$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/b9fe9136-6711-31b6-a248-652d58c6a9e1.roa File: b9fe9136-6711-31b6-a248-652d58c6a9e1.roa (raw, json) Hash identifier: QQvPeEM59Odp/AW6nwg+l/eoK7ZNz4SwfSGTbvgi5M4= Subject key identifier: 69:63:06:96:2B:97:B3:8F:B5:96:E3:05:21:0D:A8:F8:A4:42:8B:AB Certificate issuer: /CN=33c78d60-34eb-4fed-8e25-925b95a30c8e Certificate serial: 010D0C9F4328584B80B7718750E9329EA30FC580 Authority key identifier: 5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/b9fe9136-6711-31b6-a248-652d58c6a9e1.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 33039 IP address blocks: 2602:f95c:88::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:71:87:50:e9:32:9e:a3:0f:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33c78d60-34eb-4fed-8e25-925b95a30c8e Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=8efec7b4-685e-45aa-8136-a5301ad3d798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b9:d8:ee:4f:b4:59:86:dd:0b:c8:4d:9f:b5: 3d:96:bc:a0:6e:1f:c1:bc:93:42:0b:d8:19:94:2a: f5:e6:06:2e:64:6c:e1:1d:e2:bb:b2:5b:56:5d:c2: c7:f0:dc:96:1e:a5:da:0a:58:54:7d:86:60:36:b3: 7f:74:47:ad:87:09:66:ce:c6:e0:59:51:46:c7:5a: 4e:f1:d4:4a:33:f4:73:f5:b9:d4:99:1a:0a:76:b4: da:76:5c:3b:db:fc:ff:c1:86:06:37:11:cf:b8:c4: 67:8b:43:f1:a4:38:e8:98:3c:6e:f6:40:aa:63:c0: 73:56:0d:72:02:59:95:07:86:eb:74:0a:8e:43:21: 2f:d3:1b:7f:83:5c:2a:b8:ba:40:e5:05:46:b1:fe: e9:2d:7c:0b:06:61:da:50:ee:4b:d4:5d:bf:ca:54: 47:af:27:d0:2d:53:67:30:ad:56:2b:fc:70:bb:e5: 3e:aa:22:25:3b:d2:de:ad:a7:3d:6b:54:cd:cb:2b: a5:be:7c:bb:40:89:c8:f6:2f:8a:e5:0c:0b:1a:f4: 78:c6:c8:1e:a5:b1:6c:32:46:0d:1a:c5:81:0f:49: 47:e5:2d:ff:a4:e1:50:71:57:2e:74:c1:3a:1a:80: 6e:60:0a:a9:a2:00:24:a0:0c:e5:28:8c:df:e5:b3: 03:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:63:06:96:2B:97:B3:8F:B5:96:E3:05:21:0D:A8:F8:A4:42:8B:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/b9fe9136-6711-31b6-a248-652d58c6a9e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl X509v3 Authority Key Identifier: keyid:5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer sbgp-ipAddrBlock: critical IPv6: 2602:f95c:88::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:2a:3d:e2:9a:28:63:60:1a:15:1a:e9:d8:db:55:96:66:a6: a3:61:67:d5:6f:9f:99:ac:8d:f0:7c:cc:78:b0:40:db:e8:b5: 45:6d:b3:39:24:26:f6:62:db:f6:f2:81:cf:d1:39:72:97:11: 01:a3:33:4d:12:c8:5b:e8:c3:a6:97:04:c6:41:24:55:6e:dd: fe:a8:33:56:67:5b:ec:26:07:24:75:bf:fd:d7:85:13:be:05: 63:75:16:1e:fb:46:29:35:32:dd:2a:8f:84:9d:8c:b1:c2:6b: f0:88:02:71:32:53:ca:53:c1:a9:bd:a7:04:6a:6f:ae:6c:a5: 99:88:1e:a4:b0:14:e8:5a:6e:b5:8a:4c:bf:cd:65:ad:0a:a8: 9f:62:1d:d3:1c:55:6d:e5:f0:a1:25:87:64:e0:14:78:1b:b7: ea:98:f3:5d:1c:83:d4:79:17:a0:c2:72:8a:97:9a:18:dd:29: c5:ed:92:eb:61:c2:f2:ee:2c:5a:da:d9:99:dc:ba:16:d6:bf: 15:8a:6e:42:5b:e1:a9:1d:3f:b6:16:93:f4:e3:17:f9:44:ca: 05:30:49:d6:5c:c0:81:7e:d7:a1:12:a3:96:54:9e:17:1b:6c: c3:90:d7:63:13:c8:ca:06:4f:a4:17:57:6e:90:8f:f4:04:c4: 20:9c:32:81 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuAt3GHUOkynqMPxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNjNzhkNjAtMzRlYi00ZmVkLThlMjUtOTI1Yjk1YTMw YzhlMB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk OGVmZWM3YjQtNjg1ZS00NWFhLTgxMzYtYTUzMDFhZDNkNzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrnY7k+0WYbdC8hNn7U9lrygbh/BvJNCC9gZ lCr15gYuZGzhHeK7sltWXcLH8NyWHqXaClhUfYZgNrN/dEethwlmzsbgWVFGx1pO 8dRKM/Rz9bnUmRoKdrTadlw72/z/wYYGNxHPuMRni0PxpDjomDxu9kCqY8BzVg1y AlmVB4brdAqOQyEv0xt/g1wquLpA5QVGsf7pLXwLBmHaUO5L1F2/ylRHryfQLVNn MK1WK/xwu+U+qiIlO9Lerac9a1TNyyulvny7QInI9i+K5QwLGvR4xsgepbFsMkYN GsWBD0lH5S3/pOFQcVcudME6GoBuYAqpogAkoAzlKIzf5bMDCwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGljBpYrl7OPtZbjBSENqPikQourMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zM2M3 OGQ2MC0zNGViLTRmZWQtOGUyNS05MjViOTVhMzBjOGUvYjlmZTkxMzYtNjcxMS0z MWI2LWEyNDgtNjUyZDU4YzZhOWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzNjNzhkNjAtMzRlYi00ZmVkLThl MjUtOTI1Yjk1YTMwYzhlLzMzYzc4ZDYwLTM0ZWItNGZlZC04ZTI1LTkyNWI5NWEz MGM4ZS5jcmwwHwYDVR0jBBgwFoAUX2UlsGmXIYLm4tORRne6XDPT4EEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zM2M3OGQ2MC0zNGViLTRmZWQtOGUyNS05MjVi OTVhMzBjOGUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5XACI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB4qPeKaKGNgGhUa6djbVZZmpqNhZ9Vvn5msjfB8zHiwQNvotUVt szkkJvZi2/bygc/ROXKXEQGjM00SyFvow6aXBMZBJFVu3f6oM1ZnW+wmByR1v/3X hRO+BWN1Fh77Rik1Mt0qj4SdjLHCa/CIAnEyU8pTwam9pwRqb65spZmIHqSwFOha brWKTL/NZa0KqJ9iHdMcVW3l8KElh2TgFHgbt+qY810cg9R5F6DCcoqXmhjdKcXt kuthwvLuLFra2ZncuhbWvxWKbkJb4akdP7YWk/TjF/lEygUwSdZcwIF+16ESo5ZU nhcbbMOQ12MTyMoGT6QXV26Qj/QExCCcMoE= -----END CERTIFICATE-----Generated at Wed Oct 22 05:00:48 2025 by rpki-client