$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/b9fe9136-6711-31b6-a248-652d58c6a9e1.roa File: b9fe9136-6711-31b6-a248-652d58c6a9e1.roa (raw, json) Hash identifier: o7DWUXlWpERYgTO/rS6uFieMQnNW8EA9MnPs6Ed24Z0= Subject key identifier: 8C:6F:95:5A:7C:81:63:28:FE:9F:91:31:AC:D2:7C:87:07:8B:F6:70 Certificate issuer: /CN=33c78d60-34eb-4fed-8e25-925b95a30c8e Certificate serial: 010D0C9F4328584A9FFBAD7956871E72B678BB00 Authority key identifier: 5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/b9fe9136-6711-31b6-a248-652d58c6a9e1.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 33039 IP address blocks: 2602:f95c:88::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 03 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:ad:79:56:87:1e:72:b6:78:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33c78d60-34eb-4fed-8e25-925b95a30c8e Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=217da7dd-3085-44ee-9f47-178150741329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5f:ca:55:81:c7:83:0b:39:5d:3e:60:3e:d3: fb:ac:32:94:41:dd:88:59:c4:3b:1e:3f:cf:88:64: 3b:b4:c8:8e:53:85:57:38:1a:a2:7c:29:b7:99:81: 77:cf:01:a0:55:35:86:fa:26:ab:21:0e:53:8d:40: a7:8c:eb:4a:ff:1d:1b:1d:c3:7c:5f:d0:3a:e6:9d: 75:5d:60:34:88:8f:83:4c:6d:c7:d2:2c:fc:bc:30: fb:21:e2:5d:68:77:d5:53:12:bb:aa:e9:fe:fa:19: 51:1b:5e:7c:44:d7:74:1d:0f:ca:12:db:6c:35:89: dc:fa:eb:bb:10:f1:3d:25:67:a9:10:06:c5:f4:cc: c0:51:14:fe:c8:a0:19:de:d0:eb:a5:63:64:7a:da: 88:d2:f8:90:ae:e7:cd:db:a2:f0:86:f9:7c:de:89: e2:87:c6:75:bb:cf:13:bc:7d:9c:37:d2:57:bc:db: 74:57:b8:b2:2b:4d:f7:bb:f5:f0:67:92:51:4c:26: 8a:07:8b:69:da:df:e0:d5:96:86:ee:a8:bf:a3:d6: 1a:d0:cd:d9:1e:3e:be:b5:82:a3:b1:8c:fc:60:f6: 4a:87:04:bd:2a:36:52:b2:5d:55:6f:7e:01:e9:5f: 9a:71:0b:4a:86:e4:59:e6:67:1e:71:77:72:28:a5: 2a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:6F:95:5A:7C:81:63:28:FE:9F:91:31:AC:D2:7C:87:07:8B:F6:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/b9fe9136-6711-31b6-a248-652d58c6a9e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl X509v3 Authority Key Identifier: keyid:5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer sbgp-ipAddrBlock: critical IPv6: 2602:f95c:88::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:c7:be:58:e4:bd:e6:08:28:3a:25:aa:24:02:84:4c:6e:cf: 89:51:ef:58:00:0e:bc:5d:40:fb:25:f3:d4:e9:f6:54:e2:f2: f3:21:32:7c:05:d8:01:5f:6a:3f:27:17:12:be:95:23:14:92: 6c:f5:56:de:36:e3:19:cf:a6:cd:7b:1c:28:06:aa:87:3a:61: ec:81:4d:41:5e:03:d4:14:01:d1:89:1e:d7:f1:b5:13:24:f2: bf:bc:a9:cd:91:bd:13:3b:aa:6a:26:cd:a0:fd:a3:85:f8:94: 59:16:e7:27:44:92:86:c3:eb:79:bf:11:37:9d:c9:f4:6c:e7: d3:11:a2:3f:3e:56:b7:8c:0e:5e:3b:21:dd:38:f0:95:45:02: 1e:55:a0:79:17:14:b9:bb:e2:8d:fe:d5:e2:22:ce:34:a1:20: f0:43:f4:2d:62:1e:c4:df:34:8b:90:e4:3f:20:d2:6a:47:c3: 73:29:4e:8b:a0:aa:be:58:d8:a5:75:31:a0:fa:20:e2:3b:50: e2:fc:05:cc:27:b4:53:fe:31:fa:75:81:4b:95:0d:0d:1a:41: 76:76:82:88:25:d3:04:01:2f:f8:0e:dc:0c:92:87:d8:6a:95: 24:b5:00:a8:60:35:f4:a8:ba:b2:c9:a6:86:d5:54:d5:7c:6e: 29:d4:2d:2b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqf+615VocecrZ4uwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNjNzhkNjAtMzRlYi00ZmVkLThlMjUtOTI1Yjk1YTMw YzhlMB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk MjE3ZGE3ZGQtMzA4NS00NGVlLTlmNDctMTc4MTUwNzQxMzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtl/KVYHHgws5XT5gPtP7rDKUQd2IWcQ7Hj/P iGQ7tMiOU4VXOBqifCm3mYF3zwGgVTWG+iarIQ5TjUCnjOtK/x0bHcN8X9A65p11 XWA0iI+DTG3H0iz8vDD7IeJdaHfVUxK7qun++hlRG158RNd0HQ/KEttsNYnc+uu7 EPE9JWepEAbF9MzAURT+yKAZ3tDrpWNketqI0viQrufN26Lwhvl83onih8Z1u88T vH2cN9JXvNt0V7iyK033u/XwZ5JRTCaKB4tp2t/g1ZaG7qi/o9Ya0M3ZHj6+tYKj sYz8YPZKhwS9KjZSsl1Vb34B6V+acQtKhuRZ5mcecXdyKKUqdQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIxvlVp8gWMo/p+RMazSfIcHi/ZwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zM2M3 OGQ2MC0zNGViLTRmZWQtOGUyNS05MjViOTVhMzBjOGUvYjlmZTkxMzYtNjcxMS0z MWI2LWEyNDgtNjUyZDU4YzZhOWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzNjNzhkNjAtMzRlYi00ZmVkLThl MjUtOTI1Yjk1YTMwYzhlLzMzYzc4ZDYwLTM0ZWItNGZlZC04ZTI1LTkyNWI5NWEz MGM4ZS5jcmwwHwYDVR0jBBgwFoAUX2UlsGmXIYLm4tORRne6XDPT4EEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zM2M3OGQ2MC0zNGViLTRmZWQtOGUyNS05MjVi OTVhMzBjOGUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5XACI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB3HvljkveYIKDolqiQChExuz4lR71gADrxdQPsl89Tp9lTi8vMh MnwF2AFfaj8nFxK+lSMUkmz1Vt424xnPps17HCgGqoc6YeyBTUFeA9QUAdGJHtfx tRMk8r+8qc2RvRM7qmomzaD9o4X4lFkW5ydEkobD63m/ETedyfRs59MRoj8+VreM Dl47Id048JVFAh5VoHkXFLm74o3+1eIizjShIPBD9C1iHsTfNIuQ5D8g0mpHw3Mp Tougqr5Y2KV1MaD6IOI7UOL8BcwntFP+Mfp1gUuVDQ0aQXZ2gogl0wQBL/gO3AyS h9hqlSS1AKhgNfSourLJpobVVNV8binULSs= -----END CERTIFICATE-----Generated at Sat Aug 2 05:53:38 2025 by rpki-client