$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/33610651-6c06-37c0-bea7-21abb1c6f7a7.roa File: 33610651-6c06-37c0-bea7-21abb1c6f7a7.roa (raw, json) Hash identifier: nKbpEwEzgpin85OuwvrT7d4t1Cm7ZXDU6aDzaCGs0PA= Subject key identifier: BB:76:BE:71:EF:4E:27:BD:8A:2A:76:36:9E:B0:3F:FD:47:97:EB:C8 Certificate issuer: /CN=138beb7a-6a99-47ad-a8e7-50bb4d24b667 Certificate serial: 010D0C9F4328584B21CC26321E856CF1CB986A80 Authority key identifier: FE:59:F2:8E:AB:34:7A:8A:A7:D7:6F:39:AF:D3:9A:32:46:FB:97:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/33610651-6c06-37c0-bea7-21abb1c6f7a7.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 397702 IP address blocks: 2607:46c0:816::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/138beb7a-6a99-47ad-a8e7-50bb4d24b667.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/138beb7a-6a99-47ad-a8e7-50bb4d24b667.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:26:32:1e:85:6c:f1:cb:98:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=138beb7a-6a99-47ad-a8e7-50bb4d24b667 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=d5e1a713-1042-418e-a04b-63790be7bd2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:00:f1:dd:01:37:78:cf:9c:d0:eb:be:df:38: 1c:8b:f0:73:9a:ad:c2:9c:84:4e:c8:5d:54:c8:4c: 37:a4:02:0a:34:b5:a3:e2:f2:93:ec:07:99:d6:e5: a3:50:41:eb:b9:d3:53:5d:73:77:46:69:e5:8f:8b: c0:16:a7:a1:cd:5f:1d:7b:aa:58:d2:fb:2f:77:7c: 83:d6:5e:b2:42:89:9d:1a:d0:78:7f:10:81:be:ed: d8:82:fb:01:bd:48:00:5e:0d:a7:6e:b3:eb:8e:18: a0:db:08:56:ed:82:38:55:0d:ad:5e:e2:eb:80:d1: 35:06:43:7d:66:4c:7f:e5:cd:48:ed:89:cd:53:aa: 7f:8a:e4:fe:22:52:30:11:43:c2:c6:6c:ea:1a:d2: 3b:95:e3:e9:56:42:b4:66:e6:73:ea:d9:a8:21:c9: 7e:72:4f:e0:80:84:d6:0a:e3:ce:b4:da:61:8d:d1: 90:23:9d:3b:89:2d:1f:0e:b9:90:59:81:9e:71:82: 51:7f:82:47:7c:11:04:11:8e:e5:ad:91:5d:cc:50: fa:7b:ec:c5:37:9a:2a:d9:4a:37:ab:03:11:83:0c: a0:80:e1:e9:a1:70:52:89:24:af:a7:b2:8a:5d:29: d4:74:d0:ff:da:a5:16:68:4b:a7:15:97:a7:01:10: 29:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:76:BE:71:EF:4E:27:BD:8A:2A:76:36:9E:B0:3F:FD:47:97:EB:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/33610651-6c06-37c0-bea7-21abb1c6f7a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/138beb7a-6a99-47ad-a8e7-50bb4d24b667.crl X509v3 Authority Key Identifier: keyid:FE:59:F2:8E:AB:34:7A:8A:A7:D7:6F:39:AF:D3:9A:32:46:FB:97:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667.cer sbgp-ipAddrBlock: critical IPv6: 2607:46c0:816::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:db:7f:f0:98:82:4e:89:7c:7e:21:a4:9a:bc:70:f1:b1:ab: 91:c1:a5:cd:fe:7a:36:cb:d9:66:9f:19:36:6d:e6:e7:fd:8e: 71:20:0b:e8:9a:c5:71:b3:0d:c4:b7:48:67:54:6a:3d:fa:69: f4:e7:9c:d7:64:99:65:35:97:13:f5:86:78:14:63:27:1f:0e: 17:83:27:12:0d:1a:df:a7:6d:26:50:ed:a2:f7:30:be:51:2a: df:66:3e:5a:74:ce:30:23:85:17:c1:12:a6:c2:e0:b2:f7:68: c1:bb:e7:65:00:95:e7:b8:68:a4:45:6c:73:3b:18:bd:02:2f: 62:fa:19:c3:09:5d:1f:19:a9:8b:39:5c:4e:61:2f:1a:f9:6b: 36:3b:cc:fc:d7:40:e8:66:25:05:32:24:65:09:80:af:12:6c: a5:9f:55:65:a9:9c:e9:81:6e:96:b4:1d:b7:b4:e9:a7:de:24: db:db:b6:bb:94:27:4f:46:d1:5a:55:b5:b6:b3:ea:10:6f:9d: bd:b9:4e:bb:70:1d:cd:fc:e1:3f:42:0f:c4:88:20:86:58:e4: 17:46:24:4e:a7:21:e0:c4:88:6b:ea:5b:0f:d1:94:c8:4b:cd: 30:24:47:7f:14:7d:c6:dc:85:b0:1c:70:91:87:3d:77:fa:75: 94:23:43:be -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEshzCYyHoVs8cuYaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTM4YmViN2EtNmE5OS00N2FkLWE4ZTctNTBiYjRkMjRi NjY3MB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk ZDVlMWE3MTMtMTA0Mi00MThlLWEwNGItNjM3OTBiZTdiZDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkADx3QE3eM+c0Ou+3zgci/Bzmq3CnIROyF1U yEw3pAIKNLWj4vKT7AeZ1uWjUEHrudNTXXN3Rmnlj4vAFqehzV8de6pY0vsvd3yD 1l6yQomdGtB4fxCBvu3YgvsBvUgAXg2nbrPrjhig2whW7YI4VQ2tXuLrgNE1BkN9 Zkx/5c1I7YnNU6p/iuT+IlIwEUPCxmzqGtI7lePpVkK0ZuZz6tmoIcl+ck/ggITW CuPOtNphjdGQI507iS0fDrmQWYGecYJRf4JHfBEEEY7lrZFdzFD6e+zFN5oq2Uo3 qwMRgwyggOHpoXBSiSSvp7KKXSnUdND/2qUWaEunFZenARApwwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLt2vnHvTie9iip2Np6wP/1Hl+vIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xMzhi ZWI3YS02YTk5LTQ3YWQtYThlNy01MGJiNGQyNGI2NjcvMzM2MTA2NTEtNmMwNi0z N2MwLWJlYTctMjFhYmIxYzZmN2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMTM4YmViN2EtNmE5OS00N2FkLWE4 ZTctNTBiYjRkMjRiNjY3LzEzOGJlYjdhLTZhOTktNDdhZC1hOGU3LTUwYmI0ZDI0 YjY2Ny5jcmwwHwYDVR0jBBgwFoAU/lnyjqs0eoqn1285r9OaMkb7l2EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xMzhiZWI3YS02YTk5LTQ3YWQtYThlNy01MGJi NGQyNGI2NjcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgdGwAgW MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAfbf/CYgk6JfH4hpJq8cPGxq5HBpc3+ejbL2WafGTZt5uf9jnEg C+iaxXGzDcS3SGdUaj36afTnnNdkmWU1lxP1hngUYycfDheDJxINGt+nbSZQ7aL3 ML5RKt9mPlp0zjAjhRfBEqbC4LL3aMG752UAlee4aKRFbHM7GL0CL2L6GcMJXR8Z qYs5XE5hLxr5azY7zPzXQOhmJQUyJGUJgK8SbKWfVWWpnOmBbpa0Hbe06afeJNvb truUJ09G0VpVtbaz6hBvnb25TrtwHc384T9CD8SIIIZY5BdGJE6nIeDEiGvqWw/R lMhLzTAkR38UfcbchbAccJGHPXf6dZQjQ74= -----END CERTIFICATE-----Generated at Sat Nov 1 05:32:29 2025 by rpki-client