$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/76d101bd-4a94-3580-b17f-bb5950fdbf72.roa File: 76d101bd-4a94-3580-b17f-bb5950fdbf72.roa (raw, json) Hash identifier: DpDm+yCMaqAZdBRz6lQ+wwDk9HmjaJJ4njvyH4YU0wA= Subject key identifier: A0:F9:E4:31:AA:9C:65:ED:7B:09:3F:EB:56:2E:BB:D9:94:8A:E4:A8 Certificate issuer: /CN=33d3c304-619d-4e6d-aed5-9e25165cbc73 Certificate serial: 010D0C9F4328584F42781F161F70C746BF762740 Authority key identifier: 8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/76d101bd-4a94-3580-b17f-bb5950fdbf72.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 401416 IP address blocks: 2607:dd40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:1f:16:1f:70:c7:46:bf:76:27:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33d3c304-619d-4e6d-aed5-9e25165cbc73 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=f87b8bc3-e5a3-4ebc-966b-74cba843e279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7c:76:b1:99:5e:f1:5f:96:f8:68:77:10:e2: 17:db:3f:8c:43:d5:89:92:20:de:28:a1:7a:3f:c2: b0:76:45:ba:b3:39:a5:81:b8:5a:79:13:86:6a:8e: 23:2e:94:32:b2:08:c2:ee:7b:e6:f8:7f:df:41:18: 18:ff:03:2d:54:61:5a:22:5d:3f:59:b6:19:1a:b5: b1:fa:0c:e1:29:4c:f9:03:b2:11:72:c7:e6:1d:e6: 62:9b:eb:ad:6f:5e:47:58:f0:21:ef:56:d6:60:af: 2d:1d:bb:12:21:44:85:5c:52:77:9f:c4:48:8f:d9: ab:15:e1:ca:70:65:2d:6f:66:07:6d:83:2e:c4:46: 02:c4:dd:dd:f6:a0:29:0b:6f:13:59:56:27:6d:43: 03:c2:94:f2:02:cd:b6:a4:f4:23:6a:16:ce:c8:aa: d9:63:c5:e7:1a:1d:7d:3f:aa:d6:e6:38:11:58:9a: dc:2b:93:23:14:e5:b5:bb:5f:fd:e6:32:6b:89:fc: 65:b3:19:56:50:53:4f:02:2b:4f:b4:0d:ce:b4:1b: 65:22:04:41:03:64:57:5a:3f:32:e6:c0:13:4d:0d: 23:fb:36:3b:04:b9:fc:e4:ad:74:fd:e8:bf:90:82: bb:f1:e1:ef:5f:05:d5:b7:9d:c7:93:55:34:bb:da: 98:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F9:E4:31:AA:9C:65:ED:7B:09:3F:EB:56:2E:BB:D9:94:8A:E4:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/76d101bd-4a94-3580-b17f-bb5950fdbf72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl X509v3 Authority Key Identifier: keyid:8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer sbgp-ipAddrBlock: critical IPv6: 2607:dd40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:16:73:f5:73:56:15:d5:4e:0b:2c:bf:26:e7:63:8f:e4:c9: e9:05:1b:d1:bb:77:e0:6c:2d:d8:38:aa:91:1c:0a:28:99:aa: 22:20:02:3a:1e:f7:78:3e:e4:b3:8c:cb:2b:e8:9b:58:a7:16: 79:64:2c:c6:bc:a3:a7:ae:f9:24:06:a7:9d:60:36:c4:c0:d5: e9:ac:63:f8:ea:d8:1e:23:d2:6a:0f:69:13:6a:d2:00:16:50: ee:1e:7f:6b:0f:b5:95:e0:12:ba:a6:0e:9f:4d:bf:4f:36:e0: b2:74:a0:99:b7:4b:85:8a:73:e0:8f:ab:99:a9:b6:32:c7:83: fe:1a:a3:99:18:f5:56:40:cc:2e:27:da:60:4b:d1:87:93:47: 0e:30:3c:a0:5f:f0:69:87:ff:28:7e:16:50:88:6a:d1:0d:98: 6a:cb:0e:5e:8a:a2:87:1e:46:8d:90:b3:6a:72:0e:35:36:6e: fa:f8:5c:1e:0d:f9:68:6c:d2:04:92:86:73:0b:ec:ed:55:de: 02:a0:aa:83:7a:2f:53:ae:49:26:11:53:fb:33:bf:95:da:ba: cc:aa:6e:11:a1:a5:2f:02:6a:81:8e:ce:6c:b3:39:c5:c3:48: 80:ff:93:ae:19:90:4d:f0:e8:66:04:53:dc:f8:4c:bd:d3:91: 6a:cd:a6:0f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9CeB8WH3DHRr92J0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNkM2MzMDQtNjE5ZC00ZTZkLWFlZDUtOWUyNTE2NWNi YzczMB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk Zjg3YjhiYzMtZTVhMy00ZWJjLTk2NmItNzRjYmE4NDNlMjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Hx2sZle8V+W+Gh3EOIX2z+MQ9WJkiDeKKF6 P8KwdkW6szmlgbhaeROGao4jLpQysgjC7nvm+H/fQRgY/wMtVGFaIl0/WbYZGrWx +gzhKUz5A7IRcsfmHeZim+utb15HWPAh71bWYK8tHbsSIUSFXFJ3n8RIj9mrFeHK cGUtb2YHbYMuxEYCxN3d9qApC28TWVYnbUMDwpTyAs22pPQjahbOyKrZY8XnGh19 P6rW5jgRWJrcK5MjFOW1u1/95jJrifxlsxlWUFNPAitPtA3OtBtlIgRBA2RXWj8y 5sATTQ0j+zY7BLn85K10/ei/kIK78eHvXwXVt53Hk1U0u9qY1QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKD55DGqnGXtewk/61Yuu9mUiuSoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zM2Qz YzMwNC02MTlkLTRlNmQtYWVkNS05ZTI1MTY1Y2JjNzMvNzZkMTAxYmQtNGE5NC0z NTgwLWIxN2YtYmI1OTUwZmRiZjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzNkM2MzMDQtNjE5ZC00ZTZkLWFl ZDUtOWUyNTE2NWNiYzczLzMzZDNjMzA0LTYxOWQtNGU2ZC1hZWQ1LTllMjUxNjVj YmM3My5jcmwwHwYDVR0jBBgwFoAUjkoNtMfpM0cLNL0AOGQeSnjs4mowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zM2QzYzMwNC02MTlkLTRlNmQtYWVkNS05ZTI1 MTY1Y2JjNzMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfdQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA+FnP1c1YV1U4LLL8m52OP5MnpBRvRu3fgbC3YOKqRHAoomaoiIAI6 Hvd4PuSzjMsr6JtYpxZ5ZCzGvKOnrvkkBqedYDbEwNXprGP46tgeI9JqD2kTatIA FlDuHn9rD7WV4BK6pg6fTb9PNuCydKCZt0uFinPgj6uZqbYyx4P+GqOZGPVWQMwu J9pgS9GHk0cOMDygX/Bph/8ofhZQiGrRDZhqyw5eiqKHHkaNkLNqcg41Nm76+Fwe DflobNIEkoZzC+ztVd4CoKqDei9TrkkmEVP7M7+V2rrMqm4RoaUvAmqBjs5ssznF w0iA/5OuGZBN8OhmBFPc+Ey905FqzaYP -----END CERTIFICATE-----Generated at Sun Oct 4 06:43:19 2026 by rpki-client