$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/fe901c1f-73e5-39d4-af4c-16b63a5370af.roa File: fe901c1f-73e5-39d4-af4c-16b63a5370af.roa (raw, json) Hash identifier: Btr1OjFmVPHo+RBpnQuVSCZtEwWRbb591GkTSlSW0jI= Subject key identifier: 43:20:4E:57:A6:C1:3A:7A:6D:88:7D:2C:8E:D9:30:D9:EA:42:FC:7F Certificate issuer: /CN=97e60b77-17e3-4250-9bc8-b5e7664a320a Certificate serial: 010D0C9F4328584AF7EBDEDED74925BC73367840 Authority key identifier: B8:3C:8A:BE:AA:A4:F3:7E:DF:5D:15:2A:04:3A:ED:6C:A1:84:B6:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/fe901c1f-73e5-39d4-af4c-16b63a5370af.roa Signing time: Mon 25 Aug 2025 01:00:33 +0000 ROA not before: Mon 25 Aug 2025 01:00:33 +0000 ROA not after: Sun 23 Nov 2025 02:00:33 +0000 asID: 54552 IP address blocks: 2620:13f:b000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/97e60b77-17e3-4250-9bc8-b5e7664a320a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/97e60b77-17e3-4250-9bc8-b5e7664a320a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:eb:de:de:d7:49:25:bc:73:36:78:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97e60b77-17e3-4250-9bc8-b5e7664a320a Validity Not Before: Aug 25 01:00:33 2025 GMT Not After : Nov 23 02:00:33 2025 GMT Subject: CN=a56b9981-48c7-4fe2-b0b5-004821ead85a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:41:c8:cb:1c:b9:ae:8f:47:35:4a:1e:3d:11: a9:6a:b8:06:07:88:50:0f:6d:16:ba:2f:60:6e:17: 35:fa:c3:bd:fc:c4:49:c2:74:2e:11:97:0f:0b:2f: 7b:63:b0:30:40:c7:b6:5c:81:bc:90:dc:4f:6c:bc: 5d:34:aa:cd:d5:f4:55:34:99:52:9c:d7:b1:f2:a0: 55:87:50:93:93:e3:d7:cf:92:2d:cd:13:94:26:59: d5:a4:c9:76:73:b9:cb:9d:e2:39:a5:8c:0e:ac:ea: b2:ca:15:8a:42:dd:46:91:ad:ff:dc:d4:c3:5d:a1: 77:2e:5b:f7:e4:f8:5b:c7:96:9e:0e:19:01:5b:b5: bb:92:16:a2:09:90:57:92:af:8a:e9:95:36:b0:2f: 4d:ea:54:fa:51:7d:62:b2:5e:5c:c4:35:0f:28:05: 73:77:c2:22:2c:70:7a:56:4a:8a:05:f3:16:8e:16: d9:75:7e:4c:e3:82:a8:bd:66:b8:34:fe:36:0a:37: 40:09:c1:21:35:ac:77:e7:d9:60:b0:9c:72:41:95: 90:c0:b7:90:15:2c:44:a9:31:35:8d:2a:d3:ef:5e: d2:36:40:84:d6:3e:de:ef:62:fc:e5:a5:ec:f5:ef: d3:ad:df:d9:e5:66:43:e6:cb:a8:0e:d2:28:c8:a6: d6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:20:4E:57:A6:C1:3A:7A:6D:88:7D:2C:8E:D9:30:D9:EA:42:FC:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/fe901c1f-73e5-39d4-af4c-16b63a5370af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/97e60b77-17e3-4250-9bc8-b5e7664a320a.crl X509v3 Authority Key Identifier: keyid:B8:3C:8A:BE:AA:A4:F3:7E:DF:5D:15:2A:04:3A:ED:6C:A1:84:B6:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a.cer sbgp-ipAddrBlock: critical IPv6: 2620:13f:b000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:60:0b:b5:43:8f:b4:53:54:f0:4c:58:13:b9:b8:fc:66:0f: e5:05:e6:53:1d:fd:94:10:20:bc:e6:c7:61:1e:c5:fb:55:ea: 57:d4:26:9d:6e:86:d6:f5:41:c2:8f:6a:df:e0:f4:ef:4a:4b: 86:8e:4b:85:d8:9d:17:8d:de:6c:e3:50:6f:73:39:9a:e0:b2: 36:da:52:34:cd:e8:f9:16:61:0a:dd:13:0b:51:17:17:5d:08: f1:b8:36:5a:5d:48:50:54:71:08:3b:22:a0:67:45:bf:42:6b: ba:be:fc:f5:ba:29:b1:d6:03:0d:72:00:33:6e:73:67:36:43: 98:f7:e3:35:d5:5c:03:1b:a6:b7:68:67:58:93:83:e9:f5:28: 64:59:ad:9e:46:2b:8f:22:ec:2a:9c:68:89:a7:9e:7a:dd:dc: 34:f6:f8:7e:3b:b4:2a:b2:c7:5c:96:9a:ad:8e:37:a4:7e:4d: 83:37:25:8c:5c:7a:70:77:af:22:15:ea:56:42:b1:e8:5d:eb: 81:d9:5b:ab:c6:ef:39:60:23:b2:78:d0:06:5e:2b:f1:41:76: 3e:1b:96:56:c6:9f:d3:8e:cd:5d:80:ea:c8:95:0d:f9:37:8a: b0:b9:ff:c6:56:a6:91:43:f5:7c:c2:b0:0b:76:f5:32:9c:d8: 8d:3f:42:1d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr3697e10klvHM2eEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTdlNjBiNzctMTdlMy00MjUwLTliYzgtYjVlNzY2NGEz MjBhMB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk YTU2Yjk5ODEtNDhjNy00ZmUyLWIwYjUtMDA0ODIxZWFkODVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkHIyxy5ro9HNUoePRGpargGB4hQD20Wui9g bhc1+sO9/MRJwnQuEZcPCy97Y7AwQMe2XIG8kNxPbLxdNKrN1fRVNJlSnNex8qBV h1CTk+PXz5ItzROUJlnVpMl2c7nLneI5pYwOrOqyyhWKQt1Gka3/3NTDXaF3Llv3 5Phbx5aeDhkBW7W7khaiCZBXkq+K6ZU2sC9N6lT6UX1isl5cxDUPKAVzd8IiLHB6 VkqKBfMWjhbZdX5M44KovWa4NP42CjdACcEhNax359lgsJxyQZWQwLeQFSxEqTE1 jSrT717SNkCE1j7e72L85aXs9e/Trd/Z5WZD5suoDtIoyKbWDwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEMgTlemwTp6bYh9LI7ZMNnqQvx/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85N2U2 MGI3Ny0xN2UzLTQyNTAtOWJjOC1iNWU3NjY0YTMyMGEvZmU5MDFjMWYtNzNlNS0z OWQ0LWFmNGMtMTZiNjNhNTM3MGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTdlNjBiNzctMTdlMy00MjUwLTli YzgtYjVlNzY2NGEzMjBhLzk3ZTYwYjc3LTE3ZTMtNDI1MC05YmM4LWI1ZTc2NjRh MzIwYS5jcmwwHwYDVR0jBBgwFoAUuDyKvqqk837fXRUqBDrtbKGEtlMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85N2U2MGI3Ny0xN2UzLTQyNTAtOWJjOC1iNWU3 NjY0YTMyMGEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABP7AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH5gC7VDj7RTVPBMWBO5uPxmD+UF5lMd/ZQQILzmx2EexftV6lfU Jp1uhtb1QcKPat/g9O9KS4aOS4XYnReN3mzjUG9zOZrgsjbaUjTN6PkWYQrdEwtR FxddCPG4NlpdSFBUcQg7IqBnRb9Ca7q+/PW6KbHWAw1yADNuc2c2Q5j34zXVXAMb prdoZ1iTg+n1KGRZrZ5GK48i7CqcaImnnnrd3DT2+H47tCqyx1yWmq2ON6R+TYM3 JYxcenB3ryIV6lZCsehd64HZW6vG7zlgI7J40AZeK/FBdj4bllbGn9OOzV2A6siV Dfk3irC5/8ZWppFD9XzCsAt29TKc2I0/Qh0= -----END CERTIFICATE-----Generated at Wed Oct 22 00:08:02 2025 by rpki-client