$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/fbbba54b-950b-302b-a65a-9cf427e72454.roa File: fbbba54b-950b-302b-a65a-9cf427e72454.roa (raw, json) Hash identifier: EfWdFAJSlPSZj9UHIpfB+gkIyR8766wuvlYqZYVmSdc= Subject key identifier: 52:48:30:AC:D5:7F:E1:74:EE:F1:83:94:7E:40:91:4E:02:26:2A:0C Certificate issuer: /CN=3c8a971f-d7dc-4e95-bc6e-a0db15f80a84 Certificate serial: 010D0C9F4328584BA9324DD97C9FDFD4FC0D1A60 Authority key identifier: B9:FA:57:DE:DB:64:ED:20:6A:5E:8D:41:2D:2E:86:34:D7:63:4B:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/fbbba54b-950b-302b-a65a-9cf427e72454.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 23102 IP address blocks: 2620:95::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:4d:d9:7c:9f:df:d4:fc:0d:1a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c8a971f-d7dc-4e95-bc6e-a0db15f80a84 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=08747650-168b-4d2e-99c5-2c4758829be3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:32:ba:c1:52:1d:3f:89:6b:99:bc:de:36:e2: 88:0a:e7:32:f7:13:b5:2a:ca:80:ca:4e:0d:c4:d5: 08:8c:bc:d3:04:be:e8:00:9c:a2:db:6c:c8:51:c1: a0:1e:37:89:98:5d:d0:b4:45:24:5d:b6:7d:e5:c8: 50:c5:b3:e4:90:64:74:a2:d3:b8:b5:65:be:69:c5: 01:c5:70:a2:ec:87:53:4f:2c:65:36:22:52:db:ce: 43:d9:29:71:87:29:65:13:d2:29:d5:50:30:4d:a9: 46:01:86:67:55:89:ec:cd:b8:5c:ee:33:d3:5f:d6: ef:02:4c:58:00:0f:85:f4:f9:55:7b:dc:53:ff:e4: 14:7e:8c:15:7e:9f:c0:2f:d2:84:d6:9b:50:22:8e: 02:d3:dd:8d:4f:5f:a8:37:29:85:57:62:cc:b0:33: 66:a0:b6:64:7b:a8:1b:aa:20:f9:d1:ed:39:bb:ab: a7:9d:c3:83:8b:08:78:25:db:37:b6:27:78:cb:c5: ee:3e:32:a5:90:3f:bc:bb:f9:16:d8:bd:0a:99:52: 67:f9:a3:b3:f1:8d:ee:b2:ba:d5:17:df:dc:34:a5: 9c:61:a0:86:b4:85:40:44:77:1c:ae:08:5a:99:1a: fc:01:ad:69:e0:b7:7e:a4:f5:37:58:b5:21:76:4d: ce:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:48:30:AC:D5:7F:E1:74:EE:F1:83:94:7E:40:91:4E:02:26:2A:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/fbbba54b-950b-302b-a65a-9cf427e72454.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.crl X509v3 Authority Key Identifier: keyid:B9:FA:57:DE:DB:64:ED:20:6A:5E:8D:41:2D:2E:86:34:D7:63:4B:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.cer sbgp-ipAddrBlock: critical IPv6: 2620:95::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:f4:b7:ad:71:4d:46:e5:7c:f0:c9:da:11:c3:01:8e:67:56: 45:fc:12:56:96:8c:82:74:15:c3:bc:d1:75:25:fd:15:e7:28: a9:ee:29:cc:3b:fc:ba:38:36:55:7d:71:1c:a2:e7:44:ab:6f: f0:e0:d6:78:5c:ed:eb:97:1a:8c:6a:13:7f:0e:ec:d1:da:ba: b6:d4:d6:92:9a:ce:64:23:12:f8:96:a8:74:59:b5:9c:24:1d: 5d:c5:8f:fe:3f:7d:b0:59:b5:3f:af:f0:56:6b:73:f7:67:b1: 8a:0c:40:1b:26:6f:05:16:18:cf:3c:47:6f:a0:9e:ec:bf:50: ca:90:f7:c2:93:de:78:db:b2:72:13:e4:e4:8f:e1:c5:14:b8: 20:9c:ec:ad:d2:1d:84:d3:5f:19:16:2f:fe:2c:9a:1f:30:23: 1c:56:8a:3f:52:d8:ac:d2:ee:77:11:55:ad:94:0f:c6:55:5e: f6:22:1e:b2:7d:e2:7f:f6:e8:4d:9a:28:7f:f1:50:07:0a:bc: 7b:99:6b:70:f2:ec:cf:61:4a:17:bb:42:b5:2f:c1:65:02:ba: 60:52:e4:69:aa:2a:85:e3:d7:0d:e9:e1:b1:50:51:c8:fe:ef: 2d:bd:eb:c5:7b:ff:b2:71:79:ca:37:ce:b5:d2:79:e7:9e:11: d8:e9:be:f3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEupMk3ZfJ/f1PwNGmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M4YTk3MWYtZDdkYy00ZTk1LWJjNmUtYTBkYjE1Zjgw YTg0MB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk MDg3NDc2NTAtMTY4Yi00ZDJlLTk5YzUtMmM0NzU4ODI5YmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojK6wVIdP4lrmbzeNuKICucy9xO1KsqAyk4N xNUIjLzTBL7oAJyi22zIUcGgHjeJmF3QtEUkXbZ95chQxbPkkGR0otO4tWW+acUB xXCi7IdTTyxlNiJS285D2SlxhyllE9Ip1VAwTalGAYZnVYnszbhc7jPTX9bvAkxY AA+F9PlVe9xT/+QUfowVfp/AL9KE1ptQIo4C092NT1+oNymFV2LMsDNmoLZke6gb qiD50e05u6unncODiwh4Jds3tid4y8XuPjKlkD+8u/kW2L0KmVJn+aOz8Y3usrrV F9/cNKWcYaCGtIVARHccrghamRr8Aa1p4Ld+pPU3WLUhdk3OeQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFJIMKzVf+F07vGDlH5AkU4CJioMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zYzhh OTcxZi1kN2RjLTRlOTUtYmM2ZS1hMGRiMTVmODBhODQvZmJiYmE1NGItOTUwYi0z MDJiLWE2NWEtOWNmNDI3ZTcyNDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2M4YTk3MWYtZDdkYy00ZTk1LWJj NmUtYTBkYjE1ZjgwYTg0LzNjOGE5NzFmLWQ3ZGMtNGU5NS1iYzZlLWEwZGIxNWY4 MGE4NC5jcmwwHwYDVR0jBBgwFoAUufpX3ttk7SBqXo1BLS6GNNdjSxQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zYzhhOTcxZi1kN2RjLTRlOTUtYmM2ZS1hMGRi MTVmODBhODQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAlQAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIH0t61xTUblfPDJ2hHDAY5nVkX8ElaWjIJ0FcO80XUl/RXnKKnu Kcw7/Lo4NlV9cRyi50Srb/Dg1nhc7euXGoxqE38O7NHaurbU1pKazmQjEviWqHRZ tZwkHV3Fj/4/fbBZtT+v8FZrc/dnsYoMQBsmbwUWGM88R2+gnuy/UMqQ98KT3njb snIT5OSP4cUUuCCc7K3SHYTTXxkWL/4smh8wIxxWij9S2KzS7ncRVa2UD8ZVXvYi HrJ94n/26E2aKH/xUAcKvHuZa3Dy7M9hShe7QrUvwWUCumBS5GmqKoXj1w3p4bFQ Ucj+7y2968V7/7Jxeco3zrXSeeeeEdjpvvM= -----END CERTIFICATE-----Generated at Wed Nov 5 13:43:51 2025 by rpki-client