$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/3f7e0d16-021d-374b-b2b4-3923362ea427.roa File: 3f7e0d16-021d-374b-b2b4-3923362ea427.roa (raw, json) Hash identifier: JErtxkyRoIxFkqjcVeTMInJ5En8+31xzwMRrk4wttd0= Subject key identifier: 84:B5:77:D9:1F:25:94:D8:5C:FF:E7:C2:28:38:57:63:5B:22:84:65 Certificate issuer: /CN=48c4aba6-5e67-450a-b4a4-647523380d01 Certificate serial: 010D0C9F4328584F8DD890E963B8F430104ADC00 Authority key identifier: E3:C5:FD:2E:5F:6F:86:F9:DC:8C:6B:4E:D5:6A:D3:37:E7:1D:2F:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/3f7e0d16-021d-374b-b2b4-3923362ea427.roa Signing time: Mon 19 Oct 2026 13:00:12 +0000 ROA not before: Mon 19 Oct 2026 13:00:12 +0000 ROA not after: Sun 17 Jan 2027 14:00:12 +0000 asID: 15169 IP address blocks: 2602:f5df:200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/48c4aba6-5e67-450a-b4a4-647523380d01.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/48c4aba6-5e67-450a-b4a4-647523380d01.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8d:d8:90:e9:63:b8:f4:30:10:4a:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48c4aba6-5e67-450a-b4a4-647523380d01 Validity Not Before: Oct 19 13:00:12 2026 GMT Not After : Jan 17 14:00:12 2027 GMT Subject: CN=25d2c1ed-43c5-4390-a5c2-4785e877cf35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4d:9b:98:0e:d6:8f:46:9a:d5:52:83:a5:d4: 01:fb:b1:9c:a1:58:49:3a:dc:66:81:7f:7c:12:48: d0:36:5d:3f:51:9c:41:d5:29:c1:85:df:ff:12:cd: 67:a5:8b:a1:5a:33:a9:3b:a3:6c:7a:a7:a6:5e:fa: 84:fe:a0:f8:5d:f0:5c:9f:2c:a4:73:96:ea:63:09: ec:8b:1e:12:37:90:bb:1c:4c:8a:fd:b4:71:8c:26: 98:0b:61:e7:75:77:87:c4:2b:76:01:1d:fb:a8:49: cf:49:5b:59:0a:aa:a5:5a:ba:ad:a8:6e:d9:09:d3: b2:24:b4:56:88:58:a4:d3:87:63:e2:13:ed:a3:d7: 55:af:55:44:4c:60:43:07:be:94:d6:71:6c:da:6a: 46:68:e4:8f:c9:9b:86:ca:bc:a0:d7:39:a7:8c:0d: 1f:ec:32:38:e7:e6:58:fe:89:32:cf:3b:07:0f:4b: cc:39:1f:48:1c:98:9a:73:bb:79:67:a0:31:fe:be: 1a:27:61:cd:f2:40:04:46:a1:ac:25:6f:4b:05:40: 5c:97:44:ba:55:cf:93:af:3f:98:e4:69:5f:96:5e: 40:7a:56:5b:c9:44:59:cf:3d:d3:6f:78:c1:61:17: 44:89:5a:44:7c:40:1d:50:d6:18:63:12:59:bf:4b: 12:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:B5:77:D9:1F:25:94:D8:5C:FF:E7:C2:28:38:57:63:5B:22:84:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/3f7e0d16-021d-374b-b2b4-3923362ea427.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/48c4aba6-5e67-450a-b4a4-647523380d01.crl X509v3 Authority Key Identifier: keyid:E3:C5:FD:2E:5F:6F:86:F9:DC:8C:6B:4E:D5:6A:D3:37:E7:1D:2F:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01.cer sbgp-ipAddrBlock: critical IPv6: 2602:f5df:200::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:04:c9:79:66:a9:4b:a1:90:3c:59:6c:5c:ee:23:66:e2:df: ec:48:d7:9a:ae:e1:5a:e4:9a:69:3d:1f:b6:bc:28:69:b0:2a: 53:99:2d:0a:b2:53:a8:d2:5b:e5:f9:eb:f7:11:c1:53:bb:6f: 2e:a1:b2:73:35:b6:ed:d0:87:b0:44:8d:01:fc:44:56:25:e1: e3:b7:04:db:65:e7:09:ea:dc:e2:7f:2c:f3:be:c0:ee:5b:86: 32:a3:d0:e2:5a:f5:2b:a6:b7:0f:b0:63:c8:ab:ee:0e:aa:75: 48:61:d5:bd:a8:2d:3f:56:86:85:2c:dc:94:c1:0d:0b:7c:dc: 9a:d8:af:92:c0:02:80:88:a3:34:f4:68:da:7a:08:b7:01:eb: 4e:1a:f3:00:ee:f6:98:81:25:3f:cd:22:1b:dc:1c:9e:10:41: bf:9e:ac:78:2a:cf:5b:ca:c0:ae:d6:dd:e6:fd:76:22:55:96: 10:10:46:2a:13:e7:fc:c2:7f:5f:0c:2a:4f:4d:7b:58:e4:20: 37:0a:53:c8:32:41:75:09:b9:4e:51:a1:03:62:41:eb:14:a5: 64:3d:ba:5d:0c:f2:87:af:36:1d:c7:99:c5:99:4e:e7:88:8e: 7e:22:c0:ea:68:ea:48:92:2d:01:3d:18:f5:4e:83:00:88:92: 3d:8c:d0:d2 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE+N2JDpY7j0MBBK3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDhjNGFiYTYtNWU2Ny00NTBhLWI0YTQtNjQ3NTIzMzgw ZDAxMB4XDTI2MTAxOTEzMDAxMloXDTI3MDExNzE0MDAxMlowLzEtMCsGA1UEAxMk MjVkMmMxZWQtNDNjNS00MzkwLWE1YzItNDc4NWU4NzdjZjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk2bmA7Wj0aa1VKDpdQB+7GcoVhJOtxmgX98 EkjQNl0/UZxB1SnBhd//Es1npYuhWjOpO6NseqemXvqE/qD4XfBcnyykc5bqYwns ix4SN5C7HEyK/bRxjCaYC2HndXeHxCt2AR37qEnPSVtZCqqlWrqtqG7ZCdOyJLRW iFik04dj4hPto9dVr1VETGBDB76U1nFs2mpGaOSPyZuGyryg1zmnjA0f7DI45+ZY /okyzzsHD0vMOR9IHJiac7t5Z6Ax/r4aJ2HN8kAERqGsJW9LBUBcl0S6Vc+Trz+Y 5Glfll5AelZbyURZzz3Tb3jBYRdEiVpEfEAdUNYYYxJZv0sSXwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIS1d9kfJZTYXP/nwig4V2NbIoRlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80OGM0 YWJhNi01ZTY3LTQ1MGEtYjRhNC02NDc1MjMzODBkMDEvM2Y3ZTBkMTYtMDIxZC0z NzRiLWIyYjQtMzkyMzM2MmVhNDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNDhjNGFiYTYtNWU2Ny00NTBhLWI0 YTQtNjQ3NTIzMzgwZDAxLzQ4YzRhYmE2LTVlNjctNDUwYS1iNGE0LTY0NzUyMzM4 MGQwMS5jcmwwHwYDVR0jBBgwFoAU48X9Ll9vhvncjGtO1WrTN+cdL7MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80OGM0YWJhNi01ZTY3LTQ1MGEtYjRhNC02NDc1 MjMzODBkMDEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL13wIw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAdwTJeWapS6GQPFlsXO4jZuLf7EjXmq7hWuSaaT0ftrwoabAqU5kt CrJTqNJb5fnr9xHBU7tvLqGyczW27dCHsESNAfxEViXh47cE22XnCerc4n8s877A 7luGMqPQ4lr1K6a3D7BjyKvuDqp1SGHVvagtP1aGhSzclMENC3zcmtivksACgIij NPRo2noItwHrThrzAO72mIElP80iG9wcnhBBv56seCrPW8rArtbd5v12IlWWEBBG KhPn/MJ/XwwqT017WOQgNwpTyDJBdQm5TlGhA2JB6xSlZD26XQzyh682HceZxZlO 54iOfiLA6mjqSJItAT0Y9U6DAIiSPYzQ0g== -----END CERTIFICATE-----Generated at Tue Oct 27 20:49:33 2026 by rpki-client