$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/4f20e63c-cd20-3051-9632-312975732fcb.roa File: 4f20e63c-cd20-3051-9632-312975732fcb.roa (raw, json) Hash identifier: +o962QjYfKRdXGaqk2kevH2CIZiCFE7qIPEqYc9PGZ4= Subject key identifier: 38:C4:1E:A4:62:A6:66:F1:32:E4:AF:BA:C3:35:C0:4A:40:F8:E3:EA Certificate issuer: /CN=29cf59bb-49d4-46dc-a312-da9c10dc336e Certificate serial: 010D0C9F4328584B4081A0B82F28689D8FF4E380 Authority key identifier: 75:6D:39:EF:55:71:4A:71:37:2C:93:BC:47:6F:1D:A8:BC:34:23:90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/4f20e63c-cd20-3051-9632-312975732fcb.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 6859 IP address blocks: 2620:0:5300::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/29cf59bb-49d4-46dc-a312-da9c10dc336e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/29cf59bb-49d4-46dc-a312-da9c10dc336e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:a0:b8:2f:28:68:9d:8f:f4:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29cf59bb-49d4-46dc-a312-da9c10dc336e Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=d379de34-a0b7-4fa3-a8ef-87fb4b4c837d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:58:88:7f:bb:b2:36:55:66:8c:26:6c:7e:06: 42:1a:b8:ff:0d:5f:18:64:06:3a:f1:4b:72:7a:c1: e0:f3:99:3d:c1:5f:6e:b4:e4:27:77:ba:3f:b6:b9: 99:03:89:0f:eb:d9:56:b2:71:a8:23:ab:4c:84:d8: ac:0e:e1:8c:4d:f5:87:70:12:b1:4c:81:c3:20:16: 91:14:3d:c3:66:37:24:3d:ce:76:7f:ed:2e:04:e2: 69:42:35:7c:d2:5f:f3:ee:85:90:75:16:3b:76:52: 43:22:91:8e:d8:b8:91:c9:3a:33:13:1e:a8:e8:d7: 82:5e:44:2b:bd:52:b7:88:da:31:f0:b9:0f:0a:13: 1e:f4:18:f6:37:fc:ba:5e:af:92:c8:db:95:59:ba: f6:c0:66:e1:da:4b:91:35:99:b6:5c:e5:df:f6:53: 03:c0:a0:c3:9e:57:84:23:ed:fc:05:94:be:50:20: 41:b8:04:78:11:b8:18:7c:9c:95:39:62:67:a0:4a: 48:d9:2a:cf:39:14:54:81:77:9c:9c:9a:35:9f:9a: 70:00:f4:cf:3f:77:ea:e3:5f:db:b2:3d:88:43:30: 97:81:fc:60:83:a5:c1:32:df:f1:d0:08:a2:85:94: d7:dd:af:59:eb:c6:fc:7a:45:10:51:a2:20:e9:1d: 26:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:C4:1E:A4:62:A6:66:F1:32:E4:AF:BA:C3:35:C0:4A:40:F8:E3:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/4f20e63c-cd20-3051-9632-312975732fcb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/29cf59bb-49d4-46dc-a312-da9c10dc336e.crl X509v3 Authority Key Identifier: keyid:75:6D:39:EF:55:71:4A:71:37:2C:93:BC:47:6F:1D:A8:BC:34:23:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:5300::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:65:58:eb:09:57:62:d7:46:21:4b:a2:06:29:36:25:10:52: d3:51:2a:ce:79:2d:3e:df:2a:c5:4e:fa:df:c9:c2:0c:96:69: ba:b1:20:b7:a9:15:df:a2:7c:67:2e:36:ca:d6:89:1c:d6:97: 9f:3e:5c:a1:c9:a2:79:de:79:1a:78:33:cc:e9:11:74:18:bd: 3f:4a:99:05:86:7e:74:7a:7d:91:e5:56:9c:66:48:65:25:0b: 0c:77:63:0a:d5:12:65:82:fd:ad:41:8d:d3:8c:97:13:31:60: e3:7a:4b:fa:9b:8e:95:34:e7:88:4d:31:6c:35:c1:8d:fc:a4: 5e:70:81:26:ba:34:02:d1:ae:71:61:01:d2:6f:ee:c0:b2:88: 1e:56:93:11:97:dc:6c:9d:5b:78:2a:c3:47:00:79:e2:1e:d6: 21:72:3e:15:08:21:78:df:1e:7f:7b:3e:e4:3d:e0:f1:3d:9c: d9:bf:24:7c:dd:df:b9:cb:5b:e7:15:c3:ac:90:e3:9c:0a:cd: 1c:08:d3:03:7f:ef:60:4e:67:da:8c:1b:a3:81:8a:d3:ec:ba: ee:8b:11:eb:68:02:ff:f9:4a:f4:44:53:ec:1a:a9:af:24:ff: f7:af:64:be:bc:aa:45:e3:2a:65:53:2e:6b:ee:93:9d:d2:b3: 91:ae:43:09 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtAgaC4LyhonY/044AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjljZjU5YmItNDlkNC00NmRjLWEzMTItZGE5YzEwZGMz MzZlMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk ZDM3OWRlMzQtYTBiNy00ZmEzLWE4ZWYtODdmYjRiNGM4MzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1iIf7uyNlVmjCZsfgZCGrj/DV8YZAY68Uty esHg85k9wV9utOQnd7o/trmZA4kP69lWsnGoI6tMhNisDuGMTfWHcBKxTIHDIBaR FD3DZjckPc52f+0uBOJpQjV80l/z7oWQdRY7dlJDIpGO2LiRyTozEx6o6NeCXkQr vVK3iNox8LkPChMe9Bj2N/y6Xq+SyNuVWbr2wGbh2kuRNZm2XOXf9lMDwKDDnleE I+38BZS+UCBBuAR4EbgYfJyVOWJnoEpI2SrPORRUgXecnJo1n5pwAPTPP3fq41/b sj2IQzCXgfxgg6XBMt/x0AiihZTX3a9Z68b8ekUQUaIg6R0mDwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDjEHqRipmbxMuSvusM1wEpA+OPqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOWNm NTliYi00OWQ0LTQ2ZGMtYTMxMi1kYTljMTBkYzMzNmUvNGYyMGU2M2MtY2QyMC0z MDUxLTk2MzItMzEyOTc1NzMyZmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjljZjU5YmItNDlkNC00NmRjLWEz MTItZGE5YzEwZGMzMzZlLzI5Y2Y1OWJiLTQ5ZDQtNDZkYy1hMzEyLWRhOWMxMGRj MzM2ZS5jcmwwHwYDVR0jBBgwFoAUdW0571VxSnE3LJO8R28dqLw0I5AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yOWNmNTliYi00OWQ0LTQ2ZGMtYTMxMi1kYTlj MTBkYzMzNmUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAAAFMA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADNlWOsJV2LXRiFLogYpNiUQUtNRKs55LT7fKsVO+t/JwgyWabqx ILepFd+ifGcuNsrWiRzWl58+XKHJonneeRp4M8zpEXQYvT9KmQWGfnR6fZHlVpxm SGUlCwx3YwrVEmWC/a1BjdOMlxMxYON6S/qbjpU054hNMWw1wY38pF5wgSa6NALR rnFhAdJv7sCyiB5WkxGX3GydW3gqw0cAeeIe1iFyPhUIIXjfHn97PuQ94PE9nNm/ JHzd37nLW+cVw6yQ45wKzRwI0wN/72BOZ9qMG6OBitPsuu6LEetoAv/5SvREU+wa qa8k//evZL68qkXjKmVTLmvuk53Ss5GuQwk= -----END CERTIFICATE-----Generated at Wed Nov 5 17:32:44 2025 by rpki-client