$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/7d38fa73-ad05-39b4-8ee8-83a83b2a993a.roa File: 7d38fa73-ad05-39b4-8ee8-83a83b2a993a.roa (raw, json) Hash identifier: +cwFks5t/pxNDm2kjF5f2WKLqPmdMbXy7cP2egu/CPE= Subject key identifier: 5D:39:49:5A:78:50:C3:91:DA:34:47:17:8F:60:0A:69:DE:A0:6B:1C Certificate issuer: /CN=afa71238-3202-40f6-8fdd-d9505c5a8635 Certificate serial: 010D0C9F4328584D3B34EA0A5EBDA0E4BFF35100 Authority key identifier: 5B:F6:61:9D:C4:CA:54:0A:21:F2:91:5D:E2:CE:9E:F8:1E:B8:79:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/7d38fa73-ad05-39b4-8ee8-83a83b2a993a.roa Signing time: Fri 20 Mar 2026 13:00:40 +0000 ROA not before: Fri 20 Mar 2026 13:00:40 +0000 ROA not after: Thu 18 Jun 2026 13:00:40 +0000 asID: 401523 IP address blocks: 2620:d0:e000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/afa71238-3202-40f6-8fdd-d9505c5a8635.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/afa71238-3202-40f6-8fdd-d9505c5a8635.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3b:34:ea:0a:5e:bd:a0:e4:bf:f3:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afa71238-3202-40f6-8fdd-d9505c5a8635 Validity Not Before: Mar 20 13:00:40 2026 GMT Not After : Jun 18 13:00:40 2026 GMT Subject: CN=11c9fb0d-c6e9-41ba-b00d-2ae3cfe54000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:1c:bc:9b:ad:29:bd:fa:65:8a:1c:5d:82:e5: 0d:21:c4:0c:b5:56:0c:74:10:4c:cf:99:a7:0b:d7: 94:30:73:60:e8:1d:60:69:72:d8:79:1e:77:98:55: bb:85:7e:03:d1:be:1d:c5:95:b4:17:15:fe:13:30: f4:b3:00:f9:ab:42:d5:b5:f8:69:a4:2f:ee:e7:a3: 77:78:c3:23:ab:60:fe:14:1c:3d:9e:b7:26:31:21: 7e:97:08:8e:38:c6:47:fb:11:85:c0:d0:dd:2c:51: 8e:fd:78:1c:1c:b3:f7:27:b8:11:80:cf:e7:cb:06: 21:8c:46:bb:69:67:0b:c3:ef:b3:e1:13:07:27:22: 41:6c:91:39:3d:4c:a7:c3:31:b0:b9:ef:bc:9b:76: 71:16:d0:70:4a:c8:90:bd:6d:10:2d:2b:bf:64:c8: 26:ea:d6:51:55:91:ae:cf:07:d3:a9:21:d6:a0:41: 80:d8:9f:0f:cc:22:a8:be:21:66:57:8f:cf:87:ad: f5:02:99:4a:74:f9:0f:88:9d:51:e1:6e:72:0c:46: 5a:57:82:7c:70:69:d4:65:cc:10:31:05:54:76:e0: ac:51:0a:75:1f:6e:12:05:0c:78:78:5f:6d:c0:f7: e6:e7:3c:a4:8a:9f:4e:d7:8a:7c:56:ab:bc:e4:31: 42:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:39:49:5A:78:50:C3:91:DA:34:47:17:8F:60:0A:69:DE:A0:6B:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/7d38fa73-ad05-39b4-8ee8-83a83b2a993a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/afa71238-3202-40f6-8fdd-d9505c5a8635.crl X509v3 Authority Key Identifier: keyid:5B:F6:61:9D:C4:CA:54:0A:21:F2:91:5D:E2:CE:9E:F8:1E:B8:79:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635.cer sbgp-ipAddrBlock: critical IPv6: 2620:d0:e000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:20:57:74:b7:00:08:d3:83:de:86:8e:5f:0c:d6:bd:ce:0c: c4:bf:0c:58:b7:62:0c:ea:46:ea:20:f7:a3:06:4a:bf:d6:cf: 91:22:19:05:7a:e9:8f:c4:6e:d2:db:8f:24:bf:6d:8c:c4:2f: 51:18:e1:af:b6:55:c3:d1:42:e5:65:d8:e8:36:a1:ac:9e:42: 60:45:e2:19:b0:b8:59:f8:e4:ab:27:ce:f0:a1:0e:c8:d8:ee: fa:c7:e1:d0:79:08:9e:be:a0:35:04:10:49:90:e4:8d:f4:08: d6:0b:7d:6e:93:37:eb:74:fe:af:b8:17:cf:c5:d6:01:86:68: 66:0c:02:ce:40:1e:fe:b1:74:74:8c:07:05:53:3c:47:e5:a9: ba:63:60:c8:a0:b2:5b:f0:84:29:3e:70:0f:a6:aa:f9:cd:8f: 98:eb:71:7d:50:28:f7:aa:00:de:70:1d:19:2e:f2:2b:08:14: 4a:e3:d4:22:f6:e4:9e:31:2c:bd:9d:72:22:f2:48:46:e3:b9: 52:81:05:a3:1f:bf:00:b4:14:d3:da:f1:c1:51:56:bb:3f:63: a9:f3:92:93:df:b0:29:57:60:9a:f4:8a:ca:05:08:0a:7c:5b: fc:81:d9:1b:2b:a7:f8:d6:1a:f9:b2:54:db:18:63:2e:fc:c0: 6e:67:de:48 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE07NOoKXr2g5L/zUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZhNzEyMzgtMzIwMi00MGY2LThmZGQtZDk1MDVjNWE4 NjM1MB4XDTI2MDMyMDEzMDA0MFoXDTI2MDYxODEzMDA0MFowLzEtMCsGA1UEAxMk MTFjOWZiMGQtYzZlOS00MWJhLWIwMGQtMmFlM2NmZTU0MDAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhy8m60pvfplihxdguUNIcQMtVYMdBBMz5mn C9eUMHNg6B1gaXLYeR53mFW7hX4D0b4dxZW0FxX+EzD0swD5q0LVtfhppC/u56N3 eMMjq2D+FBw9nrcmMSF+lwiOOMZH+xGFwNDdLFGO/XgcHLP3J7gRgM/nywYhjEa7 aWcLw++z4RMHJyJBbJE5PUynwzGwue+8m3ZxFtBwSsiQvW0QLSu/ZMgm6tZRVZGu zwfTqSHWoEGA2J8PzCKoviFmV4/Ph631AplKdPkPiJ1R4W5yDEZaV4J8cGnUZcwQ MQVUduCsUQp1H24SBQx4eF9twPfm5zykip9O14p8Vqu85DFCtwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF05SVp4UMOR2jRHF49gCmneoGscMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hZmE3 MTIzOC0zMjAyLTQwZjYtOGZkZC1kOTUwNWM1YTg2MzUvN2QzOGZhNzMtYWQwNS0z OWI0LThlZTgtODNhODNiMmE5OTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWZhNzEyMzgtMzIwMi00MGY2LThm ZGQtZDk1MDVjNWE4NjM1L2FmYTcxMjM4LTMyMDItNDBmNi04ZmRkLWQ5NTA1YzVh ODYzNS5jcmwwHwYDVR0jBBgwFoAUW/ZhncTKVAoh8pFd4s6e+B64eY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hZmE3MTIzOC0zMjAyLTQwZjYtOGZkZC1kOTUw NWM1YTg2MzUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAA0OAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHIgV3S3AAjTg96Gjl8M1r3ODMS/DFi3YgzqRuog96MGSr/Wz5Ei GQV66Y/EbtLbjyS/bYzEL1EY4a+2VcPRQuVl2Og2oayeQmBF4hmwuFn45KsnzvCh DsjY7vrH4dB5CJ6+oDUEEEmQ5I30CNYLfW6TN+t0/q+4F8/F1gGGaGYMAs5AHv6x dHSMBwVTPEflqbpjYMigslvwhCk+cA+mqvnNj5jrcX1QKPeqAN5wHRku8isIFErj 1CL25J4xLL2dciLySEbjuVKBBaMfvwC0FNPa8cFRVrs/Y6nzkpPfsClXYJr0isoF CAp8W/yB2Rsrp/jWGvmyVNsYYy78wG5n3kg= -----END CERTIFICATE-----Generated at Thu Mar 26 08:55:52 2026 by rpki-client