$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33c1a97c-7649-3d3a-95ee-05dd3546a772.roa File: 33c1a97c-7649-3d3a-95ee-05dd3546a772.roa (raw, json) Hash identifier: WGtswQSBqw4YNdV2LIZPRGfWJx7s7lr2ZQC3chLvSGc= Subject key identifier: F0:72:F2:2A:97:D0:D2:15:29:D7:07:8C:D5:08:1E:82:E3:7C:FD:B7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AC016399EE74D7151B3615780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33c1a97c-7649-3d3a-95ee-05dd3546a772.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 12222 IP address blocks: 2001:4878:a010::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:39:9e:e7:4d:71:51:b3:61:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=e9c0c5f1-3c70-4e4f-a9fd-a96bdcb8ee20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:27:1e:e8:29:6a:80:d6:74:b5:9b:7c:26:78: 2a:67:5d:67:3f:87:6f:e1:a3:7a:94:9d:99:10:64: c3:96:5a:fc:29:9d:09:e2:1a:f4:95:fb:25:47:c7: ca:7c:36:86:ea:36:4c:f8:dd:70:2f:47:f5:c0:22: 74:04:cf:6e:13:7b:cb:4a:9e:0c:d4:fc:19:44:62: d9:5b:d7:bf:f1:0f:2d:7e:e7:98:65:84:de:5f:10: 20:30:2d:f5:b1:f3:28:ff:3e:0f:21:c3:e7:ba:9f: 44:8c:16:94:bd:24:a0:ee:6a:63:fd:7b:23:39:4e: 5a:dc:5a:d3:91:35:8f:20:1f:f5:ea:3c:fc:92:cf: 7e:bf:f1:f1:77:bf:7f:f5:eb:5e:73:fe:08:7c:cd: 1c:86:61:77:a4:81:bd:65:fe:db:7c:d4:ee:a7:e0: 1a:25:72:85:1c:49:fc:76:45:43:7f:c7:d6:60:6a: a8:b9:81:c0:df:22:d5:d5:b9:b9:0c:7d:42:b3:02: 20:a6:9f:e4:62:e8:b0:37:f0:7f:0c:5a:2b:35:97: c9:98:94:73:4b:10:62:d5:e9:22:4c:43:43:8a:72: c3:4d:c8:49:a5:c6:99:49:9f:a6:47:e5:b9:a4:06: c7:21:79:38:9e:cc:b0:c5:0c:37:df:0a:e2:bf:f6: 58:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:72:F2:2A:97:D0:D2:15:29:D7:07:8C:D5:08:1E:82:E3:7C:FD:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33c1a97c-7649-3d3a-95ee-05dd3546a772.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:a010::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:86:93:ee:7e:57:7a:09:5a:64:70:12:4e:a2:2d:b5:fa:0d: 85:20:14:7a:a9:af:4d:3f:73:24:32:2b:b3:e0:33:77:55:2d: dd:53:22:31:a1:2c:b0:83:7e:68:bf:71:ee:80:0c:05:ed:29: d4:af:54:a7:5e:43:62:a7:3a:37:90:4a:9c:a6:2b:ed:b0:52: 65:ba:bb:db:56:18:e7:3b:b5:89:b5:67:02:b2:6f:11:28:c5: ba:d1:6a:83:eb:82:91:ca:55:aa:c5:c6:f6:1c:a7:29:42:f2: d2:f3:05:60:06:9c:c5:c7:97:36:57:d0:13:1d:44:a5:18:da: 7b:15:e7:0e:a2:d1:da:58:26:a3:25:f2:63:75:00:6d:5f:7e: 4f:11:f1:88:d4:60:26:fd:65:ef:33:3c:16:a5:00:da:a9:26: 8d:6b:98:16:29:be:60:77:78:5b:be:e9:fe:95:84:95:b2:9c: 8c:ef:1d:1c:5b:dc:07:e4:49:54:03:f8:04:98:a6:39:1d:50: 0b:61:1c:15:43:23:62:52:88:27:70:d2:30:03:c4:76:c6:ef: bf:7a:a7:31:22:27:02:06:f7:43:28:fa:9a:17:fa:14:41:73: a0:89:6a:f7:c7:22:6d:58:d5:28:06:c3:58:64:cc:ee:eb:a3: 4d:53:05:5f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErAFjme501xUbNhV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk ZTljMGM1ZjEtM2M3MC00ZTRmLWE5ZmQtYTk2YmRjYjhlZTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyce6ClqgNZ0tZt8JngqZ11nP4dv4aN6lJ2Z EGTDllr8KZ0J4hr0lfslR8fKfDaG6jZM+N1wL0f1wCJ0BM9uE3vLSp4M1PwZRGLZ W9e/8Q8tfueYZYTeXxAgMC31sfMo/z4PIcPnup9EjBaUvSSg7mpj/XsjOU5a3FrT kTWPIB/16jz8ks9+v/Hxd79/9etec/4IfM0chmF3pIG9Zf7bfNTup+AaJXKFHEn8 dkVDf8fWYGqouYHA3yLV1bm5DH1CswIgpp/kYuiwN/B/DForNZfJmJRzSxBi1eki TENDinLDTchJpcaZSZ+mR+W5pAbHIXk4nsywxQw33wriv/ZYXwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPBy8iqX0NIVKdcHjNUIHoLjfP23MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzNjMWE5N2MtNzY0OS0z ZDNhLTk1ZWUtMDVkZDM1NDZhNzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeKAQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABqGk+5+V3oJWmRwEk6iLbX6DYUgFHqpr00/cyQyK7PgM3dVLd1T IjGhLLCDfmi/ce6ADAXtKdSvVKdeQ2KnOjeQSpymK+2wUmW6u9tWGOc7tYm1ZwKy bxEoxbrRaoPrgpHKVarFxvYcpylC8tLzBWAGnMXHlzZX0BMdRKUY2nsV5w6i0dpY JqMl8mN1AG1ffk8R8YjUYCb9Ze8zPBalANqpJo1rmBYpvmB3eFu+6f6VhJWynIzv HRxb3AfkSVQD+ASYpjkdUAthHBVDI2JSiCdw0jADxHbG7796pzEiJwIG90Mo+poX +hRBc6CJavfHIm1Y1SgGw1hkzO7ro01TBV8= -----END CERTIFICATE-----Generated at Sat Aug 23 14:48:21 2025 by rpki-client