$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/ba123b0a-7cc6-337d-9697-a1535b947efe.roa File: ba123b0a-7cc6-337d-9697-a1535b947efe.roa (raw, json) Hash identifier: LJlRpmpyerAgbBNjIozmsdtY52674e7UxSDOYltVDw4= Subject key identifier: 2D:D9:4F:0D:53:22:D8:31:99:0B:B5:45:14:D6:AD:D6:FA:4D:EF:D9 Certificate issuer: /CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Certificate serial: 010D0C9F4328584B047C0A35B36C81A2772425C0 Authority key identifier: E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/ba123b0a-7cc6-337d-9697-a1535b947efe.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 14618 IP address blocks: 2602:f98b:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:0a:35:b3:6c:81:a2:77:24:25:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=3af3feac-b62b-4803-bcba-596229dbf431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:55:20:bb:88:71:f0:20:65:04:a4:69:c2:f4: ce:95:1a:5d:b3:21:d0:3c:df:78:c3:cb:d8:a5:7e: b9:69:d8:49:b0:33:31:5e:f5:7c:d0:9a:52:21:09: cd:03:9c:09:25:74:e8:62:81:90:bc:41:52:49:78: 60:b3:85:eb:07:4c:c7:15:3f:20:41:0b:1d:d1:af: 79:7c:07:4b:25:25:9f:95:6b:7d:d9:c1:19:ed:07: 80:7c:2f:2e:72:ad:e6:e2:0e:e3:f2:90:bb:a5:86: a5:68:b6:71:e8:04:80:91:1a:95:c9:0d:62:dc:53: a2:68:e6:da:84:28:71:34:ea:43:77:08:53:2f:47: b2:19:bf:3e:be:9c:8d:c8:d9:a6:51:c1:68:59:9e: dc:5f:70:40:b6:0c:07:50:ca:18:e1:e3:b0:8a:1a: fa:ad:74:0e:f3:2c:4b:aa:a0:88:de:c3:3f:0c:ba: b4:77:72:cd:02:e0:0b:6d:4a:85:fc:41:c6:d7:61: 5e:1f:b1:be:d6:a6:2c:5a:3b:3d:05:06:27:8a:3c: 32:70:73:3e:0c:b0:74:2f:60:ef:c0:c3:ae:32:54: 96:81:3a:2a:b1:b4:28:2d:c5:fb:ae:a4:53:35:f4: 27:e3:b8:a7:0a:43:8d:64:63:4b:da:76:50:91:26: 96:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D9:4F:0D:53:22:D8:31:99:0B:B5:45:14:D6:AD:D6:FA:4D:EF:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/ba123b0a-7cc6-337d-9697-a1535b947efe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl X509v3 Authority Key Identifier: keyid:E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer sbgp-ipAddrBlock: critical IPv6: 2602:f98b:10::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:27:5e:00:03:44:5e:a7:10:32:a6:01:66:13:8b:ca:fb:9a: 3e:d0:9f:3a:52:f4:b6:89:b1:c5:9f:b9:2b:b0:0f:bf:ff:73: fb:e7:54:5e:93:4d:d9:2b:d3:1f:39:7d:ab:d7:34:c3:a4:2f: be:7e:91:18:d5:94:37:36:74:da:c2:32:a5:0d:16:6a:22:4c: 02:60:f1:80:e3:9b:15:39:5c:4b:36:fd:65:65:f6:dd:91:f5: 59:77:1a:84:20:a8:7d:ad:ac:ba:92:96:ac:5f:6e:25:f1:a2: 86:c3:3c:a2:03:41:57:76:01:90:ec:45:1b:d9:3a:8c:44:f0: f0:da:bb:fc:b9:92:5b:c1:8c:17:6d:01:f6:01:97:de:15:8c: c0:0c:6f:2f:55:6e:14:06:28:9b:f1:85:9e:49:10:b8:b8:07: c7:ca:7c:0b:57:a2:4c:6e:ab:96:57:d8:1d:8f:6b:35:67:4e: d8:78:e0:9d:03:4e:be:5e:c7:7b:28:29:6b:71:6d:34:79:e9: e6:b8:02:1b:e0:48:1b:20:7d:7f:66:1a:20:c5:a4:f7:f8:00: 53:05:d4:45:23:29:ca:73:c3:e2:39:0e:45:c8:02:80:fe:12: 86:68:2f:fb:51:b6:1d:fd:a4:e0:01:8c:f2:df:4b:53:59:99: 3d:8a:39:4a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsEfAo1s2yBonckJcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzNjOGFhN2ItZmFjNy00NDM1LTk1ZGYtZjAxMjAwZGE0 N2Q5MB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk M2FmM2ZlYWMtYjYyYi00ODAzLWJjYmEtNTk2MjI5ZGJmNDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVUgu4hx8CBlBKRpwvTOlRpdsyHQPN94w8vY pX65adhJsDMxXvV80JpSIQnNA5wJJXToYoGQvEFSSXhgs4XrB0zHFT8gQQsd0a95 fAdLJSWflWt92cEZ7QeAfC8ucq3m4g7j8pC7pYalaLZx6ASAkRqVyQ1i3FOiaOba hChxNOpDdwhTL0eyGb8+vpyNyNmmUcFoWZ7cX3BAtgwHUMoY4eOwihr6rXQO8yxL qqCI3sM/DLq0d3LNAuALbUqF/EHG12FeH7G+1qYsWjs9BQYnijwycHM+DLB0L2Dv wMOuMlSWgToqsbQoLcX7rqRTNfQn47inCkONZGNL2nZQkSaWdwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC3ZTw1TItgxmQu1RRTWrdb6Te/ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83M2M4 YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEyMDBkYTQ3ZDkvYmExMjNiMGEtN2NjNi0z MzdkLTk2OTctYTE1MzViOTQ3ZWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzNjOGFhN2ItZmFjNy00NDM1LTk1 ZGYtZjAxMjAwZGE0N2Q5LzczYzhhYTdiLWZhYzctNDQzNS05NWRmLWYwMTIwMGRh NDdkOS5jcmwwHwYDVR0jBBgwFoAU479wIdxEWa9cY/l4RGY3xgpdsxwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83M2M4YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEy MDBkYTQ3ZDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5iwAQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACMnXgADRF6nEDKmAWYTi8r7mj7QnzpS9LaJscWfuSuwD7//c/vn VF6TTdkr0x85favXNMOkL75+kRjVlDc2dNrCMqUNFmoiTAJg8YDjmxU5XEs2/WVl 9t2R9Vl3GoQgqH2trLqSlqxfbiXxoobDPKIDQVd2AZDsRRvZOoxE8PDau/y5klvB jBdtAfYBl94VjMAMby9VbhQGKJvxhZ5JELi4B8fKfAtXokxuq5ZX2B2PazVnTth4 4J0DTr5ex3soKWtxbTR56ea4AhvgSBsgfX9mGiDFpPf4AFMF1EUjKcpzw+I5DkXI AoD+EoZoL/tRth39pOABjPLfS1NZmT2KOUo= -----END CERTIFICATE-----Generated at Wed Oct 8 19:44:45 2025 by rpki-client