$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/76d101bd-4a94-3580-b17f-bb5950fdbf72.roa File: 76d101bd-4a94-3580-b17f-bb5950fdbf72.roa (raw, json) Hash identifier: bFLEgLqT7cnSQP/gXv3g+mG2IA/z9htXGZsdiuY+ZyA= Subject key identifier: 29:FB:9B:18:34:BA:D6:EE:83:9F:67:27:80:8F:FB:56:79:EE:02:F9 Certificate issuer: /CN=33d3c304-619d-4e6d-aed5-9e25165cbc73 Certificate serial: 010D0C9F4328584B1F017C7B1E586AD0A276A420 Authority key identifier: 8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/76d101bd-4a94-3580-b17f-bb5950fdbf72.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 401416 IP address blocks: 2607:dd40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:7c:7b:1e:58:6a:d0:a2:76:a4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33d3c304-619d-4e6d-aed5-9e25165cbc73 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=3f3472c4-1f73-41b2-9936-3069493385c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7f:8a:e6:86:18:8d:a8:e7:58:8f:25:6a:eb: d0:18:45:7e:da:b5:9a:8d:61:6e:f5:b3:ab:0b:37: ea:f6:b7:96:bb:6f:86:7f:dc:56:84:e2:5c:a1:db: bd:11:bf:d7:6d:6e:cb:60:d4:9c:ce:ed:a9:6f:e5: 1f:0b:7a:5a:2a:71:77:b4:e5:7a:64:94:ea:d2:e8: 5e:9b:5d:00:a4:2f:c7:fa:80:d1:48:47:1f:eb:f4: 04:37:3d:54:ef:04:d5:1e:b0:4d:43:c0:43:22:72: a2:ab:27:23:ef:59:26:41:14:7b:0a:bf:62:8b:4a: d6:1b:46:49:4a:e5:55:d3:85:23:ba:3a:a2:df:0a: 41:55:c8:e8:75:84:30:95:e9:56:19:1e:09:73:34: e2:6c:51:5c:31:a9:a3:22:0e:cc:3c:e9:a8:2d:a8: 85:d0:54:a0:4b:4a:74:6d:07:42:81:34:4d:e7:13: ca:69:b4:21:a6:b1:e0:49:a4:0a:d8:8a:dc:14:78: 20:d6:d2:e2:35:e6:81:2b:d0:02:50:c1:1b:63:13: 6e:8a:5d:ba:c2:77:7b:60:04:5c:7b:64:d8:2e:af: be:45:68:99:82:30:b8:4a:cd:84:3d:67:09:96:3a: 3d:cf:64:9a:ae:43:4e:ff:4e:d1:95:c7:85:bf:41: 11:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:FB:9B:18:34:BA:D6:EE:83:9F:67:27:80:8F:FB:56:79:EE:02:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/76d101bd-4a94-3580-b17f-bb5950fdbf72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl X509v3 Authority Key Identifier: keyid:8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer sbgp-ipAddrBlock: critical IPv6: 2607:dd40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption da:06:f1:fa:e0:a8:e1:96:d5:15:99:21:c3:a5:0f:4b:8e:a4: e6:62:a6:ce:ad:13:da:9b:9d:4e:fb:45:d4:ad:d9:17:76:a1: 57:97:9b:35:1a:46:65:e9:55:71:3e:a6:93:0e:af:c3:4a:ff: bd:69:5d:7f:6f:67:ec:10:23:fb:1b:da:90:ce:84:db:95:25: 58:19:d1:88:c5:5a:e4:fd:ce:80:99:42:3a:8d:ab:9b:ee:6e: 5a:70:a5:3f:88:4f:61:34:2f:44:33:4c:c2:52:23:1e:92:b3: 22:4d:59:5e:56:d8:7c:16:40:47:2b:86:b9:ea:e6:27:5a:2c: 04:e1:55:23:20:df:0d:b8:12:ae:83:2f:54:b7:e4:31:4b:76: 2f:b4:38:70:3a:e4:ac:64:aa:f3:3d:2a:0a:74:b4:85:51:d6: 58:b1:95:61:60:9b:3d:42:12:98:83:9d:49:3f:eb:44:34:11: 21:71:02:c4:49:53:c0:ea:31:41:ca:8c:3e:cb:04:18:24:1f: 1c:6d:84:51:07:b6:42:52:ae:1f:23:ed:84:36:0f:1f:ba:d2: 28:05:1a:9a:d7:7e:ef:c3:8e:7c:d4:f4:c5:e7:ae:f3:d2:18: 30:4e:81:d4:c6:62:00:75:dd:f8:e0:43:1b:87:d3:22:2d:2e: 1c:a7:d4:73 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsfAXx7Hlhq0KJ2pCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNkM2MzMDQtNjE5ZC00ZTZkLWFlZDUtOWUyNTE2NWNi YzczMB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk M2YzNDcyYzQtMWY3My00MWIyLTk5MzYtMzA2OTQ5MzM4NWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxH+K5oYYjajnWI8lauvQGEV+2rWajWFu9bOr Czfq9reWu2+Gf9xWhOJcodu9Eb/XbW7LYNSczu2pb+UfC3paKnF3tOV6ZJTq0uhe m10ApC/H+oDRSEcf6/QENz1U7wTVHrBNQ8BDInKiqycj71kmQRR7Cr9ii0rWG0ZJ SuVV04Ujujqi3wpBVcjodYQwlelWGR4JczTibFFcMamjIg7MPOmoLaiF0FSgS0p0 bQdCgTRN5xPKabQhprHgSaQK2IrcFHgg1tLiNeaBK9ACUMEbYxNuil26wnd7YARc e2TYLq++RWiZgjC4Ss2EPWcJljo9z2SarkNO/07RlceFv0ER2wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCn7mxg0utbug59nJ4CP+1Z57gL5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zM2Qz YzMwNC02MTlkLTRlNmQtYWVkNS05ZTI1MTY1Y2JjNzMvNzZkMTAxYmQtNGE5NC0z NTgwLWIxN2YtYmI1OTUwZmRiZjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzNkM2MzMDQtNjE5ZC00ZTZkLWFl ZDUtOWUyNTE2NWNiYzczLzMzZDNjMzA0LTYxOWQtNGU2ZC1hZWQ1LTllMjUxNjVj YmM3My5jcmwwHwYDVR0jBBgwFoAUjkoNtMfpM0cLNL0AOGQeSnjs4mowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zM2QzYzMwNC02MTlkLTRlNmQtYWVkNS05ZTI1 MTY1Y2JjNzMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfdQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQDaBvH64KjhltUVmSHDpQ9LjqTmYqbOrRPam51O+0XUrdkXdqFXl5s1 GkZl6VVxPqaTDq/DSv+9aV1/b2fsECP7G9qQzoTblSVYGdGIxVrk/c6AmUI6jaub 7m5acKU/iE9hNC9EM0zCUiMekrMiTVleVth8FkBHK4a56uYnWiwE4VUjIN8NuBKu gy9Ut+QxS3YvtDhwOuSsZKrzPSoKdLSFUdZYsZVhYJs9QhKYg51JP+tENBEhcQLE SVPA6jFByow+ywQYJB8cbYRRB7ZCUq4fI+2ENg8futIoBRqa137vw4581PTF567z 0hgwToHUxmIAdd344EMbh9MiLS4cp9Rz -----END CERTIFICATE-----Generated at Mon Oct 20 21:34:50 2025 by rpki-client