$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/bda09709-cca1-3c5a-acd1-e46d5667e970.roa File: bda09709-cca1-3c5a-acd1-e46d5667e970.roa (raw, json) Hash identifier: CZJIY+bWejueZPqmYBaNLZPr1HTGhQaFPoqMjJhwUyE= Subject key identifier: CC:21:6C:5F:C2:5A:5D:BC:9F:8D:02:9F:E5:88:76:BA:2B:AA:F3:2D Certificate issuer: /CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe Certificate serial: 010D0C9F4328584AD2FE100094D7B2AAB6BC3140 Authority key identifier: 71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/bda09709-cca1-3c5a-acd1-e46d5667e970.roa Signing time: Mon 11 Aug 2025 19:32:25 +0000 ROA not before: Mon 11 Aug 2025 19:32:25 +0000 ROA not after: Sun 09 Nov 2025 20:32:25 +0000 asID: 401921 IP address blocks: 2602:fbd0:c0::/42 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:fe:10:00:94:d7:b2:aa:b6:bc:31:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe Validity Not Before: Aug 11 19:32:25 2025 GMT Not After : Nov 9 20:32:25 2025 GMT Subject: CN=194b89fa-d13c-4904-a9d6-f77bf147590b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:25:93:12:92:20:45:cc:4a:a8:8e:e1:06:9d: db:13:31:67:3a:7a:45:26:3b:1c:71:44:c1:be:49: a7:5d:60:eb:32:58:35:40:c2:25:5d:11:ea:19:04: c8:83:76:f6:a2:2f:c7:22:92:0a:c8:ae:65:f4:f2: 9a:ff:25:0e:63:eb:9f:af:d7:2e:47:00:9b:3c:49: 4f:93:e0:14:58:65:f3:7c:09:72:ab:cb:82:43:3b: d2:17:a4:0f:2c:c1:e0:14:11:0d:be:45:ba:d1:ef: 98:fe:ba:37:6f:86:5b:c3:f8:41:e2:15:76:7d:46: 65:79:27:88:56:f8:03:d4:85:cb:e5:11:52:da:f5: da:bb:aa:ad:fe:b5:a6:ff:28:fa:66:95:7c:cc:6e: d2:a2:ce:d1:d0:d1:9b:d7:a5:c3:0c:41:25:6c:da: 8f:cf:01:b3:b4:b4:16:5d:fe:42:e5:a6:66:1e:40: 93:9e:5d:3f:e3:03:fa:04:11:42:fe:3e:b2:f4:4f: ae:c5:52:36:39:5b:d3:46:b1:a0:e4:9d:dc:cc:14: 86:0d:d5:27:2a:ba:8a:b3:24:71:3e:bc:a0:c3:89: b7:a7:81:e2:c5:bb:92:de:34:f6:b3:39:ea:2a:f7: ea:f5:d6:e1:cf:04:98:9c:4c:83:c1:96:8f:fd:45: 50:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:21:6C:5F:C2:5A:5D:BC:9F:8D:02:9F:E5:88:76:BA:2B:AA:F3:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/bda09709-cca1-3c5a-acd1-e46d5667e970.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl X509v3 Authority Key Identifier: keyid:71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer sbgp-ipAddrBlock: critical IPv6: 2602:fbd0:c0::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:81:25:7e:b0:95:46:c9:cf:dc:17:2a:0a:f2:81:91:98:45: 9c:47:e9:80:4e:48:38:81:c4:64:80:b8:47:37:7f:7e:8f:cf: 5b:d6:f3:7d:a7:06:6a:b8:fb:8e:d6:22:15:9f:cc:6c:9d:03: d4:28:5d:55:1b:48:a5:4f:b8:82:81:31:65:8a:62:49:bb:f4: 86:a9:9d:44:17:57:af:4b:fe:09:70:74:bc:e4:23:c0:05:26: a5:79:a4:4b:cc:36:06:10:5a:e3:49:6f:d3:63:ee:2d:40:ca: 9d:b3:62:50:1a:98:4c:f6:17:7e:c3:75:a3:8d:22:19:44:a7: 80:ed:d7:90:ec:5b:fe:f3:39:06:b8:3d:1d:69:6b:9f:ca:2e: d4:72:b5:fd:7e:8f:2b:80:87:b4:b9:af:93:13:69:02:9a:7e: 19:aa:ba:4a:41:1a:32:4a:89:1f:3d:c3:6f:c0:54:58:c2:b6: 3f:d8:c6:94:b2:b4:36:c7:91:dc:4e:d6:fc:03:15:d1:a6:dd: ad:be:f6:4d:5c:b9:75:b5:7e:85:e7:04:c4:8e:7e:1d:97:22: 16:43:1a:89:dd:bc:3f:70:8d:27:d0:f0:aa:04:4a:3f:67:40: d7:8a:33:25:b0:2c:3c:63:2b:85:0f:b5:f8:da:b7:b4:82:cd: b0:ba:5f:b6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErS/hAAlNeyqra8MUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM4OGQ1MmEtZjhkZC00YzAyLThjM2UtZTEyODA5Zjkz Y2ZlMB4XDTI1MDgxMTE5MzIyNVoXDTI1MTEwOTIwMzIyNVowLzEtMCsGA1UEAxMk MTk0Yjg5ZmEtZDEzYy00OTA0LWE5ZDYtZjc3YmYxNDc1OTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyWTEpIgRcxKqI7hBp3bEzFnOnpFJjsccUTB vkmnXWDrMlg1QMIlXRHqGQTIg3b2oi/HIpIKyK5l9PKa/yUOY+ufr9cuRwCbPElP k+AUWGXzfAlyq8uCQzvSF6QPLMHgFBENvkW60e+Y/ro3b4Zbw/hB4hV2fUZleSeI VvgD1IXL5RFS2vXau6qt/rWm/yj6ZpV8zG7Sos7R0NGb16XDDEElbNqPzwGztLQW Xf5C5aZmHkCTnl0/4wP6BBFC/j6y9E+uxVI2OVvTRrGg5J3czBSGDdUnKrqKsyRx Prygw4m3p4HixbuS3jT2sznqKvfq9dbhzwSYnEyDwZaP/UVQ1wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMwhbF/CWl28n40Cn+WIdrorqvMtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wMzg4 ZDUyYS1mOGRkLTRjMDItOGMzZS1lMTI4MDlmOTNjZmUvYmRhMDk3MDktY2NhMS0z YzVhLWFjZDEtZTQ2ZDU2NjdlOTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDM4OGQ1MmEtZjhkZC00YzAyLThj M2UtZTEyODA5ZjkzY2ZlLzAzODhkNTJhLWY4ZGQtNGMwMi04YzNlLWUxMjgwOWY5 M2NmZS5jcmwwHwYDVR0jBBgwFoAUcbVVsA0KERfSSVFKjETwTz2hZm0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wMzg4ZDUyYS1mOGRkLTRjMDItOGMzZS1lMTI4 MDlmOTNjZmUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJgL70ADA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABeBJX6wlUbJz9wXKgrygZGYRZxH6YBOSDiBxGSAuEc3f36Pz1vW 832nBmq4+47WIhWfzGydA9QoXVUbSKVPuIKBMWWKYkm79IapnUQXV69L/glwdLzk I8AFJqV5pEvMNgYQWuNJb9Nj7i1Ayp2zYlAamEz2F37DdaONIhlEp4Dt15DsW/7z OQa4PR1pa5/KLtRytf1+jyuAh7S5r5MTaQKafhmqukpBGjJKiR89w2/AVFjCtj/Y xpSytDbHkdxO1vwDFdGm3a2+9k1cuXW1foXnBMSOfh2XIhZDGondvD9wjSfQ8KoE Sj9nQNeKMyWwLDxjK4UPtfjat7SCzbC6X7Y= -----END CERTIFICATE-----Generated at Sat Aug 23 19:48:03 2025 by rpki-client