$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5fca320f-a628-49d3-afa7-8717a0ad5699/33b49a1e-712d-3f29-b195-b988e2f8f964.roa File: 33b49a1e-712d-3f29-b195-b988e2f8f964.roa (raw, json) Hash identifier: vGNBRcvYz0NiBp327S8gmYrTA9ZSs1lbwHLG+GE9Z3g= Subject key identifier: BA:AA:78:A3:43:E2:2F:A1:16:41:BF:F2:DF:B4:B1:F1:33:2A:3B:E4 Certificate issuer: /CN=5fca320f-a628-49d3-afa7-8717a0ad5699 Certificate serial: 010D0C9F4328584F549D43F96CF0D93C2ED11000 Authority key identifier: 56:5C:77:50:01:C8:93:A8:08:A9:9D:5E:97:E2:E2:97:26:C9:E3:4F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5fca320f-a628-49d3-afa7-8717a0ad5699.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5fca320f-a628-49d3-afa7-8717a0ad5699/33b49a1e-712d-3f29-b195-b988e2f8f964.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 33425 IP address blocks: 2607:240::/28 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5fca320f-a628-49d3-afa7-8717a0ad5699/5fca320f-a628-49d3-afa7-8717a0ad5699.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5fca320f-a628-49d3-afa7-8717a0ad5699/5fca320f-a628-49d3-afa7-8717a0ad5699.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5fca320f-a628-49d3-afa7-8717a0ad5699.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:43:f9:6c:f0:d9:3c:2e:d1:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fca320f-a628-49d3-afa7-8717a0ad5699 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=0ea0df7a-2baf-4321-97a0-be90bb0d6cd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f1:70:e1:f4:21:b6:a4:f1:8b:9c:e2:26:36: 54:0a:4e:02:5f:70:6e:7f:39:b9:85:54:8e:ee:bd: 97:8e:b2:b6:eb:a1:30:e5:5c:1d:d6:4a:ed:79:b2: c2:2c:7b:16:55:cc:fb:aa:b1:16:d9:5a:94:64:51: 3e:45:d0:3f:d1:18:8b:1e:89:05:bb:98:51:2c:bf: d9:39:77:f5:c4:df:49:0a:ca:bd:6b:6f:af:80:a5: b3:f0:3b:26:4b:4f:da:95:f4:8c:7b:d2:2b:45:8b: d1:3a:00:aa:a0:a2:e7:73:fd:1c:52:f3:89:72:bf: c0:74:e2:af:41:e1:c5:de:6e:88:db:da:7e:11:61: 4d:a8:88:7c:0c:34:ce:1c:d3:d2:43:80:0c:27:4c: 12:5a:15:ae:7b:51:55:47:99:45:6a:bb:bb:2d:3e: 93:8b:c7:fb:ff:9c:c7:a3:b5:22:99:3e:ce:16:8c: d5:83:2f:4f:1a:55:3d:17:db:ca:b9:12:35:56:bd: b7:f8:55:80:f2:75:1e:0b:00:01:be:39:cc:25:c9: 43:4f:9e:ab:f9:46:b8:06:0b:8d:2e:89:fd:05:6a: 4f:a7:18:3f:0b:ea:8d:af:f5:81:6f:39:3b:fd:92: ab:c6:78:84:87:34:99:23:1a:21:c5:08:c0:78:dd: 22:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:AA:78:A3:43:E2:2F:A1:16:41:BF:F2:DF:B4:B1:F1:33:2A:3B:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5fca320f-a628-49d3-afa7-8717a0ad5699/33b49a1e-712d-3f29-b195-b988e2f8f964.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5fca320f-a628-49d3-afa7-8717a0ad5699/5fca320f-a628-49d3-afa7-8717a0ad5699.crl X509v3 Authority Key Identifier: keyid:56:5C:77:50:01:C8:93:A8:08:A9:9D:5E:97:E2:E2:97:26:C9:E3:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5fca320f-a628-49d3-afa7-8717a0ad5699.cer sbgp-ipAddrBlock: critical IPv6: 2607:240::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:62:af:d4:22:62:d1:b6:59:42:fa:b9:36:d4:42:ea:e2:00: 28:cd:db:b1:29:8f:69:2b:9c:44:8f:56:bb:10:b8:fa:2f:d3: 77:c8:e2:36:81:0e:9d:38:17:4b:82:f3:81:68:aa:ba:ef:48: 5e:d4:7f:36:e6:e5:60:e1:f8:44:54:1e:8d:52:52:b7:19:55: 66:1e:0f:e6:cb:9a:54:80:ef:56:10:79:05:c0:1b:44:40:d2: 19:c2:4a:5c:32:13:0e:62:dc:46:a2:65:45:79:c4:5b:f2:9f: e2:e9:56:1f:dd:c4:53:a2:45:d7:96:6c:72:43:bd:bf:f5:d9: 56:c2:ff:84:67:24:75:e6:9e:7f:e3:d9:9b:99:ab:b2:1e:7f: 4c:ae:99:83:4c:31:e7:d6:14:3b:58:9b:47:a4:cb:b6:52:c5: 72:6e:6a:09:38:e5:0b:91:1f:cd:17:e0:aa:88:b2:16:a9:02: 5f:01:d9:ed:9b:01:97:ff:9e:27:5a:0c:c7:41:19:7d:a7:dd: c0:71:f7:99:8d:f6:14:52:41:63:72:13:30:cb:d3:fb:e2:51: cc:84:42:43:95:65:4e:11:74:9c:19:42:e3:33:6a:d8:6c:6b: d3:44:cf:4c:74:f7:0b:71:14:96:4c:6e:de:e1:15:95:34:c3: 2e:52:f2:17 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9UnUP5bPDZPC7REAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWZjYTMyMGYtYTYyOC00OWQzLWFmYTctODcxN2EwYWQ1 Njk5MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk MGVhMGRmN2EtMmJhZi00MzIxLTk3YTAtYmU5MGJiMGQ2Y2QzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/Fw4fQhtqTxi5ziJjZUCk4CX3Bufzm5hVSO 7r2XjrK266Ew5Vwd1krtebLCLHsWVcz7qrEW2VqUZFE+RdA/0RiLHokFu5hRLL/Z OXf1xN9JCsq9a2+vgKWz8DsmS0/alfSMe9IrRYvROgCqoKLnc/0cUvOJcr/AdOKv QeHF3m6I29p+EWFNqIh8DDTOHNPSQ4AMJ0wSWhWue1FVR5lFaru7LT6Ti8f7/5zH o7UimT7OFozVgy9PGlU9F9vKuRI1Vr23+FWA8nUeCwABvjnMJclDT56r+Ua4BguN Lon9BWpPpxg/C+qNr/WBbzk7/ZKrxniEhzSZIxohxQjAeN0iDwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLqqeKND4i+hFkG/8t+0sfEzKjvkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81ZmNh MzIwZi1hNjI4LTQ5ZDMtYWZhNy04NzE3YTBhZDU2OTkvMzNiNDlhMWUtNzEyZC0z ZjI5LWIxOTUtYjk4OGUyZjhmOTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWZjYTMyMGYtYTYyOC00OWQzLWFm YTctODcxN2EwYWQ1Njk5LzVmY2EzMjBmLWE2MjgtNDlkMy1hZmE3LTg3MTdhMGFk NTY5OS5jcmwwHwYDVR0jBBgwFoAUVlx3UAHIk6gIqZ1el+LilybJ408wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81ZmNhMzIwZi1hNjI4LTQ5ZDMtYWZhNy04NzE3 YTBhZDU2OTkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgcCQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBpYq/UImLRtllC+rk21ELq4gAozduxKY9pK5xEj1a7ELj6L9N3yOI2 gQ6dOBdLgvOBaKq670he1H825uVg4fhEVB6NUlK3GVVmHg/my5pUgO9WEHkFwBtE QNIZwkpcMhMOYtxGomVFecRb8p/i6VYf3cRTokXXlmxyQ72/9dlWwv+EZyR15p5/ 49mbmauyHn9MrpmDTDHn1hQ7WJtHpMu2UsVybmoJOOULkR/NF+CqiLIWqQJfAdnt mwGX/54nWgzHQRl9p93AcfeZjfYUUkFjchMwy9P74lHMhEJDlWVOEXScGULjM2rY bGvTRM9MdPcLcRSWTG7e4RWVNMMuUvIX -----END CERTIFICATE-----Generated at Sun Oct 4 14:53:18 2026 by rpki-client