$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/afcf11f7-4d27-3593-9511-7b35e311c3cf.roa File: afcf11f7-4d27-3593-9511-7b35e311c3cf.roa (raw, json) Hash identifier: Kp8UrrPhvpmis2LYpR9YTwEu7iW7W5qWDUqwnkbN0Zc= Subject key identifier: E8:4D:C8:E7:A4:DD:67:1B:D1:0C:20:38:0D:E4:D4:F9:89:28:A3:DB Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584D98BAAB1C87E02015BA9607FB Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/afcf11f7-4d27-3593-9511-7b35e311c3cf.roa Signing time: Thu 23 Apr 2026 01:00:24 +0000 ROA not before: Thu 23 Apr 2026 01:00:24 +0000 ROA not after: Wed 22 Jul 2026 01:00:24 +0000 asID: 36511 IP address blocks: 2606:2480::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:ba:ab:1c:87:e0:20:15:ba:96:07:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Apr 23 01:00:24 2026 GMT Not After : Jul 22 01:00:24 2026 GMT Subject: CN=c98f5840-8215-4265-9dd3-cb2c2e2338fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:79:90:31:ed:16:26:cb:34:3e:da:13:67:01: fb:6b:97:97:b0:23:b0:b3:d4:6c:b7:53:5e:e5:e4: 4e:18:6d:2a:28:44:12:ec:10:ec:7b:4b:c2:4f:5b: 8b:cd:0e:ed:0c:cd:6f:54:fa:c4:79:2e:13:49:d3: 44:e2:9b:58:53:26:db:d3:c6:43:d2:fc:68:8e:f0: f9:37:d2:37:d0:dd:ac:49:e5:56:05:bd:74:f7:bc: 92:de:56:0e:53:79:0c:a2:60:4a:d9:83:21:31:df: b4:4f:86:56:cf:85:bb:ed:bd:73:6a:d5:53:da:e5: 1e:7c:e2:f0:17:e8:58:bd:72:01:32:7d:1a:8e:d5: 14:b1:97:7a:cb:70:dd:2b:21:9c:21:0b:fb:53:e1: eb:9e:95:27:a4:7a:ca:70:06:a8:99:bb:6a:fe:f9: af:e0:53:15:00:a8:c9:94:7b:35:b8:bc:17:20:b6: 75:76:ee:52:b8:2c:9c:be:ef:71:7c:ee:8d:cd:1e: 5a:c8:2a:d5:5d:d2:08:00:99:6d:f2:2e:60:9f:9e: 5f:7d:d9:8b:7e:9f:18:98:7c:d6:a3:03:b1:d6:db: a5:01:67:9b:3e:3e:63:da:e3:d4:91:f1:fc:0f:04: c9:07:f5:b3:ad:53:e9:da:9a:d8:ce:e5:aa:b5:d5: cd:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:4D:C8:E7:A4:DD:67:1B:D1:0C:20:38:0D:E4:D4:F9:89:28:A3:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/afcf11f7-4d27-3593-9511-7b35e311c3cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv6: 2606:2480::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:05:72:9b:06:b9:46:6e:93:1a:ad:18:1f:75:0c:1a:1b:0f: 5b:cb:04:a2:66:2e:d3:6d:68:32:46:f6:da:d1:1d:8c:1f:f7: 98:a3:e6:b0:cc:4d:5e:76:0a:4d:16:3e:be:d1:f8:78:ec:7a: 2b:2f:55:7f:a2:6c:65:b6:9a:f6:ec:55:a5:8e:44:f7:69:2a: d8:c4:a6:ae:67:1f:cd:f5:9b:bf:6c:da:9a:3e:5c:0e:8a:61: dd:a3:5b:36:03:76:a4:58:71:f6:db:4d:25:5d:4c:8a:06:5c: 90:38:d8:8e:b1:c7:33:fb:b3:41:47:5a:f9:e6:a5:cf:16:52: 01:d2:07:02:39:ed:dd:61:ce:57:01:c3:44:37:bd:6b:dc:50: ca:a4:c2:07:52:e4:c9:e6:12:49:c5:70:29:45:7b:7e:de:13: 96:7a:49:61:08:2e:c9:b3:08:09:1a:47:93:5c:bd:fd:18:10: 99:eb:dd:a2:9e:db:63:e4:22:1a:48:ac:d2:17:06:d6:a4:89: 2d:97:dc:b4:0f:26:e4:bc:4e:8f:ab:02:ad:46:75:8d:7f:6d: e0:a1:83:25:cd:2f:5c:02:e4:25:79:50:92:a8:f0:d5:d9:e1: c4:25:2e:dd:49:fb:16:aa:37:cb:3e:e5:c5:f0:a8:d5:d1:b9: b1:d5:f9:53 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2Yuqsch+AgFbqWB/swDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI2MDQyMzAxMDAyNFoXDTI2MDcyMjAxMDAyNFowLzEtMCsGA1UEAxMk Yzk4ZjU4NDAtODIxNS00MjY1LTlkZDMtY2IyYzJlMjMzOGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnmQMe0WJss0PtoTZwH7a5eXsCOws9Rst1Ne 5eROGG0qKEQS7BDse0vCT1uLzQ7tDM1vVPrEeS4TSdNE4ptYUybb08ZD0vxojvD5 N9I30N2sSeVWBb1097yS3lYOU3kMomBK2YMhMd+0T4ZWz4W77b1zatVT2uUefOLw F+hYvXIBMn0ajtUUsZd6y3DdKyGcIQv7U+HrnpUnpHrKcAaombtq/vmv4FMVAKjJ lHs1uLwXILZ1du5SuCycvu9xfO6NzR5ayCrVXdIIAJlt8i5gn55ffdmLfp8YmHzW owOx1tulAWebPj5j2uPUkfH8DwTJB/WzrVPp2prYzuWqtdXNdQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOhNyOek3Wcb0QwgOA3k1PmJKKPbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvYWZjZjExZjctNGQyNy0z NTkzLTk1MTEtN2IzNWUzMTFjM2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgYkgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCQBXKbBrlGbpMarRgfdQwaGw9bywSiZi7TbWgyRvba0R2MH/eYo+aw zE1edgpNFj6+0fh47HorL1V/omxltpr27FWljkT3aSrYxKauZx/N9Zu/bNqaPlwO imHdo1s2A3akWHH2200lXUyKBlyQONiOsccz+7NBR1r55qXPFlIB0gcCOe3dYc5X AcNEN71r3FDKpMIHUuTJ5hJJxXApRXt+3hOWeklhCC7JswgJGkeTXL39GBCZ692i nttj5CIaSKzSFwbWpIktl9y0DybkvE6PqwKtRnWNf23goYMlzS9cAuQleVCSqPDV 2eHEJS7dSfsWqjfLPuXF8KjV0bmx1flT -----END CERTIFICATE-----Generated at Wed May 13 06:16:51 2026 by rpki-client