$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/29900e27-cebd-3cf2-9435-565d3b774e22.roa File: 29900e27-cebd-3cf2-9435-565d3b774e22.roa (raw, json) Hash identifier: TXSgSUkpC9BYLotVJo3nc6Io8T1n36QaXtHqs+0ghDE= Subject key identifier: DA:AB:D6:B8:8F:46:7F:FB:77:66:CF:1D:61:F2:40:14:C8:45:7F:AA Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7C77D45C75200DC506B00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/29900e27-cebd-3cf2-9435-565d3b774e22.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 36012 IP address blocks: 2001:470:1a8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:c7:7d:45:c7:52:00:dc:50:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=2772ca36-cfb8-4303-81c2-0187a316f54f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:cd:e0:a6:69:db:09:ee:be:65:ee:bb:31:4d: 30:4c:c6:af:44:f1:37:39:b6:fa:9b:46:2a:d8:fb: 1c:cc:51:e0:e2:a2:b7:67:7b:cd:0f:52:3d:e2:53: da:a4:72:71:d7:46:be:80:88:29:b3:84:5e:a0:66: ad:a4:0f:91:ee:a3:db:c2:cd:94:ee:80:69:18:a5: 12:21:0f:2b:92:01:41:8a:31:51:f0:81:33:15:45: ab:6f:e1:08:1e:1e:bf:cf:7d:49:6c:68:45:9a:a7: 7f:67:e9:32:76:0c:0a:d4:33:6d:63:4b:ee:7f:ca: bb:a8:57:cd:3c:0b:52:31:e1:d7:bb:6f:25:80:fb: 59:f8:9b:ac:b0:a0:05:65:6a:e4:55:35:e4:6a:b8: 1e:95:b2:f6:8d:81:5f:66:c4:05:60:f6:c7:76:c5: 50:60:09:4a:9a:43:cc:ae:99:6f:5a:f8:f1:f7:69: 73:ab:09:12:7b:8b:2b:fb:c4:3a:a8:06:bb:08:10: ee:6a:50:9d:e9:2c:80:bd:d8:b8:5f:9b:49:9d:f5: 18:f3:44:89:f5:14:79:fd:db:84:e0:9c:a0:3d:ee: 4a:3e:ef:90:6d:0f:74:12:ba:dc:13:f7:4b:16:15: 0a:b1:ff:47:6d:41:89:cb:16:e6:df:0e:b2:27:56: 2a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:AB:D6:B8:8F:46:7F:FB:77:66:CF:1D:61:F2:40:14:C8:45:7F:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/29900e27-cebd-3cf2-9435-565d3b774e22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1a8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:32:90:67:d9:74:ce:0f:2a:1f:6c:d9:17:24:62:81:f6:2f: 62:a9:4c:bc:ec:51:43:b9:bb:84:e4:86:6f:e0:b8:04:29:24: c3:a0:2d:85:9e:0f:34:29:e4:c7:8e:47:09:81:e0:33:17:ac: 74:2d:ae:80:50:08:67:df:e4:c6:fd:53:73:d5:f9:4a:ad:f9: 81:64:3b:5a:ae:12:ab:29:18:b7:57:56:43:ae:92:55:29:4f: cb:cf:d8:50:f0:98:3e:85:f2:5c:28:5b:8e:48:f4:67:89:0a: 32:9b:cf:9f:90:10:e0:ac:73:c6:be:35:de:66:8d:e9:96:85: d1:f7:67:f2:44:16:9c:20:4b:24:51:fb:8a:5d:18:b4:87:4a: b9:fc:3f:9d:c4:5d:07:f2:fa:a8:2f:e9:c8:c6:c4:a1:63:86: c1:3e:e2:0e:9c:59:56:8b:ce:ba:2c:29:24:d3:d8:e1:51:c1: b3:0c:54:ca:8f:a0:b7:9d:53:d2:bd:90:e5:82:4f:98:18:1b: f3:df:00:6d:25:34:32:5a:22:89:55:22:99:3a:f2:13:e9:b8: ef:99:b6:f9:94:6a:b6:7b:67:7e:27:2f:ee:fc:f5:95:da:d4: 70:4b:c9:b9:65:4f:55:4c:18:7d:0b:43:d2:1e:0a:eb:20:4c: 2f:40:df:98 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ18d9RcdSANxQawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk Mjc3MmNhMzYtY2ZiOC00MzAzLTgxYzItMDE4N2EzMTZmNTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAic3gpmnbCe6+Ze67MU0wTMavRPE3Obb6m0Yq 2PsczFHg4qK3Z3vND1I94lPapHJx10a+gIgps4ReoGatpA+R7qPbws2U7oBpGKUS IQ8rkgFBijFR8IEzFUWrb+EIHh6/z31JbGhFmqd/Z+kydgwK1DNtY0vuf8q7qFfN PAtSMeHXu28lgPtZ+JussKAFZWrkVTXkargelbL2jYFfZsQFYPbHdsVQYAlKmkPM rplvWvjx92lzqwkSe4sr+8Q6qAa7CBDualCd6SyAvdi4X5tJnfUY80SJ9RR5/duE 4JygPe5KPu+QbQ90ErrcE/dLFhUKsf9HbUGJyxbm3w6yJ1YqjwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNqr1riPRn/7d2bPHWHyQBTIRX+qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjk5MDBlMjctY2ViZC0z Y2YyLTk0MzUtNTY1ZDNiNzc0ZTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAGo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD0ykGfZdM4PKh9s2RckYoH2L2KpTLzsUUO5u4Tkhm/guAQpJMOg LYWeDzQp5MeORwmB4DMXrHQtroBQCGff5Mb9U3PV+Uqt+YFkO1quEqspGLdXVkOu klUpT8vP2FDwmD6F8lwoW45I9GeJCjKbz5+QEOCsc8a+Nd5mjemWhdH3Z/JEFpwg SyRR+4pdGLSHSrn8P53EXQfy+qgv6cjGxKFjhsE+4g6cWVaLzrosKSTT2OFRwbMM VMqPoLedU9K9kOWCT5gYG/PfAG0lNDJaIolVIpk68hPpuO+ZtvmUarZ7Z34nL+78 9ZXa1HBLybllT1VMGH0LQ9IeCusgTC9A35g= -----END CERTIFICATE-----Generated at Mon Nov 3 21:57:27 2025 by rpki-client