$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/9f72c271-f1f1-38c0-b9d4-ae2deadaf80c.roa File: 9f72c271-f1f1-38c0-b9d4-ae2deadaf80c.roa (raw, json) Hash identifier: GNjtPW7jafHnlyKKBmuvjTzeHCmOc+B73T9aHBTy/so= Subject key identifier: 7D:8C:68:32:8E:37:DE:83:75:7A:19:A2:56:87:4B:73:AE:7B:36:FF Certificate issuer: /CN=33c78d60-34eb-4fed-8e25-925b95a30c8e Certificate serial: 010D0C9F4328584DA6B0201463A343737A8E5580 Authority key identifier: 5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/9f72c271-f1f1-38c0-b9d4-ae2deadaf80c.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 33039 IP address blocks: 2602:f95c:7a3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:20:14:63:a3:43:73:7a:8e:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33c78d60-34eb-4fed-8e25-925b95a30c8e Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=004773bc-5be9-494a-918a-154be8f2ac1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:2b:83:b6:04:8d:e3:b9:d7:fe:6d:06:61:91: e0:02:57:b0:72:e4:42:57:82:8e:26:62:cc:94:32: b7:c3:55:54:10:0c:60:98:c1:23:20:85:83:2c:76: 05:0e:48:6d:45:2d:9e:7e:21:26:11:1e:93:43:6b: d8:3a:99:66:4e:12:41:44:f9:de:6c:2b:5d:0f:ee: 3f:49:d7:f2:09:35:13:92:23:4f:36:8c:f3:2b:b9: 24:4b:12:37:b1:14:df:40:59:47:7d:20:4a:3e:66: 23:ef:5e:03:ea:55:5f:56:1e:10:5c:9e:1d:ba:96: ef:0d:2e:99:fb:af:f3:01:59:b1:5f:47:e1:2a:e2: 65:1b:30:6f:3f:92:4e:e1:b9:bb:25:c4:ea:e6:99: 98:9b:d5:ef:46:ac:7c:5a:65:53:cb:3d:74:41:e8: 54:91:b9:e5:65:c6:53:a4:1d:46:e8:b6:06:2f:fe: f2:09:f5:a1:73:e8:01:ca:22:15:5a:60:86:74:67: 4f:45:41:27:19:91:b4:3a:21:b4:d2:73:26:f0:fb: 68:91:cb:a2:05:45:06:b5:19:c9:bb:8a:21:1e:5d: ed:1d:c1:4e:40:b2:cd:a8:ae:dc:5f:a0:f3:a2:9d: 5a:35:14:40:57:8a:cd:ee:6e:a7:dd:3f:8c:a1:94: dd:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:8C:68:32:8E:37:DE:83:75:7A:19:A2:56:87:4B:73:AE:7B:36:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/9f72c271-f1f1-38c0-b9d4-ae2deadaf80c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl X509v3 Authority Key Identifier: keyid:5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer sbgp-ipAddrBlock: critical IPv6: 2602:f95c:7a3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:95:fc:d0:1b:75:08:38:29:c7:49:7f:3b:28:16:a0:17:c8: a1:58:c4:16:d4:5a:25:e6:8b:32:a4:f5:a4:f5:20:b9:fb:23: 9f:55:6f:83:74:fe:0f:cf:64:ad:8a:b0:f3:51:8d:51:8a:67: a8:31:65:ee:f2:31:3d:55:5b:b0:a8:df:c4:68:21:23:31:ad: 8f:86:8a:5c:64:1f:a7:d2:10:2e:f7:60:3d:3e:4e:48:0d:b2: 8b:26:db:05:af:b2:d8:5b:70:90:17:a0:dd:a7:14:05:70:ad: 63:62:d2:9b:0e:0b:ff:7b:ca:16:3f:5d:11:4e:e5:a4:73:ae: 57:fd:2d:db:03:72:5d:33:b2:34:ad:22:8a:ef:f6:b0:76:bd: 73:a6:d1:cf:2a:af:36:02:69:c9:a7:1c:a3:70:7c:23:a6:d5: 6c:96:68:40:0b:99:cd:37:11:41:f7:61:78:a9:28:f4:1d:f7: 99:c2:9a:4a:01:ed:ff:b1:45:e4:48:23:dd:57:da:13:07:17: 83:a6:39:a5:34:8a:27:96:d6:4c:f0:43:20:ac:3d:5b:38:3a: e6:87:e2:71:73:21:c7:59:33:e0:16:38:03:0c:57:25:b9:fc: 59:cd:56:c9:dc:a5:cc:7e:6a:77:6d:39:69:aa:5b:70:a2:31: 23:d4:2f:44 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2msCAUY6NDc3qOVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNjNzhkNjAtMzRlYi00ZmVkLThlMjUtOTI1Yjk1YTMw YzhlMB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk MDA0NzczYmMtNWJlOS00OTRhLTkxOGEtMTU0YmU4ZjJhYzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7CuDtgSN47nX/m0GYZHgAlewcuRCV4KOJmLM lDK3w1VUEAxgmMEjIIWDLHYFDkhtRS2efiEmER6TQ2vYOplmThJBRPnebCtdD+4/ SdfyCTUTkiNPNozzK7kkSxI3sRTfQFlHfSBKPmYj714D6lVfVh4QXJ4dupbvDS6Z +6/zAVmxX0fhKuJlGzBvP5JO4bm7JcTq5pmYm9XvRqx8WmVTyz10QehUkbnlZcZT pB1G6LYGL/7yCfWhc+gByiIVWmCGdGdPRUEnGZG0OiG00nMm8PtokcuiBUUGtRnJ u4ohHl3tHcFOQLLNqK7cX6Dzop1aNRRAV4rN7m6n3T+MoZTdSwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH2MaDKON96DdXoZolaHS3Ouezb/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zM2M3 OGQ2MC0zNGViLTRmZWQtOGUyNS05MjViOTVhMzBjOGUvOWY3MmMyNzEtZjFmMS0z OGMwLWI5ZDQtYWUyZGVhZGFmODBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzNjNzhkNjAtMzRlYi00ZmVkLThl MjUtOTI1Yjk1YTMwYzhlLzMzYzc4ZDYwLTM0ZWItNGZlZC04ZTI1LTkyNWI5NWEz MGM4ZS5jcmwwHwYDVR0jBBgwFoAUX2UlsGmXIYLm4tORRne6XDPT4EEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zM2M3OGQ2MC0zNGViLTRmZWQtOGUyNS05MjVi OTVhMzBjOGUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5XAej MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG6V/NAbdQg4KcdJfzsoFqAXyKFYxBbUWiXmizKk9aT1ILn7I59V b4N0/g/PZK2KsPNRjVGKZ6gxZe7yMT1VW7Co38RoISMxrY+GilxkH6fSEC73YD0+ TkgNsosm2wWvsthbcJAXoN2nFAVwrWNi0psOC/97yhY/XRFO5aRzrlf9LdsDcl0z sjStIorv9rB2vXOm0c8qrzYCacmnHKNwfCOm1WyWaEALmc03EUH3YXipKPQd95nC mkoB7f+xReRII91X2hMHF4OmOaU0iieW1kzwQyCsPVs4OuaH4nFzIcdZM+AWOAMM VyW5/FnNVsncpcx+andtOWmqW3CiMSPUL0Q= -----END CERTIFICATE-----Generated at Wed May 13 07:03:07 2026 by rpki-client