$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33b856a0-dad6-347d-a745-ddf890e79e43.roa File: 33b856a0-dad6-347d-a745-ddf890e79e43.roa (raw, json) Hash identifier: 5aZ4G+oJseuQGL8NKXO6WXPivR76QYRXO6QbQMEKPtw= Subject key identifier: D0:E2:68:46:EF:68:3D:D8:26:88:D6:0E:45:EE:71:9B:C6:C6:13:61 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E4559D637DC4A2F87772A68C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33b856a0-dad6-347d-a745-ddf890e79e43.roa Signing time: Tue 23 Jun 2026 21:00:12 +0000 ROA not before: Tue 23 Jun 2026 21:00:12 +0000 ROA not after: Mon 21 Sep 2026 21:00:12 +0000 asID: 12222 IP address blocks: 2001:4878:b008::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:45:59:d6:37:dc:4a:2f:87:77:2a:68:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 23 21:00:12 2026 GMT Not After : Sep 21 21:00:12 2026 GMT Subject: CN=396f3a32-4c32-449f-8af6-8acb09def574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:94:17:79:6c:8e:3a:e2:26:8d:d5:34:3a:62: 33:16:31:4c:e3:f8:7d:0c:0d:a8:26:e2:20:49:f5: d5:72:da:6c:68:fa:41:af:57:2b:3d:f2:c3:6a:35: 68:ec:04:b6:ed:d6:89:0a:19:cd:81:23:e2:a4:69: 11:64:ec:c6:1d:a9:0c:38:fd:4c:cc:a2:8d:b7:0f: 17:c1:fc:ce:99:25:75:2e:86:71:15:d3:5d:74:4e: 7c:ca:b7:05:26:1c:f8:c1:ab:b0:91:31:f5:cc:ab: 5c:ad:ee:1d:db:de:ae:b4:28:bf:52:b0:fb:51:07: 61:73:1d:7c:12:15:79:ca:3d:89:35:ad:e6:c3:9d: cb:7c:ea:43:f3:cd:33:97:82:a2:79:36:15:59:26: 83:0d:e3:1e:9a:0f:8c:5f:a1:14:79:ce:af:40:54: 93:c8:9a:8a:ea:29:11:8d:9a:ed:73:3e:1d:04:f9: 92:5d:e9:72:bb:55:5a:e6:ec:0b:0e:70:d5:2c:c0: 5c:63:4f:92:f8:fa:39:3d:ef:cf:76:90:7d:b9:50: b7:de:3e:d5:75:63:7d:85:72:e9:9b:89:ce:af:8b: 83:c1:96:99:c0:e2:d1:82:57:c1:bc:41:73:68:f8: 85:a8:a2:83:ae:0b:81:2e:d3:98:4b:64:8e:a7:b7: ab:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:E2:68:46:EF:68:3D:D8:26:88:D6:0E:45:EE:71:9B:C6:C6:13:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33b856a0-dad6-347d-a745-ddf890e79e43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:b008::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:8b:53:c0:5b:ca:9c:b2:59:06:4e:1c:41:af:f4:71:2e:82: 62:44:9e:05:65:e3:66:87:cb:2f:66:1a:0b:0b:20:12:c2:a8: b4:08:33:d5:1e:9a:a8:fb:74:60:4a:ff:b2:e3:4e:0f:0f:57: 81:db:b6:0f:dc:cf:3f:3d:2f:ca:57:23:f6:53:7e:80:e0:5b: 6d:d0:a2:75:bf:ed:1f:90:eb:b6:0b:88:15:11:19:de:2e:94: 88:18:39:f3:d4:9a:8c:46:c0:dc:4c:6a:ea:9b:94:86:26:76: d9:c5:2e:3c:fc:32:2b:82:c1:70:f9:fb:70:e0:a7:3b:d1:87: f0:47:50:42:c5:4e:af:ba:08:81:74:fd:f6:8d:d6:4b:25:e6: c0:a7:e8:ed:58:4c:f3:88:61:98:7e:57:48:78:a6:63:c6:14: dd:c4:b1:33:be:d8:66:78:70:82:97:52:f6:2e:9c:59:57:53: b3:a4:12:89:19:03:e2:f8:92:3b:d1:bd:e2:60:ef:3a:e5:05: 61:11:08:cb:b9:c5:35:a9:17:68:08:1c:53:8d:52:9a:8d:39: 50:0c:0e:b9:ee:07:27:c9:36:ec:62:45:e6:95:52:8d:7d:46: cf:9b:c6:b7:52:8c:6a:0f:d0:d0:e3:b0:fc:41:e6:0d:12:7d: 65:f5:fe:38 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5FWdY33Eovh3cqaMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDYyMzIxMDAxMloXDTI2MDkyMTIxMDAxMlowLzEtMCsGA1UEAxMk Mzk2ZjNhMzItNGMzMi00NDlmLThhZjYtOGFjYjA5ZGVmNTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZQXeWyOOuImjdU0OmIzFjFM4/h9DA2oJuIg SfXVctpsaPpBr1crPfLDajVo7AS27daJChnNgSPipGkRZOzGHakMOP1MzKKNtw8X wfzOmSV1LoZxFdNddE58yrcFJhz4wauwkTH1zKtcre4d296utCi/UrD7UQdhcx18 EhV5yj2JNa3mw53LfOpD880zl4KieTYVWSaDDeMemg+MX6EUec6vQFSTyJqK6ikR jZrtcz4dBPmSXelyu1Va5uwLDnDVLMBcY0+S+Po5Pe/PdpB9uVC33j7VdWN9hXLp m4nOr4uDwZaZwOLRglfBvEFzaPiFqKKDrguBLtOYS2SOp7erHwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNDiaEbvaD3YJojWDkXucZvGxhNhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzNiODU2YTAtZGFkNi0z NDdkLWE3NDUtZGRmODkwZTc5ZTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeLAI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABCLU8BbypyyWQZOHEGv9HEugmJEngVl42aHyy9mGgsLIBLCqLQI M9Uemqj7dGBK/7LjTg8PV4Hbtg/czz89L8pXI/ZTfoDgW23QonW/7R+Q67YLiBUR Gd4ulIgYOfPUmoxGwNxMauqblIYmdtnFLjz8MiuCwXD5+3DgpzvRh/BHUELFTq+6 CIF0/faN1ksl5sCn6O1YTPOIYZh+V0h4pmPGFN3EsTO+2GZ4cIKXUvYunFlXU7Ok EokZA+L4kjvRveJg7zrlBWERCMu5xTWpF2gIHFONUpqNOVAMDrnuByfJNuxiReaV Uo19Rs+bxrdSjGoP0NDjsPxB5g0SfWX1/jg= -----END CERTIFICATE-----Generated at Tue Jul 21 19:59:15 2026 by rpki-client