$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33b856a0-dad6-347d-a745-ddf890e79e43.roa File: 33b856a0-dad6-347d-a745-ddf890e79e43.roa (raw, json) Hash identifier: 4XmA60uVJ8eGldFld12gpwUU7pIqYSfv6lzokfmh5SE= Subject key identifier: E4:20:6B:FD:77:6E:18:F8:A9:AC:EE:5B:A1:EB:54:1E:D7:23:2E:D4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EE7BCA1A5D1789C66E1FB8780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33b856a0-dad6-347d-a745-ddf890e79e43.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 12222 IP address blocks: 2001:4878:b008::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:a1:a5:d1:78:9c:66:e1:fb:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=09e993fa-6aeb-4853-9d02-ed2d5af38b1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:99:5b:7c:51:21:eb:69:46:e0:84:3f:6e:08: f7:3a:d9:e3:46:e4:4b:33:24:ca:0d:d6:12:fa:f8: 96:1c:f6:33:b0:9d:56:3f:67:f0:8e:ee:4d:3a:e7: ad:53:17:43:99:95:2b:48:14:dd:70:03:30:c0:a4: eb:49:c0:0f:6c:a7:a1:c7:19:3d:74:d0:89:2e:6d: 9d:f6:ae:1d:de:fc:25:48:1e:a0:92:79:f0:83:22: c9:2f:1c:3a:45:cc:83:c6:3c:bd:3d:9b:06:26:ca: 93:a6:1e:bb:a3:86:4b:1c:5e:c0:86:4b:64:36:11: 9e:c6:05:77:3e:58:0a:fb:87:7f:04:50:c4:08:c0: 85:a4:ab:e6:c1:26:5a:2b:8f:fd:a5:a9:33:31:4b: 59:1c:6d:29:42:45:1d:cc:ec:a5:c6:14:64:d8:6a: f2:23:13:7a:f9:d3:83:cc:30:83:5b:69:e9:e3:35: 8d:6c:ec:f6:40:79:2d:d2:70:2d:08:71:f3:5b:fc: f1:4c:60:6b:90:c7:05:f5:30:b8:a2:34:b8:1d:7d: 05:55:a4:b9:fc:fa:cc:8f:d0:4c:59:ee:ab:59:58: 6d:c4:c2:e6:d4:a6:f4:50:37:d2:ad:89:47:26:52: fc:02:53:cf:bd:81:05:22:f1:75:d3:35:c6:02:23: 6d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:20:6B:FD:77:6E:18:F8:A9:AC:EE:5B:A1:EB:54:1E:D7:23:2E:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33b856a0-dad6-347d-a745-ddf890e79e43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:b008::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:d1:bd:84:c7:8a:b4:65:08:ab:02:d5:08:c2:7f:9f:8f:7f: 47:7d:0f:76:cc:96:e4:9b:6e:71:44:91:33:9a:ce:b2:47:6f: ef:b1:c2:d8:4b:d6:b3:33:b8:6d:a8:6e:42:f4:4d:d4:ba:ee: a3:da:d9:1c:63:8f:db:4a:45:f1:f8:ce:9c:83:fa:04:67:d8: c6:0f:50:38:fc:a4:da:42:16:d6:9f:7d:74:3b:46:a1:29:79: 0e:7b:95:a1:9e:23:ed:35:22:d1:36:64:99:db:ec:df:37:91: b3:8a:ce:69:59:df:b2:b3:37:08:b9:0b:c8:fc:c5:94:82:ce: 26:8d:95:e5:e5:f8:67:2f:fc:26:17:25:3c:ed:c1:d9:2d:ac: 57:4d:a5:c6:55:6e:32:4e:df:f7:02:7e:f8:d3:90:43:07:b0: 4a:e5:34:7f:4b:83:b0:0a:37:ef:18:3e:05:47:be:84:ce:32: 9d:3a:fe:bd:91:5e:88:35:b7:cb:13:0c:96:62:33:05:41:4d: 51:49:5c:dd:40:99:56:ef:51:b9:49:5e:d7:50:49:4b:09:cc: a6:16:11:4f:26:3a:df:dc:ca:19:24:61:bf:ca:58:7e:c9:24: 4d:3b:3e:80:97:31:a2:24:5c:4c:45:68:47:bb:27:d7:30:25: 12:57:24:bc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7nvKGl0XicZuH7h4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk MDllOTkzZmEtNmFlYi00ODUzLTlkMDItZWQyZDVhZjM4YjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJlbfFEh62lG4IQ/bgj3OtnjRuRLMyTKDdYS +viWHPYzsJ1WP2fwju5NOuetUxdDmZUrSBTdcAMwwKTrScAPbKehxxk9dNCJLm2d 9q4d3vwlSB6gknnwgyLJLxw6RcyDxjy9PZsGJsqTph67o4ZLHF7AhktkNhGexgV3 PlgK+4d/BFDECMCFpKvmwSZaK4/9pakzMUtZHG0pQkUdzOylxhRk2GryIxN6+dOD zDCDW2np4zWNbOz2QHkt0nAtCHHzW/zxTGBrkMcF9TC4ojS4HX0FVaS5/PrMj9BM We6rWVhtxMLm1Kb0UDfSrYlHJlL8AlPPvYEFIvF10zXGAiNtuQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOQga/13bhj4qazuW6HrVB7XIy7UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzNiODU2YTAtZGFkNi0z NDdkLWE3NDUtZGRmODkwZTc5ZTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeLAI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAfRvYTHirRlCKsC1QjCf5+Pf0d9D3bMluSbbnFEkTOazrJHb++x wthL1rMzuG2obkL0TdS67qPa2Rxjj9tKRfH4zpyD+gRn2MYPUDj8pNpCFtaffXQ7 RqEpeQ57laGeI+01ItE2ZJnb7N83kbOKzmlZ37KzNwi5C8j8xZSCziaNleXl+Gcv /CYXJTztwdktrFdNpcZVbjJO3/cCfvjTkEMHsErlNH9Lg7AKN+8YPgVHvoTOMp06 /r2RXog1t8sTDJZiMwVBTVFJXN1AmVbvUblJXtdQSUsJzKYWEU8mOt/cyhkkYb/K WH7JJE07PoCXMaIkXExFaEe7J9cwJRJXJLw= -----END CERTIFICATE-----Generated at Fri Sep 4 23:53:20 2026 by rpki-client