$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fcd6fa28-75d7-4873-b7e1-ef017bc15387/3018c49f-10ed-3a88-88a8-7e37d3780a5a.roa File: 3018c49f-10ed-3a88-88a8-7e37d3780a5a.roa (raw, json) Hash identifier: IBa34kKx9RTaM5mQ7Fdtl1tpVQp/zbe3yOnoxEjaKZ4= Subject key identifier: DB:C8:FF:31:D6:72:61:D2:CC:CE:5C:FF:C2:BB:D5:B2:C0:29:91:78 Certificate issuer: /CN=fcd6fa28-75d7-4873-b7e1-ef017bc15387 Certificate serial: 010D0C9F4328584AF3BBDEC5DA26763D88CFB100 Authority key identifier: D2:05:22:93:1C:31:FF:C4:77:0C:53:D8:1A:D0:DB:7A:C4:E0:56:50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fcd6fa28-75d7-4873-b7e1-ef017bc15387.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fcd6fa28-75d7-4873-b7e1-ef017bc15387/3018c49f-10ed-3a88-88a8-7e37d3780a5a.roa Signing time: Sat 23 Aug 2025 13:00:41 +0000 ROA not before: Sat 23 Aug 2025 13:00:41 +0000 ROA not after: Fri 21 Nov 2025 14:00:41 +0000 asID: 0 IP address blocks: 2620:d8:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fcd6fa28-75d7-4873-b7e1-ef017bc15387/fcd6fa28-75d7-4873-b7e1-ef017bc15387.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fcd6fa28-75d7-4873-b7e1-ef017bc15387/fcd6fa28-75d7-4873-b7e1-ef017bc15387.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fcd6fa28-75d7-4873-b7e1-ef017bc15387.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f3:bb:de:c5:da:26:76:3d:88:cf:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcd6fa28-75d7-4873-b7e1-ef017bc15387 Validity Not Before: Aug 23 13:00:41 2025 GMT Not After : Nov 21 14:00:41 2025 GMT Subject: CN=9f8c8b28-b8e4-49f3-aa32-36e015fb10d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:59:e4:a4:b1:c0:32:f7:c9:79:99:41:3c:38: 94:22:ae:51:96:60:e5:4c:75:a7:de:a5:00:31:76: 3e:1a:a7:bc:3c:c6:c3:4d:80:f9:15:60:71:c3:e2: 5a:bd:ee:58:8d:a9:2e:67:0d:5e:de:2a:07:8c:67: 5f:1d:d6:f0:22:ee:75:03:66:43:97:20:ec:34:b2: 67:07:df:a7:c4:60:24:c9:4a:f2:16:b5:ed:a9:b1: 58:f2:7f:71:fd:ae:b2:66:80:77:63:b0:79:64:f6: 68:06:3a:ed:59:77:f1:54:d7:73:71:3d:b6:b0:8e: 7f:d9:a6:90:d5:e0:b4:08:14:61:b3:cf:b0:01:0f: a7:95:07:94:09:1f:1a:2a:d8:91:2d:84:32:09:b2: 7f:43:c5:76:12:6e:a0:93:47:b5:98:61:70:8e:43: 24:b0:b8:50:d4:a9:59:a5:62:db:aa:34:38:58:81: be:37:3a:84:68:d8:bb:bd:5a:c1:80:cb:f2:41:13: 37:73:98:dc:0f:ba:5f:ae:19:e6:37:2d:8f:02:b4: 4f:30:81:54:2b:72:0c:31:29:b1:af:ae:77:ed:be: 37:cb:68:36:d5:67:8f:07:31:a4:20:de:59:bd:3e: 6d:39:fb:69:52:af:a8:f5:81:d6:fa:59:0a:c2:f8: 23:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:C8:FF:31:D6:72:61:D2:CC:CE:5C:FF:C2:BB:D5:B2:C0:29:91:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fcd6fa28-75d7-4873-b7e1-ef017bc15387/3018c49f-10ed-3a88-88a8-7e37d3780a5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fcd6fa28-75d7-4873-b7e1-ef017bc15387/fcd6fa28-75d7-4873-b7e1-ef017bc15387.crl X509v3 Authority Key Identifier: keyid:D2:05:22:93:1C:31:FF:C4:77:0C:53:D8:1A:D0:DB:7A:C4:E0:56:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fcd6fa28-75d7-4873-b7e1-ef017bc15387.cer sbgp-ipAddrBlock: critical IPv6: 2620:d8:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:1e:5d:ed:ed:d8:41:26:a1:87:9f:b6:54:af:0e:08:85:e0: a2:d4:de:11:07:68:92:96:13:30:b8:f0:fe:1d:26:85:e4:c5: e8:68:37:62:6e:2c:29:f2:b4:45:29:56:90:5e:25:dc:36:79: 11:c2:83:1f:d2:c3:3f:24:d4:06:72:9b:e4:5a:0c:68:95:ad: 7b:72:ac:5d:ab:c3:50:11:be:8f:2d:30:ee:e3:41:75:3d:94: a1:a8:cb:dc:d2:52:00:cb:2c:dd:c4:28:74:54:59:e1:23:14: ae:4c:58:1b:b1:9d:93:68:5a:00:b8:c1:28:c7:81:3a:d1:16: 41:6e:83:2f:18:7e:c5:5d:59:29:9a:20:0f:7e:28:66:cc:ba: d1:81:af:c3:8f:69:e7:6f:32:a2:05:cf:68:70:c2:de:85:22: b3:97:26:89:84:2e:ba:06:8a:91:14:35:32:00:21:9f:e0:e7: e6:64:ab:70:75:42:6b:dd:e6:42:ec:cc:12:1c:3c:04:a2:2b: b7:14:75:40:f6:06:1b:dd:e7:b7:1e:31:e3:e5:dd:31:c6:e2: f2:23:38:23:e5:25:02:86:55:63:4b:15:e5:73:8d:25:f0:ac: c4:0b:5b:ca:f4:8f:ce:93:61:15:cb:87:a0:29:73:4f:54:9c: 53:2a:e2:92 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErzu97F2iZ2PYjPsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmNkNmZhMjgtNzVkNy00ODczLWI3ZTEtZWYwMTdiYzE1 Mzg3MB4XDTI1MDgyMzEzMDA0MVoXDTI1MTEyMTE0MDA0MVowLzEtMCsGA1UEAxMk OWY4YzhiMjgtYjhlNC00OWYzLWFhMzItMzZlMDE1ZmIxMGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolnkpLHAMvfJeZlBPDiUIq5RlmDlTHWn3qUA MXY+Gqe8PMbDTYD5FWBxw+Jave5YjakuZw1e3ioHjGdfHdbwIu51A2ZDlyDsNLJn B9+nxGAkyUryFrXtqbFY8n9x/a6yZoB3Y7B5ZPZoBjrtWXfxVNdzcT22sI5/2aaQ 1eC0CBRhs8+wAQ+nlQeUCR8aKtiRLYQyCbJ/Q8V2Em6gk0e1mGFwjkMksLhQ1KlZ pWLbqjQ4WIG+NzqEaNi7vVrBgMvyQRM3c5jcD7pfrhnmNy2PArRPMIFUK3IMMSmx r6537b43y2g21WePBzGkIN5ZvT5tOftpUq+o9YHW+lkKwvgjpwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNvI/zHWcmHSzM5c/8K71bLAKZF4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mY2Q2 ZmEyOC03NWQ3LTQ4NzMtYjdlMS1lZjAxN2JjMTUzODcvMzAxOGM0OWYtMTBlZC0z YTg4LTg4YTgtN2UzN2QzNzgwYTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZmNkNmZhMjgtNzVkNy00ODczLWI3 ZTEtZWYwMTdiYzE1Mzg3L2ZjZDZmYTI4LTc1ZDctNDg3My1iN2UxLWVmMDE3YmMx NTM4Ny5jcmwwHwYDVR0jBBgwFoAU0gUikxwx/8R3DFPYGtDbesTgVlAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mY2Q2ZmEyOC03NWQ3LTQ4NzMtYjdlMS1lZjAx N2JjMTUzODcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAA2KAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF0eXe3t2EEmoYeftlSvDgiF4KLU3hEHaJKWEzC48P4dJoXkxeho N2JuLCnytEUpVpBeJdw2eRHCgx/Swz8k1AZym+RaDGiVrXtyrF2rw1ARvo8tMO7j QXU9lKGoy9zSUgDLLN3EKHRUWeEjFK5MWBuxnZNoWgC4wSjHgTrRFkFugy8YfsVd WSmaIA9+KGbMutGBr8OPaedvMqIFz2hwwt6FIrOXJomELroGipEUNTIAIZ/g5+Zk q3B1Qmvd5kLszBIcPASiK7cUdUD2Bhvd57ceMePl3THG4vIjOCPlJQKGVWNLFeVz jSXwrMQLW8r0j86TYRXLh6Apc09UnFMq4pI= -----END CERTIFICATE-----Generated at Wed Nov 5 01:59:22 2025 by rpki-client