$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/87ccbfe3-8659-3f36-ad24-7412da6698c2.roa File: 87ccbfe3-8659-3f36-ad24-7412da6698c2.roa (raw, json) Hash identifier: tRIGIssQz+3KJyRNhHwAjD7j5URjKwGhMCgRN/PUBpQ= Subject key identifier: C5:A9:8A:CE:8D:17:99:D2:0D:1D:A1:24:0E:15:23:47:F9:FB:00:29 Certificate issuer: /CN=29cf59bb-49d4-46dc-a312-da9c10dc336e Certificate serial: 010D0C9F4328584B4081A0CEF33227B6B91E4C80 Authority key identifier: 75:6D:39:EF:55:71:4A:71:37:2C:93:BC:47:6F:1D:A8:BC:34:23:90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/87ccbfe3-8659-3f36-ad24-7412da6698c2.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 10866 IP address blocks: 2620:0:5300::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/29cf59bb-49d4-46dc-a312-da9c10dc336e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/29cf59bb-49d4-46dc-a312-da9c10dc336e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:a0:ce:f3:32:27:b6:b9:1e:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29cf59bb-49d4-46dc-a312-da9c10dc336e Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=0b7faa39-da44-4f68-8993-5feac82125a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c7:68:3c:b2:ab:5c:f4:38:20:2e:fc:d4:e9: 76:b0:28:b7:01:81:db:ad:63:5a:a1:4f:a0:7c:4b: 50:7a:bb:b8:a2:8f:ac:c9:1a:ca:87:2e:23:ec:e8: 0f:ff:82:3f:ae:9c:ef:7e:c4:fa:eb:5b:48:be:be: 68:ce:15:9c:62:39:d9:eb:c5:c3:e4:cb:49:24:6c: b9:60:5c:10:07:c4:f7:71:cb:2e:d6:dd:31:e2:3a: 4e:14:f0:43:22:17:c5:8f:12:f4:94:eb:71:ce:db: 40:2f:c1:b4:ab:4f:cd:d8:85:39:8f:62:68:62:a7: 9b:9f:c0:a9:98:09:38:97:ed:30:df:a3:ef:ef:2f: db:ec:4a:2c:57:9c:f3:3c:42:24:3c:b7:d4:8d:b7: 41:f1:ea:c7:c8:a9:95:c7:7d:bc:72:52:11:63:a6: c1:06:94:cb:07:9d:2c:f7:57:c3:7e:d2:dc:f9:f0: e6:dd:d8:0f:40:3f:2d:8d:05:b7:61:23:cf:8b:d2: 4f:84:da:57:4f:cd:bb:c6:8f:a6:fc:a5:df:0c:a4: 20:fa:6f:94:3a:ac:ee:65:2e:44:0f:2b:07:34:ad: 4a:1e:87:6f:31:02:cf:25:79:c0:8a:e0:78:f5:f2: 19:0a:40:e9:dd:e6:a3:d4:01:31:59:b9:2f:24:cb: 1f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:A9:8A:CE:8D:17:99:D2:0D:1D:A1:24:0E:15:23:47:F9:FB:00:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/87ccbfe3-8659-3f36-ad24-7412da6698c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/29cf59bb-49d4-46dc-a312-da9c10dc336e.crl X509v3 Authority Key Identifier: keyid:75:6D:39:EF:55:71:4A:71:37:2C:93:BC:47:6F:1D:A8:BC:34:23:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:5300::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:3e:fe:72:dd:38:71:bc:ab:65:27:6a:99:26:87:25:83:3b: d2:d5:bf:2c:00:16:ea:55:32:a8:ea:d3:f2:0d:78:95:ad:82: 49:68:3f:62:0f:2c:41:27:b6:5d:3d:f9:b3:69:bb:b3:b0:26: 88:21:69:3a:6c:ef:c5:c1:68:d6:66:39:41:86:c3:0a:a8:89: 10:eb:37:a0:1d:9e:2c:fe:a2:66:29:50:ab:c9:37:3b:a8:e9: 7f:25:1b:39:1d:13:3f:27:e1:06:ba:75:cd:56:8e:61:86:36: 63:86:64:f4:a4:a0:c2:52:a9:3d:2d:9d:1f:48:0d:45:10:f1: 7f:8e:66:39:db:01:b5:f3:47:f0:c4:7e:74:2a:07:86:e4:da: 6e:38:0b:87:e1:b1:f9:f7:c2:03:0b:a7:76:b4:cf:22:48:ef: ef:33:1d:4c:1a:1b:ce:1e:98:99:90:d1:50:e3:cf:e4:56:d3: 14:f0:48:d4:c1:1f:5e:04:e2:e0:18:a3:c0:56:c1:62:34:44: 3f:69:15:ce:54:3c:24:43:ef:57:de:93:75:ff:e2:1e:b1:46: c7:e2:1d:6d:b3:b3:d6:e2:ee:52:6e:76:2f:5f:ee:03:dd:65: 21:cb:02:e8:9b:7c:05:e4:aa:93:25:1f:f0:b5:da:98:a8:50: 1e:e3:36:2a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtAgaDO8zIntrkeTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjljZjU5YmItNDlkNC00NmRjLWEzMTItZGE5YzEwZGMz MzZlMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk MGI3ZmFhMzktZGE0NC00ZjY4LTg5OTMtNWZlYWM4MjEyNWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8doPLKrXPQ4IC781Ol2sCi3AYHbrWNaoU+g fEtQeru4oo+syRrKhy4j7OgP/4I/rpzvfsT661tIvr5ozhWcYjnZ68XD5MtJJGy5 YFwQB8T3ccsu1t0x4jpOFPBDIhfFjxL0lOtxzttAL8G0q0/N2IU5j2JoYqebn8Cp mAk4l+0w36Pv7y/b7EosV5zzPEIkPLfUjbdB8erHyKmVx328clIRY6bBBpTLB50s 91fDftLc+fDm3dgPQD8tjQW3YSPPi9JPhNpXT827xo+m/KXfDKQg+m+UOqzuZS5E DysHNK1KHodvMQLPJXnAiuB49fIZCkDp3eaj1AExWbkvJMsf0wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMWpis6NF5nSDR2hJA4VI0f5+wApMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOWNm NTliYi00OWQ0LTQ2ZGMtYTMxMi1kYTljMTBkYzMzNmUvODdjY2JmZTMtODY1OS0z ZjM2LWFkMjQtNzQxMmRhNjY5OGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjljZjU5YmItNDlkNC00NmRjLWEz MTItZGE5YzEwZGMzMzZlLzI5Y2Y1OWJiLTQ5ZDQtNDZkYy1hMzEyLWRhOWMxMGRj MzM2ZS5jcmwwHwYDVR0jBBgwFoAUdW0571VxSnE3LJO8R28dqLw0I5AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yOWNmNTliYi00OWQ0LTQ2ZGMtYTMxMi1kYTlj MTBkYzMzNmUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAAAFMA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC4+/nLdOHG8q2UnapkmhyWDO9LVvywAFupVMqjq0/INeJWtgklo P2IPLEEntl09+bNpu7OwJoghaTps78XBaNZmOUGGwwqoiRDrN6Adniz+omYpUKvJ Nzuo6X8lGzkdEz8n4Qa6dc1WjmGGNmOGZPSkoMJSqT0tnR9IDUUQ8X+OZjnbAbXz R/DEfnQqB4bk2m44C4fhsfn3wgMLp3a0zyJI7+8zHUwaG84emJmQ0VDjz+RW0xTw SNTBH14E4uAYo8BWwWI0RD9pFc5UPCRD71fek3X/4h6xRsfiHW2zs9bi7lJudi9f 7gPdZSHLAuibfAXkqpMlH/C12pioUB7jNio= -----END CERTIFICATE-----Generated at Tue Oct 21 00:07:10 2025 by rpki-client