$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd/29eacb2e-b566-3e8a-a848-698c8483bf5a.roa File: 29eacb2e-b566-3e8a-a848-698c8483bf5a.roa (raw, json) Hash identifier: +zws789OSxxS0QPLX/bmPSZL/G7D25DbiCuzusjIp5M= Subject key identifier: 3B:14:30:8C:E1:C5:C0:1F:51:84:F9:4B:9A:8E:2D:5C:33:AB:99:13 Certificate issuer: /CN=c28b7c13-301c-47fc-b39b-2201e763c4dd Certificate serial: 010D0C9F4328584BA932663CE38F534541EB7400 Authority key identifier: E4:00:44:49:6A:F4:E0:C2:47:22:B9:1B:EC:F8:50:C2:2B:7B:AC:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd/29eacb2e-b566-3e8a-a848-698c8483bf5a.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 30256 IP address blocks: 2620:21:c000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd/c28b7c13-301c-47fc-b39b-2201e763c4dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd/c28b7c13-301c-47fc-b39b-2201e763c4dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:66:3c:e3:8f:53:45:41:eb:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c28b7c13-301c-47fc-b39b-2201e763c4dd Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=2cb7148f-4eb8-460f-b569-6a442bfdeb75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:bc:b3:fc:10:26:96:f9:54:f0:95:15:c7:c4: c8:86:44:42:94:81:a1:ea:fe:80:58:df:fc:b0:15: 0c:f9:11:6e:aa:07:88:89:c2:56:95:97:c4:c8:70: 7d:5e:12:c1:01:4a:d2:f6:67:b3:e0:e4:fb:c2:88: 81:5d:5b:c1:cf:12:70:57:f0:d1:66:8c:c5:ec:16: f3:14:24:74:ea:01:39:c5:45:2d:22:2d:5e:39:85: 8c:3d:04:be:8f:6e:6c:00:51:db:80:aa:fd:50:fd: 84:6a:77:bc:a4:bb:fe:60:d1:e7:2e:79:22:d4:d3: 90:db:c9:8a:75:5e:9f:14:81:e7:c0:dc:f0:b7:5c: df:dc:a6:71:1e:af:a3:f5:aa:15:c5:3d:22:9c:13: cc:a6:dd:6f:46:43:a2:fe:16:47:17:e0:a3:df:7c: 1b:a9:6a:1f:e6:40:d9:3d:96:6c:fa:10:7e:b0:c6: 5b:93:c8:35:2b:c0:dd:7c:44:56:9e:2c:c4:52:35: 7c:8c:6e:26:73:6f:6e:da:9e:64:56:5f:e9:7a:c5: 1e:91:33:4b:a2:f3:0e:48:44:d1:d7:33:e5:b4:f0: f0:32:bd:6a:18:29:ce:5e:db:92:a6:0d:17:b0:72: df:8b:c0:87:cf:de:02:52:6e:ab:cc:ad:7b:f6:1c: 85:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:14:30:8C:E1:C5:C0:1F:51:84:F9:4B:9A:8E:2D:5C:33:AB:99:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd/29eacb2e-b566-3e8a-a848-698c8483bf5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd/c28b7c13-301c-47fc-b39b-2201e763c4dd.crl X509v3 Authority Key Identifier: keyid:E4:00:44:49:6A:F4:E0:C2:47:22:B9:1B:EC:F8:50:C2:2B:7B:AC:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd.cer sbgp-ipAddrBlock: critical IPv6: 2620:21:c000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:28:da:da:be:bb:11:ff:47:26:d8:d5:ce:cd:bb:c0:3e:52: e7:fb:59:e3:34:8e:47:63:72:80:0f:a6:c1:f6:62:34:fb:9f: 39:50:a9:86:24:e5:8b:a5:56:f7:e9:1b:5d:c3:73:65:4b:4f: 7f:2a:0e:11:60:a8:fc:4a:a2:dd:9e:d3:63:32:38:c6:f9:61: 9c:6f:2d:f9:27:1f:f8:5c:37:e2:a3:8d:c2:f4:e5:de:d8:84: bd:e5:50:42:5d:cb:9e:7a:0f:16:aa:46:6f:fb:70:0c:a7:ee: e2:37:de:66:75:f6:fb:a5:e5:9d:fb:22:d2:51:d0:a3:d1:98: a0:aa:a2:c0:8c:7e:bb:57:16:c2:4a:10:d1:56:f4:9e:d0:c4: 78:e9:a5:57:bf:e8:50:35:5b:32:88:dd:09:ba:03:31:f2:bc: 09:da:bc:65:a5:12:2f:22:6e:89:ec:b7:04:06:fe:8d:ac:15: 79:90:5f:1e:d8:ba:0c:5f:97:8b:d3:b3:1e:e1:18:45:eb:e8: 09:96:3d:9c:ce:76:12:7e:a7:06:6c:43:72:c3:fc:f0:59:34: af:3f:ac:42:3b:6b:b3:3c:8c:ab:ae:64:50:3f:23:ee:3f:14: b1:48:8e:0f:7e:2b:4d:4d:cb:31:e2:bc:48:91:d9:c0:49:81: ae:34:cf:d5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEupMmY8449TRUHrdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzI4YjdjMTMtMzAxYy00N2ZjLWIzOWItMjIwMWU3NjNj NGRkMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk MmNiNzE0OGYtNGViOC00NjBmLWI1NjktNmE0NDJiZmRlYjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLyz/BAmlvlU8JUVx8TIhkRClIGh6v6AWN/8 sBUM+RFuqgeIicJWlZfEyHB9XhLBAUrS9mez4OT7woiBXVvBzxJwV/DRZozF7Bbz FCR06gE5xUUtIi1eOYWMPQS+j25sAFHbgKr9UP2Eane8pLv+YNHnLnki1NOQ28mK dV6fFIHnwNzwt1zf3KZxHq+j9aoVxT0inBPMpt1vRkOi/hZHF+Cj33wbqWof5kDZ PZZs+hB+sMZbk8g1K8DdfERWnizEUjV8jG4mc29u2p5kVl/pesUekTNLovMOSETR 1zPltPDwMr1qGCnOXtuSpg0XsHLfi8CHz94CUm6rzK179hyFowIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDsUMIzhxcAfUYT5S5qOLVwzq5kTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jMjhi N2MxMy0zMDFjLTQ3ZmMtYjM5Yi0yMjAxZTc2M2M0ZGQvMjllYWNiMmUtYjU2Ni0z ZThhLWE4NDgtNjk4Yzg0ODNiZjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzI4YjdjMTMtMzAxYy00N2ZjLWIz OWItMjIwMWU3NjNjNGRkL2MyOGI3YzEzLTMwMWMtNDdmYy1iMzliLTIyMDFlNzYz YzRkZC5jcmwwHwYDVR0jBBgwFoAU5ABESWr04MJHIrkb7PhQwit7rIowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jMjhiN2MxMy0zMDFjLTQ3ZmMtYjM5Yi0yMjAx ZTc2M2M0ZGQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAIcAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADwo2tq+uxH/RybY1c7Nu8A+Uuf7WeM0jkdjcoAPpsH2YjT7nzlQ qYYk5YulVvfpG13Dc2VLT38qDhFgqPxKot2e02MyOMb5YZxvLfknH/hcN+KjjcL0 5d7YhL3lUEJdy556DxaqRm/7cAyn7uI33mZ19vul5Z37ItJR0KPRmKCqosCMfrtX FsJKENFW9J7QxHjppVe/6FA1WzKI3Qm6AzHyvAnavGWlEi8ibonstwQG/o2sFXmQ Xx7Yugxfl4vTsx7hGEXr6AmWPZzOdhJ+pwZsQ3LD/PBZNK8/rEI7a7M8jKuuZFA/ I+4/FLFIjg9+K01NyzHivEiR2cBJga40z9U= -----END CERTIFICATE-----Generated at Wed Nov 5 12:12:34 2025 by rpki-client