$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/6c7472b0-6d12-33be-a9f9-85e26dc54729.roa File: 6c7472b0-6d12-33be-a9f9-85e26dc54729.roa (raw, json) Hash identifier: /GvN8uqAkxXgpKinL0Ql2vvAdfbJ7I6Vj8FK3hHEFRo= Subject key identifier: 04:8E:D7:7E:6A:93:1D:2B:4B:D0:B2:DA:14:AC:F0:DD:84:12:3D:0C Certificate issuer: /CN=33c78d60-34eb-4fed-8e25-925b95a30c8e Certificate serial: 010D0C9F4328584DBBA0583CBB3B3A828B3F8CB0 Authority key identifier: 5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/6c7472b0-6d12-33be-a9f9-85e26dc54729.roa Signing time: Tue 05 May 2026 13:00:31 +0000 ROA not before: Tue 05 May 2026 13:00:31 +0000 ROA not after: Mon 03 Aug 2026 13:00:31 +0000 asID: 33039 IP address blocks: 2602:f95c:ca1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bb:a0:58:3c:bb:3b:3a:82:8b:3f:8c:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33c78d60-34eb-4fed-8e25-925b95a30c8e Validity Not Before: May 5 13:00:31 2026 GMT Not After : Aug 3 13:00:31 2026 GMT Subject: CN=232a7627-67b5-41b9-b47e-97ad587c8820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:1f:d1:50:30:4e:49:9b:f8:93:f8:29:f9:54: ea:9c:d4:fb:da:ad:19:cf:c8:81:f5:f9:bb:64:ab: 20:30:5e:13:28:6e:94:be:b9:91:bc:a4:5f:43:79: 4d:96:30:1b:f6:77:f3:c5:3a:8b:f6:db:27:a2:12: 68:d1:18:df:d2:ab:cb:b2:e9:29:24:3f:a6:80:70: 30:76:70:71:76:6d:ad:80:7e:23:3f:9c:60:da:fb: c6:3b:54:1f:cb:fb:cd:bb:c9:c4:3a:6e:05:28:0a: 88:3c:84:10:0e:46:22:75:77:2f:97:31:09:4d:4e: 06:5d:c9:89:8b:d6:cc:76:69:ff:9a:dc:6c:c9:1d: fc:a6:5e:67:db:a8:7a:9d:18:58:f9:5e:6a:ae:27: 9a:99:a3:bf:2b:8b:c1:b1:fa:64:8c:3c:b2:3f:29: d3:22:5b:86:93:fe:54:6f:73:15:e2:39:00:30:bd: 51:bb:4c:e7:31:76:32:3e:92:6c:50:e9:5b:30:bf: 2c:23:87:39:6e:03:60:e2:c7:5f:2b:ad:88:58:f9: 1d:16:de:05:9b:62:da:ec:c8:c7:95:81:77:4e:dc: 67:c6:27:70:3d:21:bc:1b:0c:04:fb:6e:47:b3:eb: 40:9e:7f:c5:4f:e9:47:bf:4b:bf:51:b6:bc:e5:b7: c0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:8E:D7:7E:6A:93:1D:2B:4B:D0:B2:DA:14:AC:F0:DD:84:12:3D:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/6c7472b0-6d12-33be-a9f9-85e26dc54729.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl X509v3 Authority Key Identifier: keyid:5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer sbgp-ipAddrBlock: critical IPv6: 2602:f95c:ca1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:9c:f3:f4:2e:fd:90:bd:00:68:8e:0a:8f:5f:97:58:c7:18: 3e:6c:98:b5:6c:11:a7:72:6c:24:1d:e6:67:77:23:36:33:cd: a5:27:04:9c:3d:49:4c:64:7b:e9:0b:7e:c2:ec:8d:0d:f9:b1: 43:f8:9e:07:6c:6c:6f:a4:3f:f2:c3:bb:f6:59:95:21:1c:69: ec:1b:98:55:d0:ee:a8:be:51:42:ab:9b:44:45:d7:38:a8:6d: f1:ae:ee:db:a7:0e:35:e2:3a:8c:53:46:a8:2d:5f:5d:36:72: 7c:df:63:2b:3d:f2:6c:65:34:27:34:e5:6f:99:e5:5d:ba:05: 7e:35:66:92:23:e3:3a:e1:0e:d0:79:51:b8:67:23:16:2c:d9: 45:65:dd:99:df:a1:b3:6b:8a:a6:fd:50:08:67:5e:5e:a3:e8: d9:b2:3b:5e:df:da:d7:c8:e7:b8:2b:a6:5a:2c:55:a3:16:83: 00:ad:f0:e9:27:ca:22:5d:6e:1d:1d:33:70:0f:39:bb:e2:8c: d2:86:60:1a:e3:a4:7e:de:f2:67:71:fe:f4:36:e7:2d:81:4d: 88:3a:39:db:a3:31:74:be:4f:04:75:dd:d5:02:d1:82:30:b3: 9e:04:91:75:05:06:58:cc:5e:3f:f3:e6:c0:84:5e:3d:55:1d: c2:91:0b:b9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE27oFg8uzs6gos/jLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNjNzhkNjAtMzRlYi00ZmVkLThlMjUtOTI1Yjk1YTMw YzhlMB4XDTI2MDUwNTEzMDAzMVoXDTI2MDgwMzEzMDAzMVowLzEtMCsGA1UEAxMk MjMyYTc2MjctNjdiNS00MWI5LWI0N2UtOTdhZDU4N2M4ODIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgh/RUDBOSZv4k/gp+VTqnNT72q0Zz8iB9fm7 ZKsgMF4TKG6UvrmRvKRfQ3lNljAb9nfzxTqL9tsnohJo0Rjf0qvLsukpJD+mgHAw dnBxdm2tgH4jP5xg2vvGO1Qfy/vNu8nEOm4FKAqIPIQQDkYidXcvlzEJTU4GXcmJ i9bMdmn/mtxsyR38pl5n26h6nRhY+V5qrieamaO/K4vBsfpkjDyyPynTIluGk/5U b3MV4jkAML1Ru0znMXYyPpJsUOlbML8sI4c5bgNg4sdfK62IWPkdFt4Fm2La7MjH lYF3TtxnxidwPSG8GwwE+25Hs+tAnn/FT+lHv0u/Uba85bfAbQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFASO135qkx0rS9Cy2hSs8N2EEj0MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zM2M3 OGQ2MC0zNGViLTRmZWQtOGUyNS05MjViOTVhMzBjOGUvNmM3NDcyYjAtNmQxMi0z M2JlLWE5ZjktODVlMjZkYzU0NzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzNjNzhkNjAtMzRlYi00ZmVkLThl MjUtOTI1Yjk1YTMwYzhlLzMzYzc4ZDYwLTM0ZWItNGZlZC04ZTI1LTkyNWI5NWEz MGM4ZS5jcmwwHwYDVR0jBBgwFoAUX2UlsGmXIYLm4tORRne6XDPT4EEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zM2M3OGQ2MC0zNGViLTRmZWQtOGUyNS05MjVi OTVhMzBjOGUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5XAyh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAec8/Qu/ZC9AGiOCo9fl1jHGD5smLVsEadybCQd5md3IzYzzaUn BJw9SUxke+kLfsLsjQ35sUP4ngdsbG+kP/LDu/ZZlSEcaewbmFXQ7qi+UUKrm0RF 1ziobfGu7tunDjXiOoxTRqgtX102cnzfYys98mxlNCc05W+Z5V26BX41ZpIj4zrh DtB5UbhnIxYs2UVl3ZnfobNriqb9UAhnXl6j6NmyO17f2tfI57grplosVaMWgwCt 8OknyiJdbh0dM3APObvijNKGYBrjpH7e8mdx/vQ25y2BTYg6OdujMXS+TwR13dUC 0YIws54EkXUFBljMXj/z5sCEXj1VHcKRC7k= -----END CERTIFICATE-----Generated at Wed May 13 06:06:49 2026 by rpki-client