$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/d54cac7e-a785-3ed8-ad37-4b1f064d8a3d.roa File: d54cac7e-a785-3ed8-ad37-4b1f064d8a3d.roa (raw, json) Hash identifier: y+Gj6S8w7dj6Jacv/Ad2iFfIUMhT+A+GPA0U8M3pwbE= Subject key identifier: FD:4E:02:8D:E8:C2:19:58:5E:29:29:14:22:65:2B:6D:CC:F2:DC:38 Certificate issuer: /CN=33c78d60-34eb-4fed-8e25-925b95a30c8e Certificate serial: 010D0C9F4328584D2B669BF76E104A3AC7A31580 Authority key identifier: 5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/d54cac7e-a785-3ed8-ad37-4b1f064d8a3d.roa Signing time: Sat 14 Mar 2026 21:08:05 +0000 ROA not before: Sat 14 Mar 2026 21:08:05 +0000 ROA not after: Fri 12 Jun 2026 21:08:05 +0000 asID: 33039 IP address blocks: 2602:f95c:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:66:9b:f7:6e:10:4a:3a:c7:a3:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33c78d60-34eb-4fed-8e25-925b95a30c8e Validity Not Before: Mar 14 21:08:05 2026 GMT Not After : Jun 12 21:08:05 2026 GMT Subject: CN=5e705621-0d1d-47bf-8079-4278c8837dfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1e:e1:13:23:83:ec:a1:95:c0:2d:b4:5b:46: 98:56:5c:fe:94:4e:f9:76:42:a3:71:11:b0:30:04: d7:f5:9f:92:c9:c8:82:d6:ea:97:f6:46:24:88:cb: 60:fa:3e:fd:7e:7c:5a:ea:a8:e8:d4:45:09:6b:45: 5f:b5:6a:29:ce:2e:c6:c4:b0:81:1c:b5:f4:cb:ed: 3c:72:5e:c4:df:9a:db:31:c6:02:77:8b:b0:5c:cb: 16:9d:ce:f3:63:5a:7b:06:be:16:5a:45:aa:a6:8d: 71:a6:76:2b:1b:97:52:b1:95:68:01:e8:8a:53:cd: 1f:f8:ec:25:ef:23:dd:35:09:0a:0e:a1:e2:70:4c: de:f2:58:4a:5d:e4:6d:20:c0:f7:fc:59:70:61:92: 26:f2:42:62:e0:9a:6b:50:d0:ab:75:ed:2a:ef:b3: 58:f1:7b:e9:92:45:68:4f:a2:da:03:ec:12:cf:ee: 7a:0d:23:4e:e2:f6:d3:0b:cd:86:53:db:dd:0b:e7: a3:ba:b1:11:43:26:1d:8f:98:29:fd:26:94:3d:e6: 00:29:68:a0:73:67:1a:27:0b:1a:0b:67:84:b4:3d: 01:20:df:c8:72:d8:94:da:99:07:fa:c7:8f:58:d5: a2:39:74:e1:0a:61:19:62:40:56:ed:10:69:6e:9a: 57:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:4E:02:8D:E8:C2:19:58:5E:29:29:14:22:65:2B:6D:CC:F2:DC:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/d54cac7e-a785-3ed8-ad37-4b1f064d8a3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl X509v3 Authority Key Identifier: keyid:5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer sbgp-ipAddrBlock: critical IPv6: 2602:f95c:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:ae:31:08:74:c0:dd:61:5f:4a:f0:2a:f3:18:c7:71:c5:80: 88:5c:67:14:1a:a0:1b:dd:c0:9b:c2:5c:7c:44:48:22:fe:01: 57:33:fd:99:64:37:df:60:30:1c:4f:a2:ec:55:03:61:6f:f2: 52:2e:4f:5e:3f:90:00:5b:f7:d2:a7:99:64:fb:da:89:4a:71: 39:a4:d6:06:f4:1e:70:9f:89:9a:67:93:23:11:77:aa:7c:87: 73:60:83:3e:80:52:e1:31:15:e1:eb:c5:4f:fe:0a:4c:47:d8: b3:5c:41:2d:15:b7:72:d7:6a:63:2f:3a:c1:54:8b:d6:23:eb: d6:3d:51:2d:d7:9e:06:d4:36:b8:87:b8:d6:bc:ae:40:9f:5e: 29:4a:3f:45:16:b1:06:82:8e:28:0b:f2:6f:ca:a9:2a:5c:eb: 89:5b:35:a7:e3:6a:69:89:08:ae:26:88:1e:37:ae:b4:84:37: 75:ed:12:37:1e:5d:35:7b:42:b5:a5:05:ad:66:4b:99:3e:49: 2d:a9:30:87:6a:de:02:f8:e2:65:1f:09:22:30:99:7e:9e:fe: 5b:e1:0b:44:8b:56:b8:25:bd:23:4f:13:5c:82:c8:0f:8f:ec: 8b:f3:47:d8:01:f8:f0:90:4d:e9:53:23:d1:45:b2:7e:6b:10: 07:63:e4:fa -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0rZpv3bhBKOsejFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNjNzhkNjAtMzRlYi00ZmVkLThlMjUtOTI1Yjk1YTMw YzhlMB4XDTI2MDMxNDIxMDgwNVoXDTI2MDYxMjIxMDgwNVowLzEtMCsGA1UEAxMk NWU3MDU2MjEtMGQxZC00N2JmLTgwNzktNDI3OGM4ODM3ZGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlx7hEyOD7KGVwC20W0aYVlz+lE75dkKjcRGw MATX9Z+SyciC1uqX9kYkiMtg+j79fnxa6qjo1EUJa0VftWopzi7GxLCBHLX0y+08 cl7E35rbMcYCd4uwXMsWnc7zY1p7Br4WWkWqpo1xpnYrG5dSsZVoAeiKU80f+Owl 7yPdNQkKDqHicEze8lhKXeRtIMD3/FlwYZIm8kJi4JprUNCrde0q77NY8XvpkkVo T6LaA+wSz+56DSNO4vbTC82GU9vdC+ejurERQyYdj5gp/SaUPeYAKWigc2caJwsa C2eEtD0BIN/IctiU2pkH+sePWNWiOXThCmEZYkBW7RBpbppXvwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP1OAo3owhlYXikpFCJlK23M8tw4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zM2M3 OGQ2MC0zNGViLTRmZWQtOGUyNS05MjViOTVhMzBjOGUvZDU0Y2FjN2UtYTc4NS0z ZWQ4LWFkMzctNGIxZjA2NGQ4YTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzNjNzhkNjAtMzRlYi00ZmVkLThl MjUtOTI1Yjk1YTMwYzhlLzMzYzc4ZDYwLTM0ZWItNGZlZC04ZTI1LTkyNWI5NWEz MGM4ZS5jcmwwHwYDVR0jBBgwFoAUX2UlsGmXIYLm4tORRne6XDPT4EEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zM2M3OGQ2MC0zNGViLTRmZWQtOGUyNS05MjVi OTVhMzBjOGUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5XAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACWuMQh0wN1hX0rwKvMYx3HFgIhcZxQaoBvdwJvCXHxESCL+AVcz /ZlkN99gMBxPouxVA2Fv8lIuT14/kABb99KnmWT72olKcTmk1gb0HnCfiZpnkyMR d6p8h3Nggz6AUuExFeHrxU/+CkxH2LNcQS0Vt3LXamMvOsFUi9Yj69Y9US3XngbU NriHuNa8rkCfXilKP0UWsQaCjigL8m/KqSpc64lbNafjammJCK4miB43rrSEN3Xt EjceXTV7QrWlBa1mS5k+SS2pMIdq3gL44mUfCSIwmX6e/lvhC0SLVrglvSNPE1yC yA+P7IvzR9gB+PCQTelTI9FFsn5rEAdj5Po= -----END CERTIFICATE-----Generated at Thu Mar 26 09:47:54 2026 by rpki-client