$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/29caab9c-d01e-3552-aaf0-b4c9e6629b52.roa File: 29caab9c-d01e-3552-aaf0-b4c9e6629b52.roa (raw, json) Hash identifier: KYcuO8jHX9YeE1kaXSbfdOFvH0UKj0lJgfbYdHsrBB8= Subject key identifier: 19:E3:1B:C0:13:FD:AD:8E:2A:53:71:CA:D6:20:D9:2A:F3:45:5B:D1 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7C8D579D9782C176CA9C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/29caab9c-d01e-3552-aaf0-b4c9e6629b52.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 3855 IP address blocks: 2001:470:1cb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:c8:d5:79:d9:78:2c:17:6c:a9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=1cd24a2e-a4b4-4987-b40b-caedf4b8e54e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3c:1d:dc:fb:e1:83:40:c8:c6:19:17:cc:4b: 42:d4:b9:cf:4b:8b:12:35:bf:c1:ef:93:1a:41:88: 5a:dc:9c:75:c2:69:60:71:58:80:cc:c9:82:e5:44: dd:bb:8e:5f:2e:38:5f:54:e1:6e:db:36:1a:10:e0: 1e:fa:15:bf:fc:64:7f:4a:16:59:79:e7:49:59:0d: 3e:b7:ff:fe:48:7b:a4:72:15:f7:a6:ae:1a:bb:70: a4:e8:28:28:4b:00:25:0b:1e:57:54:b1:14:66:df: f4:77:83:33:b1:8d:c5:ef:a6:ed:4d:22:9a:09:8c: 41:90:2f:10:3b:46:46:00:c5:50:ab:60:68:e5:c0: f8:53:cb:de:21:7c:76:28:e3:5a:ae:cc:fa:07:f0: a1:cc:42:02:f9:03:31:f5:a0:b6:11:84:a2:4f:c4: da:8c:14:7c:41:84:88:10:3b:e5:19:2b:8f:2b:1c: ed:9a:21:ac:2e:2f:30:1e:17:a0:99:f3:4b:33:0d: f0:3f:12:92:f5:10:ea:80:74:2d:6a:b4:2c:96:95: f4:e0:ea:98:c6:2a:55:8d:e4:2e:cd:6f:04:e2:89: 44:97:4a:40:71:65:df:40:7c:38:c5:98:1b:8e:d9: df:06:aa:6a:5b:8d:2c:11:1f:2d:67:12:d8:90:08: 6a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:E3:1B:C0:13:FD:AD:8E:2A:53:71:CA:D6:20:D9:2A:F3:45:5B:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/29caab9c-d01e-3552-aaf0-b4c9e6629b52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1cb::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:5b:7d:de:db:bf:e8:1d:02:4b:cb:37:00:09:04:6b:e0:6b: 14:da:e7:5f:cf:8d:09:2c:93:d9:bd:64:8a:af:8a:f5:8d:3f: b2:cf:7e:6e:6b:3a:c9:44:29:ed:73:d6:1c:bf:bf:81:d2:f0: 8e:9a:b1:bb:25:42:d4:b4:29:af:02:de:27:df:05:5e:65:05: 28:18:c0:cf:11:ac:b8:8d:43:10:50:d3:c1:0c:38:0b:48:4e: 97:33:1b:f7:c8:db:62:db:50:45:8f:68:90:fc:10:34:a5:61: 38:65:82:6e:77:16:a2:43:04:a6:d6:8c:dd:eb:fe:69:16:d5: ea:1c:6c:60:b1:69:f8:0c:91:8f:6b:67:37:d5:3d:f6:32:fc: 82:38:32:cc:dc:b8:10:b6:88:93:97:8f:48:9d:44:66:ea:53: 42:43:3e:99:c8:9e:d8:dd:99:c5:28:93:fa:80:6f:d1:75:65: 5a:57:77:fb:63:9b:e2:d5:20:0e:aa:7c:e4:b2:d4:36:4e:19: e6:a3:d2:0b:f8:f3:9f:1d:ca:96:f3:28:45:95:c2:8b:b5:32: 02:a5:5d:a8:4a:82:cf:0e:e9:58:47:b6:5a:5a:c1:4a:63:b9: 2d:9d:4c:d3:15:72:2b:69:b7:ea:16:58:0e:c5:a9:65:06:aa: 07:0e:02:d6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ18jVedl4LBdsqcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MWNkMjRhMmUtYTRiNC00OTg3LWI0MGItY2FlZGY0YjhlNTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTwd3Pvhg0DIxhkXzEtC1LnPS4sSNb/B75Ma QYha3Jx1wmlgcViAzMmC5UTdu45fLjhfVOFu2zYaEOAe+hW//GR/ShZZeedJWQ0+ t//+SHukchX3pq4au3Ck6CgoSwAlCx5XVLEUZt/0d4MzsY3F76btTSKaCYxBkC8Q O0ZGAMVQq2Bo5cD4U8veIXx2KONarsz6B/ChzEIC+QMx9aC2EYSiT8TajBR8QYSI EDvlGSuPKxztmiGsLi8wHhegmfNLMw3wPxKS9RDqgHQtarQslpX04OqYxipVjeQu zW8E4olEl0pAcWXfQHw4xZgbjtnfBqpqW40sER8tZxLYkAhqEwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBnjG8AT/a2OKlNxytYg2SrzRVvRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjljYWFiOWMtZDAxZS0z NTUyLWFhZjAtYjRjOWU2NjI5YjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACxbfd7bv+gdAkvLNwAJBGvgaxTa51/PjQksk9m9ZIqvivWNP7LP fm5rOslEKe1z1hy/v4HS8I6asbslQtS0Ka8C3iffBV5lBSgYwM8RrLiNQxBQ08EM OAtITpczG/fI22LbUEWPaJD8EDSlYThlgm53FqJDBKbWjN3r/mkW1eocbGCxafgM kY9rZzfVPfYy/II4MszcuBC2iJOXj0idRGbqU0JDPpnIntjdmcUok/qAb9F1ZVpX d/tjm+LVIA6qfOSy1DZOGeaj0gv4858dypbzKEWVwou1MgKlXahKgs8O6VhHtlpa wUpjuS2dTNMVcitpt+oWWA7FqWUGqgcOAtY= -----END CERTIFICATE-----Generated at Tue Nov 4 19:23:42 2025 by rpki-client