$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/d3fdf038-8080-3b68-81db-64b2a8da1cbb.roa File: d3fdf038-8080-3b68-81db-64b2a8da1cbb.roa (raw, json) Hash identifier: U3fF9KHo/Y8WoKUn5yT0qfLXwfgAxCwoNJ2hJNC5h5Y= Subject key identifier: A0:D4:22:6B:31:20:B7:F9:09:D2:18:E7:CB:C4:9B:41:E2:BB:27:FB Certificate issuer: /CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Certificate serial: 010D0C9F4328584B047C0A22BE9A163854118980 Authority key identifier: E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/d3fdf038-8080-3b68-81db-64b2a8da1cbb.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 16509 IP address blocks: 2602:f98b:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:0a:22:be:9a:16:38:54:11:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=3dc181c2-4d46-44cc-b0d9-07574fe4ba47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:37:95:bc:24:e1:98:93:8c:0b:73:f8:d4:ce: a4:53:7c:e5:d3:c0:a8:f8:e0:d2:da:37:ed:bd:37: 45:7e:47:42:ae:20:2e:55:2e:0f:4a:54:7e:ea:46: bf:81:58:00:83:9e:65:91:b0:b8:fc:42:f6:ba:c3: 61:67:c3:7e:e7:14:88:d8:5a:c9:f5:e5:0a:40:aa: a0:6d:b3:da:bb:89:5c:70:85:1b:3a:80:c9:82:69: 33:ef:e8:89:2d:f8:21:fb:01:81:80:de:76:c1:5d: 85:53:50:80:e6:9e:3e:18:5e:b4:66:9a:ce:61:9b: a0:37:bf:27:66:64:35:28:e3:d0:c8:32:05:b3:ac: f9:06:8e:53:9f:04:d6:fe:07:06:7d:80:88:3c:3d: 26:9d:a7:a3:b4:72:a2:50:88:43:d5:bc:f2:be:2b: 12:3e:de:7a:36:a9:a1:7d:ab:95:90:ce:df:5b:52: e4:ba:1a:d2:c7:d1:d5:52:8a:8a:0e:77:e6:48:f6: 3a:97:af:27:9b:aa:37:09:db:32:a9:14:70:ba:16: 08:95:0d:3a:a1:6d:39:af:2c:ff:a1:d0:64:3c:9d: 1e:00:9d:d1:b6:3f:c9:7c:80:98:af:2e:8d:0b:b7: cc:35:88:1d:b8:9f:39:5e:1d:1f:ff:a9:02:f8:be: 37:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:D4:22:6B:31:20:B7:F9:09:D2:18:E7:CB:C4:9B:41:E2:BB:27:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/d3fdf038-8080-3b68-81db-64b2a8da1cbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl X509v3 Authority Key Identifier: keyid:E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer sbgp-ipAddrBlock: critical IPv6: 2602:f98b:10::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:d8:f9:71:09:2d:db:28:d0:cc:26:c9:87:99:d7:be:a6:2d: 33:83:99:83:ed:d4:45:c3:4c:62:f0:37:b0:e5:3e:66:9c:35: 14:ee:c3:d0:a1:5b:ae:40:33:94:8a:f7:a6:30:a6:94:1a:84: 6c:3e:e5:4f:85:63:f6:24:0f:9e:f1:65:5f:29:9e:5e:8d:02: a7:67:9b:37:bd:a5:45:38:72:87:1b:52:3d:5d:9a:3a:5b:d6: a8:3e:2e:fc:0a:be:cc:38:6e:17:15:72:ab:99:38:ae:a3:4e: ec:d1:41:37:b4:cc:e5:81:c8:34:40:35:f6:d3:f0:e1:b5:c7: ff:93:9e:e6:82:59:b0:2b:73:e4:29:93:d2:64:12:82:d6:af: 05:ef:d5:bf:85:dd:e7:8a:d1:77:5a:73:1e:fb:52:55:48:10: 0f:c5:b0:8c:89:89:e4:c8:51:f0:5d:15:56:0e:81:60:85:1d: 89:89:10:f7:d2:bc:5c:af:94:06:b0:90:ca:93:ef:07:6a:9a: ea:70:93:b6:85:3d:a0:85:1c:dd:08:f8:1f:f5:23:61:02:b0: 28:e3:f1:e1:5c:1b:e1:6c:fd:6d:7f:de:b8:ca:a2:e1:28:8e: 61:86:56:7b:68:bf:15:cd:18:de:93:5d:21:3e:ca:dc:3b:c6: 59:e1:63:5c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsEfAoivpoWOFQRiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzNjOGFhN2ItZmFjNy00NDM1LTk1ZGYtZjAxMjAwZGE0 N2Q5MB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk M2RjMTgxYzItNGQ0Ni00NGNjLWIwZDktMDc1NzRmZTRiYTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizeVvCThmJOMC3P41M6kU3zl08Co+ODS2jft vTdFfkdCriAuVS4PSlR+6ka/gVgAg55lkbC4/EL2usNhZ8N+5xSI2FrJ9eUKQKqg bbPau4lccIUbOoDJgmkz7+iJLfgh+wGBgN52wV2FU1CA5p4+GF60ZprOYZugN78n ZmQ1KOPQyDIFs6z5Bo5TnwTW/gcGfYCIPD0mnaejtHKiUIhD1bzyvisSPt56Nqmh fauVkM7fW1LkuhrSx9HVUoqKDnfmSPY6l68nm6o3CdsyqRRwuhYIlQ06oW05ryz/ odBkPJ0eAJ3Rtj/JfICYry6NC7fMNYgduJ85Xh0f/6kC+L43RwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKDUImsxILf5CdIY58vEm0Hiuyf7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83M2M4 YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEyMDBkYTQ3ZDkvZDNmZGYwMzgtODA4MC0z YjY4LTgxZGItNjRiMmE4ZGExY2JiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzNjOGFhN2ItZmFjNy00NDM1LTk1 ZGYtZjAxMjAwZGE0N2Q5LzczYzhhYTdiLWZhYzctNDQzNS05NWRmLWYwMTIwMGRh NDdkOS5jcmwwHwYDVR0jBBgwFoAU479wIdxEWa9cY/l4RGY3xgpdsxwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83M2M4YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEy MDBkYTQ3ZDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5iwAQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAnY+XEJLdso0MwmyYeZ176mLTODmYPt1EXDTGLwN7DlPmacNRTu w9ChW65AM5SK96YwppQahGw+5U+FY/YkD57xZV8pnl6NAqdnmze9pUU4cocbUj1d mjpb1qg+LvwKvsw4bhcVcquZOK6jTuzRQTe0zOWByDRANfbT8OG1x/+TnuaCWbAr c+Qpk9JkEoLWrwXv1b+F3eeK0Xdacx77UlVIEA/FsIyJieTIUfBdFVYOgWCFHYmJ EPfSvFyvlAawkMqT7wdqmupwk7aFPaCFHN0I+B/1I2ECsCjj8eFcG+Fs/W1/3rjK ouEojmGGVntovxXNGN6TXSE+ytw7xlnhY1w= -----END CERTIFICATE-----Generated at Wed Oct 8 23:34:47 2025 by rpki-client