$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/b9fe9136-6711-31b6-a248-652d58c6a9e1.roa File: b9fe9136-6711-31b6-a248-652d58c6a9e1.roa (raw, json) Hash identifier: D4S41c3O/1i6iJTld+jcJ0psCxaE5yDpEjZIwva8rq4= Subject key identifier: 5E:D3:9B:0F:92:5F:F3:62:FF:41:EC:C9:3C:ED:AA:8B:47:EC:E5:45 Certificate issuer: /CN=33c78d60-34eb-4fed-8e25-925b95a30c8e Certificate serial: 010D0C9F4328584E1FA9AAAD06FD1127205EF2D0 Authority key identifier: 5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/b9fe9136-6711-31b6-a248-652d58c6a9e1.roa Signing time: Wed 10 Jun 2026 09:00:13 +0000 ROA not before: Wed 10 Jun 2026 09:00:13 +0000 ROA not after: Tue 08 Sep 2026 09:00:13 +0000 asID: 33039 IP address blocks: 2602:f95c:88::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1f:a9:aa:ad:06:fd:11:27:20:5e:f2:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33c78d60-34eb-4fed-8e25-925b95a30c8e Validity Not Before: Jun 10 09:00:13 2026 GMT Not After : Sep 8 09:00:13 2026 GMT Subject: CN=75e0b604-1c67-43ef-a9fb-e9bca9d414d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2d:ed:51:a6:05:5e:57:f7:c4:7c:b1:96:e1: c0:9d:b1:aa:a8:a6:f2:44:8f:2e:a5:a4:07:df:84: 5e:e7:98:e5:9d:b9:f0:34:a6:7d:36:54:ce:f4:8b: 05:90:85:44:bc:9a:61:2b:29:77:21:15:3a:0b:97: e3:1b:2f:77:4b:ae:52:7c:1f:41:95:a7:1a:c2:3e: ec:eb:12:43:d4:4b:9e:12:65:b3:2d:c7:2b:fa:2d: 91:db:d6:c7:cf:2c:24:14:30:9f:25:26:7c:90:33: f2:72:bc:be:8b:e9:e7:83:66:98:0f:7a:44:f0:f8: 22:3f:d5:c1:a1:01:f6:29:bc:68:41:b5:12:de:13: 6a:9d:d1:6e:87:60:be:3e:96:f3:f3:50:ca:39:bf: 3d:e1:7b:03:ab:db:33:7d:09:9b:44:ef:95:76:38: c7:7b:6b:56:26:81:32:28:02:77:22:0f:aa:89:c6: ae:12:69:3d:71:91:fb:12:a6:33:09:5e:36:97:65: f3:2c:57:e4:ed:87:d5:e7:99:69:e8:6e:e3:a6:c2: ea:62:d3:44:47:ea:95:77:02:2c:6a:61:6c:70:89: 5f:a3:8d:97:5e:3b:3b:b9:27:18:e3:27:3f:aa:e1: c5:b7:09:93:91:a9:e6:dc:09:76:6f:ca:da:86:46: 32:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:D3:9B:0F:92:5F:F3:62:FF:41:EC:C9:3C:ED:AA:8B:47:EC:E5:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/b9fe9136-6711-31b6-a248-652d58c6a9e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl X509v3 Authority Key Identifier: keyid:5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer sbgp-ipAddrBlock: critical IPv6: 2602:f95c:88::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:ba:d5:bf:eb:e8:53:01:4c:66:4e:73:c8:e1:33:f0:93:64: 5e:39:c4:97:c9:b2:91:d8:88:ab:b6:6c:9b:49:38:87:77:07: 35:f0:7b:ef:58:90:5c:bb:ce:dd:bf:c5:4c:42:2b:53:a8:3d: 20:81:4f:87:18:bb:00:3a:8d:f8:21:5d:f9:27:15:34:f6:4c: fd:79:8f:e6:24:63:28:9a:8d:71:94:b8:07:73:97:56:05:66: ff:dc:19:e7:12:64:eb:97:7a:f0:c8:ce:af:4a:6b:10:e1:ff: 80:d6:29:ea:e6:4f:db:0e:54:4b:16:d7:c7:6a:b9:a7:51:0f: 2d:88:bc:ad:e8:4c:c5:b2:72:61:ac:d6:49:3f:5e:fc:90:02: ca:22:a1:90:c2:8d:a9:46:1c:9e:7d:87:af:6d:d0:f5:48:61: 8b:56:a4:3b:9e:4e:30:fc:26:3e:34:ce:51:b7:6c:9f:5e:96: e3:29:4e:3e:c9:57:9f:63:a7:5b:3d:9e:cd:67:65:8b:4f:c9: 83:8f:4e:e7:df:17:30:c7:99:ad:8b:5b:e5:3e:0b:64:82:90: 7b:e8:74:e3:7c:11:94:68:60:65:17:17:ee:e2:7f:dd:b8:70: ad:16:ed:e7:1e:a0:1d:c6:fe:ad:02:ed:c0:cc:1b:d9:f8:11: 00:06:5f:b0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4fqaqtBv0RJyBe8tAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNjNzhkNjAtMzRlYi00ZmVkLThlMjUtOTI1Yjk1YTMw YzhlMB4XDTI2MDYxMDA5MDAxM1oXDTI2MDkwODA5MDAxM1owLzEtMCsGA1UEAxMk NzVlMGI2MDQtMWM2Ny00M2VmLWE5ZmItZTliY2E5ZDQxNGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArS3tUaYFXlf3xHyxluHAnbGqqKbyRI8upaQH 34Re55jlnbnwNKZ9NlTO9IsFkIVEvJphKyl3IRU6C5fjGy93S65SfB9Blacawj7s 6xJD1EueEmWzLccr+i2R29bHzywkFDCfJSZ8kDPycry+i+nng2aYD3pE8PgiP9XB oQH2KbxoQbUS3hNqndFuh2C+Ppbz81DKOb894XsDq9szfQmbRO+VdjjHe2tWJoEy KAJ3Ig+qicauEmk9cZH7EqYzCV42l2XzLFfk7YfV55lp6G7jpsLqYtNER+qVdwIs amFscIlfo42XXjs7uScY4yc/quHFtwmTkanm3Al2b8rahkYybQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF7Tmw+SX/Ni/0HsyTztqotH7OVFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zM2M3 OGQ2MC0zNGViLTRmZWQtOGUyNS05MjViOTVhMzBjOGUvYjlmZTkxMzYtNjcxMS0z MWI2LWEyNDgtNjUyZDU4YzZhOWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzNjNzhkNjAtMzRlYi00ZmVkLThl MjUtOTI1Yjk1YTMwYzhlLzMzYzc4ZDYwLTM0ZWItNGZlZC04ZTI1LTkyNWI5NWEz MGM4ZS5jcmwwHwYDVR0jBBgwFoAUX2UlsGmXIYLm4tORRne6XDPT4EEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zM2M3OGQ2MC0zNGViLTRmZWQtOGUyNS05MjVi OTVhMzBjOGUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5XACI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFa61b/r6FMBTGZOc8jhM/CTZF45xJfJspHYiKu2bJtJOId3BzXw e+9YkFy7zt2/xUxCK1OoPSCBT4cYuwA6jfghXfknFTT2TP15j+YkYyiajXGUuAdz l1YFZv/cGecSZOuXevDIzq9KaxDh/4DWKermT9sOVEsW18dquadRDy2IvK3oTMWy cmGs1kk/XvyQAsoioZDCjalGHJ59h69t0PVIYYtWpDueTjD8Jj40zlG3bJ9eluMp Tj7JV59jp1s9ns1nZYtPyYOPTuffFzDHma2LW+U+C2SCkHvodON8EZRoYGUXF+7i f924cK0W7eceoB3G/q0C7cDMG9n4EQAGX7A= -----END CERTIFICATE-----Generated at Sat Jun 13 18:42:45 2026 by rpki-client