$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/bda09709-cca1-3c5a-acd1-e46d5667e970.roa File: bda09709-cca1-3c5a-acd1-e46d5667e970.roa (raw, json) Hash identifier: cV37BlbiK9xgwmNEpqmckQzgyuB79Xp4QReTVKx3Lrg= Subject key identifier: 59:BE:39:CB:7D:D9:62:C7:1C:68:05:47:BF:0E:3A:03:85:33:CE:C6 Certificate issuer: /CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe Certificate serial: 010D0C9F4328584D74701C1DCCC65C19EFE93D80 Authority key identifier: 71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/bda09709-cca1-3c5a-acd1-e46d5667e970.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 401921 IP address blocks: 2602:fbd0:c0::/42 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:70:1c:1d:cc:c6:5c:19:ef:e9:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=f0e969d0-4520-47c2-bc78-eb93bbacd5f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:bf:dd:46:17:8a:bd:fb:00:d4:99:7e:fb:2f: 41:0b:20:0f:c3:58:20:b7:8b:46:ea:07:f4:82:89: 93:98:b1:90:8c:b2:7c:ff:b2:d6:b6:11:73:56:a2: 1a:f9:9d:1d:53:91:be:77:69:ed:f2:f5:d9:03:2e: 12:a3:88:97:24:90:dd:1a:78:e6:45:eb:93:fe:71: a7:1f:32:90:b0:e4:f7:be:7d:b8:91:b1:83:92:2a: 2f:3d:f5:3e:a1:a5:76:6a:34:88:88:78:b8:77:9b: ad:1d:17:2a:47:c0:81:94:7b:c3:70:bd:00:79:45: b5:a4:1b:b8:75:c8:49:b8:57:7e:6b:b6:62:9c:a5: 6b:5f:75:5e:eb:70:1e:3d:83:56:c7:75:bb:2a:78: 84:18:a0:a1:9a:d7:9e:03:90:8a:70:92:8d:d5:d3: 4f:38:fa:12:ad:d1:a1:88:0a:67:7f:31:32:cc:37: de:e2:7c:ce:63:a9:58:74:67:54:6d:7e:ce:21:72: 3a:94:92:60:c9:6b:83:d1:72:44:23:5d:fe:4b:a9: 2f:77:09:e2:ae:8e:9c:33:61:96:bb:cc:ec:11:85: 6a:47:16:03:a5:66:0c:a3:bd:20:ec:69:bb:23:23: 78:14:e2:b6:e7:8f:7d:23:9f:cd:62:fe:7a:b6:ca: e1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:BE:39:CB:7D:D9:62:C7:1C:68:05:47:BF:0E:3A:03:85:33:CE:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/bda09709-cca1-3c5a-acd1-e46d5667e970.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl X509v3 Authority Key Identifier: keyid:71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer sbgp-ipAddrBlock: critical IPv6: 2602:fbd0:c0::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:a2:c6:89:94:e6:11:ff:9d:d6:17:a0:c8:d4:aa:61:fe:19: 94:61:53:ff:a0:d1:a5:86:b0:80:1b:86:b0:c2:ec:5e:ed:c9: 16:aa:9b:73:22:cc:0e:15:79:87:82:22:00:10:42:6f:6a:46: 98:8a:82:89:42:aa:b4:98:c7:92:25:6f:5b:28:fe:25:ff:1c: 9b:64:a9:91:51:2b:54:a1:18:91:98:9a:58:1a:8b:f2:9a:1d: a7:8a:f9:02:0f:82:aa:79:af:53:2b:cb:96:43:02:1c:f4:74: 9c:f8:38:85:26:d7:4e:8c:7b:3b:eb:ab:60:88:a6:e3:f9:41: ed:54:a0:37:2e:67:29:bf:9e:d5:b5:67:67:f9:10:12:54:bf: fb:93:1d:98:bf:54:fc:54:e1:8a:2b:dd:28:7b:6c:0a:33:bb: 1d:97:57:c3:85:5b:9f:15:40:1e:dc:92:07:44:41:52:9d:86: 71:79:d0:13:ce:8f:c4:73:87:3f:4c:02:5e:7d:26:3c:f7:be: 8a:f8:c9:04:e2:20:8b:6d:10:1b:8f:58:42:81:d5:6e:ab:3b: c2:13:53:e3:04:e0:3b:74:f7:6b:31:69:c9:3b:5b:8b:24:ed: 82:6b:32:77:74:90:a4:68:4d:94:9a:65:40:d5:5f:8d:0f:aa: 4b:fc:78:60 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE10cBwdzMZcGe/pPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM4OGQ1MmEtZjhkZC00YzAyLThjM2UtZTEyODA5Zjkz Y2ZlMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk ZjBlOTY5ZDAtNDUyMC00N2MyLWJjNzgtZWI5M2JiYWNkNWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAib/dRheKvfsA1Jl++y9BCyAPw1ggt4tG6gf0 gomTmLGQjLJ8/7LWthFzVqIa+Z0dU5G+d2nt8vXZAy4So4iXJJDdGnjmReuT/nGn HzKQsOT3vn24kbGDkiovPfU+oaV2ajSIiHi4d5utHRcqR8CBlHvDcL0AeUW1pBu4 dchJuFd+a7ZinKVrX3Ve63AePYNWx3W7KniEGKChmteeA5CKcJKN1dNPOPoSrdGh iApnfzEyzDfe4nzOY6lYdGdUbX7OIXI6lJJgyWuD0XJEI13+S6kvdwniro6cM2GW u8zsEYVqRxYDpWYMo70g7Gm7IyN4FOK25499I5/NYv56tsrhrwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFm+Oct92WLHHGgFR78OOgOFM87GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wMzg4 ZDUyYS1mOGRkLTRjMDItOGMzZS1lMTI4MDlmOTNjZmUvYmRhMDk3MDktY2NhMS0z YzVhLWFjZDEtZTQ2ZDU2NjdlOTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDM4OGQ1MmEtZjhkZC00YzAyLThj M2UtZTEyODA5ZjkzY2ZlLzAzODhkNTJhLWY4ZGQtNGMwMi04YzNlLWUxMjgwOWY5 M2NmZS5jcmwwHwYDVR0jBBgwFoAUcbVVsA0KERfSSVFKjETwTz2hZm0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wMzg4ZDUyYS1mOGRkLTRjMDItOGMzZS1lMTI4 MDlmOTNjZmUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJgL70ADA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEuixomU5hH/ndYXoMjUqmH+GZRhU/+g0aWGsIAbhrDC7F7tyRaq m3MizA4VeYeCIgAQQm9qRpiKgolCqrSYx5Ilb1so/iX/HJtkqZFRK1ShGJGYmlga i/KaHaeK+QIPgqp5r1Mry5ZDAhz0dJz4OIUm106Mezvrq2CIpuP5Qe1UoDcuZym/ ntW1Z2f5EBJUv/uTHZi/VPxU4Yor3Sh7bAozux2XV8OFW58VQB7ckgdEQVKdhnF5 0BPOj8Rzhz9MAl59Jjz3vor4yQTiIIttEBuPWEKB1W6rO8ITU+ME4Dt092sxack7 W4sk7YJrMnd0kKRoTZSaZUDVX40Pqkv8eGA= -----END CERTIFICATE-----Generated at Fri Apr 17 17:36:17 2026 by rpki-client