$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/33952f95-e900-31ea-860e-de63f1452611.roa File: 33952f95-e900-31ea-860e-de63f1452611.roa (raw, json) Hash identifier: Dy8Fqn67GSGM9vHtxZ5Rhu18oaabjTzwhXLIGMShReA= Subject key identifier: CF:E8:65:C8:8E:4E:3B:4C:BA:E2:D7:17:71:CF:96:24:FB:22:C7:4D Certificate issuer: /CN=a509a7f2-7b5a-4e82-86cc-217eab093131 Certificate serial: 010D0C9F4328584D47C504A2493E926BDF14F180 Authority key identifier: F5:09:E8:F5:08:1E:9C:78:DB:AF:52:A3:00:53:35:94:85:24:8E:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/33952f95-e900-31ea-860e-de63f1452611.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 395173 IP address blocks: 2607:4580::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/a509a7f2-7b5a-4e82-86cc-217eab093131.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/a509a7f2-7b5a-4e82-86cc-217eab093131.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c5:04:a2:49:3e:92:6b:df:14:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a509a7f2-7b5a-4e82-86cc-217eab093131 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=9edfee13-fbc6-429a-bfe1-13e9453f8c53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:cf:aa:63:de:61:90:89:e6:d8:66:25:2a:91: 06:26:31:3f:1a:72:33:ad:ad:07:52:db:23:ff:6a: e0:46:3e:a0:c4:63:d6:fb:2f:64:57:90:30:42:fb: 3f:0f:d0:86:bd:7d:27:d9:88:d1:94:88:22:91:17: 0c:db:0a:5f:a8:fb:72:db:d9:b6:21:4a:14:db:85: 22:c7:0a:69:bf:d4:06:be:f3:9a:53:11:16:27:8e: 91:31:c0:80:0e:46:eb:0e:d4:4b:7a:7f:f8:e3:21: 1b:25:fd:ce:02:b0:12:c1:29:a5:7f:b4:3f:8f:4d: 28:33:d4:be:c6:dd:ca:0a:78:60:87:a4:6b:12:60: 25:19:e1:3e:56:e8:49:76:33:96:9b:43:07:e5:b7: f6:8e:87:80:55:ee:d9:55:b1:e9:8a:06:73:89:c0: 8d:4c:25:bf:bf:ed:35:6f:65:6c:13:72:c6:7e:76: 7e:1e:87:d3:4a:88:f8:e7:79:a3:8b:3a:06:6c:00: 86:44:86:3f:f5:ba:87:91:16:8c:bd:fa:b1:32:34: 9a:97:8b:1c:7e:31:c5:f9:e7:f2:41:60:2a:e3:e4: 4a:59:fe:98:35:88:4b:63:44:f2:6c:69:d3:ff:49: e3:7e:ff:43:4f:2b:7b:62:55:43:89:99:f1:fc:6c: ca:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E8:65:C8:8E:4E:3B:4C:BA:E2:D7:17:71:CF:96:24:FB:22:C7:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/33952f95-e900-31ea-860e-de63f1452611.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/a509a7f2-7b5a-4e82-86cc-217eab093131.crl X509v3 Authority Key Identifier: keyid:F5:09:E8:F5:08:1E:9C:78:DB:AF:52:A3:00:53:35:94:85:24:8E:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131.cer sbgp-ipAddrBlock: critical IPv6: 2607:4580::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:4f:92:55:bb:1f:62:db:2a:67:ea:c2:be:ba:ae:e6:56:c1: cd:4e:e4:46:ac:15:77:43:c2:69:d2:37:2e:93:e2:b0:3f:9b: 8a:13:95:67:dd:51:ee:fe:91:12:1a:b2:76:73:15:ab:f6:e7: f5:dc:f0:06:75:95:62:d7:03:25:4b:3d:1d:8d:63:3a:69:ac: ca:ca:b9:f0:48:1a:83:24:f7:02:9c:cf:4f:aa:51:ab:af:cd: a4:e6:7c:05:b3:b1:72:41:64:5f:d0:6a:fe:4f:2b:4d:5e:d1: 92:40:78:32:ad:1f:19:1c:8f:4e:8e:35:14:e1:25:91:5a:b9: 2c:3d:4c:a6:31:c5:3e:f8:6f:3f:c4:34:a0:27:a6:25:df:be: bd:86:8e:5d:93:82:db:19:11:f1:0a:20:88:8b:0e:3b:89:dd: 09:2a:28:74:9f:2d:b6:eb:55:6d:a6:82:13:9a:f1:7c:35:23: cc:03:b8:af:81:0a:6c:4a:d7:fd:1e:cc:05:4d:cb:e0:f0:6e: 5a:a7:11:ae:9e:17:1f:a3:a5:7f:24:28:6e:56:18:0b:df:5c: 93:73:d8:f0:54:fc:1a:bd:ba:b0:d0:2f:16:f7:66:4a:40:f2: 49:07:95:0c:e5:48:26:25:bd:93:74:3b:88:4d:32:1c:37:2a: 3b:a8:63:2c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1HxQSiST6Sa98U8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUwOWE3ZjItN2I1YS00ZTgyLTg2Y2MtMjE3ZWFiMDkz MTMxMB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk OWVkZmVlMTMtZmJjNi00MjlhLWJmZTEtMTNlOTQ1M2Y4YzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8+qY95hkInm2GYlKpEGJjE/GnIzra0HUtsj /2rgRj6gxGPW+y9kV5AwQvs/D9CGvX0n2YjRlIgikRcM2wpfqPty29m2IUoU24Ui xwppv9QGvvOaUxEWJ46RMcCADkbrDtRLen/44yEbJf3OArASwSmlf7Q/j00oM9S+ xt3KCnhgh6RrEmAlGeE+VuhJdjOWm0MH5bf2joeAVe7ZVbHpigZzicCNTCW/v+01 b2VsE3LGfnZ+HofTSoj453mjizoGbACGRIY/9bqHkRaMvfqxMjSal4scfjHF+efy QWAq4+RKWf6YNYhLY0TybGnT/0njfv9DTyt7YlVDiZnx/GzK2wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFM/oZciOTjtMuuLXF3HPliT7IsdNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hNTA5 YTdmMi03YjVhLTRlODItODZjYy0yMTdlYWIwOTMxMzEvMzM5NTJmOTUtZTkwMC0z MWVhLTg2MGUtZGU2M2YxNDUyNjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYTUwOWE3ZjItN2I1YS00ZTgyLTg2 Y2MtMjE3ZWFiMDkzMTMxL2E1MDlhN2YyLTdiNWEtNGU4Mi04NmNjLTIxN2VhYjA5 MzEzMS5jcmwwHwYDVR0jBBgwFoAU9Qno9QgenHjbr1KjAFM1lIUkjuswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hNTA5YTdmMi03YjVhLTRlODItODZjYy0yMTdl YWIwOTMxMzEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdFgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAkT5JVux9i2ypn6sK+uq7mVsHNTuRGrBV3Q8Jp0jcuk+KwP5uKE5Vn 3VHu/pESGrJ2cxWr9uf13PAGdZVi1wMlSz0djWM6aazKyrnwSBqDJPcCnM9PqlGr r82k5nwFs7FyQWRf0Gr+TytNXtGSQHgyrR8ZHI9OjjUU4SWRWrksPUymMcU++G8/ xDSgJ6Yl3769ho5dk4LbGRHxCiCIiw47id0JKih0ny2261VtpoITmvF8NSPMA7iv gQpsStf9HswFTcvg8G5apxGunhcfo6V/JChuVhgL31yTc9jwVPwavbqw0C8W92ZK QPJJB5UM5UgmJb2TdDuITTIcNyo7qGMs -----END CERTIFICATE-----Generated at Thu Mar 26 05:49:27 2026 by rpki-client