIw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAbmpwQOQEz1wjFl3M3kyIgX6fX7N5PqNQ0kHFzAGKrglq/KW+7zcH b4Wh7cZQrgJ5EYRs1dnutljrzvRM9km5hclYtmjdpcFGee4lPxEeuO3Cbs3B0l1w 2dThCez/p2mgofVIYZG/WJzlHtF/S50/0hSZSla6fGxs9sv7Z8ZOL1HFNTgMxD1a tOPEVcLmtYOcmOZC0ghC9nn0uyJxR82nYjRvt4yw1fNP/6DrzUgDz+OuMV2Njbko i1rY9YVvr+bHhrTm1J6RMCJ4Ai4gt/38qW8n+pxPvfy91fArZZPB7WPRAmQZ8oFX slotDVWjCfcpYL8QS7SFg1pvcCvrn0DyJw== -----END CERTIFICATE-----Generated at Sat Sep 5 04:58:56 2026 by rpki-client