$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/bbffe655-22cb-3fa2-8874-554d2186abf2.roa File: bbffe655-22cb-3fa2-8874-554d2186abf2.roa (raw, json) Hash identifier: 4W+6DdnA7eEW+a3CLDTEs50FWHm7TntVgj/DjRQx+Yg= Subject key identifier: C2:C3:69:9E:B6:38:B8:5E:D6:32:2C:33:9C:AC:F1:0D:40:5C:D8:EF Certificate issuer: /CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Certificate serial: 010D0C9F4328584AE0311684608640E3EB0EEA00 Authority key identifier: E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/bbffe655-22cb-3fa2-8874-554d2186abf2.roa Signing time: Sat 16 Aug 2025 13:00:42 +0000 ROA not before: Sat 16 Aug 2025 13:00:42 +0000 ROA not after: Fri 14 Nov 2025 14:00:42 +0000 asID: 14618 IP address blocks: 2602:f98b:30::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e0:31:16:84:60:86:40:e3:eb:0e:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Validity Not Before: Aug 16 13:00:42 2025 GMT Not After : Nov 14 14:00:42 2025 GMT Subject: CN=e75cfe2d-d283-4760-aac5-7e1650220eb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:81:bf:86:e6:dd:98:4a:33:97:0d:81:67:cf: 15:2a:00:86:6f:15:50:6e:17:91:ef:0d:1e:11:b4: 03:dc:34:99:08:09:a8:3c:cc:5c:6c:e0:5a:33:d0: bc:cb:5f:f0:4c:62:ed:39:d4:70:46:16:4d:2f:1c: 34:ca:9e:66:8b:f0:01:d9:8c:93:c4:90:95:b5:2b: 72:3c:67:44:ae:6d:43:16:39:90:a6:e5:d6:14:6a: ec:c5:05:50:4c:58:3b:2c:de:45:3c:c8:46:b4:8e: c1:c0:99:c1:2a:67:69:5b:63:95:09:4e:4f:7b:6b: 38:4f:51:4d:10:2f:c7:85:d3:d6:11:09:8d:6d:1c: fd:be:1b:84:8e:d2:85:3d:05:34:16:e4:56:90:bb: 61:fa:ab:a8:44:35:ad:35:fb:02:f7:64:dd:10:fa: 0f:54:a2:fe:5d:49:a8:77:a2:5a:da:01:41:01:7d: 7e:0c:d3:6d:bd:1b:42:e8:d5:16:68:c9:df:7a:17: 2e:89:8a:c8:91:f5:9f:7b:dc:21:b5:ef:65:8f:40: 52:f2:b9:a5:9f:ec:bd:df:53:eb:21:ba:73:a3:4f: 62:c4:5b:72:c6:0d:a0:f3:45:95:da:fb:3b:80:b5: c8:d6:0c:c8:ee:d4:5b:a6:e6:f4:f8:ff:77:c9:14: 31:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C3:69:9E:B6:38:B8:5E:D6:32:2C:33:9C:AC:F1:0D:40:5C:D8:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/bbffe655-22cb-3fa2-8874-554d2186abf2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl X509v3 Authority Key Identifier: keyid:E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer sbgp-ipAddrBlock: critical IPv6: 2602:f98b:30::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:fc:f1:eb:c1:9b:22:80:59:4a:49:73:d6:be:a5:f0:b1:70: 78:45:e4:20:b8:5d:d1:14:46:cb:fd:cb:21:8a:db:81:0a:ff: 73:db:a3:2e:cd:ad:fd:25:5b:40:0c:99:96:77:0e:d5:20:91: 58:b1:35:37:ae:2b:1c:21:bd:1f:ef:86:d0:3c:89:b3:df:da: 26:be:cf:51:aa:a4:ad:f5:ff:2a:8f:7d:b1:00:84:15:21:6a: a6:15:33:db:46:96:9d:32:a9:6a:50:90:45:95:15:e7:11:b9: ea:8a:ff:c6:0e:64:25:18:56:d0:9d:fc:31:23:57:b7:c6:01: 12:05:0a:92:c0:34:ca:56:d4:28:ef:4a:72:f5:9a:bd:b7:f5: 08:a2:45:93:6d:95:7f:26:26:ef:6a:08:5e:ec:d4:d0:b9:b4: 0e:80:4d:47:24:e4:3b:46:df:d6:09:b1:dd:4f:79:ac:16:fd: b3:44:d0:55:30:3b:b2:08:a0:33:4a:c7:62:16:c3:76:20:b1: 4a:11:d0:f7:51:31:47:67:58:af:4a:e5:89:a9:aa:56:35:37: bb:0a:06:6d:58:e7:d2:63:a2:bb:28:d6:59:70:11:73:48:6c: 9d:82:0c:94:99:4b:c9:5e:41:8c:4d:58:c8:2b:81:0f:54:16: 43:d4:0f:2e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErgMRaEYIZA4+sO6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzNjOGFhN2ItZmFjNy00NDM1LTk1ZGYtZjAxMjAwZGE0 N2Q5MB4XDTI1MDgxNjEzMDA0MloXDTI1MTExNDE0MDA0MlowLzEtMCsGA1UEAxMk ZTc1Y2ZlMmQtZDI4My00NzYwLWFhYzUtN2UxNjUwMjIwZWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooG/hubdmEozlw2BZ88VKgCGbxVQbheR7w0e EbQD3DSZCAmoPMxcbOBaM9C8y1/wTGLtOdRwRhZNLxw0yp5mi/AB2YyTxJCVtSty PGdErm1DFjmQpuXWFGrsxQVQTFg7LN5FPMhGtI7BwJnBKmdpW2OVCU5Pe2s4T1FN EC/HhdPWEQmNbRz9vhuEjtKFPQU0FuRWkLth+quoRDWtNfsC92TdEPoPVKL+XUmo d6Ja2gFBAX1+DNNtvRtC6NUWaMnfehcuiYrIkfWfe9whte9lj0BS8rmln+y931Pr Ibpzo09ixFtyxg2g80WV2vs7gLXI1gzI7tRbpub0+P93yRQxvQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMLDaZ62OLhe1jIsM5ys8Q1AXNjvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83M2M4 YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEyMDBkYTQ3ZDkvYmJmZmU2NTUtMjJjYi0z ZmEyLTg4NzQtNTU0ZDIxODZhYmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzNjOGFhN2ItZmFjNy00NDM1LTk1 ZGYtZjAxMjAwZGE0N2Q5LzczYzhhYTdiLWZhYzctNDQzNS05NWRmLWYwMTIwMGRh NDdkOS5jcmwwHwYDVR0jBBgwFoAU479wIdxEWa9cY/l4RGY3xgpdsxwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83M2M4YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEy MDBkYTQ3ZDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL5iwAw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAr88evBmyKAWUpJc9a+pfCxcHhF5CC4XdEURsv9yyGK24EK/3Pb oy7Nrf0lW0AMmZZ3DtUgkVixNTeuKxwhvR/vhtA8ibPf2ia+z1GqpK31/yqPfbEA hBUhaqYVM9tGlp0yqWpQkEWVFecRueqK/8YOZCUYVtCd/DEjV7fGARIFCpLANMpW 1CjvSnL1mr239QiiRZNtlX8mJu9qCF7s1NC5tA6ATUck5DtG39YJsd1PeawW/bNE 0FUwO7IIoDNKx2IWw3YgsUoR0PdRMUdnWK9K5YmpqlY1N7sKBm1Y59Jjorso1llw EXNIbJ2CDJSZS8leQYxNWMgrgQ9UFkPUDy4= -----END CERTIFICATE-----Generated at Sat Aug 23 08:20:14 2025 by rpki-client