$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33b856a0-dad6-347d-a745-ddf890e79e43.roa File: 33b856a0-dad6-347d-a745-ddf890e79e43.roa (raw, json) Hash identifier: y9VmiCdiX5p4t439Jkp7chkwC0Ttc8WC5FXmL4CKZtM= Subject key identifier: 22:26:E1:44:52:B7:90:7C:96:AA:E4:12:CE:56:98:88:31:70:C7:9B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AC2E0E0E55BFBDA692C4D1300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33b856a0-dad6-347d-a745-ddf890e79e43.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 12222 IP address blocks: 2001:4878:b008::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:e0:e5:5b:fb:da:69:2c:4d:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=656c7f97-49c8-4dc4-b1e8-22e1cd06fb64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d5:e7:39:71:d9:48:e4:ff:d1:2a:7b:3a:ca: 1b:07:98:67:0b:f5:9d:b9:e2:b8:82:c8:85:7e:87: 6e:3f:49:68:b0:a2:41:c4:bf:12:e1:00:fc:65:84: bd:2e:83:fe:dd:31:4a:74:7c:34:f2:61:c6:75:da: d3:09:23:07:0a:c9:8a:8d:2a:6f:c9:3e:61:3d:d6: fd:73:e1:cb:f9:32:1e:68:ff:11:96:15:42:bc:6f: 75:83:02:55:d4:1c:e0:2c:be:58:f1:70:0d:55:dd: ab:2d:28:ea:a7:76:b8:4c:9a:99:7d:ac:71:31:a3: b3:ee:4b:df:b3:09:09:fe:60:07:cc:63:eb:e8:c1: e8:cf:0c:a4:8f:3e:cc:7d:87:d1:0d:91:9e:25:51: de:40:c5:45:64:a3:6d:96:16:eb:24:99:12:b7:17: c7:46:bc:30:3a:9a:54:aa:4d:3d:c5:09:32:48:0e: c3:3a:8a:07:50:76:c5:d5:8d:d0:d8:bd:5d:47:60: ba:7d:b2:15:75:b8:b9:35:8b:74:b8:12:f1:4e:5e: 30:3c:7a:35:07:5e:e0:ac:26:52:62:41:61:70:da: 9b:e9:ed:9b:f9:89:a5:97:06:48:3d:e1:23:75:c0: 76:1e:e2:b1:0a:0e:1b:9d:2c:05:e2:98:b7:71:63: 98:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:26:E1:44:52:B7:90:7C:96:AA:E4:12:CE:56:98:88:31:70:C7:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33b856a0-dad6-347d-a745-ddf890e79e43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:b008::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:18:99:d0:d5:4f:b4:04:a9:f2:c4:5d:1a:b3:37:12:c0:4e: 45:41:4f:b9:3d:9a:3b:12:39:49:8b:9a:3c:99:de:85:8c:a7: d2:69:42:a0:f1:6a:ce:9f:79:5a:3d:20:cf:83:58:38:4d:d6: cd:23:a7:af:a7:0b:04:69:6f:4d:7b:6f:f6:0d:fe:b0:48:ae: 04:07:4d:17:6e:d4:b2:67:92:29:74:74:92:3b:dc:f2:f7:a1: 61:1f:94:5b:a3:42:17:c1:a6:d6:a4:66:26:a5:bd:99:86:7d: bb:62:7f:a6:58:49:cb:2a:d9:3e:a9:fb:1e:21:fe:41:64:fe: ba:a2:0f:80:93:c2:b4:24:25:b5:76:f7:ad:0d:57:22:a1:cb: f1:48:73:bd:68:c5:0f:d7:85:03:50:a8:8a:d2:cd:e2:91:ca: 1e:52:d9:3a:10:c0:01:86:75:76:6f:f4:de:f5:f8:c3:d0:b6: 20:1b:f2:ea:20:41:2b:eb:3c:ff:3b:88:84:33:d2:67:41:16: f6:1a:5f:72:76:74:b2:9a:e4:d4:1a:c9:23:26:0f:4f:71:15: 00:75:30:7d:b3:19:e0:4f:bc:37:55:0c:9b:2d:1c:a2:92:7a: bf:2f:bb:98:27:07:7e:98:f9:34:72:bf:bd:94:88:a6:9f:cc: 84:83:cc:9a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErC4ODlW/vaaSxNEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk NjU2YzdmOTctNDljOC00ZGM0LWIxZTgtMjJlMWNkMDZmYjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdXnOXHZSOT/0Sp7OsobB5hnC/WdueK4gsiF foduP0losKJBxL8S4QD8ZYS9LoP+3TFKdHw08mHGddrTCSMHCsmKjSpvyT5hPdb9 c+HL+TIeaP8RlhVCvG91gwJV1BzgLL5Y8XANVd2rLSjqp3a4TJqZfaxxMaOz7kvf swkJ/mAHzGPr6MHozwykjz7MfYfRDZGeJVHeQMVFZKNtlhbrJJkStxfHRrwwOppU qk09xQkySA7DOooHUHbF1Y3Q2L1dR2C6fbIVdbi5NYt0uBLxTl4wPHo1B17grCZS YkFhcNqb6e2b+YmllwZIPeEjdcB2HuKxCg4bnSwF4pi3cWOYjwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCIm4URSt5B8lqrkEs5WmIgxcMebMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzNiODU2YTAtZGFkNi0z NDdkLWE3NDUtZGRmODkwZTc5ZTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeLAI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABIYmdDVT7QEqfLEXRqzNxLATkVBT7k9mjsSOUmLmjyZ3oWMp9Jp QqDxas6feVo9IM+DWDhN1s0jp6+nCwRpb017b/YN/rBIrgQHTRdu1LJnkil0dJI7 3PL3oWEflFujQhfBptakZialvZmGfbtif6ZYScsq2T6p+x4h/kFk/rqiD4CTwrQk JbV2960NVyKhy/FIc71oxQ/XhQNQqIrSzeKRyh5S2ToQwAGGdXZv9N71+MPQtiAb 8uogQSvrPP87iIQz0mdBFvYaX3J2dLKa5NQaySMmD09xFQB1MH2zGeBPvDdVDJst HKKSer8vu5gnB36Y+TRyv72UiKafzISDzJo= -----END CERTIFICATE-----Generated at Sat Aug 23 14:57:24 2025 by rpki-client