$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/23e4860b-a0b7-3ed9-bc41-3fdd883689a4.roa File: 23e4860b-a0b7-3ed9-bc41-3fdd883689a4.roa (raw, json) Hash identifier: MK8H3e4X5xgcB17M8LlyZbJsEDAhvwYyUrIDrHsuYSo= Subject key identifier: 88:41:80:DD:08:8A:2D:D5:65:84:6C:C9:C7:76:F5:D1:6B:EB:C7:1B Certificate issuer: /CN=48326eaa-5ad2-46c1-8423-bcf18b6d4283 Certificate serial: 010D0C9F4328584BA2378B2A95CDD1A468EDA400 Authority key identifier: 2E:E1:7C:C7:66:B7:6E:2A:F0:F3:FC:D4:6E:31:F8:33:EC:51:BC:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/23e4860b-a0b7-3ed9-bc41-3fdd883689a4.roa Signing time: Sat 25 Oct 2025 01:00:31 +0000 ROA not before: Sat 25 Oct 2025 01:00:31 +0000 ROA not after: Fri 23 Jan 2026 02:00:31 +0000 asID: 46824 IP address blocks: 2602:fc41::/36 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/48326eaa-5ad2-46c1-8423-bcf18b6d4283.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/48326eaa-5ad2-46c1-8423-bcf18b6d4283.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a2:37:8b:2a:95:cd:d1:a4:68:ed:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48326eaa-5ad2-46c1-8423-bcf18b6d4283 Validity Not Before: Oct 25 01:00:31 2025 GMT Not After : Jan 23 02:00:31 2026 GMT Subject: CN=a44dbfb5-7c78-4a15-8877-d19b1407b3d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4d:1b:59:0d:ea:59:c0:8b:5c:d8:8c:b3:4c: e6:25:5c:58:ff:25:c7:5d:c2:f0:2b:4d:17:8c:c7: a3:30:66:e4:bb:74:89:33:97:1e:3b:b5:33:aa:38: a7:4c:45:ef:70:c5:cf:ae:9e:44:67:12:b2:a9:b1: 2d:bc:88:bd:66:36:f2:11:d4:06:2c:1c:9b:fe:dc: 60:9b:8c:dd:16:ba:be:3c:d6:54:58:7a:30:6a:a7: 0f:89:89:bb:76:ab:19:91:4e:f7:66:5b:8c:c8:a3: 41:62:e1:61:c9:b3:82:97:c8:9d:64:f5:db:4f:b8: 54:f7:c7:a8:62:0c:02:a4:6f:ac:00:0c:52:cf:49: cc:73:31:03:a7:27:f8:7a:e3:b5:e0:b3:24:96:d9: bc:69:9b:c5:f5:f7:01:76:2d:6b:a3:8d:35:68:c4: 89:a0:f4:5d:2a:77:7b:49:ed:00:b9:cc:64:c2:34: 30:f2:df:8d:22:73:48:f3:14:87:10:db:ec:61:49: 27:57:1d:1b:23:d7:e8:02:e3:32:6c:8c:7e:10:2a: 4c:e4:c6:9b:af:1f:60:f1:6f:22:93:1d:c7:c6:1e: db:cd:29:f2:fe:91:cd:95:db:d2:6c:2b:4e:ea:a2: 35:e3:c1:9d:ff:de:2c:54:19:ed:35:52:c2:0d:af: fe:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:41:80:DD:08:8A:2D:D5:65:84:6C:C9:C7:76:F5:D1:6B:EB:C7:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/23e4860b-a0b7-3ed9-bc41-3fdd883689a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/48326eaa-5ad2-46c1-8423-bcf18b6d4283.crl X509v3 Authority Key Identifier: keyid:2E:E1:7C:C7:66:B7:6E:2A:F0:F3:FC:D4:6E:31:F8:33:EC:51:BC:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc41::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:38:8d:de:ee:2d:9a:62:f2:b8:60:b9:7d:8b:50:51:fa:ae: a5:31:c5:c1:c6:44:c8:e4:b0:7f:ce:ab:a0:99:13:74:5a:b2: 1a:56:b7:7a:d9:e2:7f:00:6d:43:f1:ee:40:8a:49:d1:4e:eb: 0c:16:aa:26:e0:75:76:f5:3d:73:0d:f1:b7:60:03:2f:3e:0a: b6:48:9e:3e:a3:28:dd:4a:6e:ac:e1:4e:b0:17:47:94:a3:c2: 7d:e4:de:1a:9a:9e:c3:05:7a:30:b5:cf:3f:5d:41:ff:4a:1e: c1:73:32:cb:6f:10:0d:14:a4:70:62:42:d1:16:30:07:d4:72: 12:71:51:05:fa:96:5e:de:97:a6:94:29:42:de:ae:b8:30:cf: 04:3e:27:3d:bf:1b:a3:be:05:6f:84:a6:0e:1a:8b:28:bd:34: 20:33:9e:d8:c0:e5:38:31:f9:a7:f9:ea:0a:a6:87:ce:82:65: 1e:f5:64:d1:42:4b:52:4d:a0:cd:6d:32:ac:9f:b7:9f:16:37: d5:3c:b3:01:0b:c7:ee:d9:9c:77:7a:d5:38:6a:a7:67:a9:f6: ca:f5:ff:56:0d:ca:d0:c1:10:bc:80:23:da:ad:a9:a9:70:53: d3:78:f0:cf:57:93:9c:87:ba:6e:a5:f5:b6:de:27:bb:6e:fb: 15:8b:16:af -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuiN4sqlc3RpGjtpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDgzMjZlYWEtNWFkMi00NmMxLTg0MjMtYmNmMThiNmQ0 MjgzMB4XDTI1MTAyNTAxMDAzMVoXDTI2MDEyMzAyMDAzMVowLzEtMCsGA1UEAxMk YTQ0ZGJmYjUtN2M3OC00YTE1LTg4NzctZDE5YjE0MDdiM2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1U0bWQ3qWcCLXNiMs0zmJVxY/yXHXcLwK00X jMejMGbku3SJM5ceO7UzqjinTEXvcMXPrp5EZxKyqbEtvIi9ZjbyEdQGLByb/txg m4zdFrq+PNZUWHowaqcPiYm7dqsZkU73ZluMyKNBYuFhybOCl8idZPXbT7hU98eo YgwCpG+sAAxSz0nMczEDpyf4euO14LMkltm8aZvF9fcBdi1ro401aMSJoPRdKnd7 Se0AucxkwjQw8t+NInNI8xSHENvsYUknVx0bI9foAuMybIx+ECpM5Mabrx9g8W8i kx3Hxh7bzSny/pHNldvSbCtO6qI148Gd/94sVBntNVLCDa/+twIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIhBgN0Iii3VZYRsycd29dFr68cbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ODMy NmVhYS01YWQyLTQ2YzEtODQyMy1iY2YxOGI2ZDQyODMvMjNlNDg2MGItYTBiNy0z ZWQ5LWJjNDEtM2ZkZDg4MzY4OWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDgzMjZlYWEtNWFkMi00NmMxLTg0 MjMtYmNmMThiNmQ0MjgzLzQ4MzI2ZWFhLTVhZDItNDZjMS04NDIzLWJjZjE4YjZk NDI4My5jcmwwHwYDVR0jBBgwFoAULuF8x2a3birw8/zUbjH4M+xRvF8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ODMyNmVhYS01YWQyLTQ2YzEtODQyMy1iY2Yx OGI2ZDQyODMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL8QQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEANTiN3u4tmmLyuGC5fYtQUfqupTHFwcZEyOSwf86roJkTdFqyGla3 etnifwBtQ/HuQIpJ0U7rDBaqJuB1dvU9cw3xt2ADLz4KtkiePqMo3UpurOFOsBdH lKPCfeTeGpqewwV6MLXPP11B/0oewXMyy28QDRSkcGJC0RYwB9RyEnFRBfqWXt6X ppQpQt6uuDDPBD4nPb8bo74Fb4SmDhqLKL00IDOe2MDlODH5p/nqCqaHzoJlHvVk 0UJLUk2gzW0yrJ+3nxY31TyzAQvH7tmcd3rVOGqnZ6n2yvX/Vg3K0MEQvIAj2q2p qXBT03jwz1eTnIe6bqX1tt4nu277FYsWrw== -----END CERTIFICATE-----Generated at Wed Nov 5 13:29:07 2025 by rpki-client