$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/33952f95-e900-31ea-860e-de63f1452611.roa File: 33952f95-e900-31ea-860e-de63f1452611.roa (raw, json) Hash identifier: PtjNK6vAbP4eYVXUD8L56oqxKXte/tUZgwuPlzK+oVk= Subject key identifier: 9D:F5:93:36:75:D9:99:4E:66:D3:43:2D:1E:6B:D8:A8:4E:63:B4:57 Certificate issuer: /CN=a509a7f2-7b5a-4e82-86cc-217eab093131 Certificate serial: 010D0C9F4328584E2809B9D72D241DD63D27D100 Authority key identifier: F5:09:E8:F5:08:1E:9C:78:DB:AF:52:A3:00:53:35:94:85:24:8E:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/33952f95-e900-31ea-860e-de63f1452611.roa Signing time: Sat 13 Jun 2026 09:00:12 +0000 ROA not before: Sat 13 Jun 2026 09:00:12 +0000 ROA not after: Fri 11 Sep 2026 09:00:12 +0000 asID: 395173 IP address blocks: 2607:4580::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/a509a7f2-7b5a-4e82-86cc-217eab093131.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/a509a7f2-7b5a-4e82-86cc-217eab093131.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:28:09:b9:d7:2d:24:1d:d6:3d:27:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a509a7f2-7b5a-4e82-86cc-217eab093131 Validity Not Before: Jun 13 09:00:12 2026 GMT Not After : Sep 11 09:00:12 2026 GMT Subject: CN=5f5d9d50-7c76-4ec9-a35c-d4e15f32bef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:4b:e1:f9:bf:cb:42:21:3e:f3:bf:7b:43:1c: 16:c5:50:58:e1:8d:7f:d7:c3:d2:22:48:30:69:10: b6:02:75:05:21:72:92:d3:b0:58:1c:87:45:ab:a9: 91:85:07:f1:b4:de:4e:b5:3f:b0:ab:1f:9c:93:c7: c7:50:70:62:aa:9c:b6:68:17:35:91:3f:6b:d0:f0: cf:71:36:77:45:f4:e7:f7:5b:da:4d:ce:1a:09:28: 20:51:c5:61:f6:07:1e:27:5f:a4:a9:bb:8d:73:6f: bd:dc:1b:1b:3e:18:09:a3:dc:54:7c:50:96:2f:74: 77:f2:64:ae:d2:06:a6:74:82:f7:ef:20:ed:0d:2f: 53:74:49:96:dc:28:8d:7c:5c:04:96:f4:32:50:68: 2c:64:c0:52:fd:c3:b0:40:eb:cb:6d:31:c9:52:8a: 83:49:72:ec:d0:d9:3f:22:76:aa:70:75:0e:e3:4f: fa:ef:e7:60:7f:98:d2:4e:ce:34:3a:f7:79:62:76: 4c:3d:1b:64:fe:38:59:47:4c:8b:82:7a:2b:f7:b8: 3b:c5:41:2d:d9:d5:37:6f:14:5a:8f:b8:0d:f5:bf: 72:77:7b:bf:ec:4c:2c:e3:a1:4d:1f:79:37:66:03: 41:4a:dd:52:fc:a4:93:ff:4d:f8:04:e2:ca:9e:fe: 40:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:F5:93:36:75:D9:99:4E:66:D3:43:2D:1E:6B:D8:A8:4E:63:B4:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/33952f95-e900-31ea-860e-de63f1452611.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/a509a7f2-7b5a-4e82-86cc-217eab093131.crl X509v3 Authority Key Identifier: keyid:F5:09:E8:F5:08:1E:9C:78:DB:AF:52:A3:00:53:35:94:85:24:8E:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131.cer sbgp-ipAddrBlock: critical IPv6: 2607:4580::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:ea:31:f9:ff:03:51:e3:6a:6a:34:e7:f4:bf:25:27:c2:19: 72:7b:11:0d:54:bc:1c:4b:19:68:f8:73:2f:ca:ac:ae:62:b5: 73:c4:4c:1f:0e:85:7c:32:9f:86:83:88:12:e9:5b:25:ac:e3: fd:10:16:e2:2b:b7:36:31:bf:10:13:3f:4e:f9:89:fb:11:67: bc:f9:f0:0c:24:b8:d5:a4:2e:fc:23:87:71:7b:e5:5d:ec:6e: 26:a1:c0:8a:c8:62:1f:4a:23:57:56:ac:96:bf:6e:fc:c3:25: 1f:02:1b:8e:d6:e2:1f:30:63:4a:a1:aa:4a:c3:56:8f:5e:78: 4a:b5:ab:5a:f5:0d:2e:8d:00:e7:33:d1:74:0a:bf:d5:86:c7: fa:6b:5a:4e:19:f1:a5:4d:b2:1c:e8:c0:25:2a:84:df:2d:07: 23:22:e6:d0:af:d4:df:28:40:01:b7:ef:5d:8e:1d:ba:8b:e7: f5:b3:b8:ee:69:a0:22:21:56:27:02:64:b6:06:87:14:c3:22: e7:c0:54:fc:2a:ce:dd:67:fe:74:be:ce:47:6f:a1:f8:ad:ef: 6f:29:7e:e1:09:b2:6a:1e:a3:bf:5c:28:03:a8:0c:96:cf:ec: 53:86:ee:81:37:67:15:aa:e7:b3:0b:c9:0d:57:11:26:e8:17: 70:a3:dd:3f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4oCbnXLSQd1j0n0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUwOWE3ZjItN2I1YS00ZTgyLTg2Y2MtMjE3ZWFiMDkz MTMxMB4XDTI2MDYxMzA5MDAxMloXDTI2MDkxMTA5MDAxMlowLzEtMCsGA1UEAxMk NWY1ZDlkNTAtN2M3Ni00ZWM5LWEzNWMtZDRlMTVmMzJiZWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0vh+b/LQiE+8797QxwWxVBY4Y1/18PSIkgw aRC2AnUFIXKS07BYHIdFq6mRhQfxtN5OtT+wqx+ck8fHUHBiqpy2aBc1kT9r0PDP cTZ3RfTn91vaTc4aCSggUcVh9gceJ1+kqbuNc2+93BsbPhgJo9xUfFCWL3R38mSu 0gamdIL37yDtDS9TdEmW3CiNfFwElvQyUGgsZMBS/cOwQOvLbTHJUoqDSXLs0Nk/ InaqcHUO40/67+dgf5jSTs40Ovd5YnZMPRtk/jhZR0yLgnor97g7xUEt2dU3bxRa j7gN9b9yd3u/7Ews46FNH3k3ZgNBSt1S/KST/034BOLKnv5AdQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJ31kzZ12ZlOZtNDLR5r2KhOY7RXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hNTA5 YTdmMi03YjVhLTRlODItODZjYy0yMTdlYWIwOTMxMzEvMzM5NTJmOTUtZTkwMC0z MWVhLTg2MGUtZGU2M2YxNDUyNjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYTUwOWE3ZjItN2I1YS00ZTgyLTg2 Y2MtMjE3ZWFiMDkzMTMxL2E1MDlhN2YyLTdiNWEtNGU4Mi04NmNjLTIxN2VhYjA5 MzEzMS5jcmwwHwYDVR0jBBgwFoAU9Qno9QgenHjbr1KjAFM1lIUkjuswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hNTA5YTdmMi03YjVhLTRlODItODZjYy0yMTdl YWIwOTMxMzEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdFgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBg6jH5/wNR42pqNOf0vyUnwhlyexENVLwcSxlo+HMvyqyuYrVzxEwf DoV8Mp+Gg4gS6VslrOP9EBbiK7c2Mb8QEz9O+Yn7EWe8+fAMJLjVpC78I4dxe+Vd 7G4mocCKyGIfSiNXVqyWv278wyUfAhuO1uIfMGNKoapKw1aPXnhKtata9Q0ujQDn M9F0Cr/Vhsf6a1pOGfGlTbIc6MAlKoTfLQcjIubQr9TfKEABt+9djh26i+f1s7ju aaAiIVYnAmS2BocUwyLnwFT8Ks7dZ/50vs5Hb6H4re9vKX7hCbJqHqO/XCgDqAyW z+xThu6BN2cVquezC8kNVxEm6Bdwo90/ -----END CERTIFICATE-----Generated at Sat Jun 13 14:03:09 2026 by rpki-client