$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/af12206c-6e5f-3fc4-b92d-64245cdab0b0.roa File: af12206c-6e5f-3fc4-b92d-64245cdab0b0.roa (raw, json) Hash identifier: QSAdI3AOEW0+2Z/yT0XzmiRX3eVLyU+pjR15XQmxiU0= Subject key identifier: 1A:FA:2D:95:1C:E2:11:27:05:4A:7C:51:33:93:D1:89:E6:10:8A:1D Certificate issuer: /CN=afa8b068-97b2-4c52-904f-d78c4e46fb8c Certificate serial: 010D0C9F4328584DAAE02C1CAD67573646ABECE0 Authority key identifier: 06:8A:44:11:76:8D:69:EA:42:55:0C:15:AD:78:BB:AD:A7:F1:62:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/af12206c-6e5f-3fc4-b92d-64245cdab0b0.roa Signing time: Wed 29 Apr 2026 13:00:31 +0000 ROA not before: Wed 29 Apr 2026 13:00:31 +0000 ROA not after: Tue 28 Jul 2026 13:00:31 +0000 asID: 985 IP address blocks: 2602:fb4a:a0::/44 maxlen: 48 2602:fb4a:b0::/44 maxlen: 48 2602:fb4a:c0::/44 maxlen: 48 2602:fb4a:d0::/44 maxlen: 48 2602:fb4a:e0::/44 maxlen: 48 2602:fb4a:f0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/afa8b068-97b2-4c52-904f-d78c4e46fb8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/afa8b068-97b2-4c52-904f-d78c4e46fb8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:aa:e0:2c:1c:ad:67:57:36:46:ab:ec:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afa8b068-97b2-4c52-904f-d78c4e46fb8c Validity Not Before: Apr 29 13:00:31 2026 GMT Not After : Jul 28 13:00:31 2026 GMT Subject: CN=48b2fc57-9af0-4ea4-a27a-8ce55a14de10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:3d:fe:75:24:0e:97:66:33:22:b8:2d:85:20: ea:f2:d3:ae:b4:ad:c9:b6:84:1f:7a:78:8e:d9:6f: 63:a4:a6:d3:89:7e:f8:3f:39:57:cb:26:57:6c:f7: 57:07:ed:15:aa:1e:63:8e:25:47:77:1b:5e:58:c7: d0:bb:76:65:b2:99:8c:ae:51:10:9f:11:c1:cf:d6: 15:9c:93:60:b1:d6:e7:2e:64:2f:be:da:ee:4d:41: f7:05:3e:ca:29:2c:74:f7:ad:25:85:6f:97:cf:37: a7:23:cb:db:db:54:0e:c7:91:a2:75:49:1f:d7:87: f6:73:b3:69:c3:f0:4b:bf:ab:59:9e:fe:97:12:8d: 29:5a:7e:26:a3:e3:19:d1:5d:3b:48:af:45:98:2a: dd:70:54:f5:60:ac:00:2e:5f:8f:96:c4:ba:3d:1b: 7f:83:3f:df:e5:e0:62:e0:cd:d3:9a:c9:5e:ae:43: a2:63:8b:cf:a4:8f:e6:6d:10:a6:48:0f:53:e5:a1: 9f:70:33:69:d9:13:2f:80:a0:f5:f9:8b:4a:6a:a3: 2d:2f:d4:69:be:68:cc:33:93:71:ae:07:cb:24:6b: 7f:d2:ad:e7:61:13:8e:ca:2a:4b:c2:23:27:d5:28: 91:36:fd:38:3b:a1:99:94:21:51:13:64:83:89:70: 99:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:FA:2D:95:1C:E2:11:27:05:4A:7C:51:33:93:D1:89:E6:10:8A:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/af12206c-6e5f-3fc4-b92d-64245cdab0b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/afa8b068-97b2-4c52-904f-d78c4e46fb8c.crl X509v3 Authority Key Identifier: keyid:06:8A:44:11:76:8D:69:EA:42:55:0C:15:AD:78:BB:AD:A7:F1:62:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c.cer sbgp-ipAddrBlock: critical IPv6: 2602:fb4a:a0::-2602:fb4a:ff:ffff:ffff:ffff:ffff:ffff X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:68:97:62:18:b4:4c:82:2a:10:02:37:15:75:73:17:8b:0b: 3a:6b:58:a1:bc:79:71:b2:f0:ea:17:d9:92:92:7d:67:b5:8f: 72:8e:26:e4:df:d6:26:8f:12:76:d1:e4:5a:e4:17:72:c9:4a: 2b:0e:1e:3f:0e:0d:6b:2d:4f:86:91:1c:6b:e0:21:45:44:23: 6c:e7:c3:52:33:6c:c1:09:83:2b:0d:59:90:a0:2c:47:a5:c2: 42:f0:04:24:34:6f:4c:d4:f7:f2:ed:c7:f5:eb:b4:3d:1d:c2: c8:e3:80:2a:b2:a0:3f:01:d3:0b:6c:0a:1c:ab:55:5a:87:08: f9:d5:2a:06:3e:68:f1:6a:8f:54:ed:60:7e:d7:de:c7:a7:2c: 9d:28:68:f5:b1:0e:11:ac:6f:c4:ed:6a:5c:5a:85:fd:cd:7c: d1:de:84:44:f2:4c:73:07:ee:e9:dd:e2:69:a8:b8:a1:11:ef: ad:05:fe:6b:19:f7:1d:ba:ce:53:f6:88:be:05:59:3b:07:a9: c4:a0:39:97:60:c6:ab:3a:0e:f9:3e:1a:66:80:c7:61:6e:23: c6:85:4f:30:7a:63:5d:23:a1:f7:8d:68:a0:8d:63:50:a5:5d: db:c9:32:c4:9e:f0:4d:38:0d:86:76:cb:81:58:70:6c:35:ba: 4e:1a:c9:5e -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE2q4CwcrWdXNkar7OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZhOGIwNjgtOTdiMi00YzUyLTkwNGYtZDc4YzRlNDZm YjhjMB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk NDhiMmZjNTctOWFmMC00ZWE0LWEyN2EtOGNlNTVhMTRkZTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjD3+dSQOl2YzIrgthSDq8tOutK3JtoQfeniO 2W9jpKbTiX74PzlXyyZXbPdXB+0Vqh5jjiVHdxteWMfQu3ZlspmMrlEQnxHBz9YV nJNgsdbnLmQvvtruTUH3BT7KKSx0960lhW+XzzenI8vb21QOx5GidUkf14f2c7Np w/BLv6tZnv6XEo0pWn4mo+MZ0V07SK9FmCrdcFT1YKwALl+PlsS6PRt/gz/f5eBi 4M3TmslerkOiY4vPpI/mbRCmSA9T5aGfcDNp2RMvgKD1+YtKaqMtL9RpvmjMM5Nx rgfLJGt/0q3nYROOyipLwiMn1SiRNv04O6GZlCFRE2SDiXCZ9QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBr6LZUc4hEnBUp8UTOT0YnmEIodMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hZmE4 YjA2OC05N2IyLTRjNTItOTA0Zi1kNzhjNGU0NmZiOGMvYWYxMjIwNmMtNmU1Zi0z ZmM0LWI5MmQtNjQyNDVjZGFiMGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWZhOGIwNjgtOTdiMi00YzUyLTkw NGYtZDc4YzRlNDZmYjhjL2FmYThiMDY4LTk3YjItNGM1Mi05MDRmLWQ3OGM0ZTQ2 ZmI4Yy5jcmwwHwYDVR0jBBgwFoAUBopEEXaNaepCVQwVrXi7rafxYlowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hZmE4YjA2OC05N2IyLTRjNTItOTA0Zi1kNzhj NGU0NmZiOGMuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATMBEDBwUmAvtK AKADBgAmAvtKADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQATaJdiGLRMgioQAjcVdXMXiws6a1ihvHlxsvDq F9mSkn1ntY9yjibk39YmjxJ20eRa5BdyyUorDh4/Dg1rLU+GkRxr4CFFRCNs58NS M2zBCYMrDVmQoCxHpcJC8AQkNG9M1Pfy7cf167Q9HcLI44AqsqA/AdMLbAocq1Va hwj51SoGPmjxao9U7WB+197HpyydKGj1sQ4RrG/E7WpcWoX9zXzR3oRE8kxzB+7p 3eJpqLihEe+tBf5rGfcdus5T9oi+BVk7B6nEoDmXYMarOg75PhpmgMdhbiPGhU8w emNdI6H3jWigjWNQpV3byTLEnvBNOA2GdsuBWHBsNbpOGsle -----END CERTIFICATE-----Generated at Wed May 13 12:20:13 2026 by rpki-client