$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/affbcdc5-3e2c-30d2-957f-7928191bbfb2.roa File: affbcdc5-3e2c-30d2-957f-7928191bbfb2.roa (raw, json) Hash identifier: upCnjkK6tUJfHmYDYBpHj9yuuXvsgzS7iB9wsj1RPjg= Subject key identifier: 73:E3:87:77:85:46:41:88:49:F1:C8:5C:E0:41:72:15:DC:59:DD:30 Certificate issuer: /CN=533bea0e-cd52-49a8-9cca-a05cc33ce073 Certificate serial: 010D0C9F4328584A8840ABDFB5FC1C5D6D10B340 Authority key identifier: 33:18:BF:25:9A:A7:B2:43:AA:A8:B2:C2:1D:7C:A3:8F:E9:B3:65:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/affbcdc5-3e2c-30d2-957f-7928191bbfb2.roa Signing time: Wed 16 Jul 2025 01:00:49 +0000 ROA not before: Wed 16 Jul 2025 01:00:49 +0000 ROA not after: Tue 14 Oct 2025 01:00:49 +0000 asID: 11878 IP address blocks: 2607:9000::/36 maxlen: 48 2607:9000:1000::/36 maxlen: 48 2607:9000:2000::/36 maxlen: 48 2607:9000:3000::/36 maxlen: 48 2607:9000:4000::/36 maxlen: 48 2607:9000:5000::/36 maxlen: 48 2607:9000:6000::/36 maxlen: 48 2607:9000:7000::/36 maxlen: 48 2607:9000:8000::/36 maxlen: 48 2607:9000:9000::/36 maxlen: 48 2607:9000:a000::/36 maxlen: 48 2607:9000:b000::/36 maxlen: 48 2607:9000:c000::/36 maxlen: 48 2607:9000:d000::/36 maxlen: 48 2607:9000:e000::/36 maxlen: 48 2607:9000:f000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/533bea0e-cd52-49a8-9cca-a05cc33ce073.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/533bea0e-cd52-49a8-9cca-a05cc33ce073.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:88:40:ab:df:b5:fc:1c:5d:6d:10:b3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=533bea0e-cd52-49a8-9cca-a05cc33ce073 Validity Not Before: Jul 16 01:00:49 2025 GMT Not After : Oct 14 01:00:49 2025 GMT Subject: CN=59d5af4c-1c6b-44d8-8605-9651503dd534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:59:e1:50:44:76:f2:5f:9e:66:22:32:58:f7: 8e:17:41:a3:11:69:12:de:22:41:7c:6b:1c:fc:8b: 32:5e:78:7b:36:1d:37:ab:23:fb:ec:bf:b3:93:1c: 6a:1a:7b:90:f8:fb:a7:e6:ad:4e:ef:a2:b6:d0:94: cb:5b:3b:28:43:6c:79:72:4d:d7:98:aa:28:03:e9: 71:30:b9:72:37:2a:bb:e3:4c:24:92:19:bc:6d:27: 6b:44:2c:c2:a4:eb:fc:a2:a5:84:7f:b7:9c:5b:89: 6d:74:23:79:4f:54:e9:c4:1d:89:e8:c0:f8:35:75: b0:e2:e2:90:0f:d4:c8:56:d4:4b:c7:bb:60:ba:cf: 72:03:0f:10:be:44:67:8a:76:95:aa:ab:95:37:59: 40:9a:f0:22:f9:fd:d0:88:a5:4e:be:72:a0:5c:d1: 72:38:39:37:80:79:24:ac:25:d9:2b:0b:9e:fe:a5: 59:1f:2a:41:0d:b7:6c:f0:a1:fb:fd:50:3a:a4:a8: 93:89:a6:61:6c:54:73:ab:08:8e:67:8a:ee:1b:4c: cb:9c:2c:a0:e6:3b:fd:25:91:0e:f2:77:ca:5e:1e: 98:69:50:76:6f:75:6c:8f:7f:1a:11:43:86:36:f9: 59:78:14:ec:2b:b6:18:85:3d:06:5a:9b:9b:c9:ed: 2d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:E3:87:77:85:46:41:88:49:F1:C8:5C:E0:41:72:15:DC:59:DD:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/affbcdc5-3e2c-30d2-957f-7928191bbfb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/533bea0e-cd52-49a8-9cca-a05cc33ce073.crl X509v3 Authority Key Identifier: keyid:33:18:BF:25:9A:A7:B2:43:AA:A8:B2:C2:1D:7C:A3:8F:E9:B3:65:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073.cer sbgp-ipAddrBlock: critical IPv6: 2607:9000::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:c2:1a:e6:dc:0a:33:ed:83:dd:90:c2:ca:b7:7b:0d:58:ca: 2f:e9:e5:44:e5:8b:14:c2:6f:dd:58:61:3d:68:d6:dc:7b:2c: 94:25:f5:46:32:5e:ed:cc:8f:23:7a:18:8b:88:95:15:d5:1c: dd:15:33:a4:11:82:d3:04:45:20:2f:70:95:0a:ce:6b:75:1c: 68:8f:df:31:18:0f:fb:12:23:3d:7b:45:7c:a6:ea:6b:0d:20: e0:18:33:b7:dc:e7:de:88:c4:3b:3f:65:93:f7:c6:82:44:72: 28:e2:7a:70:a5:64:db:a1:74:b2:02:a8:0c:26:25:69:f3:e7: f2:3f:93:b6:d3:e4:1f:e5:35:36:1f:0c:2b:46:ac:37:a7:c0: 9e:ed:3e:d1:aa:79:4d:06:17:8e:e2:73:ff:3c:4d:d1:54:64: 4a:00:80:9a:40:28:f9:42:37:24:78:ee:8e:b4:ed:30:19:56: 8b:fc:98:f1:97:30:d4:81:35:09:0d:9e:7e:00:1f:eb:f5:cd: c5:5b:b2:b8:cc:da:bc:b8:50:39:62:c3:81:4b:8e:1b:e4:fe: fa:68:6f:a9:8f:73:34:98:a5:1c:2c:81:7f:66:c0:5b:2d:b7: 64:e0:f1:95:80:ae:7b:0e:77:b2:93:04:0c:4d:e6:78:ff:6d: 79:f9:02:ac -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqIQKvftfwcXW0Qs0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTMzYmVhMGUtY2Q1Mi00OWE4LTljY2EtYTA1Y2MzM2Nl MDczMB4XDTI1MDcxNjAxMDA0OVoXDTI1MTAxNDAxMDA0OVowLzEtMCsGA1UEAxMk NTlkNWFmNGMtMWM2Yi00NGQ4LTg2MDUtOTY1MTUwM2RkNTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1nhUER28l+eZiIyWPeOF0GjEWkS3iJBfGsc /IsyXnh7Nh03qyP77L+zkxxqGnuQ+Pun5q1O76K20JTLWzsoQ2x5ck3XmKooA+lx MLlyNyq740wkkhm8bSdrRCzCpOv8oqWEf7ecW4ltdCN5T1TpxB2J6MD4NXWw4uKQ D9TIVtRLx7tgus9yAw8QvkRninaVqquVN1lAmvAi+f3QiKVOvnKgXNFyODk3gHkk rCXZKwue/qVZHypBDbds8KH7/VA6pKiTiaZhbFRzqwiOZ4ruG0zLnCyg5jv9JZEO 8nfKXh6YaVB2b3Vsj38aEUOGNvlZeBTsK7YYhT0GWpubye0tEQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHPjh3eFRkGISfHIXOBBchXcWd0wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81MzNi ZWEwZS1jZDUyLTQ5YTgtOWNjYS1hMDVjYzMzY2UwNzMvYWZmYmNkYzUtM2UyYy0z MGQyLTk1N2YtNzkyODE5MWJiZmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNTMzYmVhMGUtY2Q1Mi00OWE4LTlj Y2EtYTA1Y2MzM2NlMDczLzUzM2JlYTBlLWNkNTItNDlhOC05Y2NhLWEwNWNjMzNj ZTA3My5jcmwwHwYDVR0jBBgwFoAUMxi/JZqnskOqqLLCHXyjj+mzZWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81MzNiZWEwZS1jZDUyLTQ5YTgtOWNjYS1hMDVj YzMzY2UwNzMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgeQADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA2whrm3Aoz7YPdkMLKt3sNWMov6eVE5YsUwm/dWGE9aNbceyyUJfVG Ml7tzI8jehiLiJUV1RzdFTOkEYLTBEUgL3CVCs5rdRxoj98xGA/7EiM9e0V8pupr DSDgGDO33OfeiMQ7P2WT98aCRHIo4npwpWTboXSyAqgMJiVp8+fyP5O20+Qf5TU2 HwwrRqw3p8Ce7T7RqnlNBheO4nP/PE3RVGRKAICaQCj5QjckeO6OtO0wGVaL/Jjx lzDUgTUJDZ5+AB/r9c3FW7K4zNq8uFA5YsOBS44b5P76aG+pj3M0mKUcLIF/ZsBb Lbdk4PGVgK57DneykwQMTeZ4/215+QKs -----END CERTIFICATE-----Generated at Wed Jul 23 17:10:24 2025 by rpki-client