$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/3a3e578e-9cda-3397-800c-e3cbde377721.roa File: 3a3e578e-9cda-3397-800c-e3cbde377721.roa (raw, json) Hash identifier: Mnt9ixBhcurJpVEK0WJYo78niud5Db7yFeUNwZ/y1yA= Subject key identifier: 38:D3:52:B5:F6:E0:61:19:08:0B:3B:BC:7E:EC:6D:08:76:51:AE:E3 Certificate issuer: /CN=33d3c304-619d-4e6d-aed5-9e25165cbc73 Certificate serial: 010D0C9F4328584EA0155130A07B48A9D010CF80 Authority key identifier: 8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/3a3e578e-9cda-3397-800c-e3cbde377721.roa Signing time: Sun 26 Jul 2026 09:00:12 +0000 ROA not before: Sun 26 Jul 2026 09:00:12 +0000 ROA not after: Sat 24 Oct 2026 09:00:12 +0000 asID: 14618 IP address blocks: 2607:dd40:1000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a0:15:51:30:a0:7b:48:a9:d0:10:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33d3c304-619d-4e6d-aed5-9e25165cbc73 Validity Not Before: Jul 26 09:00:12 2026 GMT Not After : Oct 24 09:00:12 2026 GMT Subject: CN=2d266575-b8ac-4aa9-9f36-8ab0cc9a2d7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b5:f9:6c:af:90:b2:81:44:b3:53:76:61:0d: 67:c7:a8:bd:c1:45:e3:23:97:e5:f6:74:5d:bc:74: f0:4f:84:1a:73:92:50:1c:cd:e3:41:2a:5b:ec:f4: 00:61:db:ab:7f:24:e1:4d:9f:91:51:7a:5b:4f:51: f1:e6:06:a6:12:64:9f:c6:ab:a0:ee:5e:f3:b4:4d: b9:fa:70:42:e8:b3:40:50:40:2b:6f:7c:2a:87:f7: 9e:19:de:dc:a4:95:d5:28:66:b5:b4:c0:a2:11:63: 7a:7f:71:cf:67:5d:4c:06:b5:35:7f:1a:b5:e2:46: 5a:ba:3c:93:94:22:92:38:b5:e3:f3:1a:2b:19:7d: 98:63:d9:a0:c7:4a:34:ca:97:7f:a2:cb:9c:2b:ca: a6:24:22:ca:27:bd:24:2a:16:e7:af:e8:40:38:a5: 93:60:e3:0f:b2:80:72:71:f8:f4:a4:73:5d:85:c6: 2f:9b:e4:94:34:af:f5:23:d9:05:a7:8c:d6:23:e1: bf:0c:31:a1:45:78:b9:d9:99:33:16:f8:a8:18:c8: f5:f3:22:0b:58:11:a0:3d:8b:8c:2a:be:83:64:63: 1a:f4:e0:8d:37:62:9f:b8:a0:2f:dd:2b:d1:c6:37: d9:e6:6d:ef:85:16:57:08:11:0f:50:b7:78:9c:4c: 42:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D3:52:B5:F6:E0:61:19:08:0B:3B:BC:7E:EC:6D:08:76:51:AE:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/3a3e578e-9cda-3397-800c-e3cbde377721.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl X509v3 Authority Key Identifier: keyid:8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer sbgp-ipAddrBlock: critical IPv6: 2607:dd40:1000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:a7:5e:5c:16:98:6d:86:94:07:97:58:bc:bd:b8:1f:2e:f1: 60:51:a2:fd:6c:f6:90:8e:26:82:4d:a7:7c:58:49:91:b4:6b: f0:fd:88:20:1b:57:6d:64:02:23:5c:16:18:c2:72:b2:6a:f7: 4d:89:26:14:d2:92:e5:7f:66:84:e3:65:a6:2a:94:ff:16:67: 9c:f5:dc:dd:22:e7:86:07:75:68:13:c2:50:b2:09:8f:a3:29: e3:03:12:75:62:6a:5a:dd:29:77:36:fd:a5:02:c1:26:3a:10: 3b:81:95:20:a3:39:75:a5:67:b3:ec:f3:e1:48:44:35:ba:79: bb:12:e2:0a:13:c1:03:2a:73:79:a7:d1:d6:8e:61:17:96:26: b3:9e:79:4c:9d:71:58:5e:9a:d9:f0:cd:a5:2d:76:68:42:0d: d3:10:36:b4:e5:70:49:57:ef:e8:77:6b:bc:af:46:be:ad:74: 36:83:c3:87:31:c7:16:9a:02:9e:41:54:72:fb:1a:6c:5d:1c: e6:01:d4:ef:3d:27:19:a7:35:e3:de:e3:e9:2b:26:f3:6c:a8: da:8d:bd:f3:db:7a:44:ff:db:e7:0b:bd:2a:0c:f8:a7:22:38: 60:66:dc:b1:4e:0c:98:49:b5:4e:31:44:79:b6:35:6a:a9:66: 8e:88:e4:06 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE6gFVEwoHtIqdAQz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNkM2MzMDQtNjE5ZC00ZTZkLWFlZDUtOWUyNTE2NWNi YzczMB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk MmQyNjY1NzUtYjhhYy00YWE5LTlmMzYtOGFiMGNjOWEyZDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7X5bK+QsoFEs1N2YQ1nx6i9wUXjI5fl9nRd vHTwT4Qac5JQHM3jQSpb7PQAYdurfyThTZ+RUXpbT1Hx5gamEmSfxqug7l7ztE25 +nBC6LNAUEArb3wqh/eeGd7cpJXVKGa1tMCiEWN6f3HPZ11MBrU1fxq14kZaujyT lCKSOLXj8xorGX2YY9mgx0o0ypd/osucK8qmJCLKJ70kKhbnr+hAOKWTYOMPsoBy cfj0pHNdhcYvm+SUNK/1I9kFp4zWI+G/DDGhRXi52ZkzFvioGMj18yILWBGgPYuM Kr6DZGMa9OCNN2KfuKAv3SvRxjfZ5m3vhRZXCBEPULd4nExCqQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDjTUrX24GEZCAs7vH7sbQh2Ua7jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zM2Qz YzMwNC02MTlkLTRlNmQtYWVkNS05ZTI1MTY1Y2JjNzMvM2EzZTU3OGUtOWNkYS0z Mzk3LTgwMGMtZTNjYmRlMzc3NzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzNkM2MzMDQtNjE5ZC00ZTZkLWFl ZDUtOWUyNTE2NWNiYzczLzMzZDNjMzA0LTYxOWQtNGU2ZC1hZWQ1LTllMjUxNjVj YmM3My5jcmwwHwYDVR0jBBgwFoAUjkoNtMfpM0cLNL0AOGQeSnjs4mowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zM2QzYzMwNC02MTlkLTRlNmQtYWVkNS05ZTI1 MTY1Y2JjNzMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgfdQBAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAZqdeXBaYbYaUB5dYvL24Hy7xYFGi/Wz2kI4mgk2nfFhJkbRr8P2I IBtXbWQCI1wWGMJysmr3TYkmFNKS5X9mhONlpiqU/xZnnPXc3SLnhgd1aBPCULIJ j6Mp4wMSdWJqWt0pdzb9pQLBJjoQO4GVIKM5daVns+zz4UhENbp5uxLiChPBAypz eafR1o5hF5Yms555TJ1xWF6a2fDNpS12aEIN0xA2tOVwSVfv6HdrvK9Gvq10NoPD hzHHFpoCnkFUcvsabF0c5gHU7z0nGac1497j6Ssm82yo2o2989t6RP/b5wu9Kgz4 pyI4YGbcsU4MmEm1TjFEebY1aqlmjojkBg== -----END CERTIFICATE-----Generated at Tue Jul 28 22:56:04 2026 by rpki-client