$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/33952f95-e900-31ea-860e-de63f1452611.roa File: 33952f95-e900-31ea-860e-de63f1452611.roa (raw, json) Hash identifier: zB++R6bF4/B2dfFwfvKavtQYAtF4XcJwxfZIADYIA8k= Subject key identifier: 8C:20:35:60:5C:25:A6:D4:50:07:CD:64:EA:EC:DD:28:D9:D8:1B:04 Certificate issuer: /CN=a509a7f2-7b5a-4e82-86cc-217eab093131 Certificate serial: 010D0C9F4328584F6C584EA080B3F79134F94180 Authority key identifier: F5:09:E8:F5:08:1E:9C:78:DB:AF:52:A3:00:53:35:94:85:24:8E:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/33952f95-e900-31ea-860e-de63f1452611.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 395173 IP address blocks: 2607:4580::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/a509a7f2-7b5a-4e82-86cc-217eab093131.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/a509a7f2-7b5a-4e82-86cc-217eab093131.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:4e:a0:80:b3:f7:91:34:f9:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a509a7f2-7b5a-4e82-86cc-217eab093131 Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=6a5784cb-4e4a-425b-adc5-b80163750fba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:22:ff:ea:be:7a:a5:e2:34:e5:7a:4e:c8:dd: a8:fb:da:d1:78:ea:33:7f:fd:97:81:fe:3c:3f:32: 3b:0f:2b:42:1a:36:77:52:fb:f7:87:ed:7c:0c:82: db:bc:28:35:b0:3e:c7:bb:ff:e8:21:53:c8:5f:99: d2:8c:03:23:14:8e:99:5e:c8:6e:3e:c9:b6:53:92: a7:87:9a:87:14:16:7d:85:e2:c6:c6:6d:fc:7c:5e: fe:38:4a:4a:0a:01:ac:33:2b:6f:18:e9:79:ee:8b: c7:4e:df:9a:57:f7:ac:a5:2a:f8:3f:d0:42:f4:4b: 73:52:01:b8:c6:0a:89:97:af:3d:34:79:c4:86:75: 9f:ba:a2:a5:6b:c5:6e:a2:1f:4b:07:d3:93:30:a5: 01:a1:ea:85:e5:11:04:1a:31:66:a5:33:f0:2e:2c: ef:b4:13:40:79:c6:5b:ca:a8:bf:83:23:25:aa:37: c2:a1:1a:ec:b7:97:b7:73:bc:79:a6:76:42:e1:17: 66:1e:db:5d:54:88:48:50:1a:b4:ee:ec:8d:a0:6a: a4:42:88:06:85:88:18:76:75:0d:b7:5c:46:1b:72: 74:23:78:86:56:6d:5c:34:09:68:2b:9a:52:35:ba: d8:53:23:08:ce:dd:da:ee:c9:08:9c:77:54:62:fa: 27:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:20:35:60:5C:25:A6:D4:50:07:CD:64:EA:EC:DD:28:D9:D8:1B:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/33952f95-e900-31ea-860e-de63f1452611.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/a509a7f2-7b5a-4e82-86cc-217eab093131.crl X509v3 Authority Key Identifier: keyid:F5:09:E8:F5:08:1E:9C:78:DB:AF:52:A3:00:53:35:94:85:24:8E:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131.cer sbgp-ipAddrBlock: critical IPv6: 2607:4580::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:e2:14:78:9f:0f:4b:37:18:f7:6d:ab:41:9d:0f:70:c7:49: e4:a8:a8:b7:02:17:92:f9:e5:f5:57:17:dd:5d:39:f9:08:02: c1:b3:d6:f7:d6:e6:73:03:a2:f1:31:1d:fb:d4:63:7e:91:13: 35:63:71:e4:d5:8e:48:6f:2a:aa:28:dc:fa:a1:45:71:44:04: 30:63:8b:e1:57:43:fd:e7:fa:2a:c7:7f:d7:fb:db:85:27:77: e7:29:de:24:e2:26:b5:df:13:e0:cf:8e:9c:41:d5:19:78:b2: c4:4c:b1:3d:6f:f7:36:e3:a5:aa:61:d4:c1:e9:3a:68:6c:94: 8f:75:68:e1:1a:82:94:71:86:bd:2c:b0:c1:dd:77:3d:29:08: de:a6:46:6f:a0:f2:f6:db:96:df:4e:f2:c3:d5:b6:70:47:86: 52:67:56:fb:bc:6c:e6:94:15:66:83:60:d9:5e:2c:e9:69:93: ea:fc:eb:79:10:94:ed:88:a7:8a:c8:83:f6:e1:69:84:14:9f: 8e:93:f1:38:aa:25:57:89:a1:58:ea:ae:c0:d9:f9:c3:d8:e1: d9:e3:24:b1:a2:a4:8e:3d:38:35:0a:62:07:f6:3d:77:60:11: 75:59:27:da:fa:e2:a8:17:b0:f3:b0:d9:86:50:f2:b2:d9:cb: fa:11:93:24 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9sWE6ggLP3kTT5QYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUwOWE3ZjItN2I1YS00ZTgyLTg2Y2MtMjE3ZWFiMDkz MTMxMB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk NmE1Nzg0Y2ItNGU0YS00MjViLWFkYzUtYjgwMTYzNzUwZmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCL/6r56peI05XpOyN2o+9rReOozf/2Xgf48 PzI7DytCGjZ3Uvv3h+18DILbvCg1sD7Hu//oIVPIX5nSjAMjFI6ZXshuPsm2U5Kn h5qHFBZ9heLGxm38fF7+OEpKCgGsMytvGOl57ovHTt+aV/espSr4P9BC9EtzUgG4 xgqJl689NHnEhnWfuqKla8Vuoh9LB9OTMKUBoeqF5REEGjFmpTPwLizvtBNAecZb yqi/gyMlqjfCoRrst5e3c7x5pnZC4RdmHttdVIhIUBq07uyNoGqkQogGhYgYdnUN t1xGG3J0I3iGVm1cNAloK5pSNbrYUyMIzt3a7skInHdUYvon2wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIwgNWBcJabUUAfNZOrs3SjZ2BsEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hNTA5 YTdmMi03YjVhLTRlODItODZjYy0yMTdlYWIwOTMxMzEvMzM5NTJmOTUtZTkwMC0z MWVhLTg2MGUtZGU2M2YxNDUyNjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYTUwOWE3ZjItN2I1YS00ZTgyLTg2 Y2MtMjE3ZWFiMDkzMTMxL2E1MDlhN2YyLTdiNWEtNGU4Mi04NmNjLTIxN2VhYjA5 MzEzMS5jcmwwHwYDVR0jBBgwFoAU9Qno9QgenHjbr1KjAFM1lIUkjuswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hNTA5YTdmMi03YjVhLTRlODItODZjYy0yMTdl YWIwOTMxMzEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdFgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCb4hR4nw9LNxj3batBnQ9wx0nkqKi3AheS+eX1VxfdXTn5CALBs9b3 1uZzA6LxMR371GN+kRM1Y3Hk1Y5IbyqqKNz6oUVxRAQwY4vhV0P95/oqx3/X+9uF J3fnKd4k4ia13xPgz46cQdUZeLLETLE9b/c246WqYdTB6TpobJSPdWjhGoKUcYa9 LLDB3Xc9KQjepkZvoPL225bfTvLD1bZwR4ZSZ1b7vGzmlBVmg2DZXizpaZPq/Ot5 EJTtiKeKyIP24WmEFJ+Ok/E4qiVXiaFY6q7A2fnD2OHZ4ySxoqSOPTg1CmIH9j13 YBF1WSfa+uKoF7DzsNmGUPKy2cv6EZMk -----END CERTIFICATE-----Generated at Thu Oct 15 10:34:38 2026 by rpki-client