$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/29dfb106-65b1-4e83-81d9-8b97730bd706/298b7f0c-bccd-3b0f-a3fe-e558a68580d8.roa File: 298b7f0c-bccd-3b0f-a3fe-e558a68580d8.roa (raw, json) Hash identifier: XZUcAlDBCRnrr4TTP5RrmMb/REibseqNwZ56wN0ZQcw= Subject key identifier: F0:A9:04:2E:88:03:5C:99:AE:0C:23:98:94:A5:8D:00:87:50:64:37 Certificate issuer: /CN=29dfb106-65b1-4e83-81d9-8b97730bd706 Certificate serial: 010D0C9F4328584B715CBDE8B42C83CFCBADBE80 Authority key identifier: 34:8B:1E:CC:F6:88:70:10:77:D8:70:1F:E9:00:7A:54:AA:6A:84:EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/29dfb106-65b1-4e83-81d9-8b97730bd706.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/29dfb106-65b1-4e83-81d9-8b97730bd706/298b7f0c-bccd-3b0f-a3fe-e558a68580d8.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 14333 IP address blocks: 2602:f793:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/29dfb106-65b1-4e83-81d9-8b97730bd706/29dfb106-65b1-4e83-81d9-8b97730bd706.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/29dfb106-65b1-4e83-81d9-8b97730bd706/29dfb106-65b1-4e83-81d9-8b97730bd706.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/29dfb106-65b1-4e83-81d9-8b97730bd706.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:bd:e8:b4:2c:83:cf:cb:ad:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29dfb106-65b1-4e83-81d9-8b97730bd706 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=8036c7b8-8e90-4cb0-a459-4160eef0c568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:70:f7:0a:df:d4:58:06:73:a7:c8:78:cc:53: 7d:38:8e:00:17:c5:74:97:09:95:83:7c:b8:23:41: ec:43:79:d6:3c:36:1f:a1:56:b1:88:b9:8a:2a:fb: 50:b0:37:96:4b:28:39:67:72:76:89:92:b9:7d:bc: 84:01:55:87:6c:f4:f0:7a:c5:96:f0:9e:33:48:3c: 96:d8:ce:ce:4b:dc:6a:76:90:b8:d9:04:fc:af:31: ca:e9:f6:46:69:b5:2d:fe:d9:96:b5:c8:6e:bc:0c: b9:9b:66:89:cf:eb:cf:fb:21:a0:4c:82:5f:7c:93: 3a:10:b1:6b:8c:33:ff:25:03:f5:90:2b:f2:a9:4c: 55:34:40:d2:4f:b8:89:d1:a1:c7:3a:ee:03:13:c7: e2:3c:3a:69:d8:e8:93:cf:61:01:9d:24:eb:71:b4: 98:32:52:50:da:ac:43:7f:e0:14:6b:cc:04:a3:38: 9b:f6:eb:f4:cd:84:54:e1:19:95:09:fd:86:3e:62: 3c:94:d5:27:6a:83:00:f2:ec:c6:a5:7e:00:95:9f: 6e:2c:ed:80:0c:a2:88:f9:b5:75:d7:30:12:cf:f3: aa:8d:c9:58:51:59:df:8f:a6:02:c4:28:e6:47:ad: 80:b1:ff:8c:fd:7f:35:10:46:e7:8e:31:9d:89:76: 75:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:A9:04:2E:88:03:5C:99:AE:0C:23:98:94:A5:8D:00:87:50:64:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/29dfb106-65b1-4e83-81d9-8b97730bd706/298b7f0c-bccd-3b0f-a3fe-e558a68580d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/29dfb106-65b1-4e83-81d9-8b97730bd706/29dfb106-65b1-4e83-81d9-8b97730bd706.crl X509v3 Authority Key Identifier: keyid:34:8B:1E:CC:F6:88:70:10:77:D8:70:1F:E9:00:7A:54:AA:6A:84:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/29dfb106-65b1-4e83-81d9-8b97730bd706.cer sbgp-ipAddrBlock: critical IPv6: 2602:f793:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:cb:c0:46:4a:4c:91:fe:a9:ec:1a:84:13:47:41:49:15:15: 58:54:2a:80:c0:84:ac:85:cf:c8:50:95:94:6f:fd:05:68:59: 96:1a:ea:e8:36:b4:c4:44:32:45:f3:39:ac:ea:f9:f8:54:10: fc:34:9d:1e:1f:e3:d0:40:13:15:be:4d:fb:ec:62:8f:0a:5f: dc:21:f6:8b:f2:0e:ac:1e:8f:b8:7e:3f:e7:c9:46:a5:54:30: 62:77:cf:5a:d1:a5:6f:37:46:82:47:19:f2:ce:d5:a1:5a:cc: 3d:c4:70:4b:33:f1:ce:cf:75:ac:aa:32:0e:69:0f:90:70:64: ca:7b:2b:13:f2:6c:7a:62:38:71:0a:d0:36:39:fd:2a:6b:46: cc:91:6f:58:99:66:4e:0a:34:2c:30:bd:e3:36:51:64:64:e4: 5f:0c:bd:e3:73:65:46:b3:45:3c:8e:08:40:ef:4b:73:f1:84: 3d:55:06:19:3e:1e:8d:32:83:9c:5b:6f:48:b5:1f:3b:c9:c7: 22:7f:e5:12:a5:07:df:99:d7:32:04:21:70:99:51:48:a6:7b: fe:29:ab:9f:27:8b:80:c2:96:70:83:b8:e9:64:70:e4:67:00: 4c:da:cf:24:ea:78:d3:27:37:a0:2d:d3:d1:02:4b:ef:a4:66: d3:01:f2:87 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtxXL3otCyDz8utvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjlkZmIxMDYtNjViMS00ZTgzLTgxZDktOGI5NzczMGJk NzA2MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ODAzNmM3YjgtOGU5MC00Y2IwLWE0NTktNDE2MGVlZjBjNTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nD3Ct/UWAZzp8h4zFN9OI4AF8V0lwmVg3y4 I0HsQ3nWPDYfoVaxiLmKKvtQsDeWSyg5Z3J2iZK5fbyEAVWHbPTwesWW8J4zSDyW 2M7OS9xqdpC42QT8rzHK6fZGabUt/tmWtchuvAy5m2aJz+vP+yGgTIJffJM6ELFr jDP/JQP1kCvyqUxVNEDST7iJ0aHHOu4DE8fiPDpp2OiTz2EBnSTrcbSYMlJQ2qxD f+AUa8wEozib9uv0zYRU4RmVCf2GPmI8lNUnaoMA8uzGpX4AlZ9uLO2ADKKI+bV1 1zASz/OqjclYUVnfj6YCxCjmR62Asf+M/X81EEbnjjGdiXZ1WQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPCpBC6IA1yZrgwjmJSljQCHUGQ3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yOWRm YjEwNi02NWIxLTRlODMtODFkOS04Yjk3NzMwYmQ3MDYvMjk4YjdmMGMtYmNjZC0z YjBmLWEzZmUtZTU1OGE2ODU4MGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjlkZmIxMDYtNjViMS00ZTgzLTgx ZDktOGI5NzczMGJkNzA2LzI5ZGZiMTA2LTY1YjEtNGU4My04MWQ5LThiOTc3MzBi ZDcwNi5jcmwwHwYDVR0jBBgwFoAUNIsezPaIcBB32HAf6QB6VKpqhO4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yOWRmYjEwNi02NWIxLTRlODMtODFkOS04Yjk3 NzMwYmQ3MDYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL3kwAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAPLwEZKTJH+qewahBNHQUkVFVhUKoDAhKyFz8hQlZRv/QVoWZYa 6ug2tMREMkXzOazq+fhUEPw0nR4f49BAExW+TfvsYo8KX9wh9ovyDqwej7h+P+fJ RqVUMGJ3z1rRpW83RoJHGfLO1aFazD3EcEsz8c7PdayqMg5pD5BwZMp7KxPybHpi OHEK0DY5/SprRsyRb1iZZk4KNCwwveM2UWRk5F8MveNzZUazRTyOCEDvS3PxhD1V Bhk+Ho0yg5xbb0i1HzvJxyJ/5RKlB9+Z1zIEIXCZUUime/4pq58ni4DClnCDuOlk cORnAEzazyTqeNMnN6At09ECS++kZtMB8oc= -----END CERTIFICATE-----Generated at Sat Oct 11 07:36:10 2025 by rpki-client