$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/33b725f1-5fb3-308f-8792-e7c898b5e67a.roa File: 33b725f1-5fb3-308f-8792-e7c898b5e67a.roa (raw, json) Hash identifier: qP5MOpcrKZ6kuia6/X2ceJNbSqvO+Z9a3rkDFyqlZIo= Subject key identifier: 08:32:39:40:6E:88:D3:88:8A:15:3B:51:ED:9F:DC:75:34:82:68:B7 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584EF87CDD0C951F3C5F55A02F00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/33b725f1-5fb3-308f-8792-e7c898b5e67a.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 22709 IP address blocks: 2001:470:394::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:dd:0c:95:1f:3c:5f:55:a0:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=b7a3a5cd-6823-4fcf-86d0-077ce244be14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0d:12:48:04:47:ee:50:d2:a7:c7:e0:30:f3: c3:d7:65:fc:d0:9e:78:eb:5e:ab:0c:f8:9a:31:6a: bd:93:5c:a3:ca:c6:a5:79:2c:4e:e6:ef:fe:45:31: e9:e7:f8:39:07:85:04:f5:86:0e:aa:af:ff:31:ec: cf:33:55:fd:1a:06:aa:b0:4b:4a:d9:23:00:6f:78: 31:b3:9b:97:ed:e4:cc:ad:68:57:84:d4:53:4a:47: 9c:aa:1b:f7:df:d2:be:d4:e6:0d:52:af:fe:20:52: c7:7d:8f:98:75:74:6a:77:13:b9:92:d0:b4:01:56: 40:c3:77:8a:d8:37:4c:8f:41:a9:d0:79:af:59:9f: 59:d2:58:5f:c5:88:fc:40:8a:20:7c:a8:ce:47:64: 70:dc:c4:4b:f0:ae:b1:7f:b4:0c:eb:a1:3c:df:79: c0:ab:54:88:38:ba:c7:27:36:5a:67:5b:98:e1:5d: 04:68:96:bc:56:08:73:be:48:7b:62:44:a2:66:ba: 8b:cb:ef:da:10:fb:55:e0:8d:5c:de:61:3a:25:3f: 71:ba:2a:37:16:c4:1d:f0:97:d1:0b:24:2e:22:27: 85:15:52:b6:fa:9f:1f:15:a1:83:e5:15:1b:b7:84: fd:16:2f:42:1b:4f:8d:9d:e8:ca:9f:cd:2f:f1:55: 60:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:32:39:40:6E:88:D3:88:8A:15:3B:51:ED:9F:DC:75:34:82:68:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/33b725f1-5fb3-308f-8792-e7c898b5e67a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:394::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:83:cd:c1:b6:a8:1b:c6:2a:6d:6c:83:4c:cc:f5:83:00:e3: 09:0a:c7:c6:1d:d7:b9:96:8f:f3:19:ab:54:56:c5:1c:8e:9c: 37:11:d4:75:d8:01:42:41:06:02:d7:5a:da:4a:ef:ed:e9:85: 72:ad:ca:e6:5d:9d:77:23:11:0e:e4:d9:cd:3c:cb:75:6a:20: d1:74:93:1a:1f:1e:67:1e:e8:b9:55:cb:27:cf:c2:5a:e6:bb: 4c:9a:31:fc:d3:bc:31:f5:59:3d:ec:11:65:94:4f:9c:00:ca: f9:fe:11:9e:f0:b7:d2:b1:71:3e:38:cf:a0:ec:1c:dd:c8:7c: d1:49:b6:6d:d4:68:b5:9e:e1:87:83:28:d8:c2:a4:80:5a:3a: 19:8b:15:c3:3d:08:71:b6:2c:b8:c0:cf:59:fd:cc:3c:d3:fc: 4f:c0:4b:82:fe:ef:ad:de:6e:81:f1:92:e6:ee:a4:6f:4d:3d: 74:9b:4c:95:5f:37:ca:a7:54:4e:70:7a:54:fa:7b:e9:5a:fe: f3:f8:fc:d0:6a:9e:d7:be:c4:b0:0e:f9:e8:b1:49:2b:e1:ee: a6:22:12:07:5d:96:d2:45:7e:c2:36:e0:40:96:51:d4:24:c5: bd:ae:b5:fa:ee:5c:58:94:fb:2a:13:7b:46:3b:41:e2:55:af: 7b:91:13:0b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE74fN0MlR88X1WgLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk YjdhM2E1Y2QtNjgyMy00ZmNmLTg2ZDAtMDc3Y2UyNDRiZTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoA0SSARH7lDSp8fgMPPD12X80J54616rDPia MWq9k1yjysaleSxO5u/+RTHp5/g5B4UE9YYOqq//MezPM1X9GgaqsEtK2SMAb3gx s5uX7eTMrWhXhNRTSkecqhv339K+1OYNUq/+IFLHfY+YdXRqdxO5ktC0AVZAw3eK 2DdMj0Gp0HmvWZ9Z0lhfxYj8QIogfKjOR2Rw3MRL8K6xf7QM66E833nAq1SIOLrH JzZaZ1uY4V0EaJa8Vghzvkh7YkSiZrqLy+/aEPtV4I1c3mE6JT9xuio3FsQd8JfR CyQuIieFFVK2+p8fFaGD5RUbt4T9Fi9CG0+NnejKn80v8VVgFwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAgyOUBuiNOIihU7Ue2f3HU0gmi3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMzNiNzI1ZjEtNWZiMy0z MDhmLTg3OTItZTdjODk4YjVlNjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMaDzcG2qBvGKm1sg0zM9YMA4wkKx8Yd17mWj/MZq1RWxRyOnDcR 1HXYAUJBBgLXWtpK7+3phXKtyuZdnXcjEQ7k2c08y3VqINF0kxofHmce6LlVyyfP wlrmu0yaMfzTvDH1WT3sEWWUT5wAyvn+EZ7wt9KxcT44z6DsHN3IfNFJtm3UaLWe 4YeDKNjCpIBaOhmLFcM9CHG2LLjAz1n9zDzT/E/AS4L+763eboHxkubupG9NPXSb TJVfN8qnVE5welT6e+la/vP4/NBqnte+xLAO+eixSSvh7qYiEgddltJFfsI24ECW UdQkxb2utfruXFiU+yoTe0Y7QeJVr3uREws= -----END CERTIFICATE-----Generated at Fri Sep 11 10:10:12 2026 by rpki-client