$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/33c23409-f641-3c4d-8222-54698a7c377e.roa File: 33c23409-f641-3c4d-8222-54698a7c377e.roa (raw, json) Hash identifier: DKH1DHjmWbQyRM+OThkAOeR+KVd/oDNeuMtXsx6UndM= Subject key identifier: 63:6C:FC:D8:AF:F4:6B:E9:9A:E8:B0:49:20:C4:63:C7:2B:D8:DF:4A Certificate issuer: /CN=6459964e-cb44-4be5-88da-03fac554e95c Certificate serial: 010D0C9F4328584D0D426A04022D56E3C0C4D5C0 Authority key identifier: 2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/33c23409-f641-3c4d-8222-54698a7c377e.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 32771 IP address blocks: 2620:111:8000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:6a:04:02:2d:56:e3:c0:c4:d5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6459964e-cb44-4be5-88da-03fac554e95c Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=9aa5a78b-e1cf-4326-bb5b-e78c70d93bc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e2:ab:83:7c:46:f5:cf:f3:fa:f7:e2:f2:82: 66:b7:d7:47:a9:a7:15:68:16:d6:c1:47:f5:cf:11: 2e:ca:d2:ed:14:aa:ca:7d:6e:f3:17:dd:37:83:19: 39:3b:99:a0:a0:c3:ed:c2:4d:d0:b4:06:d3:be:73: 51:fd:bb:e5:13:1a:a0:9d:b8:67:7f:8a:04:72:c7: 52:f9:29:9c:b6:6d:01:00:21:33:38:21:5a:88:bc: 30:a4:43:f6:fb:73:9a:29:88:31:53:50:b2:4e:dc: 5f:5a:03:05:dc:e0:80:b8:ff:c2:07:75:4a:4a:60: 71:6e:a6:91:bb:19:3e:eb:e9:cf:a3:53:36:2b:23: 54:89:9b:0b:73:d8:c4:4a:ab:9b:72:12:70:16:74: 77:6c:27:57:d9:f6:33:1c:6e:2f:ed:03:ab:a2:23: 8b:fa:09:c9:ea:09:77:73:d8:66:7d:39:86:8e:cb: 1a:0d:53:ef:1d:f9:50:b1:78:01:70:fc:32:86:ae: 35:24:a1:72:68:9a:0a:cf:9f:b8:19:80:a3:6b:aa: b3:76:12:c5:ca:f9:19:65:18:42:21:3b:70:c7:64: e3:d5:fe:44:b4:4d:d4:ae:be:31:8c:55:a6:fa:92: 93:af:55:b3:66:68:62:9a:d4:b1:03:71:55:ff:e2: f8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:6C:FC:D8:AF:F4:6B:E9:9A:E8:B0:49:20:C4:63:C7:2B:D8:DF:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/33c23409-f641-3c4d-8222-54698a7c377e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl X509v3 Authority Key Identifier: keyid:2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer sbgp-ipAddrBlock: critical IPv6: 2620:111:8000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:b4:c0:4d:9b:6c:8c:2b:fe:ae:a2:bb:de:fa:b9:f6:2d:c7: c1:8f:e4:87:cb:1a:c7:ce:7a:fb:25:b8:c2:1b:c6:a6:ac:c6: 1f:ac:fb:13:00:f5:fc:84:84:9b:bf:6e:6c:18:df:6d:ea:45: ad:63:e2:fd:4c:f9:0b:71:a3:9f:85:71:3c:9d:81:d8:4d:87: af:13:10:93:21:2e:ae:6f:ea:af:1d:ae:6d:b7:f6:a0:e8:cb: d8:8c:a8:ec:92:ba:c7:bb:4f:92:c1:e1:e1:ab:f1:b8:5d:45: 10:6d:7e:5f:fc:fb:1f:e0:15:a9:27:54:b6:99:9d:55:8b:f8: 97:93:e6:6b:07:76:80:fc:e8:11:7c:d9:e2:1a:1b:b0:3f:94: 29:97:6d:cd:fb:89:48:24:26:81:cc:81:37:37:36:63:89:fa: 48:72:ad:a0:1f:ec:cb:fc:21:ad:87:2c:b6:a3:0b:5b:1d:72: 1e:ac:45:0f:03:5c:7c:a3:4d:b6:79:a3:ca:83:7e:35:2c:98: 4d:6e:3a:08:a8:57:6f:1b:c7:ec:62:fc:ba:5b:41:47:e3:d1: 5b:11:85:8f:8b:39:8f:1f:a7:7e:a1:38:7b:59:20:8a:96:ea: 80:a8:cd:6d:ed:1e:75:40:e1:a4:7e:36:e3:51:bb:ff:94:bc: e7:cb:79:32 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0NQmoEAi1W48DE1cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQ1OTk2NGUtY2I0NC00YmU1LTg4ZGEtMDNmYWM1NTRl OTVjMB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk OWFhNWE3OGItZTFjZi00MzI2LWJiNWItZTc4YzcwZDkzYmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOKrg3xG9c/z+vfi8oJmt9dHqacVaBbWwUf1 zxEuytLtFKrKfW7zF903gxk5O5mgoMPtwk3QtAbTvnNR/bvlExqgnbhnf4oEcsdS +Smctm0BACEzOCFaiLwwpEP2+3OaKYgxU1CyTtxfWgMF3OCAuP/CB3VKSmBxbqaR uxk+6+nPo1M2KyNUiZsLc9jESqubchJwFnR3bCdX2fYzHG4v7QOroiOL+gnJ6gl3 c9hmfTmGjssaDVPvHflQsXgBcPwyhq41JKFyaJoKz5+4GYCja6qzdhLFyvkZZRhC ITtwx2Tj1f5EtE3Urr4xjFWm+pKTr1WzZmhimtSxA3FV/+L4AwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGNs/Niv9GvpmuiwSSDEY8cr2N9KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5 OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2ZhYzU1NGU5NWMvMzNjMjM0MDktZjY0MS0z YzRkLTgyMjItNTQ2OThhN2MzNzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjQ1OTk2NGUtY2I0NC00YmU1LTg4 ZGEtMDNmYWM1NTRlOTVjLzY0NTk5NjRlLWNiNDQtNGJlNS04OGRhLTAzZmFjNTU0 ZTk1Yy5jcmwwHwYDVR0jBBgwFoAUKt7spHKs8deFfsVG4i81dJj6CmIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2Zh YzU1NGU5NWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABEYAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEC0wE2bbIwr/q6iu976ufYtx8GP5IfLGsfOevsluMIbxqasxh+s +xMA9fyEhJu/bmwY323qRa1j4v1M+Qtxo5+FcTydgdhNh68TEJMhLq5v6q8drm23 9qDoy9iMqOySuse7T5LB4eGr8bhdRRBtfl/8+x/gFaknVLaZnVWL+JeT5msHdoD8 6BF82eIaG7A/lCmXbc37iUgkJoHMgTc3NmOJ+khyraAf7Mv8Ia2HLLajC1sdch6s RQ8DXHyjTbZ5o8qDfjUsmE1uOgioV28bx+xi/LpbQUfj0VsRhY+LOY8fp36hOHtZ IIqW6oCozW3tHnVA4aR+NuNRu/+UvOfLeTI= -----END CERTIFICATE-----Generated at Thu Mar 26 15:47:35 2026 by rpki-client