$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/29d649ff-7028-3767-8327-8c4721bf56a8.roa File: 29d649ff-7028-3767-8327-8c4721bf56a8.roa (raw, json) Hash identifier: PyJEQoO2CQd/kzpcgu3N5uSK+0irCFjlLnu5c4NQWI4= Subject key identifier: FB:86:CD:F6:D4:82:35:8E:C5:7E:1D:5B:B4:79:AA:73:19:EE:92:70 Certificate issuer: /CN=ab85686b-bac3-40d2-b46e-f2593fb0bc6b Certificate serial: 010D0C9F4328584BB45D15E3800B436ABDD1F200 Authority key identifier: 0E:5E:F6:3E:A7:FF:42:C0:84:5C:18:ED:96:19:B7:6D:8A:D9:86:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/29d649ff-7028-3767-8327-8c4721bf56a8.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 399668 IP address blocks: 2620:98:a000::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:15:e3:80:0b:43:6a:bd:d1:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab85686b-bac3-40d2-b46e-f2593fb0bc6b Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=3e40acf0-4274-490c-89c9-94ea535c1bcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d6:b4:eb:ac:18:ed:4b:4a:20:34:ae:9d:35: 6c:ba:fb:78:32:0c:24:07:49:5f:d9:73:c2:46:c0: 84:10:58:09:a9:8e:dc:e7:bf:9d:b5:35:1c:75:05: d9:87:ff:a4:cd:64:f7:8d:74:c6:9b:f7:5b:77:13: c2:dd:95:f1:8c:f4:da:5c:58:73:f6:de:ee:ca:57: dc:65:62:89:f8:1e:e8:87:08:26:66:b9:fd:ed:81: 69:ee:7a:ba:4c:03:85:48:22:45:37:fb:29:9d:bc: de:bc:37:a5:39:92:cd:74:fd:ac:12:1f:9e:52:e5: 46:c9:bf:6a:5b:4a:8d:d1:f3:d9:91:9d:f7:c6:b2: 53:00:98:4a:82:c9:0e:4f:ef:74:8a:f5:11:56:7e: e0:41:b8:89:da:a9:b7:a2:0f:01:15:68:83:ae:f6: c9:8e:63:00:18:97:21:bf:9b:08:f7:02:83:02:a2: 06:cc:b5:00:e8:8a:43:d9:4e:ca:20:ef:68:5c:24: 73:00:e4:cb:c3:96:e3:48:e2:c8:9a:7a:69:b0:5d: 51:5e:9c:db:5d:e2:cf:50:6e:af:ee:88:79:6c:99: 56:0d:00:76:18:a3:e3:5d:7c:5e:62:9d:56:23:7d: a6:69:e8:b8:d8:6c:31:9f:0e:3f:24:2d:6a:00:95: 5f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:86:CD:F6:D4:82:35:8E:C5:7E:1D:5B:B4:79:AA:73:19:EE:92:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/29d649ff-7028-3767-8327-8c4721bf56a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.crl X509v3 Authority Key Identifier: keyid:0E:5E:F6:3E:A7:FF:42:C0:84:5C:18:ED:96:19:B7:6D:8A:D9:86:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer sbgp-ipAddrBlock: critical IPv6: 2620:98:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:0c:dd:2b:53:fc:00:2c:70:29:e3:9f:48:bc:6f:0f:95:a8: 8f:b0:28:e9:b3:f6:77:b0:21:c0:a4:d8:40:cf:cc:b8:c5:3d: 95:09:57:c5:f8:1b:70:f9:d1:1d:2f:a4:a0:a6:f6:ae:c5:cf: 32:9d:ef:28:2f:1d:0f:d9:1c:f4:41:37:a2:a8:4c:a4:3b:55: 9a:5c:81:ef:c2:29:c3:85:b6:5f:62:d5:76:1b:18:a4:ba:71: 70:74:1f:68:a6:77:cc:54:03:b0:2a:68:75:3d:ec:33:55:e4: cf:25:17:50:55:0e:a0:17:f8:4d:a4:25:81:1c:76:46:b9:bf: a8:35:c8:8b:6f:d6:1d:f4:f4:36:d6:6a:12:37:b0:8d:af:f3: e8:2a:4d:8e:8f:92:df:38:49:18:02:16:66:c4:65:29:26:f4: 79:37:3f:7a:70:51:51:c7:c4:75:94:10:26:93:4b:55:60:48: d1:55:e7:52:50:92:5d:8e:7b:64:a9:43:5d:5f:f2:de:ef:c1: fd:9a:87:c9:d8:fc:0f:b6:07:be:79:97:ce:e7:a9:38:86:60: 61:98:27:60:75:c6:f4:e8:a3:e5:a3:4f:4c:8e:37:0a:10:27: 31:08:41:27:97:a8:23:9a:2f:39:3f:45:00:8e:26:2b:8b:42: 9b:e1:c4:52 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu0XRXjgAtDar3R8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4NTY4NmItYmFjMy00MGQyLWI0NmUtZjI1OTNmYjBi YzZiMB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk M2U0MGFjZjAtNDI3NC00OTBjLTg5YzktOTRlYTUzNWMxYmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgda066wY7UtKIDSunTVsuvt4MgwkB0lf2XPC RsCEEFgJqY7c57+dtTUcdQXZh/+kzWT3jXTGm/dbdxPC3ZXxjPTaXFhz9t7uylfc ZWKJ+B7ohwgmZrn97YFp7nq6TAOFSCJFN/spnbzevDelOZLNdP2sEh+eUuVGyb9q W0qN0fPZkZ33xrJTAJhKgskOT+90ivURVn7gQbiJ2qm3og8BFWiDrvbJjmMAGJch v5sI9wKDAqIGzLUA6IpD2U7KIO9oXCRzAOTLw5bjSOLImnppsF1RXpzbXeLPUG6v 7oh5bJlWDQB2GKPjXXxeYp1WI32maei42Gwxnw4/JC1qAJVfTwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPuGzfbUgjWOxX4dW7R5qnMZ7pJwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYjg1 Njg2Yi1iYWMzLTQwZDItYjQ2ZS1mMjU5M2ZiMGJjNmIvMjlkNjQ5ZmYtNzAyOC0z NzY3LTgzMjctOGM0NzIxYmY1NmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWI4NTY4NmItYmFjMy00MGQyLWI0 NmUtZjI1OTNmYjBiYzZiL2FiODU2ODZiLWJhYzMtNDBkMi1iNDZlLWYyNTkzZmIw YmM2Yi5jcmwwHwYDVR0jBBgwFoAUDl72Pqf/QsCEXBjtlhm3bYrZhr4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYjg1Njg2Yi1iYWMzLTQwZDItYjQ2ZS1mMjU5 M2ZiMGJjNmIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAmKAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJYM3StT/AAscCnjn0i8bw+VqI+wKOmz9newIcCk2EDPzLjFPZUJ V8X4G3D50R0vpKCm9q7FzzKd7ygvHQ/ZHPRBN6KoTKQ7VZpcge/CKcOFtl9i1XYb GKS6cXB0H2imd8xUA7AqaHU97DNV5M8lF1BVDqAX+E2kJYEcdka5v6g1yItv1h30 9DbWahI3sI2v8+gqTY6Pkt84SRgCFmbEZSkm9Hk3P3pwUVHHxHWUECaTS1VgSNFV 51JQkl2Oe2SpQ11f8t7vwf2ah8nY/A+2B755l87nqTiGYGGYJ2B1xvToo+WjT0yO NwoQJzEIQSeXqCOaLzk/RQCOJiuLQpvhxFI= -----END CERTIFICATE-----Generated at Wed Nov 5 13:24:56 2025 by rpki-client