$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/304f07f6-04cc-39ec-8d73-e2fe0365d858.roa File: 304f07f6-04cc-39ec-8d73-e2fe0365d858.roa (raw, json) Hash identifier: 5wKROzC5DIejDVpbWwzdK94wR7qMujh75FdoI2PfzFw= Subject key identifier: AE:45:27:31:FD:23:15:8C:B3:73:19:A4:28:28:05:FA:E3:3B:52:B1 Certificate issuer: /CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6 Certificate serial: 010D0C9F4328584BABFD0E5380768D101D1665C0 Authority key identifier: B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/304f07f6-04cc-39ec-8d73-e2fe0365d858.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 18450 IP address blocks: 2602:f919:103::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:0e:53:80:76:8d:10:1d:16:65:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=1b9e99a4-51f6-4948-99ba-bfaca7a0f1c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d4:60:05:fd:00:da:c5:c9:53:2b:42:5b:1d: 05:a9:87:41:39:55:bc:c3:50:91:00:9b:44:d7:f9: d6:ce:db:65:21:15:dd:8f:15:47:48:f2:5a:b9:75: b9:87:e3:e7:31:b7:20:c5:7e:b2:aa:1c:58:08:52: 9d:e8:fe:30:52:e5:a7:7b:ce:51:b5:8a:02:cf:bd: 98:bb:f7:6f:5e:6f:dc:73:45:d6:27:14:68:71:6a: ea:df:84:75:8f:85:ad:63:3a:74:3e:fd:f9:85:1d: 62:ab:6d:93:c0:d3:71:25:52:04:14:4f:12:1c:07: b8:9f:0b:93:cc:7b:5b:07:83:5e:91:11:01:da:4c: 68:96:63:60:e0:c5:da:ac:6d:6f:88:98:be:7c:0a: eb:2e:92:59:44:9e:c9:d2:10:dc:52:32:6b:4f:e1: 80:06:c4:ea:33:53:a8:f7:75:ff:66:bb:1b:c2:0b: 65:98:92:96:28:d5:77:b0:25:a0:34:b5:c4:79:46: 53:c8:f0:20:f9:ba:e1:34:28:34:c4:12:5c:1a:21: 5c:41:5c:4e:82:c7:b0:13:c5:e1:ae:66:ad:bc:27: ae:2b:a3:b1:d3:e0:9b:67:6b:94:a9:6d:31:bc:d1: 70:33:28:40:f3:de:2b:a8:3d:9b:4e:64:b7:1b:52: 4f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:45:27:31:FD:23:15:8C:B3:73:19:A4:28:28:05:FA:E3:3B:52:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/304f07f6-04cc-39ec-8d73-e2fe0365d858.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl X509v3 Authority Key Identifier: keyid:B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer sbgp-ipAddrBlock: critical IPv6: 2602:f919:103::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:cd:2e:47:61:02:75:eb:b3:8c:ca:67:02:ce:c4:e3:2b:5e: 69:a2:0d:0f:4e:1e:56:7f:e9:7f:56:90:6c:69:86:94:26:79: 90:45:2d:74:85:00:d0:4c:cd:a1:16:c5:93:99:1f:a4:65:43: e1:a2:ad:7a:6c:e9:32:40:00:d6:92:8f:07:6d:50:4f:c9:d0: f1:b3:99:af:3b:88:a2:ad:f9:c9:35:c5:53:64:a2:d9:2b:80: b1:c7:9c:7b:2a:35:27:bf:62:3c:ac:5e:95:cd:e1:1f:0b:a8: db:eb:81:e4:5f:21:d7:c3:f3:1d:67:af:a4:d0:45:5b:4e:60: 88:ce:11:18:5d:ca:74:d8:83:c9:e4:d2:4f:45:45:c8:fb:6b: 40:97:1b:cc:42:96:b1:41:04:c1:54:24:3c:40:28:34:4d:63: 4c:9c:4f:bd:e1:99:0b:78:7b:fd:bd:0d:6c:98:c5:bb:e9:f4: 2a:87:fb:ac:ef:43:bf:99:b0:c7:fe:53:5d:ed:83:52:a9:53: 18:c6:ca:24:c1:ea:ed:fb:8f:fb:2e:d0:2c:b8:de:2f:4d:c6: a3:e8:4b:31:df:8b:5a:34:83:3f:0c:58:e6:b3:20:f8:ef:92: 73:5b:b6:b7:90:92:cc:ec:2f:36:3c:c0:7e:ee:26:d7:83:75: b7:dd:16:31 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEur/Q5TgHaNEB0WZcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDg0OGNjOWItZTQ2Zi00ODVlLWIzZjItNGYzOTNiNWQ5 MmQ2MB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk MWI5ZTk5YTQtNTFmNi00OTQ4LTk5YmEtYmZhY2E3YTBmMWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdRgBf0A2sXJUytCWx0FqYdBOVW8w1CRAJtE 1/nWzttlIRXdjxVHSPJauXW5h+PnMbcgxX6yqhxYCFKd6P4wUuWne85RtYoCz72Y u/dvXm/cc0XWJxRocWrq34R1j4WtYzp0Pv35hR1iq22TwNNxJVIEFE8SHAe4nwuT zHtbB4NekREB2kxolmNg4MXarG1viJi+fArrLpJZRJ7J0hDcUjJrT+GABsTqM1Oo 93X/ZrsbwgtlmJKWKNV3sCWgNLXEeUZTyPAg+brhNCg0xBJcGiFcQVxOgsewE8Xh rmatvCeuK6Ox0+CbZ2uUqW0xvNFwMyhA894rqD2bTmS3G1JPEQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK5FJzH9IxWMs3MZpCgoBfrjO1KxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80ODQ4 Y2M5Yi1lNDZmLTQ4NWUtYjNmMi00ZjM5M2I1ZDkyZDYvMzA0ZjA3ZjYtMDRjYy0z OWVjLThkNzMtZTJmZTAzNjVkODU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNDg0OGNjOWItZTQ2Zi00ODVlLWIz ZjItNGYzOTNiNWQ5MmQ2LzQ4NDhjYzliLWU0NmYtNDg1ZS1iM2YyLTRmMzkzYjVk OTJkNi5jcmwwHwYDVR0jBBgwFoAUtipAlYdVr48BpEATPSLyFSu2jeswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80ODQ4Y2M5Yi1lNDZmLTQ4NWUtYjNmMi00ZjM5 M2I1ZDkyZDYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5GQED MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALjNLkdhAnXrs4zKZwLOxOMrXmmiDQ9OHlZ/6X9WkGxphpQmeZBF LXSFANBMzaEWxZOZH6RlQ+GirXps6TJAANaSjwdtUE/J0PGzma87iKKt+ck1xVNk otkrgLHHnHsqNSe/YjysXpXN4R8LqNvrgeRfIdfD8x1nr6TQRVtOYIjOERhdynTY g8nk0k9FRcj7a0CXG8xClrFBBMFUJDxAKDRNY0ycT73hmQt4e/29DWyYxbvp9CqH +6zvQ7+ZsMf+U13tg1KpUxjGyiTB6u37j/su0Cy43i9NxqPoSzHfi1o0gz8MWOaz IPjvknNbtreQkszsLzY8wH7uJteDdbfdFjE= -----END CERTIFICATE-----Generated at Tue Nov 4 23:09:25 2025 by rpki-client