$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/c29cd6d6-48c5-3504-be27-36da993c905d.roa File: c29cd6d6-48c5-3504-be27-36da993c905d.roa (raw, json) Hash identifier: q2tYqYwwUjcJD/CBnwi2BNQxYFqBtCkVCAEE25d1b1s= Subject key identifier: 04:27:FB:10:E4:34:49:0F:13:D4:74:22:5F:1D:BB:06:4E:61:60:F4 Certificate issuer: /CN=7daa4589-66d8-4675-8538-e075ba80ecd3 Certificate serial: 010D0C9F4328584B6BC74FE76EED9FB7B93D73C0 Authority key identifier: BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/c29cd6d6-48c5-3504-be27-36da993c905d.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 19054 IP address blocks: 2620:133:8000::/48 maxlen: 48 2620:133:8001::/48 maxlen: 48 2620:133:8002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:4f:e7:6e:ed:9f:b7:b9:3d:73:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7daa4589-66d8-4675-8538-e075ba80ecd3 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=1f0d3e7b-c797-4ef6-85e3-f3871bd7f13e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a2:7c:42:9f:23:fe:48:27:93:a9:21:b1:10: 30:d7:6b:44:47:d1:61:99:77:26:c9:36:0e:e2:2b: 15:04:69:5f:ec:36:43:73:c6:4c:fb:85:c5:3c:59: d8:f2:fc:dd:24:7c:41:da:4b:73:80:c2:88:d7:05: 71:28:e3:af:21:f9:d8:be:1e:37:83:32:fa:91:6d: 51:b0:50:90:fa:f2:62:74:75:77:7e:57:7d:2e:ec: 53:ac:54:38:60:e9:bd:4d:f8:01:6c:10:ae:99:a8: ca:71:bb:6a:08:ec:88:3e:b8:8b:3d:84:4a:e5:2c: 23:4b:9c:ae:62:5c:45:14:a1:64:46:5e:65:48:aa: 17:a6:e2:0b:07:75:b5:82:63:c3:23:4f:a8:d8:c2: af:05:bb:b5:2f:20:8c:3e:a9:93:e6:61:d4:12:bf: 46:b1:f4:69:05:36:53:89:9b:fb:a2:b8:a1:e9:8d: 25:17:4a:fb:b8:0c:16:85:5d:5b:f7:44:61:17:64: b5:4c:01:a1:e8:c8:6e:e9:92:f7:c7:25:09:01:31: fa:b5:b5:73:a9:19:78:3a:bc:2b:ca:77:74:87:b4: d1:8d:74:fe:31:e2:59:4d:d1:f2:06:a1:20:84:ff: e5:3f:4e:40:af:18:65:10:61:0c:bd:e7:8d:55:86: aa:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:27:FB:10:E4:34:49:0F:13:D4:74:22:5F:1D:BB:06:4E:61:60:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/c29cd6d6-48c5-3504-be27-36da993c905d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.crl X509v3 Authority Key Identifier: keyid:BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer sbgp-ipAddrBlock: critical IPv6: 2620:133:8000::-2620:133:8002:ffff:ffff:ffff:ffff:ffff X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:54:43:f3:b9:f0:4b:92:47:3b:80:43:f5:22:4a:40:56:e1: 79:54:ce:58:83:72:78:d9:63:6c:dc:f7:fe:d7:44:40:13:10: 87:12:ac:77:0e:f7:99:4e:cd:bb:10:0d:f6:08:53:dd:26:5d: 92:e8:73:68:9b:2f:5c:ee:1c:ac:79:a2:ac:3d:fc:da:51:08: 56:c0:6e:1b:b2:75:de:58:48:74:57:57:59:43:c7:f2:13:49: 23:d9:ad:15:4b:6b:c3:ba:ba:d9:f9:8e:15:c4:ee:7f:fe:4e: 23:b3:e1:31:5d:12:99:13:ce:26:e6:bb:84:bd:08:0a:d6:5b: 99:fb:85:ae:be:6f:22:b0:c7:9f:c3:93:00:fb:3e:c6:11:26: 07:6a:6b:75:09:fe:f6:d9:02:05:9f:f7:4c:8d:24:05:de:06: 8d:1c:92:19:80:b7:eb:54:7b:c6:6d:fb:46:9e:18:a9:7b:3e: 28:0c:1a:96:a2:74:75:4e:97:33:51:aa:b8:01:9a:f5:c6:8d: 53:db:52:60:e8:44:ab:52:ee:0a:4c:81:ec:3d:b6:a2:4c:c1: 14:0b:36:2d:bc:51:47:32:2c:d8:59:c1:3b:d3:51:fe:d2:ab: f0:59:fc:e8:fe:82:33:9d:8b:8b:fc:68:47:56:84:7d:d5:68: b4:83:6d:4d -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtrx0/nbu2ft7k9c8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2RhYTQ1ODktNjZkOC00Njc1LTg1MzgtZTA3NWJhODBl Y2QzMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk MWYwZDNlN2ItYzc5Ny00ZWY2LTg1ZTMtZjM4NzFiZDdmMTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaJ8Qp8j/kgnk6khsRAw12tER9FhmXcmyTYO 4isVBGlf7DZDc8ZM+4XFPFnY8vzdJHxB2ktzgMKI1wVxKOOvIfnYvh43gzL6kW1R sFCQ+vJidHV3fld9LuxTrFQ4YOm9TfgBbBCumajKcbtqCOyIPriLPYRK5SwjS5yu YlxFFKFkRl5lSKoXpuILB3W1gmPDI0+o2MKvBbu1LyCMPqmT5mHUEr9GsfRpBTZT iZv7orih6Y0lF0r7uAwWhV1b90RhF2S1TAGh6Mhu6ZL3xyUJATH6tbVzqRl4Orwr ynd0h7TRjXT+MeJZTdHyBqEghP/lP05ArxhlEGEMveeNVYaq9QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFAQn+xDkNEkPE9R0Il8duwZOYWD0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZGFh NDU4OS02NmQ4LTQ2NzUtODUzOC1lMDc1YmE4MGVjZDMvYzI5Y2Q2ZDYtNDhjNS0z NTA0LWJlMjctMzZkYTk5M2M5MDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2RhYTQ1ODktNjZkOC00Njc1LTg1 MzgtZTA3NWJhODBlY2QzLzdkYWE0NTg5LTY2ZDgtNDY3NS04NTM4LWUwNzViYTgw ZWNkMy5jcmwwHwYDVR0jBBgwFoAUv9T+9wqpQOy4VAn0Nps0P4ZaCgIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83ZGFhNDU4OS02NmQ4LTQ2NzUtODUzOC1lMDc1 YmE4MGVjZDMuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATMBEDBgcmIAEz gAMHACYgATOAAjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCEVEPzufBLkkc7gEP1IkpAVuF5VM5Yg3J42WNs 3Pf+10RAExCHEqx3DveZTs27EA32CFPdJl2S6HNomy9c7hyseaKsPfzaUQhWwG4b snXeWEh0V1dZQ8fyE0kj2a0VS2vDurrZ+Y4VxO5//k4js+ExXRKZE84m5ruEvQgK 1luZ+4Wuvm8isMefw5MA+z7GESYHamt1Cf722QIFn/dMjSQF3gaNHJIZgLfrVHvG bftGnhipez4oDBqWonR1TpczUaq4AZr1xo1T21Jg6ESrUu4KTIHsPbaiTMEUCzYt vFFHMizYWcE701H+0qvwWfzo/oIznYuL/GhHVoR91Wi0g21N -----END CERTIFICATE-----Generated at Mon Oct 20 15:26:16 2025 by rpki-client