$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/3a3e578e-9cda-3397-800c-e3cbde377721.roa File: 3a3e578e-9cda-3397-800c-e3cbde377721.roa (raw, json) Hash identifier: w/xLzp07UnybqdxW3GQCem+ipAry3X1H72iddrnMXZw= Subject key identifier: 3B:30:B3:B7:C1:39:17:C3:06:E4:B1:D9:CA:33:3B:46:3C:09:73:D8 Certificate issuer: /CN=33d3c304-619d-4e6d-aed5-9e25165cbc73 Certificate serial: 010D0C9F4328584B1F0178AD886E37BE7323A080 Authority key identifier: 8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/3a3e578e-9cda-3397-800c-e3cbde377721.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 14618 IP address blocks: 2607:dd40:1000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:78:ad:88:6e:37:be:73:23:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33d3c304-619d-4e6d-aed5-9e25165cbc73 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=070fb794-69e5-483a-a73c-1f9e4bb69158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:1f:a7:f8:ce:42:99:de:b7:28:b0:73:97:0a: bb:0c:cb:b2:05:98:35:c8:8b:2d:9c:b5:d3:a1:05: b0:39:8e:9e:eb:fd:7a:e2:c2:6a:b7:b9:99:82:bb: 6c:c0:af:33:ce:b6:36:45:5d:78:b6:e0:7f:c5:dd: 2a:18:c5:9a:37:1e:5b:e6:31:3a:1c:60:a3:3a:34: 50:87:41:00:3c:fc:61:e5:2b:c9:c7:8b:a2:6d:3b: f5:3f:f1:94:c8:58:f1:b0:0d:84:f7:4b:21:81:5e: c8:e7:27:42:6c:d7:34:dd:f8:ae:6a:27:ee:ab:28: b9:ab:30:79:9b:27:2c:31:50:b8:8d:2f:7d:81:bd: 5a:38:b3:d4:52:16:ae:5f:f9:98:3b:0b:3d:41:d3: eb:d8:ae:78:f6:91:36:56:59:79:2f:84:74:ac:dc: 01:87:12:42:f7:60:c8:8c:27:6e:72:42:33:9d:bf: 44:c9:5e:99:74:eb:1f:a1:e7:b8:54:4c:d4:d4:1f: 36:83:73:4d:27:9a:f6:d1:86:5f:8c:c8:42:52:2f: 9b:e8:88:21:f7:45:55:29:d9:20:65:cf:88:e0:f1: 7c:39:7b:e9:c9:d4:2c:5d:fd:c9:a2:4b:53:9e:a5: 93:8b:36:31:43:53:85:a3:85:40:62:3c:c8:0f:88: b0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:30:B3:B7:C1:39:17:C3:06:E4:B1:D9:CA:33:3B:46:3C:09:73:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/3a3e578e-9cda-3397-800c-e3cbde377721.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl X509v3 Authority Key Identifier: keyid:8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer sbgp-ipAddrBlock: critical IPv6: 2607:dd40:1000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:c3:d2:5c:62:f3:48:06:23:5b:9e:86:d9:3d:89:af:8e:c7: 72:70:c2:a4:92:4a:03:fa:5b:eb:09:78:13:b1:c6:a1:97:38: 3f:09:9b:4a:02:f9:91:cf:fb:66:08:7c:7b:c3:e7:84:b2:cb: fc:71:77:ee:0c:ed:00:40:1b:49:57:d2:19:85:5f:e0:a4:a3: a8:0b:51:e5:7a:0b:b1:00:f6:ef:66:8c:22:6c:01:0c:73:f7: db:75:7a:55:49:c0:a5:19:92:a7:23:12:ee:04:e6:a4:25:06: fa:d5:b5:fb:aa:71:15:ce:14:ed:12:fc:b7:50:3e:5c:16:a8: 0a:2b:f7:d8:0f:0e:19:49:05:8b:92:d1:88:22:be:99:02:7a: 4c:ca:ea:1c:25:b0:d0:41:12:03:dd:35:92:08:05:f5:0e:ea: 18:7e:d6:b5:0d:81:60:44:49:cf:c2:8c:b9:d9:9f:f3:53:a2: 9c:7a:65:f5:48:c8:ee:c1:e4:c0:a7:27:33:ec:16:0d:39:ca: 9c:44:90:b5:17:65:3e:2e:3b:7b:28:95:36:2f:21:76:35:8e: 5d:e7:3f:6b:f9:8e:e3:28:36:54:e2:79:9b:37:b5:4c:8c:f4: 96:4f:60:2d:12:0f:f5:66:cd:95:35:cd:44:7c:31:8a:84:3a: c0:ce:f5:17 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEsfAXitiG43vnMjoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNkM2MzMDQtNjE5ZC00ZTZkLWFlZDUtOWUyNTE2NWNi YzczMB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk MDcwZmI3OTQtNjllNS00ODNhLWE3M2MtMWY5ZTRiYjY5MTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkB+n+M5Cmd63KLBzlwq7DMuyBZg1yIstnLXT oQWwOY6e6/164sJqt7mZgrtswK8zzrY2RV14tuB/xd0qGMWaNx5b5jE6HGCjOjRQ h0EAPPxh5SvJx4uibTv1P/GUyFjxsA2E90shgV7I5ydCbNc03fiuaifuqyi5qzB5 mycsMVC4jS99gb1aOLPUUhauX/mYOws9QdPr2K549pE2Vll5L4R0rNwBhxJC92DI jCduckIznb9EyV6ZdOsfoee4VEzU1B82g3NNJ5r20YZfjMhCUi+b6Igh90VVKdkg Zc+I4PF8OXvpydQsXf3JoktTnqWTizYxQ1OFo4VAYjzID4iwvwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDsws7fBORfDBuSx2cozO0Y8CXPYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zM2Qz YzMwNC02MTlkLTRlNmQtYWVkNS05ZTI1MTY1Y2JjNzMvM2EzZTU3OGUtOWNkYS0z Mzk3LTgwMGMtZTNjYmRlMzc3NzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzNkM2MzMDQtNjE5ZC00ZTZkLWFl ZDUtOWUyNTE2NWNiYzczLzMzZDNjMzA0LTYxOWQtNGU2ZC1hZWQ1LTllMjUxNjVj YmM3My5jcmwwHwYDVR0jBBgwFoAUjkoNtMfpM0cLNL0AOGQeSnjs4mowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zM2QzYzMwNC02MTlkLTRlNmQtYWVkNS05ZTI1 MTY1Y2JjNzMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgfdQBAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEApMPSXGLzSAYjW56G2T2Jr47HcnDCpJJKA/pb6wl4E7HGoZc4Pwmb SgL5kc/7Zgh8e8PnhLLL/HF37gztAEAbSVfSGYVf4KSjqAtR5XoLsQD272aMImwB DHP323V6VUnApRmSpyMS7gTmpCUG+tW1+6pxFc4U7RL8t1A+XBaoCiv32A8OGUkF i5LRiCK+mQJ6TMrqHCWw0EESA901kggF9Q7qGH7WtQ2BYERJz8KMudmf81OinHpl 9UjI7sHkwKcnM+wWDTnKnESQtRdlPi47eyiVNi8hdjWOXec/a/mO4yg2VOJ5mze1 TIz0lk9gLRIP9WbNlTXNRHwxioQ6wM71Fw== -----END CERTIFICATE-----Generated at Wed Nov 5 05:47:51 2025 by rpki-client