$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/b9fe9136-6711-31b6-a248-652d58c6a9e1.roa File: b9fe9136-6711-31b6-a248-652d58c6a9e1.roa (raw, json) Hash identifier: 49G6BQsCoZdoEGVy1fIu6eIiES1X6OGJOZpKIpPt/B4= Subject key identifier: D6:03:19:42:9B:6A:77:73:A3:15:16:AE:2E:13:51:70:3E:98:BB:CE Certificate issuer: /CN=33c78d60-34eb-4fed-8e25-925b95a30c8e Certificate serial: 010D0C9F4328584D3F64F5427E0EFC44ADF97200 Authority key identifier: 5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/b9fe9136-6711-31b6-a248-652d58c6a9e1.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 33039 IP address blocks: 2602:f95c:88::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:f5:42:7e:0e:fc:44:ad:f9:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33c78d60-34eb-4fed-8e25-925b95a30c8e Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=c909cc0a-52b3-4162-8378-550ef9ccf5a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:48:17:4e:82:a5:d4:0a:be:24:d5:95:7f:f0: 7b:c3:78:82:3b:c3:2c:6d:38:18:e2:32:86:79:1f: 75:e1:6d:6e:e0:5f:55:88:6c:1f:2a:c1:e5:52:30: f5:46:19:f1:24:11:34:f5:b5:16:cc:b1:8d:d7:5e: bc:7c:51:41:df:46:75:98:ea:51:72:49:27:22:5a: 9a:7d:56:a8:87:e7:68:35:69:9d:7f:15:0b:82:3c: 27:a6:b7:d4:61:fe:70:3b:2c:2e:81:3c:3f:e7:cf: 96:ab:d4:e8:98:25:91:c3:e1:08:7f:96:75:09:50: 8d:b8:f5:9e:c6:1e:5c:14:7d:50:fd:cf:27:ce:9e: 8b:fb:2f:b4:b1:b4:50:80:3b:3c:cb:24:1b:d5:11: 55:1d:e2:3a:1e:f3:a9:48:ed:d6:aa:66:9f:43:83: 15:a0:a8:7b:8f:f2:a6:b8:f3:72:ee:9e:bc:bc:84: c8:02:2a:31:3c:2b:ad:64:ca:e7:43:da:a8:d7:84: 19:27:99:1d:62:30:12:97:3a:4e:8c:61:6c:f2:eb: fd:80:00:0a:bd:7b:f3:8d:a8:e5:59:91:2e:51:cc: f1:97:d5:cb:fe:e7:f5:78:56:5f:92:80:25:e3:2a: 52:34:4c:80:0a:1b:a5:bd:08:56:71:e8:31:ab:b4: 0b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:03:19:42:9B:6A:77:73:A3:15:16:AE:2E:13:51:70:3E:98:BB:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/b9fe9136-6711-31b6-a248-652d58c6a9e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl X509v3 Authority Key Identifier: keyid:5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer sbgp-ipAddrBlock: critical IPv6: 2602:f95c:88::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:e2:9c:42:cc:ab:6e:e9:1b:b9:88:e2:a1:d0:2e:0c:40:18: c2:e2:ba:67:9b:c9:3d:ad:1a:73:87:cb:cd:bd:a4:e0:6a:42: b6:10:6b:65:34:c8:0d:4a:ab:aa:fb:84:68:ef:9e:3d:0c:db: a0:36:d9:2b:43:af:bf:e9:d5:89:3d:df:b5:6d:c0:29:ed:d2: 97:32:f3:f6:2e:5e:9e:e6:18:5b:a6:dc:a9:d7:d1:7a:df:e2: 10:9d:7c:99:e5:5f:10:96:87:6a:45:ce:77:11:b5:a9:a5:89: 4c:c4:d7:12:28:0e:dc:3d:f6:fb:27:68:b7:c5:dd:37:b8:3c: be:5d:93:7c:11:9a:03:f4:64:7c:7a:9b:22:e3:84:e5:ca:f2: 48:7b:84:d8:f4:3d:80:91:84:11:6c:c1:2d:eb:a4:c9:34:38: 41:06:3a:42:5c:3b:95:bd:15:36:bc:b3:91:72:9d:93:b1:d3: d5:a4:96:97:6c:e6:b6:ec:6b:87:e7:a8:57:e8:fa:78:aa:27: c5:ed:59:9e:08:c5:4e:d6:4c:5a:ed:30:57:48:cd:97:91:bd: 97:b9:b0:6c:93:09:c5:b8:43:a3:d9:b9:c8:b5:2c:31:3d:ae: d6:12:a5:7b:2e:88:98:35:8a:20:02:ce:d8:91:a1:11:c7:5a: c1:02:0f:d5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0/ZPVCfg78RK35cgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNjNzhkNjAtMzRlYi00ZmVkLThlMjUtOTI1Yjk1YTMw YzhlMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk YzkwOWNjMGEtNTJiMy00MTYyLTgzNzgtNTUwZWY5Y2NmNWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEgXToKl1Aq+JNWVf/B7w3iCO8MsbTgY4jKG eR914W1u4F9ViGwfKsHlUjD1RhnxJBE09bUWzLGN1168fFFB30Z1mOpRckknIlqa fVaoh+doNWmdfxULgjwnprfUYf5wOywugTw/58+Wq9TomCWRw+EIf5Z1CVCNuPWe xh5cFH1Q/c8nzp6L+y+0sbRQgDs8yyQb1RFVHeI6HvOpSO3WqmafQ4MVoKh7j/Km uPNy7p68vITIAioxPCutZMrnQ9qo14QZJ5kdYjASlzpOjGFs8uv9gAAKvXvzjajl WZEuUczxl9XL/uf1eFZfkoAl4ypSNEyAChulvQhWcegxq7QLCwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNYDGUKbandzoxUWri4TUXA+mLvOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zM2M3 OGQ2MC0zNGViLTRmZWQtOGUyNS05MjViOTVhMzBjOGUvYjlmZTkxMzYtNjcxMS0z MWI2LWEyNDgtNjUyZDU4YzZhOWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzNjNzhkNjAtMzRlYi00ZmVkLThl MjUtOTI1Yjk1YTMwYzhlLzMzYzc4ZDYwLTM0ZWItNGZlZC04ZTI1LTkyNWI5NWEz MGM4ZS5jcmwwHwYDVR0jBBgwFoAUX2UlsGmXIYLm4tORRne6XDPT4EEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zM2M3OGQ2MC0zNGViLTRmZWQtOGUyNS05MjVi OTVhMzBjOGUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5XACI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFLinELMq27pG7mI4qHQLgxAGMLiumebyT2tGnOHy829pOBqQrYQ a2U0yA1Kq6r7hGjvnj0M26A22StDr7/p1Yk937VtwCnt0pcy8/YuXp7mGFum3KnX 0Xrf4hCdfJnlXxCWh2pFzncRtamliUzE1xIoDtw99vsnaLfF3Te4PL5dk3wRmgP0 ZHx6myLjhOXK8kh7hNj0PYCRhBFswS3rpMk0OEEGOkJcO5W9FTa8s5FynZOx09Wk lpds5rbsa4fnqFfo+niqJ8XtWZ4IxU7WTFrtMFdIzZeRvZe5sGyTCcW4Q6PZuci1 LDE9rtYSpXsuiJg1iiACztiRoRHHWsECD9U= -----END CERTIFICATE-----Generated at Thu Mar 26 14:17:58 2026 by rpki-client