$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afa70384-20ce-4e0a-b42a-581d05c70079/9ea94d1b-f116-398c-bf4a-e38b16ace96f.roa File: 9ea94d1b-f116-398c-bf4a-e38b16ace96f.roa (raw, json) Hash identifier: 8wBWzPhxqNICoewV8qCsw+XmqCk2F3wLC96KJWbrnS0= Subject key identifier: A2:85:1E:DA:96:C3:4A:F7:0E:AD:0B:BF:5E:09:F8:1D:BE:6F:90:AC Certificate issuer: /CN=afa70384-20ce-4e0a-b42a-581d05c70079 Certificate serial: 010D0C9F4328584DB12DC76A8D38FE559B4FCA00 Authority key identifier: 6A:3F:DF:49:CB:0D:84:9D:16:C2:8B:30:9A:BB:45:B0:1D:83:B3:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afa70384-20ce-4e0a-b42a-581d05c70079.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afa70384-20ce-4e0a-b42a-581d05c70079/9ea94d1b-f116-398c-bf4a-e38b16ace96f.roa Signing time: Fri 01 May 2026 19:11:53 +0000 ROA not before: Fri 01 May 2026 19:11:53 +0000 ROA not after: Thu 30 Jul 2026 19:11:53 +0000 asID: 22317 IP address blocks: 2620:0:c10::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afa70384-20ce-4e0a-b42a-581d05c70079/afa70384-20ce-4e0a-b42a-581d05c70079.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afa70384-20ce-4e0a-b42a-581d05c70079/afa70384-20ce-4e0a-b42a-581d05c70079.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afa70384-20ce-4e0a-b42a-581d05c70079.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b1:2d:c7:6a:8d:38:fe:55:9b:4f:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afa70384-20ce-4e0a-b42a-581d05c70079 Validity Not Before: May 1 19:11:53 2026 GMT Not After : Jul 30 19:11:53 2026 GMT Subject: CN=c7a1acb2-e630-44dc-8aa3-326c6053f352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:2e:71:e1:d5:07:c1:a4:b2:48:d4:28:72:16: e9:ae:8d:64:5c:97:54:72:81:00:0b:bc:3e:d2:1e: 6d:af:b0:8c:7e:ef:34:2a:ab:06:ed:b3:2d:18:6e: da:d4:40:5e:af:8e:8b:58:25:cc:17:8e:a7:e6:23: 53:ea:e1:8d:08:9d:d3:f6:c1:46:1c:1b:70:8b:41: db:b4:8d:47:e8:99:1d:d4:79:12:46:5b:df:b4:bb: 48:eb:9a:3e:67:de:ee:1b:2a:d0:c2:9b:d6:ed:68: a2:4c:36:8d:bd:b9:f8:c4:59:2c:14:78:5c:f0:f1: 32:c9:07:39:04:6a:cb:65:b0:7c:ed:90:bc:40:13: 25:d4:02:50:a7:58:29:1c:86:5d:3f:a7:41:20:ad: 1a:38:b8:37:92:5d:58:db:ee:cf:6a:a5:e0:5c:b5: 05:08:42:7a:a3:32:f0:82:c5:49:de:65:0a:cd:e7: 7d:77:75:3c:c7:dd:c9:d2:71:28:6a:c4:6d:4c:c1: 2a:d3:e2:c9:ca:57:15:0c:92:3e:5f:76:2b:3f:d2: 90:c0:f1:d6:31:23:00:dc:ae:7a:bf:05:5e:ee:82: 5d:d1:43:8d:6b:61:0d:b1:12:54:f8:4a:73:18:3b: be:26:32:eb:58:83:70:16:1a:c5:32:f4:43:0e:64: 46:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:85:1E:DA:96:C3:4A:F7:0E:AD:0B:BF:5E:09:F8:1D:BE:6F:90:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afa70384-20ce-4e0a-b42a-581d05c70079/9ea94d1b-f116-398c-bf4a-e38b16ace96f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afa70384-20ce-4e0a-b42a-581d05c70079/afa70384-20ce-4e0a-b42a-581d05c70079.crl X509v3 Authority Key Identifier: keyid:6A:3F:DF:49:CB:0D:84:9D:16:C2:8B:30:9A:BB:45:B0:1D:83:B3:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afa70384-20ce-4e0a-b42a-581d05c70079.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:c10::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:67:ac:12:09:eb:04:8a:55:02:34:33:66:5d:11:a3:80:72: 13:8a:2a:0b:fc:59:b0:37:d2:9e:83:69:74:1e:3a:05:f9:4b: bf:38:50:f5:ff:20:a0:8d:cc:46:65:c7:6e:a8:35:48:02:73: a2:01:6e:5b:f1:1e:71:03:4d:31:a3:b6:3f:ce:cc:03:cf:c4: 1a:2e:43:fb:66:eb:51:a4:02:7b:63:7b:a0:3a:ad:73:e7:c7: ef:8f:84:59:6a:69:07:ee:a4:d1:88:b0:c3:a1:71:b9:92:74: 89:96:dc:99:a0:f1:a3:64:e1:8c:ba:33:62:f2:20:b9:71:df: 5e:13:fe:79:8f:54:3e:bd:26:2b:95:d1:7c:98:80:88:e8:f4: ed:c0:3d:7d:4e:a2:ff:f4:4d:04:e0:07:7a:c1:5a:81:14:8c: bb:8c:5e:3b:f1:a1:d3:7b:ad:c1:38:54:7a:93:07:c1:c2:85: 56:0f:5f:7a:af:da:4f:70:cc:df:7f:ac:f1:99:b5:f0:9a:97: 7c:1a:bb:27:8c:36:97:63:31:42:bd:89:91:df:74:33:af:dc: 37:90:21:89:78:3a:92:41:87:c0:0a:af:63:9f:1e:df:c7:b9: a5:b4:9d:e7:a8:1d:e2:85:41:d2:86:fb:b5:47:1f:d0:b1:93: 5c:a2:68:80 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2xLcdqjTj+VZtPygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZhNzAzODQtMjBjZS00ZTBhLWI0MmEtNTgxZDA1Yzcw MDc5MB4XDTI2MDUwMTE5MTE1M1oXDTI2MDczMDE5MTE1M1owLzEtMCsGA1UEAxMk YzdhMWFjYjItZTYzMC00NGRjLThhYTMtMzI2YzYwNTNmMzUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgC5x4dUHwaSySNQochbpro1kXJdUcoEAC7w+ 0h5tr7CMfu80KqsG7bMtGG7a1EBer46LWCXMF46n5iNT6uGNCJ3T9sFGHBtwi0Hb tI1H6Jkd1HkSRlvftLtI65o+Z97uGyrQwpvW7WiiTDaNvbn4xFksFHhc8PEyyQc5 BGrLZbB87ZC8QBMl1AJQp1gpHIZdP6dBIK0aOLg3kl1Y2+7PaqXgXLUFCEJ6ozLw gsVJ3mUKzed9d3U8x93J0nEoasRtTMEq0+LJylcVDJI+X3YrP9KQwPHWMSMA3K56 vwVe7oJd0UONa2ENsRJU+EpzGDu+JjLrWINwFhrFMvRDDmRG/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKKFHtqWw0r3Dq0Lv14J+B2+b5CsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9hZmE3 MDM4NC0yMGNlLTRlMGEtYjQyYS01ODFkMDVjNzAwNzkvOWVhOTRkMWItZjExNi0z OThjLWJmNGEtZTM4YjE2YWNlOTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYWZhNzAzODQtMjBjZS00ZTBhLWI0 MmEtNTgxZDA1YzcwMDc5L2FmYTcwMzg0LTIwY2UtNGUwYS1iNDJhLTU4MWQwNWM3 MDA3OS5jcmwwHwYDVR0jBBgwFoAUaj/fScsNhJ0WwoswmrtFsB2Ds34wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9hZmE3MDM4NC0yMGNlLTRlMGEtYjQyYS01ODFk MDVjNzAwNzkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAAAAwQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGBnrBIJ6wSKVQI0M2ZdEaOAchOKKgv8WbA30p6DaXQeOgX5S784 UPX/IKCNzEZlx26oNUgCc6IBblvxHnEDTTGjtj/OzAPPxBouQ/tm61GkAntje6A6 rXPnx++PhFlqaQfupNGIsMOhcbmSdImW3Jmg8aNk4Yy6M2LyILlx314T/nmPVD69 JiuV0XyYgIjo9O3APX1Oov/0TQTgB3rBWoEUjLuMXjvxodN7rcE4VHqTB8HChVYP X3qv2k9wzN9/rPGZtfCal3wauyeMNpdjMUK9iZHfdDOv3DeQIYl4OpJBh8AKr2Of Ht/HuaW0neeoHeKFQdKG+7VHH9Cxk1yiaIA= -----END CERTIFICATE-----Generated at Wed May 13 07:56:42 2026 by rpki-client