$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940/fc4d7dbd-9606-3f43-8365-cf54431aa61b.roa File: fc4d7dbd-9606-3f43-8365-cf54431aa61b.roa (raw, json) Hash identifier: LYPoRmNtycVjD3Ir8X9SMdzxIv9GEh4pVvNORcgFho0= Subject key identifier: 87:04:5A:4C:8D:9C:C3:36:49:77:09:92:0F:72:1A:10:A1:E7:A0:23 Certificate issuer: /CN=b9b0013b-aa8f-41bf-a6f9-0b1c072f5940 Certificate serial: 010D0C9F4328584B8EACC272F0F3FABE81842E60 Authority key identifier: F7:2C:38:70:02:34:F6:5A:9B:E7:A2:B7:5D:4B:B1:E9:44:1C:74:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940/fc4d7dbd-9606-3f43-8365-cf54431aa61b.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 58419 IP address blocks: 2620:131:3008::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:c2:72:f0:f3:fa:be:81:84:2e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9b0013b-aa8f-41bf-a6f9-0b1c072f5940 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=03ce3969-2774-4783-8d86-d8631760f3ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:67:a1:bb:28:bd:bc:8b:5e:11:4d:0c:04:4b: ee:b0:4a:ca:eb:45:86:79:78:51:ba:40:b6:b1:fd: 62:6c:62:43:25:21:84:19:d7:15:d7:29:cf:37:e5: 6a:9b:dc:90:69:bf:ab:9b:79:08:fa:43:ad:05:12: 9a:8d:8c:4a:00:c3:a6:2a:e7:b2:85:b5:ad:47:16: 51:e6:dc:b8:fd:5f:30:3d:73:ca:7e:46:32:5a:f3: 1d:60:72:70:57:25:96:c9:64:08:fc:82:73:3a:71: 45:f9:1f:83:69:ff:00:43:02:a4:db:a3:1a:7f:7e: 1e:3d:5b:f8:8b:b5:1b:2b:33:27:da:6e:7e:13:54: 25:49:3c:8c:b2:ea:f6:46:be:25:a9:3c:21:5d:81: b9:0b:cb:db:76:a3:72:17:b4:3c:8e:60:9a:8f:84: 4c:ec:92:8c:d6:b7:23:10:dc:86:3a:60:b1:c5:7e: 1e:86:77:41:01:e3:87:71:24:64:28:84:69:67:0f: 39:13:14:7d:93:87:4a:c3:ef:00:38:39:2d:70:9b: 49:bd:22:f9:0e:73:6c:7d:ec:4f:5c:0d:6e:21:c0: 2a:df:f7:31:50:b7:c2:0a:82:90:c4:f8:15:27:fe: ce:88:9f:3e:64:fd:53:50:ec:31:7c:55:3b:32:24: ff:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:04:5A:4C:8D:9C:C3:36:49:77:09:92:0F:72:1A:10:A1:E7:A0:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940/fc4d7dbd-9606-3f43-8365-cf54431aa61b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940.crl X509v3 Authority Key Identifier: keyid:F7:2C:38:70:02:34:F6:5A:9B:E7:A2:B7:5D:4B:B1:E9:44:1C:74:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940.cer sbgp-ipAddrBlock: critical IPv6: 2620:131:3008::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:e0:1a:81:73:b0:23:af:c6:6c:1d:8d:9c:e1:9c:18:ae:d6: 7b:e3:11:3d:60:c1:4d:4b:41:62:34:31:40:c5:55:41:d5:89: ab:66:01:78:b2:7d:67:9d:db:65:c7:75:0d:e2:88:b2:8b:12: 80:55:f3:6e:52:13:b1:78:54:cd:de:e2:75:c6:a1:54:45:0b: bc:3e:8f:95:e8:26:05:92:3e:5e:f3:36:6f:8e:0d:ed:d4:d3: d3:6c:48:8e:1b:68:3c:0c:20:8a:8b:78:48:7e:81:ef:87:1b: 10:9f:20:06:00:bd:9f:da:b4:31:05:20:64:b6:95:29:f9:7c: 3b:a4:49:9b:40:e7:b0:f9:e9:bf:92:cc:c5:d3:67:c3:95:22: 43:4f:a5:c8:aa:0c:7d:9f:30:5b:7d:20:df:cf:1e:82:0c:fa: 22:ad:a9:ed:1e:2e:f0:c8:8a:dd:91:80:5b:0d:ed:61:4c:08: a7:4e:54:d2:ae:00:fd:b1:fa:38:e9:fa:e3:14:e0:35:a0:a6: 8b:cc:a9:20:f2:d9:9c:f0:30:38:72:93:b5:2c:00:22:eb:b2: 62:31:02:3f:1f:37:df:f9:59:4b:fa:6f:2e:fe:7d:86:8e:03: fb:4f:7e:cb:3a:6e:b2:d4:68:22:95:94:88:73:d6:35:1f:6d: db:4f:25:22 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuOrMJy8PP6voGELmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjliMDAxM2ItYWE4Zi00MWJmLWE2ZjktMGIxYzA3MmY1 OTQwMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk MDNjZTM5NjktMjc3NC00NzgzLThkODYtZDg2MzE3NjBmM2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGehuyi9vIteEU0MBEvusErK60WGeXhRukC2 sf1ibGJDJSGEGdcV1ynPN+Vqm9yQab+rm3kI+kOtBRKajYxKAMOmKueyhbWtRxZR 5ty4/V8wPXPKfkYyWvMdYHJwVyWWyWQI/IJzOnFF+R+Daf8AQwKk26Maf34ePVv4 i7UbKzMn2m5+E1QlSTyMsur2Rr4lqTwhXYG5C8vbdqNyF7Q8jmCaj4RM7JKM1rcj ENyGOmCxxX4ehndBAeOHcSRkKIRpZw85ExR9k4dKw+8AODktcJtJvSL5DnNsfexP XA1uIcAq3/cxULfCCoKQxPgVJ/7OiJ8+ZP1TUOwxfFU7MiT/PwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIcEWkyNnMM2SXcJkg9yGhCh56AjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOWIw MDEzYi1hYThmLTQxYmYtYTZmOS0wYjFjMDcyZjU5NDAvZmM0ZDdkYmQtOTYwNi0z ZjQzLTgzNjUtY2Y1NDQzMWFhNjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjliMDAxM2ItYWE4Zi00MWJmLWE2 ZjktMGIxYzA3MmY1OTQwL2I5YjAwMTNiLWFhOGYtNDFiZi1hNmY5LTBiMWMwNzJm NTk0MC5jcmwwHwYDVR0jBBgwFoAU9yw4cAI09lqb56K3XUux6UQcdBUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOWIwMDEzYi1hYThmLTQxYmYtYTZmOS0wYjFj MDcyZjU5NDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJiABMTAI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ7gGoFzsCOvxmwdjZzhnBiu1nvjET1gwU1LQWI0MUDFVUHViatm AXiyfWed22XHdQ3iiLKLEoBV825SE7F4VM3e4nXGoVRFC7w+j5XoJgWSPl7zNm+O De3U09NsSI4baDwMIIqLeEh+ge+HGxCfIAYAvZ/atDEFIGS2lSn5fDukSZtA57D5 6b+SzMXTZ8OVIkNPpciqDH2fMFt9IN/PHoIM+iKtqe0eLvDIit2RgFsN7WFMCKdO VNKuAP2x+jjp+uMU4DWgpovMqSDy2ZzwMDhyk7UsACLrsmIxAj8fN9/5WUv6by7+ fYaOA/tPfss6brLUaCKVlIhz1jUfbdtPJSI= -----END CERTIFICATE-----Generated at Mon Oct 20 21:14:51 2025 by rpki-client