$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/af5c3765-147f-3db1-b56e-1f20fa7259fc.roa File: af5c3765-147f-3db1-b56e-1f20fa7259fc.roa (raw, json) Hash identifier: HzQICa34SHt6bUTehwTHO8Qw12LAQiw69dcWXFi/xjA= Subject key identifier: 18:70:B3:BE:C2:5C:CD:45:25:3C:AB:CE:17:64:D8:60:CF:86:56:5C Certificate issuer: /CN=820e56e8-763b-4037-929e-b01c8d786e75 Certificate serial: 010D0C9F4328584DC29AED3BDA1BE27A58CB4420 Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/af5c3765-147f-3db1-b56e-1f20fa7259fc.roa Signing time: Fri 08 May 2026 01:00:24 +0000 ROA not before: Fri 08 May 2026 01:00:24 +0000 ROA not after: Thu 06 Aug 2026 01:00:24 +0000 asID: 399275 IP address blocks: 2602:fcc0:3333::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c2:9a:ed:3b:da:1b:e2:7a:58:cb:44:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75 Validity Not Before: May 8 01:00:24 2026 GMT Not After : Aug 6 01:00:24 2026 GMT Subject: CN=6f303385-1d55-4a6a-9621-591ce85e2b78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:18:1e:07:ab:41:ec:bb:e7:fe:35:aa:ea:18: 83:0b:cd:69:ba:ef:3f:86:e4:f0:77:d0:1f:78:23: 40:7d:2e:31:75:b8:b8:d3:8f:f8:b1:03:4f:64:b8: 4c:50:76:fb:a8:40:c2:25:8a:58:52:32:f8:23:6b: dd:2b:34:da:8c:83:0d:cb:41:c0:18:4c:61:05:93: 67:68:32:74:90:f6:69:76:fc:61:b9:6d:6b:11:09: 94:eb:a7:21:79:b6:80:7b:f6:0c:ce:4c:ae:d0:8f: cb:68:5e:fb:63:48:21:93:03:30:0b:2d:1a:70:4d: 0c:f2:15:2a:9b:40:b6:f1:d7:02:26:6b:1a:4c:f0: 96:24:71:65:bc:ea:44:e0:57:d0:3d:c1:00:89:e8: cd:e9:f0:ee:e8:02:17:09:6f:85:9b:32:3c:61:5a: b8:5e:70:6c:7a:1c:f2:a9:63:06:ce:71:51:95:33: d5:a7:1c:3f:dc:49:0c:b8:48:49:d4:65:a5:75:2e: df:01:82:23:5a:d1:ea:f9:6d:c7:fb:8d:73:a9:33: 89:d0:b6:38:51:42:39:44:32:f7:fc:7f:b4:e1:3d: a1:20:07:d4:02:65:a2:07:c1:2c:de:47:d0:6a:fa: 21:15:36:05:26:9d:09:cd:7f:c8:79:04:b2:d5:d2: 52:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:70:B3:BE:C2:5C:CD:45:25:3C:AB:CE:17:64:D8:60:CF:86:56:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/af5c3765-147f-3db1-b56e-1f20fa7259fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl X509v3 Authority Key Identifier: keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer sbgp-ipAddrBlock: critical IPv6: 2602:fcc0:3333::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:b8:d9:e6:cd:96:1c:85:fc:f6:dd:f2:ce:cb:6e:27:fc:d4: d1:fb:b5:34:fe:21:a6:bb:f6:81:a5:6a:7e:26:d5:c7:19:48: 2f:35:d2:7e:1e:3b:54:07:13:7e:78:3e:3a:61:9e:13:e9:5e: e5:1d:e8:f5:e5:73:d7:1c:ae:b0:ea:78:54:d0:9f:aa:f9:eb: 5e:16:cf:60:8e:dd:13:2d:e7:f3:ea:09:5d:a1:d3:7b:a9:87: 2f:bc:50:ff:61:e6:2c:7f:97:c0:f5:7a:34:dc:24:4a:36:e4: d7:1f:d9:9a:04:cb:56:1a:7f:7f:ba:68:53:33:84:27:04:2e: 22:2e:10:7e:77:51:05:bc:42:96:83:04:a7:2d:c5:d3:43:7a: fc:4c:42:ac:46:a4:39:94:9f:84:4f:36:c5:57:7f:97:35:2e: e9:de:3f:d8:1b:2d:76:30:dc:e3:2b:c6:7d:1e:80:09:f1:7f: 1f:f8:20:89:51:0e:94:b7:c1:10:dc:7b:87:10:94:8d:12:d7: 0f:26:da:61:17:4c:5e:a2:83:7e:cd:f0:5a:20:fd:84:be:10: 3d:2e:5f:b9:65:67:82:ae:e8:ab:00:c1:4f:2e:7c:84:8f:8d: 33:ad:1c:37:50:51:2e:73:e7:ef:11:94:d5:98:c3:f7:01:49: 17:a4:0b:39 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3Cmu072hvieljLRCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIwZTU2ZTgtNzYzYi00MDM3LTkyOWUtYjAxYzhkNzg2 ZTc1MB4XDTI2MDUwODAxMDAyNFoXDTI2MDgwNjAxMDAyNFowLzEtMCsGA1UEAxMk NmYzMDMzODUtMWQ1NS00YTZhLTk2MjEtNTkxY2U4NWUyYjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxgeB6tB7Lvn/jWq6hiDC81puu8/huTwd9Af eCNAfS4xdbi404/4sQNPZLhMUHb7qEDCJYpYUjL4I2vdKzTajIMNy0HAGExhBZNn aDJ0kPZpdvxhuW1rEQmU66chebaAe/YMzkyu0I/LaF77Y0ghkwMwCy0acE0M8hUq m0C28dcCJmsaTPCWJHFlvOpE4FfQPcEAiejN6fDu6AIXCW+FmzI8YVq4XnBsehzy qWMGznFRlTPVpxw/3EkMuEhJ1GWldS7fAYIjWtHq+W3H+41zqTOJ0LY4UUI5RDL3 /H+04T2hIAfUAmWiB8Es3kfQavohFTYFJp0JzX/IeQSy1dJSCwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBhws77CXM1FJTyrzhdk2GDPhlZcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MjBl NTZlOC03NjNiLTQwMzctOTI5ZS1iMDFjOGQ3ODZlNzUvYWY1YzM3NjUtMTQ3Zi0z ZGIxLWI1NmUtMWYyMGZhNzI1OWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODIwZTU2ZTgtNzYzYi00MDM3LTky OWUtYjAxYzhkNzg2ZTc1LzgyMGU1NmU4LTc2M2ItNDAzNy05MjllLWIwMWM4ZDc4 NmU3NS5jcmwwHwYDVR0jBBgwFoAUP3013qVs2g7sbxhuEQO8bIfW0y0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84MjBlNTZlOC03NjNiLTQwMzctOTI5ZS1iMDFj OGQ3ODZlNzUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8wDMz MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGy42ebNlhyF/Pbd8s7Lbif81NH7tTT+Iaa79oGlan4m1ccZSC81 0n4eO1QHE354PjphnhPpXuUd6PXlc9ccrrDqeFTQn6r5614Wz2CO3RMt5/PqCV2h 03uphy+8UP9h5ix/l8D1ejTcJEo25Ncf2ZoEy1Yaf3+6aFMzhCcELiIuEH53UQW8 QpaDBKctxdNDevxMQqxGpDmUn4RPNsVXf5c1LuneP9gbLXYw3OMrxn0egAnxfx/4 IIlRDpS3wRDce4cQlI0S1w8m2mEXTF6ig37N8Fog/YS+ED0uX7llZ4Ku6KsAwU8u fISPjTOtHDdQUS5z5+8RlNWYw/cBSRekCzk= -----END CERTIFICATE-----Generated at Wed May 13 07:08:46 2026 by rpki-client