$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/33952f95-e900-31ea-860e-de63f1452611.roa File: 33952f95-e900-31ea-860e-de63f1452611.roa (raw, json) Hash identifier: evWuXPpECcl3Lo8jyrgYGdOuryidEhJE8RAF2+hh4p0= Subject key identifier: C6:B7:EA:7B:36:EA:8B:B5:6F:74:55:87:99:DC:0C:CB:E9:AC:68:30 Certificate issuer: /CN=a509a7f2-7b5a-4e82-86cc-217eab093131 Certificate serial: 010D0C9F4328584ECA6C86BB31564E99046EA900 Authority key identifier: F5:09:E8:F5:08:1E:9C:78:DB:AF:52:A3:00:53:35:94:85:24:8E:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/33952f95-e900-31ea-860e-de63f1452611.roa Signing time: Mon 10 Aug 2026 13:00:12 +0000 ROA not before: Mon 10 Aug 2026 13:00:12 +0000 ROA not after: Sun 08 Nov 2026 14:00:12 +0000 asID: 395173 IP address blocks: 2607:4580::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/a509a7f2-7b5a-4e82-86cc-217eab093131.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/a509a7f2-7b5a-4e82-86cc-217eab093131.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Aug 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ca:6c:86:bb:31:56:4e:99:04:6e:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a509a7f2-7b5a-4e82-86cc-217eab093131 Validity Not Before: Aug 10 13:00:12 2026 GMT Not After : Nov 8 14:00:12 2026 GMT Subject: CN=b46e2f6b-8889-4d55-8f3a-cdff88e15d3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:04:5c:8f:93:d2:60:4c:43:d1:f4:aa:c7:88: 77:02:b4:e3:f2:53:62:f8:f2:c3:01:cc:28:6f:d1: 35:8b:de:b1:e5:d9:35:5a:a0:45:f6:e1:43:d9:20: 7d:fd:1e:f9:ec:8f:a6:cc:25:e4:d4:1c:0f:af:4c: df:1b:c4:85:94:60:46:be:7e:9a:5c:8f:f3:e5:8c: 53:0f:ab:43:4d:35:3d:78:eb:3c:fe:1b:6f:f5:e9: c2:6e:58:70:65:c7:b2:db:06:63:6c:e6:24:4e:77: 42:e9:d6:af:82:01:6b:d7:01:e4:db:25:51:ed:f0: 7d:55:0a:45:92:d9:51:21:b8:76:c1:68:8d:7b:87: b1:3e:2c:ec:dd:23:88:ed:d6:cc:12:a8:15:36:cd: 75:30:d0:2d:f8:0c:ce:c7:a2:d6:8f:e7:0e:e7:00: 30:7b:88:35:f3:6d:03:07:e6:8e:d2:da:28:65:89: df:5b:d3:dd:73:86:ff:f7:3f:ad:9f:a1:3f:e4:a0: b1:cf:51:c0:84:7c:9b:c2:49:93:0d:9f:f2:e0:ea: 16:10:91:99:f9:6f:c5:c6:e6:5f:3b:db:3b:60:aa: 64:80:49:69:55:38:fa:0b:ba:da:e5:9b:3c:5e:e3: f8:e0:e2:8e:68:37:5a:4d:50:a6:5e:65:74:b6:f6: 16:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:B7:EA:7B:36:EA:8B:B5:6F:74:55:87:99:DC:0C:CB:E9:AC:68:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/33952f95-e900-31ea-860e-de63f1452611.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/a509a7f2-7b5a-4e82-86cc-217eab093131.crl X509v3 Authority Key Identifier: keyid:F5:09:E8:F5:08:1E:9C:78:DB:AF:52:A3:00:53:35:94:85:24:8E:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131.cer sbgp-ipAddrBlock: critical IPv6: 2607:4580::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:56:d0:ed:b1:86:c4:37:54:f1:89:9a:d8:20:47:bb:f6:b9: 9a:87:c7:74:37:90:b3:75:0c:6b:a7:e5:38:22:dc:05:e9:0a: 98:37:e8:6d:f2:45:ee:a3:3c:6a:c1:ab:fa:54:8e:f5:3f:e2: 44:5a:5a:a4:0c:60:b5:82:46:0d:ff:4d:5e:d6:2b:bc:c6:ee: b3:d9:8b:f0:ee:51:da:ce:00:e3:a1:17:c8:a5:0d:61:a2:7b: 9f:69:8f:b1:2a:db:c6:6f:ec:83:77:75:6a:79:4f:e1:f5:b9: da:24:0f:eb:d9:0a:c5:24:39:55:82:d5:ad:d6:ac:6a:a6:f5: 9c:77:78:41:14:fa:96:61:a9:e3:c0:fb:0a:3a:4f:4c:4d:6d: 4c:16:71:ae:9a:23:c3:d3:9f:3f:4c:92:83:ba:ec:1d:d6:b6: 10:e3:7b:38:03:6a:18:a4:6b:57:95:3b:32:68:25:2c:94:68: 88:96:1a:a5:f6:df:51:34:12:53:ac:08:7e:26:d1:4a:27:f2: 50:ac:85:c2:e8:ae:fe:58:5b:b2:51:ea:40:32:ba:9c:ad:43: 1f:47:02:51:06:cf:d7:17:d7:12:23:a4:69:fc:6e:5f:34:b3: c0:de:c6:6b:ea:0b:cd:ca:21:43:74:78:0a:6e:14:14:2c:97: 41:f2:35:d2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7KbIa7MVZOmQRuqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUwOWE3ZjItN2I1YS00ZTgyLTg2Y2MtMjE3ZWFiMDkz MTMxMB4XDTI2MDgxMDEzMDAxMloXDTI2MTEwODE0MDAxMlowLzEtMCsGA1UEAxMk YjQ2ZTJmNmItODg4OS00ZDU1LThmM2EtY2RmZjg4ZTE1ZDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wRcj5PSYExD0fSqx4h3ArTj8lNi+PLDAcwo b9E1i96x5dk1WqBF9uFD2SB9/R757I+mzCXk1BwPr0zfG8SFlGBGvn6aXI/z5YxT D6tDTTU9eOs8/htv9enCblhwZcey2wZjbOYkTndC6davggFr1wHk2yVR7fB9VQpF ktlRIbh2wWiNe4exPizs3SOI7dbMEqgVNs11MNAt+AzOx6LWj+cO5wAwe4g1820D B+aO0tooZYnfW9Pdc4b/9z+tn6E/5KCxz1HAhHybwkmTDZ/y4OoWEJGZ+W/FxuZf O9s7YKpkgElpVTj6C7ra5Zs8XuP44OKOaDdaTVCmXmV0tvYWPwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMa36ns26ou1b3RVh5ncDMvprGgwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hNTA5 YTdmMi03YjVhLTRlODItODZjYy0yMTdlYWIwOTMxMzEvMzM5NTJmOTUtZTkwMC0z MWVhLTg2MGUtZGU2M2YxNDUyNjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYTUwOWE3ZjItN2I1YS00ZTgyLTg2 Y2MtMjE3ZWFiMDkzMTMxL2E1MDlhN2YyLTdiNWEtNGU4Mi04NmNjLTIxN2VhYjA5 MzEzMS5jcmwwHwYDVR0jBBgwFoAU9Qno9QgenHjbr1KjAFM1lIUkjuswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hNTA5YTdmMi03YjVhLTRlODItODZjYy0yMTdl YWIwOTMxMzEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdFgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBQVtDtsYbEN1TxiZrYIEe79rmah8d0N5CzdQxrp+U4ItwF6QqYN+ht 8kXuozxqwav6VI71P+JEWlqkDGC1gkYN/01e1iu8xu6z2Yvw7lHazgDjoRfIpQ1h onufaY+xKtvGb+yDd3VqeU/h9bnaJA/r2QrFJDlVgtWt1qxqpvWcd3hBFPqWYanj wPsKOk9MTW1MFnGumiPD058/TJKDuuwd1rYQ43s4A2oYpGtXlTsyaCUslGiIlhql 9t9RNBJTrAh+JtFKJ/JQrIXC6K7+WFuyUepAMrqcrUMfRwJRBs/XF9cSI6Rp/G5f NLPA3sZr6gvNyiFDdHgKbhQULJdB8jXS -----END CERTIFICATE-----Generated at Sat Aug 22 20:21:34 2026 by rpki-client