$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b/a43a41c8-9815-3189-85dc-d60e1985a8f9.roa File: a43a41c8-9815-3189-85dc-d60e1985a8f9.roa (raw, json) Hash identifier: ndR9Eew+inHmLLlfclPHBqG5WqO6PBqpX5n4kcT09pg= Subject key identifier: A1:F4:51:A6:DC:10:E0:C4:F8:6B:44:72:0A:6E:59:02:78:39:8C:23 Certificate issuer: /CN=fe7971b5-882f-48cc-b123-b84d7b9b8c5b Certificate serial: 010D0C9F4328584B84E780F7D045B8001462A3E0 Authority key identifier: CB:96:D4:21:6F:16:90:CC:EA:79:7D:13:9F:E7:93:BF:FC:1D:A9:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b/a43a41c8-9815-3189-85dc-d60e1985a8f9.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 16430 IP address blocks: 2620:f4:4000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b/fe7971b5-882f-48cc-b123-b84d7b9b8c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b/fe7971b5-882f-48cc-b123-b84d7b9b8c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:80:f7:d0:45:b8:00:14:62:a3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe7971b5-882f-48cc-b123-b84d7b9b8c5b Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=8cd632a2-2864-47dd-8717-3d0f186be0f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:36:a1:9c:e4:e9:a7:14:f2:f2:10:ae:2f:81: 71:34:46:fd:20:85:ec:a2:8f:c2:6f:c4:1a:a0:b7: 92:46:0b:f2:4c:91:05:9d:9c:0e:8f:5a:d3:14:a8: 3d:a5:39:81:22:8d:78:19:c2:78:6f:50:d6:9f:a5: b8:4b:92:af:ac:89:25:25:d5:16:02:86:da:02:de: 77:c8:9c:9d:f2:33:7d:08:40:2d:28:c1:a8:4b:bd: 7f:56:8a:ee:65:56:df:f7:f4:b5:02:23:2c:d4:cd: 0b:a1:db:0f:9d:8b:b3:05:4b:c8:34:fb:6a:00:c9: 63:2a:ca:a1:3f:92:4d:57:bd:b8:82:67:49:72:f6: 04:ec:6d:94:d6:09:38:19:39:60:6e:20:a3:82:58: 8d:81:00:3f:e8:17:4f:e3:8f:41:80:ff:a9:5f:ab: 32:08:36:d2:0b:23:05:f3:0e:fa:0f:d8:67:bf:06: 13:e5:6e:e6:77:f4:91:62:4e:fa:f8:9e:2e:2b:c3: 8a:07:d2:48:9b:d0:6c:b1:ca:e4:4f:74:93:cf:8e: 8a:82:20:20:4b:b7:d9:40:57:51:8b:e0:75:a5:6e: ba:01:82:55:66:4a:a4:42:49:2f:59:35:bb:3e:84: ff:a7:f8:53:1c:77:d7:f6:c9:47:d7:4f:fb:23:03: d2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:F4:51:A6:DC:10:E0:C4:F8:6B:44:72:0A:6E:59:02:78:39:8C:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b/a43a41c8-9815-3189-85dc-d60e1985a8f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b/fe7971b5-882f-48cc-b123-b84d7b9b8c5b.crl X509v3 Authority Key Identifier: keyid:CB:96:D4:21:6F:16:90:CC:EA:79:7D:13:9F:E7:93:BF:FC:1D:A9:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b.cer sbgp-ipAddrBlock: critical IPv6: 2620:f4:4000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:dc:d9:1b:22:37:cf:39:ce:ee:04:84:2c:46:78:b9:7c:69: ef:50:cd:0b:a6:56:88:79:e1:13:cb:25:ae:9b:aa:b4:46:35: a6:25:77:5a:79:f9:fd:e8:0b:3e:d9:6d:65:f6:f7:79:76:e0: dd:0f:79:83:c7:a7:fc:19:37:5a:b8:5d:6d:96:07:3e:fc:65: 9f:fe:4b:8c:3a:47:91:07:66:2f:af:b0:62:23:86:47:e5:80: 9a:1d:12:89:45:6c:3d:fd:08:bb:cb:ec:31:b8:76:16:27:8e: b5:fd:c2:37:f6:64:55:ea:e5:15:5c:55:7c:e4:bd:63:f2:ac: 4f:f2:68:dd:cf:e6:de:42:33:f3:42:71:e2:a6:99:5f:17:88: 26:ca:97:c4:23:99:5b:f3:40:82:c4:80:0b:41:3f:7c:af:7d: c6:56:86:ac:d8:c9:03:06:9a:35:72:56:1e:eb:a2:12:77:56: 6d:c0:fa:96:2c:b9:ec:13:2f:78:40:78:f9:ea:37:95:30:86: d7:56:67:9f:50:ec:d1:8b:86:67:43:65:92:20:f1:38:6e:40: c6:61:3d:69:ce:b6:f0:6c:d2:f4:bc:1a:ba:68:57:68:ff:1e: 3e:ce:45:61:76:e4:ac:7a:e3:e1:f9:6d:f2:f7:cf:0f:e7:b8: 5c:be:c3:fe -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuE54D30EW4ABRio+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmU3OTcxYjUtODgyZi00OGNjLWIxMjMtYjg0ZDdiOWI4 YzViMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk OGNkNjMyYTItMjg2NC00N2RkLTg3MTctM2QwZjE4NmJlMGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjahnOTppxTy8hCuL4FxNEb9IIXsoo/Cb8Qa oLeSRgvyTJEFnZwOj1rTFKg9pTmBIo14GcJ4b1DWn6W4S5KvrIklJdUWAobaAt53 yJyd8jN9CEAtKMGoS71/VoruZVbf9/S1AiMs1M0LodsPnYuzBUvINPtqAMljKsqh P5JNV724gmdJcvYE7G2U1gk4GTlgbiCjgliNgQA/6BdP449BgP+pX6syCDbSCyMF 8w76D9hnvwYT5W7md/SRYk76+J4uK8OKB9JIm9BsscrkT3STz46KgiAgS7fZQFdR i+B1pW66AYJVZkqkQkkvWTW7PoT/p/hTHHfX9slH10/7IwPSFwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKH0UabcEODE+GtEcgpuWQJ4OYwjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZTc5 NzFiNS04ODJmLTQ4Y2MtYjEyMy1iODRkN2I5YjhjNWIvYTQzYTQxYzgtOTgxNS0z MTg5LTg1ZGMtZDYwZTE5ODVhOGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmU3OTcxYjUtODgyZi00OGNjLWIx MjMtYjg0ZDdiOWI4YzViL2ZlNzk3MWI1LTg4MmYtNDhjYy1iMTIzLWI4NGQ3Yjli OGM1Yi5jcmwwHwYDVR0jBBgwFoAUy5bUIW8WkMzqeX0Tn+eTv/wdqUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mZTc5NzFiNS04ODJmLTQ4Y2MtYjEyMy1iODRk N2I5YjhjNWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiAA9EAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEANNzZGyI3zznO7gSELEZ4uXxp71DNC6ZWiHnhE8slrpuqtEY1piV3 Wnn5/egLPtltZfb3eXbg3Q95g8en/Bk3WrhdbZYHPvxln/5LjDpHkQdmL6+wYiOG R+WAmh0SiUVsPf0Iu8vsMbh2FieOtf3CN/ZkVerlFVxVfOS9Y/KsT/Jo3c/m3kIz 80Jx4qaZXxeIJsqXxCOZW/NAgsSAC0E/fK99xlaGrNjJAwaaNXJWHuuiEndWbcD6 liy57BMveEB4+eo3lTCG11Znn1Ds0YuGZ0NlkiDxOG5AxmE9ac628GzS9LwaumhX aP8ePs5FYXbkrHrj4flt8vfPD+e4XL7D/g== -----END CERTIFICATE-----Generated at Sat Oct 18 21:22:59 2025 by rpki-client