$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/efdfb3d4-cefa-3c61-8eee-5d71708406e6.roa File: efdfb3d4-cefa-3c61-8eee-5d71708406e6.roa (raw, json) Hash identifier: zTQn9RaqMoIkCBzWC2X41Y9XEkWCGOIKguB7Z9mUK6U= Subject key identifier: 89:94:F7:5E:32:F7:B9:A4:74:72:C7:B7:D9:FE:45:E9:3C:7E:C4:A3 Certificate issuer: /CN=33d3c304-619d-4e6d-aed5-9e25165cbc73 Certificate serial: 010D0C9F4328584B1F0178BE5B82EB0BBF767D00 Authority key identifier: 8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/efdfb3d4-cefa-3c61-8eee-5d71708406e6.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 2607:dd40:1000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:78:be:5b:82:eb:0b:bf:76:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33d3c304-619d-4e6d-aed5-9e25165cbc73 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=92051e84-d4b1-44c3-9977-ef154b5a754e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:44:03:ef:47:52:29:56:e3:ba:c5:ff:5e:88: 4d:d4:c3:e6:f2:70:0b:ac:8e:ac:83:da:82:6b:42: db:21:0f:be:3f:e8:5b:35:d5:19:3f:c0:7c:e6:15: e8:d4:af:99:f8:4e:d8:b6:d5:5d:6d:90:fd:cb:21: fc:a4:17:46:8e:1b:e7:96:62:9c:c1:bd:69:b8:97: ee:6f:51:94:c6:65:27:28:7e:5a:a0:60:d3:98:ef: a6:61:85:48:72:38:9b:f1:4e:7e:d1:04:c0:24:4a: e3:ee:08:5e:6f:74:76:ac:2d:f5:9f:69:f1:ec:00: 71:bc:de:c8:78:fb:87:4e:c6:46:c6:54:8e:88:ff: c1:52:50:fa:b9:59:a6:8c:90:e6:48:dc:5f:a4:b3: 34:98:8d:2b:7d:96:07:aa:4c:64:d7:65:30:5a:b0: ca:93:c7:bd:1d:1b:b7:c0:82:0c:8a:b6:98:ca:23: 88:e7:e8:41:db:f8:d3:86:51:1b:93:48:8b:f0:d5: 45:ff:bb:62:77:9c:b4:92:5d:80:60:af:56:f5:12: 7a:62:61:eb:76:be:e8:11:bb:9a:89:21:a6:df:d9: 41:aa:6a:b4:98:56:23:33:66:fa:ca:74:5d:74:b4: 9b:04:a9:5d:e3:44:de:c5:80:00:16:53:03:a7:90: de:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:94:F7:5E:32:F7:B9:A4:74:72:C7:B7:D9:FE:45:E9:3C:7E:C4:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/efdfb3d4-cefa-3c61-8eee-5d71708406e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl X509v3 Authority Key Identifier: keyid:8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer sbgp-ipAddrBlock: critical IPv6: 2607:dd40:1000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:05:b3:f5:bf:48:f3:b5:3e:ed:20:44:4c:87:09:14:44:d6: 86:96:97:3f:52:fb:93:24:27:8f:c5:db:f3:68:05:78:41:ac: 4b:03:79:51:b9:da:a6:11:21:e6:71:bc:62:1a:e5:a8:e6:ba: 73:35:ca:4e:1d:a9:cf:c3:85:cf:49:08:74:22:b7:7a:bd:b3: 0e:39:5a:f5:a1:e4:8d:d5:0e:bb:f0:d8:72:0b:db:d6:1f:73: 3f:3e:53:68:56:de:60:e6:d3:ed:89:d7:a8:df:05:11:09:d9: 28:3d:f0:5e:ee:45:76:e1:cf:e7:03:bf:32:c6:f2:e7:65:26: 56:23:45:3b:d8:5f:9f:f4:88:75:cc:f5:bf:93:ba:c4:7d:76: c0:9c:60:63:e4:23:e4:2f:af:b0:a6:38:de:14:0a:21:34:d0: e1:8a:09:b7:c3:7d:3f:56:44:55:27:e1:f0:b9:1f:84:08:e8: ee:0a:e8:f2:aa:8a:28:7b:40:2f:ac:00:78:c6:18:b5:d5:96: ab:c9:e5:a3:1c:d9:7d:22:5b:6c:bf:11:71:d2:4b:3d:ae:6c: 37:d4:96:b2:69:56:15:a5:ea:3b:d2:80:c2:a3:1f:0a:da:9b: d6:22:4d:50:20:63:e8:2c:87:46:40:e9:35:60:1b:a4:a1:22: c8:8e:6a:70 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEsfAXi+W4LrC792fQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNkM2MzMDQtNjE5ZC00ZTZkLWFlZDUtOWUyNTE2NWNi YzczMB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk OTIwNTFlODQtZDRiMS00NGMzLTk5NzctZWYxNTRiNWE3NTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0QD70dSKVbjusX/XohN1MPm8nALrI6sg9qC a0LbIQ++P+hbNdUZP8B85hXo1K+Z+E7YttVdbZD9yyH8pBdGjhvnlmKcwb1puJfu b1GUxmUnKH5aoGDTmO+mYYVIcjib8U5+0QTAJErj7gheb3R2rC31n2nx7ABxvN7I ePuHTsZGxlSOiP/BUlD6uVmmjJDmSNxfpLM0mI0rfZYHqkxk12UwWrDKk8e9HRu3 wIIMiraYyiOI5+hB2/jThlEbk0iL8NVF/7tid5y0kl2AYK9W9RJ6YmHrdr7oEbua iSGm39lBqmq0mFYjM2b6ynRddLSbBKld40TexYAAFlMDp5DesQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFImU914y97mkdHLHt9n+Rek8fsSjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zM2Qz YzMwNC02MTlkLTRlNmQtYWVkNS05ZTI1MTY1Y2JjNzMvZWZkZmIzZDQtY2VmYS0z YzYxLThlZWUtNWQ3MTcwODQwNmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzNkM2MzMDQtNjE5ZC00ZTZkLWFl ZDUtOWUyNTE2NWNiYzczLzMzZDNjMzA0LTYxOWQtNGU2ZC1hZWQ1LTllMjUxNjVj YmM3My5jcmwwHwYDVR0jBBgwFoAUjkoNtMfpM0cLNL0AOGQeSnjs4mowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zM2QzYzMwNC02MTlkLTRlNmQtYWVkNS05ZTI1 MTY1Y2JjNzMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgfdQBAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAXAWz9b9I87U+7SBETIcJFETWhpaXP1L7kyQnj8Xb82gFeEGsSwN5 UbnaphEh5nG8YhrlqOa6czXKTh2pz8OFz0kIdCK3er2zDjla9aHkjdUOu/DYcgvb 1h9zPz5TaFbeYObT7YnXqN8FEQnZKD3wXu5FduHP5wO/Msby52UmViNFO9hfn/SI dcz1v5O6xH12wJxgY+Qj5C+vsKY43hQKITTQ4YoJt8N9P1ZEVSfh8LkfhAjo7gro 8qqKKHtAL6wAeMYYtdWWq8nloxzZfSJbbL8RcdJLPa5sN9SWsmlWFaXqO9KAwqMf Ctqb1iJNUCBj6CyHRkDpNWAbpKEiyI5qcA== -----END CERTIFICATE-----Generated at Wed Nov 5 05:48:15 2025 by rpki-client