$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/891fdfea-2051-34f1-a69e-9fb5e82a2d1b.roa File: 891fdfea-2051-34f1-a69e-9fb5e82a2d1b.roa (raw, json) Hash identifier: OKE+10jE0LVaPHw31ZPwSI/KU8mUcDp066lMjy+Hihs= Subject key identifier: 04:57:54:F0:59:76:9D:F2:3B:B3:8F:05:DF:05:BE:B4:E9:CE:3B:62 Certificate issuer: /CN=fd865c6a-54c8-4f58-ac80-9f9bdd368ee3 Certificate serial: 010D0C9F4328584BA93269CEE1FE1B6E867AAE00 Authority key identifier: 9C:5E:DB:84:DA:D7:B5:46:10:65:08:BB:F3:24:5A:F8:71:1F:CE:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/891fdfea-2051-34f1-a69e-9fb5e82a2d1b.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 209242 IP address blocks: 2620:117:bfb0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:69:ce:e1:fe:1b:6e:86:7a:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd865c6a-54c8-4f58-ac80-9f9bdd368ee3 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=4f51326f-88c5-4988-9b3b-dfa4be4b9a88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:53:3f:b8:8e:31:b4:38:2c:09:77:a2:36:c8: 00:a0:9a:f6:03:95:4f:75:08:df:85:5e:4f:70:b6: 29:0f:59:cb:c1:41:c2:01:72:87:2a:42:ce:79:37: 1c:01:91:cc:bd:b7:f0:b9:ae:fd:47:d4:62:88:4e: 77:a4:da:2b:b0:df:53:22:e8:2d:38:9c:95:92:1a: 21:6b:47:10:62:d2:a1:1f:9a:a9:ce:69:42:3c:92: 50:43:01:4f:73:7b:95:42:6a:82:8b:4e:bc:6b:e5: c8:7e:0f:34:32:f9:50:c0:70:e2:4b:8f:f7:5a:70: c1:6f:44:04:8d:b0:9e:d1:4a:a1:29:c9:d4:76:a9: d0:d6:24:74:a1:15:62:9d:15:1d:bc:39:f8:33:7d: 4c:56:1d:db:03:d5:de:b3:99:78:f1:70:d2:3b:dc: e2:ad:b0:1b:0d:32:eb:6a:77:c1:cc:f3:be:bd:9d: b1:43:36:58:a8:e7:55:1c:0a:ce:06:0c:2f:ff:ff: e7:46:5f:a6:8e:c3:59:62:97:ff:ff:08:fb:b1:6d: c7:75:46:6b:76:f9:d5:f4:3f:0f:45:be:d3:8c:c0: 79:2b:63:01:cb:0b:54:1d:27:83:96:36:27:61:e8: 75:5e:55:95:0b:76:bd:23:fb:ee:74:f1:b6:38:81: 8e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:57:54:F0:59:76:9D:F2:3B:B3:8F:05:DF:05:BE:B4:E9:CE:3B:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/891fdfea-2051-34f1-a69e-9fb5e82a2d1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.crl X509v3 Authority Key Identifier: keyid:9C:5E:DB:84:DA:D7:B5:46:10:65:08:BB:F3:24:5A:F8:71:1F:CE:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.cer sbgp-ipAddrBlock: critical IPv6: 2620:117:bfb0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:4e:3a:a3:5e:d4:c9:c5:62:2f:87:87:75:4d:4c:e9:cf:34: b3:10:67:0d:d9:e4:72:66:8e:f1:f5:85:2d:65:5a:ff:8c:10: 87:00:0f:b5:69:ba:8e:62:bf:8d:a0:db:04:9b:46:ad:4d:b3: af:13:c5:9b:7e:58:fa:25:b0:8c:24:25:ea:c0:93:04:d9:5d: e9:46:69:32:be:ff:52:56:e7:66:cf:d1:95:5e:f7:fc:f6:bf: 2c:9a:16:9f:eb:e4:a0:61:da:2d:b8:2e:b1:5a:80:df:95:06: bc:7c:57:c2:76:f2:00:de:11:b7:63:53:22:a1:42:e0:fa:c6: d0:e0:ff:b2:ae:2e:4c:88:04:0f:ef:96:0b:ca:fa:0f:2b:f8: e7:f9:26:07:cd:56:76:a9:7d:4a:fd:26:1c:65:b1:1a:85:6e: 11:81:a4:41:55:a5:e7:dd:fa:ed:81:41:67:02:1b:21:a3:81: 8e:59:0b:47:d7:2e:64:14:fb:16:93:c3:17:ac:49:de:0d:f0: 60:34:13:fb:13:e3:85:50:5b:ad:b0:6d:63:74:ad:83:c0:9b: 49:60:7c:cd:ff:af:1e:17:c4:b5:19:a7:c4:82:f8:5f:09:29: 20:0e:8a:9b:15:61:99:65:b0:95:ff:c6:c8:eb:b4:e5:65:80: eb:3f:d6:a3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEupMmnO4f4bboZ6rgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQ4NjVjNmEtNTRjOC00ZjU4LWFjODAtOWY5YmRkMzY4 ZWUzMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk NGY1MTMyNmYtODhjNS00OTg4LTliM2ItZGZhNGJlNGI5YTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFM/uI4xtDgsCXeiNsgAoJr2A5VPdQjfhV5P cLYpD1nLwUHCAXKHKkLOeTccAZHMvbfwua79R9RiiE53pNorsN9TIugtOJyVkhoh a0cQYtKhH5qpzmlCPJJQQwFPc3uVQmqCi068a+XIfg80MvlQwHDiS4/3WnDBb0QE jbCe0UqhKcnUdqnQ1iR0oRVinRUdvDn4M31MVh3bA9Xes5l48XDSO9zirbAbDTLr anfBzPO+vZ2xQzZYqOdVHArOBgwv///nRl+mjsNZYpf//wj7sW3HdUZrdvnV9D8P Rb7TjMB5K2MBywtUHSeDljYnYeh1XlWVC3a9I/vudPG2OIGOvQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFARXVPBZdp3yO7OPBd8FvrTpzjtiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mZDg2 NWM2YS01NGM4LTRmNTgtYWM4MC05ZjliZGQzNjhlZTMvODkxZmRmZWEtMjA1MS0z NGYxLWE2OWUtOWZiNWU4MmEyZDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZmQ4NjVjNmEtNTRjOC00ZjU4LWFj ODAtOWY5YmRkMzY4ZWUzL2ZkODY1YzZhLTU0YzgtNGY1OC1hYzgwLTlmOWJkZDM2 OGVlMy5jcmwwHwYDVR0jBBgwFoAUnF7bhNrXtUYQZQi78yRa+HEfzo4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mZDg2NWM2YS01NGM4LTRmNTgtYWM4MC05Zjli ZGQzNjhlZTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABF7+w MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD5OOqNe1MnFYi+Hh3VNTOnPNLMQZw3Z5HJmjvH1hS1lWv+MEIcA D7Vpuo5iv42g2wSbRq1Ns68TxZt+WPolsIwkJerAkwTZXelGaTK+/1JW52bP0ZVe 9/z2vyyaFp/r5KBh2i24LrFagN+VBrx8V8J28gDeEbdjUyKhQuD6xtDg/7KuLkyI BA/vlgvK+g8r+Of5JgfNVnapfUr9JhxlsRqFbhGBpEFVpefd+u2BQWcCGyGjgY5Z C0fXLmQU+xaTwxesSd4N8GA0E/sT44VQW62wbWN0rYPAm0lgfM3/rx4XxLUZp8SC +F8JKSAOipsVYZllsJX/xsjrtOVlgOs/1qM= -----END CERTIFICATE-----Generated at Tue Nov 4 17:19:24 2025 by rpki-client