$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/2951e8ad-8636-3403-831f-0d15984794b4.roa File: 2951e8ad-8636-3403-831f-0d15984794b4.roa (raw, json) Hash identifier: dq168xaQB7EcXwIT0SuY5Y0ZzdO36YDzzbRVdeSMaFk= Subject key identifier: 3E:27:0D:53:A4:97:56:EE:EB:97:56:0A:B2:71:76:4E:B0:CC:8E:BC Certificate issuer: /CN=29c10060-705c-45ae-937b-544864b670d7 Certificate serial: 010D0C9F4328584B84E77641E717EDDCA6A5DC80 Authority key identifier: 7A:BB:A3:47:4B:89:BD:BD:31:F7:17:B2:DC:02:B2:94:A1:2E:0B:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/2951e8ad-8636-3403-831f-0d15984794b4.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 16509 IP address blocks: 64.71.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/29c10060-705c-45ae-937b-544864b670d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/29c10060-705c-45ae-937b-544864b670d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:76:41:e7:17:ed:dc:a6:a5:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29c10060-705c-45ae-937b-544864b670d7 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=8df44b0d-f5b7-44cd-8e62-ca3ab029c93b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:92:4e:a5:64:42:f0:68:3a:4d:03:c8:a1:58: f2:5f:f3:54:f6:14:57:28:17:66:fa:93:21:12:cd: 02:64:96:6a:04:35:f5:41:f5:08:17:21:f7:e5:38: cf:94:1a:bb:d2:e8:07:df:9c:45:36:54:40:d6:25: 16:fe:fc:46:cb:59:4b:a6:1c:52:21:bf:7d:4a:fe: 05:54:15:bb:bb:10:3f:ec:e5:8a:c4:7f:d3:13:69: 1a:bd:ff:2f:de:69:9f:b2:d5:ef:9f:a0:cb:d4:cb: 79:8b:21:39:65:0e:90:0f:52:6f:47:c5:64:64:56: 97:12:95:af:43:ad:92:11:1c:80:03:17:24:17:c5: df:10:cc:20:8c:13:20:df:bf:1c:1e:0e:30:b1:9f: 89:81:23:02:6e:b0:0c:86:76:61:f0:c3:43:e8:0d: 81:95:16:ff:46:c2:92:75:25:89:e8:98:10:a7:70: a0:d8:70:84:a0:4e:b4:5f:7f:3e:88:ad:c3:2d:5a: 1e:62:6c:0e:d4:af:03:3a:f3:47:ea:30:01:19:8a: 23:81:94:b3:5e:67:0c:74:07:d8:a1:f6:43:da:de: ca:6d:1e:fa:fd:ac:7e:ce:02:2d:a9:9c:c1:35:1e: 9c:82:6e:11:54:77:32:78:7b:26:c1:a4:e1:09:ee: b6:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:27:0D:53:A4:97:56:EE:EB:97:56:0A:B2:71:76:4E:B0:CC:8E:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/2951e8ad-8636-3403-831f-0d15984794b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/29c10060-705c-45ae-937b-544864b670d7.crl X509v3 Authority Key Identifier: keyid:7A:BB:A3:47:4B:89:BD:BD:31:F7:17:B2:DC:02:B2:94:A1:2E:0B:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7.cer sbgp-ipAddrBlock: critical IPv4: 64.71.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:41:86:03:5c:30:09:e1:26:09:dc:be:df:1d:59:cc:f7:92: 0e:77:bb:ef:c5:7d:59:a2:f5:03:91:6c:c6:9f:e3:57:b6:8c: b1:68:59:27:4a:dc:20:49:09:49:2d:4b:a1:6d:24:f0:e2:b0: 90:87:15:43:ff:d4:d6:90:5d:57:46:d3:77:7a:2b:bc:2b:2e: 35:a6:b4:b3:6b:60:e1:fd:7f:13:cc:8c:69:b6:9e:3f:d0:7e: 73:37:7b:cc:9d:da:72:37:02:1f:c5:a5:d0:e1:7c:ed:ca:e9: b9:11:0a:ce:88:ed:32:c6:7d:2e:a2:e7:00:2a:db:63:e2:68: d1:f5:f5:ff:5a:a1:ac:96:36:22:7e:e8:37:5d:f0:d5:1d:6e: 56:8b:10:02:54:7e:9c:5a:13:5f:80:0e:76:13:49:33:59:43: ed:12:c1:6b:39:96:db:ef:cb:64:f4:81:d0:f0:46:de:ec:8b: 34:30:7a:21:fe:8c:f2:69:c0:a1:bd:40:81:0d:6c:96:c9:44: 13:a6:ed:74:76:5c:94:24:08:f2:e7:33:d9:b0:8c:73:9a:c1: 11:09:f8:58:a3:93:85:b2:9e:1b:de:45:49:18:54:ab:8c:fa: 75:15:e9:a7:e4:73:14:b2:1b:24:97:a3:60:3e:90:94:6d:d8: 61:18:0b:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE53ZB5xft3Kal3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjljMTAwNjAtNzA1Yy00NWFlLTkzN2ItNTQ0ODY0YjY3 MGQ3MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk OGRmNDRiMGQtZjViNy00NGNkLThlNjItY2EzYWIwMjljOTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpJOpWRC8Gg6TQPIoVjyX/NU9hRXKBdm+pMh Es0CZJZqBDX1QfUIFyH35TjPlBq70ugH35xFNlRA1iUW/vxGy1lLphxSIb99Sv4F VBW7uxA/7OWKxH/TE2kavf8v3mmfstXvn6DL1Mt5iyE5ZQ6QD1JvR8VkZFaXEpWv Q62SERyAAxckF8XfEMwgjBMg378cHg4wsZ+JgSMCbrAMhnZh8MND6A2BlRb/RsKS dSWJ6JgQp3Cg2HCEoE60X38+iK3DLVoeYmwO1K8DOvNH6jABGYojgZSzXmcMdAfY ofZD2t7KbR76/ax+zgItqZzBNR6cgm4RVHcyeHsmwaThCe628wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4nDVOkl1bu65dWCrJxdk6wzI68MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOWMx MDA2MC03MDVjLTQ1YWUtOTM3Yi01NDQ4NjRiNjcwZDcvMjk1MWU4YWQtODYzNi0z NDAzLTgzMWYtMGQxNTk4NDc5NGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjljMTAwNjAtNzA1Yy00NWFlLTkz N2ItNTQ0ODY0YjY3MGQ3LzI5YzEwMDYwLTcwNWMtNDVhZS05MzdiLTU0NDg2NGI2 NzBkNy5jcmwwHwYDVR0jBBgwFoAUerujR0uJvb0x9xey3AKylKEuC8MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yOWMxMDA2MC03MDVjLTQ1YWUtOTM3Yi01NDQ4 NjRiNjcwZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQEfuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMdBhgNcMAnhJgncvt8dWcz3kg53u+/FfVmi9QORbMaf41e2jLFoWSdK 3CBJCUktS6FtJPDisJCHFUP/1NaQXVdG03d6K7wrLjWmtLNrYOH9fxPMjGm2nj/Q fnM3e8yd2nI3Ah/FpdDhfO3K6bkRCs6I7TLGfS6i5wAq22PiaNH19f9aoayWNiJ+ 6Ddd8NUdblaLEAJUfpxaE1+ADnYTSTNZQ+0SwWs5ltvvy2T0gdDwRt7sizQweiH+ jPJpwKG9QIENbJbJRBOm7XR2XJQkCPLnM9mwjHOawREJ+Fijk4WynhveRUkYVKuM +nUV6afkcxSyGySXo2A+kJRt2GEYCxI= -----END CERTIFICATE-----Generated at Mon Oct 20 10:14:27 2025 by rpki-client