$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/025f189b-ca85-3020-8e51-403bd292c2d6.roa File: 025f189b-ca85-3020-8e51-403bd292c2d6.roa (raw, json) Hash identifier: 1BbjpFv2TNiLlfJwjxQlHaYYEu+5G5yOCUBQgcVpx9Q= Subject key identifier: 2C:5F:53:65:3C:4A:AF:74:25:BA:C1:19:EA:53:53:93:14:7C:97:8F Certificate issuer: /CN=29cf59bb-49d4-46dc-a312-da9c10dc336e Certificate serial: 010D0C9F4328584B4081A764D8DF33B7652CBB10 Authority key identifier: 75:6D:39:EF:55:71:4A:71:37:2C:93:BC:47:6F:1D:A8:BC:34:23:90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/025f189b-ca85-3020-8e51-403bd292c2d6.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 11131 IP address blocks: 2620:0:5300::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/29cf59bb-49d4-46dc-a312-da9c10dc336e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/29cf59bb-49d4-46dc-a312-da9c10dc336e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:a7:64:d8:df:33:b7:65:2c:bb:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29cf59bb-49d4-46dc-a312-da9c10dc336e Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=5e68f3d8-69ec-4fc5-8963-08a7223148b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e9:86:78:7d:e7:85:2a:b8:d3:52:98:bf:10: c1:aa:30:c7:d2:e8:41:f2:05:0e:55:b1:6c:bc:fc: 4b:7d:f0:27:18:02:fc:a3:4e:87:27:7a:65:91:34: 78:9d:b0:af:ff:c9:16:8f:5f:6f:a3:3c:8c:6c:90: 66:d8:cb:ac:c7:5c:d7:5f:c1:4a:9d:37:0e:fc:f5: a7:05:0e:d8:18:08:dd:c6:f2:60:e2:ed:40:41:37: 25:62:79:a3:39:79:47:42:11:1b:e2:d1:a0:a0:a7: 9d:f6:18:64:b9:e7:66:11:28:01:be:11:e2:73:be: d0:92:b5:b4:88:c0:a2:e8:0d:3b:27:66:9b:fe:72: 2e:31:3a:00:e9:00:f9:0c:11:e6:83:38:ef:3d:18: 26:59:46:90:18:27:f1:0f:f2:79:0b:81:cf:eb:3c: 1d:8c:80:88:c9:74:56:c9:84:62:65:cc:dc:1c:7c: 81:88:0e:ee:9f:ce:f5:e3:65:3b:9f:7c:b3:8f:0d: bc:e1:70:d1:4c:b7:e1:60:2e:0e:7b:0b:2f:0d:53: 29:f8:08:74:73:fc:ec:e7:9e:54:01:6e:42:13:fd: 1a:0e:d5:4c:67:54:ef:07:13:6b:9d:e8:cd:63:fa: 98:0b:96:20:70:cf:95:59:78:fa:86:f3:70:b3:8e: f3:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:5F:53:65:3C:4A:AF:74:25:BA:C1:19:EA:53:53:93:14:7C:97:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/025f189b-ca85-3020-8e51-403bd292c2d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/29cf59bb-49d4-46dc-a312-da9c10dc336e.crl X509v3 Authority Key Identifier: keyid:75:6D:39:EF:55:71:4A:71:37:2C:93:BC:47:6F:1D:A8:BC:34:23:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:5300::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:0e:e6:2d:95:9c:2e:20:5b:1c:69:38:8e:34:75:62:30:15: f9:c5:b5:5c:ce:ae:a1:04:88:74:a6:e1:cb:38:2d:48:63:66: ff:ec:ea:1d:82:9c:cf:bc:e0:41:52:85:58:f7:d5:60:c4:f0: 64:4a:db:82:f7:01:82:fa:af:95:33:3c:44:1c:34:67:bf:90: 76:11:24:d6:ab:98:9d:f2:7d:2b:97:27:aa:cf:95:9b:10:22: 45:97:50:03:6b:57:28:03:9e:9a:9f:6a:b4:33:90:2a:64:44: b2:c3:79:45:1d:87:12:34:68:06:7c:12:c4:ce:ea:30:f2:1e: 01:91:bf:d3:70:7b:34:e7:03:aa:c2:f1:ab:5d:e0:72:e7:87: 36:bc:88:ae:16:47:9b:9f:8d:89:ea:10:a0:33:c4:d5:f7:7a: 60:b4:f8:b9:09:1e:7e:a8:1d:0b:09:03:c6:19:47:57:61:b4: cd:dd:ad:dc:2b:8f:40:28:e7:5a:4c:6f:9a:d6:8c:2f:42:66: 9e:40:1b:cc:24:92:f8:f4:44:29:89:db:ab:13:ac:8c:85:9c: da:79:1d:a0:5a:61:24:ce:e3:aa:c5:70:b9:34:d2:54:ad:a9: ca:2c:d5:04:3d:f1:31:84:f1:c1:2f:43:47:44:68:1f:c8:bf: b2:11:77:d5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtAgadk2N8zt2UsuxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjljZjU5YmItNDlkNC00NmRjLWEzMTItZGE5YzEwZGMz MzZlMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk NWU2OGYzZDgtNjllYy00ZmM1LTg5NjMtMDhhNzIyMzE0OGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1emGeH3nhSq401KYvxDBqjDH0uhB8gUOVbFs vPxLffAnGAL8o06HJ3plkTR4nbCv/8kWj19vozyMbJBm2Musx1zXX8FKnTcO/PWn BQ7YGAjdxvJg4u1AQTclYnmjOXlHQhEb4tGgoKed9hhkuedmESgBvhHic77QkrW0 iMCi6A07J2ab/nIuMToA6QD5DBHmgzjvPRgmWUaQGCfxD/J5C4HP6zwdjICIyXRW yYRiZczcHHyBiA7un87142U7n3yzjw284XDRTLfhYC4OewsvDVMp+Ah0c/zs555U AW5CE/0aDtVMZ1TvBxNrnejNY/qYC5YgcM+VWXj6hvNws47zpQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCxfU2U8Sq90JbrBGepTU5MUfJePMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOWNm NTliYi00OWQ0LTQ2ZGMtYTMxMi1kYTljMTBkYzMzNmUvMDI1ZjE4OWItY2E4NS0z MDIwLThlNTEtNDAzYmQyOTJjMmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjljZjU5YmItNDlkNC00NmRjLWEz MTItZGE5YzEwZGMzMzZlLzI5Y2Y1OWJiLTQ5ZDQtNDZkYy1hMzEyLWRhOWMxMGRj MzM2ZS5jcmwwHwYDVR0jBBgwFoAUdW0571VxSnE3LJO8R28dqLw0I5AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yOWNmNTliYi00OWQ0LTQ2ZGMtYTMxMi1kYTlj MTBkYzMzNmUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAAAFMA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAYO5i2VnC4gWxxpOI40dWIwFfnFtVzOrqEEiHSm4cs4LUhjZv/s 6h2CnM+84EFShVj31WDE8GRK24L3AYL6r5UzPEQcNGe/kHYRJNarmJ3yfSuXJ6rP lZsQIkWXUANrVygDnpqfarQzkCpkRLLDeUUdhxI0aAZ8EsTO6jDyHgGRv9NwezTn A6rC8atd4HLnhza8iK4WR5ufjYnqEKAzxNX3emC0+LkJHn6oHQsJA8YZR1dhtM3d rdwrj0Ao51pMb5rWjC9CZp5AG8wkkvj0RCmJ26sTrIyFnNp5HaBaYSTO46rFcLk0 0lStqcos1QQ98TGE8cEvQ0dEaB/Iv7IRd9U= -----END CERTIFICATE-----Generated at Tue Oct 21 00:08:02 2025 by rpki-client