$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/c47e0337-491b-3e57-a6f9-0040b1fabe11.roa File: c47e0337-491b-3e57-a6f9-0040b1fabe11.roa (raw, json) Hash identifier: SdPpbso1KbznZPXdq509CXPx/7yj0MWIQfDNchW9dic= Subject key identifier: B8:9E:82:AB:96:2A:DB:31:23:57:3F:FC:88:88:C6:EB:21:4D:5D:D1 Certificate issuer: /CN=33c78d60-34eb-4fed-8e25-925b95a30c8e Certificate serial: 010D0C9F4328584B0746BCAD25C35E94779F7D80 Authority key identifier: 5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/c47e0337-491b-3e57-a6f9-0040b1fabe11.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 33039 IP address blocks: 2602:f95c:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:bc:ad:25:c3:5e:94:77:9f:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33c78d60-34eb-4fed-8e25-925b95a30c8e Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=aeff11f2-272d-4a4e-8813-c90c05d95a7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:3c:b5:09:01:2a:af:24:c9:2e:77:8b:cf:54: e6:7f:f4:0f:d8:a4:82:40:71:49:49:45:a0:be:a4: f3:39:52:e3:15:cb:8b:5a:31:03:c5:d5:1e:e4:62: 25:56:61:f9:53:d8:53:7d:22:57:5b:d4:8f:7e:70: ea:3b:64:31:b5:99:07:ef:9d:70:bc:8b:cf:6e:fa: 2a:67:0a:88:10:6e:12:c5:30:26:dd:e4:4d:a8:f4: 76:e6:e2:d6:03:7f:a0:60:eb:62:cf:07:10:80:c1: 07:a3:2e:9c:22:bb:6a:ae:c8:00:f5:1b:07:f2:36: 37:cf:8f:b5:7a:7c:77:6e:18:cf:a1:70:19:c1:2d: 41:f6:7e:e8:06:7e:9f:eb:79:ba:6a:b0:db:b3:eb: 3f:93:82:7c:db:b9:e0:ae:ca:40:a9:19:6a:f9:34: 1d:db:05:e7:7e:ef:33:e4:3e:c3:b6:74:b5:95:53: 53:59:f2:ab:46:02:5b:29:9e:f1:48:93:e5:4c:be: db:89:65:05:fb:d3:6d:d4:80:8d:4b:dc:40:be:c0: 57:cf:64:00:2f:ac:3a:d5:8b:57:7b:b3:08:d5:d1: 9d:02:aa:44:03:7a:00:37:fd:3f:05:1a:d8:47:01: 05:75:ae:35:5f:93:d0:cd:e4:fc:4f:6d:01:45:d2: 7e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:9E:82:AB:96:2A:DB:31:23:57:3F:FC:88:88:C6:EB:21:4D:5D:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/c47e0337-491b-3e57-a6f9-0040b1fabe11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl X509v3 Authority Key Identifier: keyid:5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer sbgp-ipAddrBlock: critical IPv6: 2602:f95c:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:ca:e5:d4:fb:ce:93:cc:7e:09:39:a6:ce:29:b1:c3:76:30: 5a:4f:c3:fb:4b:9f:bd:96:66:97:c0:ce:5b:8a:83:66:6e:98: e0:50:aa:11:30:b2:9a:9a:97:d8:6a:87:98:91:27:fc:8e:36: c0:dd:64:44:5a:cd:62:b7:2d:bd:b5:25:0b:67:7e:79:b8:33: 30:52:58:25:71:c4:21:5a:aa:76:e2:06:89:44:96:16:85:16: bd:bb:84:95:c8:97:f0:68:45:dd:b8:aa:2b:93:70:1d:de:9f: 66:f1:26:08:d6:92:8c:e7:ab:71:94:7b:da:1c:1d:e1:f5:6d: e7:93:c7:40:69:12:55:a3:6b:24:0c:18:e2:ba:62:f1:28:5c: e9:f1:53:f3:3b:be:aa:9a:d8:e0:2d:ab:99:44:45:43:17:a3: 0d:8a:72:39:f0:d2:16:39:62:4d:87:1c:77:31:c8:df:8f:69: 96:7f:87:43:d5:c6:1d:48:f5:c3:4a:f2:fc:9d:a3:fd:c9:02: d1:cf:8e:67:c6:77:4c:39:65:86:cb:49:fa:9d:13:42:34:d7: 2b:44:83:68:a8:02:95:5a:0c:61:f6:7d:b2:9e:d2:e7:e2:5a: 53:aa:49:95:5d:90:a0:f8:d6:c7:92:97:99:eb:b9:97:21:86: bb:76:1b:8c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsHRrytJcNelHeffYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNjNzhkNjAtMzRlYi00ZmVkLThlMjUtOTI1Yjk1YTMw YzhlMB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk YWVmZjExZjItMjcyZC00YTRlLTg4MTMtYzkwYzA1ZDk1YTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jy1CQEqryTJLneLz1Tmf/QP2KSCQHFJSUWg vqTzOVLjFcuLWjEDxdUe5GIlVmH5U9hTfSJXW9SPfnDqO2QxtZkH751wvIvPbvoq ZwqIEG4SxTAm3eRNqPR25uLWA3+gYOtizwcQgMEHoy6cIrtqrsgA9RsH8jY3z4+1 enx3bhjPoXAZwS1B9n7oBn6f63m6arDbs+s/k4J827ngrspAqRlq+TQd2wXnfu8z 5D7DtnS1lVNTWfKrRgJbKZ7xSJPlTL7biWUF+9Nt1ICNS9xAvsBXz2QAL6w61YtX e7MI1dGdAqpEA3oAN/0/BRrYRwEFda41X5PQzeT8T20BRdJ+VQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLiegquWKtsxI1c//IiIxushTV3RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zM2M3 OGQ2MC0zNGViLTRmZWQtOGUyNS05MjViOTVhMzBjOGUvYzQ3ZTAzMzctNDkxYi0z ZTU3LWE2ZjktMDA0MGIxZmFiZTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzNjNzhkNjAtMzRlYi00ZmVkLThl MjUtOTI1Yjk1YTMwYzhlLzMzYzc4ZDYwLTM0ZWItNGZlZC04ZTI1LTkyNWI5NWEz MGM4ZS5jcmwwHwYDVR0jBBgwFoAUX2UlsGmXIYLm4tORRne6XDPT4EEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zM2M3OGQ2MC0zNGViLTRmZWQtOGUyNS05MjVi OTVhMzBjOGUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5XAAD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE/K5dT7zpPMfgk5ps4pscN2MFpPw/tLn72WZpfAzluKg2ZumOBQ qhEwspqal9hqh5iRJ/yONsDdZERazWK3Lb21JQtnfnm4MzBSWCVxxCFaqnbiBolE lhaFFr27hJXIl/BoRd24qiuTcB3en2bxJgjWkoznq3GUe9ocHeH1beeTx0BpElWj ayQMGOK6YvEoXOnxU/M7vqqa2OAtq5lERUMXow2Kcjnw0hY5Yk2HHHcxyN+PaZZ/ h0PVxh1I9cNK8vydo/3JAtHPjmfGd0w5ZYbLSfqdE0I01ytEg2ioApVaDGH2fbKe 0ufiWlOqSZVdkKD41seSl5nruZchhrt2G4w= -----END CERTIFICATE-----Generated at Fri Sep 19 04:38:47 2025 by rpki-client