$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/bda09709-cca1-3c5a-acd1-e46d5667e970.roa File: bda09709-cca1-3c5a-acd1-e46d5667e970.roa (raw, json) Hash identifier: Q7ikVdRYkZN9G51SHsxwL6zNmfGRI+t0d34HjCL4E6g= Subject key identifier: 3D:A9:06:5B:8A:7B:E3:D7:BD:E4:66:A5:E4:28:1C:10:44:B3:C2:45 Certificate issuer: /CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe Certificate serial: 010D0C9F4328584BB2F830CD736494B18AFDF720 Authority key identifier: 71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/bda09709-cca1-3c5a-acd1-e46d5667e970.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 401921 IP address blocks: 2602:fbd0:c0::/42 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f8:30:cd:73:64:94:b1:8a:fd:f7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=f0d96a05-efcb-4f6b-a270-95cf5fdb96e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:01:7c:46:91:ea:dd:df:c7:ba:46:84:20:ec: cf:80:b5:fa:5f:ae:58:31:f3:96:fa:e4:5f:e7:c4: 91:48:32:85:4d:60:01:e9:23:71:8b:e3:fd:18:bb: ae:7c:71:94:25:cd:48:25:f3:fb:63:d8:14:09:04: 93:ca:9c:cb:b9:64:62:b8:04:4e:e9:01:65:fe:96: ad:ba:1b:fa:72:27:fe:af:16:8b:4e:81:e5:57:75: dd:64:a2:b0:59:95:86:22:6d:77:fe:ab:1b:2c:d5: b4:1f:00:76:3b:7c:29:56:d7:e4:44:fa:1b:50:57: d2:23:79:9c:b2:b1:12:1b:c0:3b:7e:d1:31:25:95: 04:c1:23:6a:be:ca:e2:7d:93:a6:ad:f5:fe:ed:3c: 75:d0:10:e1:b0:ea:9b:95:4b:a5:9b:7f:a4:85:7c: 2b:a0:f2:6d:23:c3:04:1f:01:d2:ef:ed:e7:36:3a: 55:6a:2d:8e:5c:01:12:02:c1:c6:81:af:62:03:cc: b6:c9:9d:ec:39:bb:0a:61:40:20:21:46:62:2d:e6: 40:3e:82:6c:db:32:a7:b3:3c:5e:83:3b:f2:42:7c: 48:2a:c6:26:fa:27:7b:7c:79:f5:85:ff:a0:c8:95: 03:74:2f:99:58:fc:3a:38:a1:66:8e:7a:92:6c:71: 76:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:A9:06:5B:8A:7B:E3:D7:BD:E4:66:A5:E4:28:1C:10:44:B3:C2:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/bda09709-cca1-3c5a-acd1-e46d5667e970.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl X509v3 Authority Key Identifier: keyid:71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer sbgp-ipAddrBlock: critical IPv6: 2602:fbd0:c0::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:c6:92:6a:16:ba:0a:82:54:2a:66:f7:bc:5e:4e:82:45:88: 89:2f:08:a5:74:89:36:5b:62:07:a0:24:7f:d2:d1:b1:97:36: be:6b:e2:e0:87:66:97:d3:4c:af:30:09:eb:17:94:b7:c2:fa: 3d:21:ec:b6:e7:1c:25:17:4e:92:65:15:50:dc:79:28:05:39: e1:91:dc:f7:da:4d:27:d8:2d:19:77:8c:24:02:cb:10:9c:0e: ce:80:a9:c9:31:6f:59:6f:58:3e:9c:72:0f:34:49:e6:b3:19: 06:fb:1b:b1:7f:2d:61:aa:16:54:19:32:79:4a:d0:cd:86:2b: ee:96:aa:33:55:8d:11:14:93:a2:9b:42:9c:5c:15:8d:a5:36: f8:57:df:27:50:e7:e5:00:9f:eb:2f:98:13:9c:46:2b:c0:40: b8:74:d6:7e:1a:70:54:06:3d:d9:ed:78:c6:54:22:c2:a0:fd: 76:f4:a5:86:55:ea:e6:28:06:9f:db:56:e5:de:4e:d1:e3:56: 41:e2:e8:66:aa:90:3a:07:c1:af:70:18:b8:ab:d3:50:8e:f7: f1:eb:2b:69:f7:82:a1:71:5f:81:06:9a:d1:3d:d0:31:1d:dc: 2a:3f:d9:e2:53:53:1a:d8:0d:97:6e:96:18:18:78:b5:36:af: c5:8e:b1:bf -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuy+DDNc2SUsYr99yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM4OGQ1MmEtZjhkZC00YzAyLThjM2UtZTEyODA5Zjkz Y2ZlMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk ZjBkOTZhMDUtZWZjYi00ZjZiLWEyNzAtOTVjZjVmZGI5NmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggF8RpHq3d/HukaEIOzPgLX6X65YMfOW+uRf 58SRSDKFTWAB6SNxi+P9GLuufHGUJc1IJfP7Y9gUCQSTypzLuWRiuARO6QFl/pat uhv6cif+rxaLToHlV3XdZKKwWZWGIm13/qsbLNW0HwB2O3wpVtfkRPobUFfSI3mc srESG8A7ftExJZUEwSNqvsrifZOmrfX+7Tx10BDhsOqblUulm3+khXwroPJtI8ME HwHS7+3nNjpVai2OXAESAsHGga9iA8y2yZ3sObsKYUAgIUZiLeZAPoJs2zKnszxe gzvyQnxIKsYm+id7fHn1hf+gyJUDdC+ZWPw6OKFmjnqSbHF2XwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD2pBluKe+PXveRmpeQoHBBEs8JFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wMzg4 ZDUyYS1mOGRkLTRjMDItOGMzZS1lMTI4MDlmOTNjZmUvYmRhMDk3MDktY2NhMS0z YzVhLWFjZDEtZTQ2ZDU2NjdlOTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDM4OGQ1MmEtZjhkZC00YzAyLThj M2UtZTEyODA5ZjkzY2ZlLzAzODhkNTJhLWY4ZGQtNGMwMi04YzNlLWUxMjgwOWY5 M2NmZS5jcmwwHwYDVR0jBBgwFoAUcbVVsA0KERfSSVFKjETwTz2hZm0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wMzg4ZDUyYS1mOGRkLTRjMDItOGMzZS1lMTI4 MDlmOTNjZmUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJgL70ADA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEDGkmoWugqCVCpm97xeToJFiIkvCKV0iTZbYgegJH/S0bGXNr5r 4uCHZpfTTK8wCesXlLfC+j0h7LbnHCUXTpJlFVDceSgFOeGR3PfaTSfYLRl3jCQC yxCcDs6Aqckxb1lvWD6ccg80SeazGQb7G7F/LWGqFlQZMnlK0M2GK+6WqjNVjREU k6KbQpxcFY2lNvhX3ydQ5+UAn+svmBOcRivAQLh01n4acFQGPdnteMZUIsKg/Xb0 pYZV6uYoBp/bVuXeTtHjVkHi6GaqkDoHwa9wGLir01CO9/HrK2n3gqFxX4EGmtE9 0DEd3Co/2eJTUxrYDZdulhgYeLU2r8WOsb8= -----END CERTIFICATE-----Generated at Wed Nov 5 16:54:53 2025 by rpki-client