$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/d54cac7e-a785-3ed8-ad37-4b1f064d8a3d.roa File: d54cac7e-a785-3ed8-ad37-4b1f064d8a3d.roa (raw, json) Hash identifier: NhufBS+awOg5kWNRF9yngtpWYmXtK6c+x3Pa639DU8U= Subject key identifier: 06:C3:CB:1F:D9:08:0F:70:60:1E:98:D8:46:CE:41:04:F8:A4:0E:C0 Certificate issuer: /CN=33c78d60-34eb-4fed-8e25-925b95a30c8e Certificate serial: 010D0C9F4328584F506D4B56C6528F0886FD8800 Authority key identifier: 5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/d54cac7e-a785-3ed8-ad37-4b1f064d8a3d.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 33039 IP address blocks: 2602:f95c:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:4b:56:c6:52:8f:08:86:fd:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33c78d60-34eb-4fed-8e25-925b95a30c8e Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=226bfea0-afc6-40ef-8254-25ea94d508b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:82:72:c4:57:31:53:6f:d8:50:76:a8:9a:b9: f9:b8:e4:35:80:d4:4c:7f:87:5b:cc:5c:0b:37:c4: e7:b7:ec:a5:80:d0:87:a5:91:72:8d:3e:6a:4f:df: c9:88:c5:8a:cf:18:aa:ce:67:d7:4b:ac:9f:ad:d9: 25:f9:a1:57:59:78:36:7e:25:11:f3:4d:dc:97:29: 2d:86:5a:9a:d2:d5:43:c9:5c:b6:c0:41:0e:a1:7d: c5:69:ce:5b:51:38:ab:54:51:d4:57:b2:c4:45:ee: ee:56:cf:c8:de:d1:1d:c5:f5:02:34:f7:07:de:85: a8:76:f3:0b:af:71:35:06:21:39:df:fc:d1:6c:78: 86:e4:7a:a8:04:bb:f2:35:97:b8:64:72:1f:9d:db: a6:a4:76:6e:90:6f:dd:5c:c2:3f:7c:17:1b:18:d1: 01:1f:58:10:42:0e:b3:a2:5c:06:01:da:ab:7d:8d: f6:0b:b7:17:88:2c:2e:54:b8:af:3c:0f:f9:96:b5: f6:97:3b:09:71:c4:21:07:ef:1a:e5:40:34:a0:58: b3:45:98:96:1d:33:c6:4c:36:25:99:7c:e5:32:38: 16:16:02:65:73:6e:5f:3b:73:66:20:83:79:26:83: e9:6f:9b:48:80:d8:f9:29:0e:53:02:48:b0:5c:1f: 12:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:C3:CB:1F:D9:08:0F:70:60:1E:98:D8:46:CE:41:04:F8:A4:0E:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/d54cac7e-a785-3ed8-ad37-4b1f064d8a3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl X509v3 Authority Key Identifier: keyid:5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer sbgp-ipAddrBlock: critical IPv6: 2602:f95c:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:26:7b:7f:8f:50:e1:f7:63:4c:7b:9c:4b:77:e9:35:ed:6b: 59:68:22:2f:84:c4:71:f0:9e:3d:44:0c:23:92:84:b0:92:cf: b2:77:44:6c:f0:0f:c0:32:92:3b:d8:c2:1e:5b:82:38:ad:cc: 91:33:da:8a:03:c5:c0:8e:77:47:25:68:83:d2:33:b6:97:58: 28:75:b4:9f:6a:5c:f9:cd:8e:be:56:e9:1a:2c:67:16:4d:28: a3:58:c6:da:68:97:4c:fd:cc:00:c4:8e:ec:b4:10:b9:dd:47: 3b:b5:2a:a8:d3:57:d0:69:e3:b0:00:d2:c4:e2:be:85:fb:b2: b5:9f:78:f9:5d:30:cf:fe:cb:40:bc:61:05:7c:f3:b9:30:16: 67:3c:3f:95:5c:5d:74:d0:ba:4b:74:c6:74:d3:9c:e8:f4:bd: 30:38:f9:10:7d:30:aa:38:70:c7:98:43:1d:5d:b8:b0:9e:f4: 74:30:5d:07:62:dc:fb:6a:39:42:ef:30:d1:34:27:c2:4e:8e: de:ea:4f:03:62:ee:68:2d:d5:a8:23:90:24:c1:ea:b8:b8:84: fc:bc:61:b4:d3:c0:9e:93:7e:a4:cf:b2:15:eb:8b:16:33:a2: b0:b1:d9:64:57:24:87:23:2f:c6:7a:8e:23:25:02:dd:70:97: 6d:92:c9:cf -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9QbUtWxlKPCIb9iAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNjNzhkNjAtMzRlYi00ZmVkLThlMjUtOTI1Yjk1YTMw YzhlMB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk MjI2YmZlYTAtYWZjNi00MGVmLTgyNTQtMjVlYTk0ZDUwOGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoJyxFcxU2/YUHaomrn5uOQ1gNRMf4dbzFwL N8Tnt+ylgNCHpZFyjT5qT9/JiMWKzxiqzmfXS6yfrdkl+aFXWXg2fiUR803clykt hlqa0tVDyVy2wEEOoX3Fac5bUTirVFHUV7LERe7uVs/I3tEdxfUCNPcH3oWodvML r3E1BiE53/zRbHiG5HqoBLvyNZe4ZHIfndumpHZukG/dXMI/fBcbGNEBH1gQQg6z olwGAdqrfY32C7cXiCwuVLivPA/5lrX2lzsJccQhB+8a5UA0oFizRZiWHTPGTDYl mXzlMjgWFgJlc25fO3NmIIN5JoPpb5tIgNj5KQ5TAkiwXB8SpQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAbDyx/ZCA9wYB6Y2EbOQQT4pA7AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zM2M3 OGQ2MC0zNGViLTRmZWQtOGUyNS05MjViOTVhMzBjOGUvZDU0Y2FjN2UtYTc4NS0z ZWQ4LWFkMzctNGIxZjA2NGQ4YTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzNjNzhkNjAtMzRlYi00ZmVkLThl MjUtOTI1Yjk1YTMwYzhlLzMzYzc4ZDYwLTM0ZWItNGZlZC04ZTI1LTkyNWI5NWEz MGM4ZS5jcmwwHwYDVR0jBBgwFoAUX2UlsGmXIYLm4tORRne6XDPT4EEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zM2M3OGQ2MC0zNGViLTRmZWQtOGUyNS05MjVi OTVhMzBjOGUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5XAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGUme3+PUOH3Y0x7nEt36TXta1loIi+ExHHwnj1EDCOShLCSz7J3 RGzwD8AykjvYwh5bgjitzJEz2ooDxcCOd0claIPSM7aXWCh1tJ9qXPnNjr5W6Ros ZxZNKKNYxtpol0z9zADEjuy0ELndRzu1KqjTV9Bp47AA0sTivoX7srWfePldMM/+ y0C8YQV887kwFmc8P5VcXXTQukt0xnTTnOj0vTA4+RB9MKo4cMeYQx1duLCe9HQw XQdi3PtqOULvMNE0J8JOjt7qTwNi7mgt1agjkCTB6ri4hPy8YbTTwJ6TfqTPshXr ixYzorCx2WRXJIcjL8Z6jiMlAt1wl22Syc8= -----END CERTIFICATE-----Generated at Mon Oct 5 13:24:30 2026 by rpki-client