$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/af8aa6a6-16d0-3ecf-8262-5cc2874d1c3f.roa File: af8aa6a6-16d0-3ecf-8262-5cc2874d1c3f.roa (raw, json) Hash identifier: TNb6o9fb2XtTgcUUVrSzzt7s3mFRHocJXXODnaBPgo8= Subject key identifier: 86:0C:9E:C2:0E:23:E2:E1:9E:5B:56:32:9E:D6:48:1D:FF:DB:3B:8F Certificate issuer: /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Certificate serial: 010D0C9F4328584DA6B02E66162405A1FFD8E5C0 Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/af8aa6a6-16d0-3ecf-8262-5cc2874d1c3f.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 16509 IP address blocks: 2620:147:c33::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:2e:66:16:24:05:a1:ff:d8:e5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=156eee69-b5ab-4f46-8d64-27dcfcf5f399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:81:fd:c9:ac:c1:68:e1:85:e2:2c:3f:32:90: 7f:b8:1c:63:28:f5:cf:43:82:8f:be:a6:84:d5:87: fc:c0:26:5d:42:46:fd:98:43:84:3d:50:d8:fc:81: c3:85:62:9b:3b:35:1d:43:3c:83:37:2c:d8:19:60: f6:fb:eb:a1:ef:83:5f:f1:95:21:95:88:53:a7:93: 42:07:48:2e:3c:4a:6a:37:ea:1d:2c:9d:b4:54:fd: 20:9a:b2:fa:78:ce:dc:49:d7:9e:8f:4c:c8:14:ac: 74:97:b9:17:a5:68:1d:cb:14:fe:9d:a2:dc:d5:6c: d1:32:93:73:2b:10:08:13:9e:9c:8d:b8:e2:eb:ea: 2d:67:0c:96:0e:5a:16:cc:1d:c8:3f:b3:e8:07:ab: 19:33:2e:0f:9e:73:65:36:94:35:98:39:78:25:35: e5:88:0b:89:83:11:69:d6:2f:07:83:08:08:2b:e6: 5a:5e:bb:ec:19:55:95:86:e5:fe:f3:07:d0:6c:35: 1c:1b:41:11:8f:2c:6a:cd:b9:0a:61:57:05:66:06: 7a:eb:da:3d:56:ad:36:ef:a4:e5:5a:ad:22:48:a8: 44:39:76:04:95:51:4d:67:61:d4:e4:76:1f:7a:3c: e6:93:7e:be:e0:22:3a:a3:7f:b1:ab:23:9d:bd:3e: 7e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:0C:9E:C2:0E:23:E2:E1:9E:5B:56:32:9E:D6:48:1D:FF:DB:3B:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/af8aa6a6-16d0-3ecf-8262-5cc2874d1c3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl X509v3 Authority Key Identifier: keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer sbgp-ipAddrBlock: critical IPv6: 2620:147:c33::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:ff:01:ac:70:ca:9c:dd:59:05:50:27:fd:8e:c3:7c:ff:dd: 93:0d:f3:05:5d:17:ee:cb:79:75:43:1e:28:19:7d:ad:a6:d5: 15:59:51:26:11:f9:1b:ae:62:0c:08:e3:54:64:c2:3e:5f:3d: ad:b1:d9:9a:32:96:f7:b0:7f:b3:1e:4e:43:7f:a6:e1:2b:c3: ce:d1:37:00:74:73:3c:6c:2d:6e:62:a4:a7:8a:f3:97:32:30: 53:3f:9f:ce:3a:1f:35:b2:17:e2:90:81:38:a6:8f:d7:44:76: b3:0d:90:33:1f:cc:15:0e:97:bc:c0:68:65:3d:0e:14:16:6e: 55:c8:59:69:6d:49:77:93:c7:0c:0f:d2:c2:dd:96:ff:e1:b9: 30:00:ae:75:aa:15:17:ca:68:f0:2f:4d:8e:70:a4:7d:62:82: 20:9c:a9:8e:d4:09:c1:8a:32:0a:1f:c0:3d:a2:7b:f1:2a:cf: cf:f6:62:9e:83:93:81:d1:ea:b7:10:30:8a:db:79:ea:42:88: 01:30:b8:77:be:9a:8f:16:74:5e:a5:0b:2f:4b:83:97:51:00: 48:f6:2f:e0:fa:73:57:32:92:6f:54:b2:a9:68:a0:79:40:4a: e6:ee:18:9d:be:53:61:c7:ae:11:83:0e:60:0f:a1:74:97:f8: f3:82:ea:80 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2msC5mFiQFof/Y5cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTkwNjc0OGQtNTgyMy00Y2QzLTlhMTEtZjNkYzY5YTNl NzUxMB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk MTU2ZWVlNjktYjVhYi00ZjQ2LThkNjQtMjdkY2ZjZjVmMzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooH9yazBaOGF4iw/MpB/uBxjKPXPQ4KPvqaE 1Yf8wCZdQkb9mEOEPVDY/IHDhWKbOzUdQzyDNyzYGWD2++uh74Nf8ZUhlYhTp5NC B0guPEpqN+odLJ20VP0gmrL6eM7cSdeej0zIFKx0l7kXpWgdyxT+naLc1WzRMpNz KxAIE56cjbji6+otZwyWDloWzB3IP7PoB6sZMy4PnnNlNpQ1mDl4JTXliAuJgxFp 1i8HgwgIK+ZaXrvsGVWVhuX+8wfQbDUcG0ERjyxqzbkKYVcFZgZ669o9Vq0276Tl Wq0iSKhEOXYElVFNZ2HU5HYfejzmk36+4CI6o3+xqyOdvT5+EwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIYMnsIOI+LhnltWMp7WSB3/2zuPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2 NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2RjNjlhM2U3NTEvYWY4YWE2YTYtMTZkMC0z ZWNmLTgyNjItNWNjMjg3NGQxYzNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTkwNjc0OGQtNTgyMy00Y2QzLTlh MTEtZjNkYzY5YTNlNzUxLzk5MDY3NDhkLTU4MjMtNGNkMy05YTExLWYzZGM2OWEz ZTc1MS5jcmwwHwYDVR0jBBgwFoAUpzET2qjCbdNAR7bDK7p4QzEvAYAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2Rj NjlhM2U3NTEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABRwwz MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIz/AaxwypzdWQVQJ/2Ow3z/3ZMN8wVdF+7LeXVDHigZfa2m1RVZ USYR+RuuYgwI41Rkwj5fPa2x2Zoylvewf7MeTkN/puErw87RNwB0czxsLW5ipKeK 85cyMFM/n846HzWyF+KQgTimj9dEdrMNkDMfzBUOl7zAaGU9DhQWblXIWWltSXeT xwwP0sLdlv/huTAArnWqFRfKaPAvTY5wpH1igiCcqY7UCcGKMgofwD2ie/Eqz8/2 Yp6Dk4HR6rcQMIrbeepCiAEwuHe+mo8WdF6lCy9Lg5dRAEj2L+D6c1cykm9Usqlo oHlASubuGJ2+U2HHrhGDDmAPoXSX+POC6oA= -----END CERTIFICATE-----Generated at Wed May 13 16:45:11 2026 by rpki-client