$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/33c23409-f641-3c4d-8222-54698a7c377e.roa File: 33c23409-f641-3c4d-8222-54698a7c377e.roa (raw, json) Hash identifier: +7FNojZCOdxVkogDHYKeXKAvEjqLc+b/3xr7TPbkV60= Subject key identifier: EE:A3:80:7A:FD:1D:C9:A3:93:CD:96:8E:9A:E5:4D:59:F6:56:FB:E5 Certificate issuer: /CN=6459964e-cb44-4be5-88da-03fac554e95c Certificate serial: 010D0C9F4328584F4976582984F36F0D0D68ED10 Authority key identifier: 2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/33c23409-f641-3c4d-8222-54698a7c377e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 32771 IP address blocks: 2620:111:8000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:58:29:84:f3:6f:0d:0d:68:ed:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6459964e-cb44-4be5-88da-03fac554e95c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=56006792-9a2c-4d7d-af9b-85535d057a4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d3:4b:21:e5:3b:30:3c:8a:be:9c:4c:e3:fd: 44:74:48:66:b7:48:c1:92:a6:f8:86:9b:de:09:32: e9:3d:dd:d5:5e:41:38:f7:2e:2f:1b:b3:df:09:ef: 49:c6:03:e5:42:65:ab:12:7f:14:26:0d:01:1b:41: b3:4a:94:56:5e:d4:94:40:2e:69:87:72:4d:e5:dc: 19:07:23:4c:3a:4f:fe:87:81:8e:fd:20:06:42:d5: 15:b3:38:f6:a7:30:f8:5a:0f:be:9e:3d:a8:f4:07: b0:f6:82:ba:7a:84:2b:06:6e:06:fc:ed:1a:96:bb: 88:5c:e9:69:c5:c4:e4:1c:8e:f5:93:73:67:e9:47: dd:32:91:c6:80:2a:07:4c:b5:b7:7e:e5:99:d0:a5: 38:24:80:c8:0e:d8:96:90:f9:50:bc:5c:1c:c6:b0: da:70:6f:e7:11:4f:4f:ce:69:f0:25:ca:5f:b8:fb: eb:e2:33:1a:82:64:65:d3:0b:33:0b:2e:fd:12:19: 4c:29:f4:26:e4:54:a7:d8:d4:7f:a3:b7:d0:41:2b: c1:ea:a8:e3:1f:89:d7:56:1a:25:69:70:49:3d:d3: 11:9f:ff:2e:71:d2:ee:3c:b8:87:19:01:d9:e6:2c: 7a:cd:12:9f:8b:84:e2:60:19:ca:d0:87:6b:27:b5: 95:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:A3:80:7A:FD:1D:C9:A3:93:CD:96:8E:9A:E5:4D:59:F6:56:FB:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/33c23409-f641-3c4d-8222-54698a7c377e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl X509v3 Authority Key Identifier: keyid:2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer sbgp-ipAddrBlock: critical IPv6: 2620:111:8000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:48:f6:9a:25:3e:ba:0b:ed:a1:0b:a7:f9:f9:5f:b6:24:ef: 8a:22:0c:85:0e:c4:97:36:4c:b8:5d:61:cc:4f:a9:bd:e7:9d: fc:76:24:1c:18:da:24:a8:98:23:da:8c:5e:9e:b8:59:64:62: 71:7f:60:c5:8e:2f:6d:75:98:63:ac:68:64:84:e0:94:b2:13: 00:ec:47:45:14:cc:f0:af:b1:81:dc:b3:a7:71:48:7b:eb:32: e5:b7:9a:6f:b6:db:e8:15:e7:04:91:6d:bb:e0:9f:0c:4f:6f: 61:d7:f0:43:2b:1f:fa:34:2c:a8:fa:5b:40:a3:92:3b:0b:09: 4a:2d:71:d8:2f:9f:1c:b4:87:08:9a:f2:ed:9c:c4:21:9b:7f: d2:21:a3:42:75:69:02:0f:d1:d6:bc:2a:62:2a:10:ec:8c:78: 17:d4:09:6b:e6:cc:58:2b:f7:aa:af:9a:b0:b3:4c:c5:96:a7: 27:c0:b4:7c:95:d3:3b:74:0a:b7:c8:01:61:68:1e:9f:f9:f8: 1c:44:0f:d1:57:4c:b3:65:bd:73:99:fe:60:f2:35:0d:b9:d9: 44:ca:45:7c:d6:c9:d1:ca:d6:0e:fa:f9:7c:d7:e5:d1:c9:f4: c4:8e:cf:e1:d5:f0:a2:60:d1:3b:30:a0:34:ac:0d:f6:32:2a: 1a:85:89:06 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdlgphPNvDQ1o7RAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQ1OTk2NGUtY2I0NC00YmU1LTg4ZGEtMDNmYWM1NTRl OTVjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTYwMDY3OTItOWEyYy00ZDdkLWFmOWItODU1MzVkMDU3YTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtNLIeU7MDyKvpxM4/1EdEhmt0jBkqb4hpve CTLpPd3VXkE49y4vG7PfCe9JxgPlQmWrEn8UJg0BG0GzSpRWXtSUQC5ph3JN5dwZ ByNMOk/+h4GO/SAGQtUVszj2pzD4Wg++nj2o9Aew9oK6eoQrBm4G/O0alruIXOlp xcTkHI71k3Nn6UfdMpHGgCoHTLW3fuWZ0KU4JIDIDtiWkPlQvFwcxrDacG/nEU9P zmnwJcpfuPvr4jMagmRl0wszCy79EhlMKfQm5FSn2NR/o7fQQSvB6qjjH4nXVhol aXBJPdMRn/8ucdLuPLiHGQHZ5ix6zRKfi4TiYBnK0IdrJ7WVKwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO6jgHr9Hcmjk82WjprlTVn2VvvlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5 OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2ZhYzU1NGU5NWMvMzNjMjM0MDktZjY0MS0z YzRkLTgyMjItNTQ2OThhN2MzNzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjQ1OTk2NGUtY2I0NC00YmU1LTg4 ZGEtMDNmYWM1NTRlOTVjLzY0NTk5NjRlLWNiNDQtNGJlNS04OGRhLTAzZmFjNTU0 ZTk1Yy5jcmwwHwYDVR0jBBgwFoAUKt7spHKs8deFfsVG4i81dJj6CmIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2Zh YzU1NGU5NWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABEYAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJJI9polProL7aELp/n5X7Yk74oiDIUOxJc2TLhdYcxPqb3nnfx2 JBwY2iSomCPajF6euFlkYnF/YMWOL211mGOsaGSE4JSyEwDsR0UUzPCvsYHcs6dx SHvrMuW3mm+22+gV5wSRbbvgnwxPb2HX8EMrH/o0LKj6W0CjkjsLCUotcdgvnxy0 hwia8u2cxCGbf9Iho0J1aQIP0da8KmIqEOyMeBfUCWvmzFgr96qvmrCzTMWWpyfA tHyV0zt0CrfIAWFoHp/5+BxED9FXTLNlvXOZ/mDyNQ252UTKRXzWydHK1g76+XzX 5dHJ9MSOz+HV8KJg0TswoDSsDfYyKhqFiQY= -----END CERTIFICATE-----Generated at Sun Sep 27 12:03:45 2026 by rpki-client