$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/76f67f84-6693-3a33-8bf2-2b4e5d536b3d.roa File: 76f67f84-6693-3a33-8bf2-2b4e5d536b3d.roa (raw, json) Hash identifier: F1/eb4pri4Lw6m8dEUR3Kxr7YbY5kdSpzgwmxdNJ6K4= Subject key identifier: 0A:F4:FB:FB:80:07:1D:32:8F:A6:96:35:77:08:21:9F:1D:F6:46:D2 Certificate issuer: /CN=af3da563-8689-4ebd-a553-31a2f310113a Certificate serial: 010D0C9F4328584D39CF9BCF61ADC8703E811AC0 Authority key identifier: A6:AF:DB:BC:B6:BD:07:C4:FC:50:80:BB:DA:6D:DC:37:E0:69:92:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/76f67f84-6693-3a33-8bf2-2b4e5d536b3d.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 399688 IP address blocks: 2602:fb21::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/af3da563-8689-4ebd-a553-31a2f310113a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/af3da563-8689-4ebd-a553-31a2f310113a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:9b:cf:61:ad:c8:70:3e:81:1a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af3da563-8689-4ebd-a553-31a2f310113a Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=11c7a8fd-3fa1-41be-9609-544750a3b027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3d:59:c9:a3:1f:29:5a:e0:06:eb:cd:1a:cc: c3:cd:18:63:91:dd:0d:32:7a:ef:24:1d:ef:42:1e: 0e:9c:53:96:62:9a:2e:e1:dc:f2:6f:d3:f5:df:a3: 19:20:66:3b:69:eb:cd:6b:38:74:b9:86:ce:67:f3: 17:22:6f:c8:7e:f8:47:36:43:a4:6a:f2:b6:6a:36: 72:6c:d8:38:ce:42:2c:58:7f:7f:07:97:12:e8:ec: 0d:85:76:82:a4:f7:1a:a3:d4:12:34:2e:6e:16:dd: 89:97:0e:fc:d6:bb:79:23:d0:c2:10:f6:0b:74:2e: 18:76:8e:fa:d1:d9:f9:79:b1:c7:18:17:1e:06:60: c0:fc:00:2d:be:5c:2b:ba:00:4f:ae:1d:39:ba:71: eb:ea:f0:7f:50:d0:5d:6d:e6:48:60:9d:b7:0a:34: ce:9e:bf:63:80:5b:95:9d:dd:36:3f:74:30:f4:ba: b5:8c:71:ad:17:cd:54:77:fe:ae:67:7f:ac:31:81: cb:12:f3:78:29:64:3f:03:1f:75:3a:55:16:96:a5: 06:69:be:ad:93:24:22:a6:28:83:14:64:4b:e5:01: 48:08:9e:29:7a:52:44:61:13:df:87:7a:b4:70:48: 80:6c:8b:84:dc:75:a8:f6:91:bb:bd:9e:b3:7b:1b: a2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:F4:FB:FB:80:07:1D:32:8F:A6:96:35:77:08:21:9F:1D:F6:46:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/76f67f84-6693-3a33-8bf2-2b4e5d536b3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/af3da563-8689-4ebd-a553-31a2f310113a.crl X509v3 Authority Key Identifier: keyid:A6:AF:DB:BC:B6:BD:07:C4:FC:50:80:BB:DA:6D:DC:37:E0:69:92:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a.cer sbgp-ipAddrBlock: critical IPv6: 2602:fb21::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:26:0f:63:9b:8a:d5:17:25:0b:21:e4:6d:ed:a9:8a:f5:2d: 43:f4:be:f0:04:a6:07:27:00:67:4a:b7:ea:0c:1e:42:f2:2c: 80:70:60:5b:7e:bb:a0:74:24:49:c0:71:a1:47:8f:be:80:11: e5:4d:ac:90:90:a7:fc:60:d3:9f:f0:b5:93:e6:44:77:c5:b9: 32:f5:d6:72:ba:6b:66:b9:49:4a:e1:34:be:91:a8:46:df:a9: 2c:27:1a:65:a3:8a:6c:68:a8:7a:0e:75:2e:34:da:7c:61:57: 14:2b:35:f1:02:a3:b6:07:6d:fa:87:3b:3d:b4:66:79:cc:91: af:9f:63:d1:ae:e5:b5:fd:c6:61:5c:d5:bc:62:59:72:47:04: 7a:ed:0d:33:99:e7:68:40:90:6a:b0:f8:97:d5:35:96:8b:1f: 33:4e:41:77:da:5d:29:8f:30:b0:59:ba:dd:32:32:de:78:7a: 5c:ed:3c:22:a5:76:2a:cd:70:2e:81:53:b4:fd:81:d2:9e:cf: 0c:24:59:f8:d3:a0:10:2f:75:11:78:e1:4a:56:fb:29:3e:a3: 4e:1a:ac:fe:32:5a:df:70:fa:c3:f2:67:3f:1d:3a:21:56:82: 85:b0:d3:45:25:88:db:f4:04:a1:f0:a3:4e:cd:2a:02:bc:1d: ed:28:4f:d6 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE05z5vPYa3IcD6BGsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWYzZGE1NjMtODY4OS00ZWJkLWE1NTMtMzFhMmYzMTAx MTNhMB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk MTFjN2E4ZmQtM2ZhMS00MWJlLTk2MDktNTQ0NzUwYTNiMDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApz1ZyaMfKVrgBuvNGszDzRhjkd0NMnrvJB3v Qh4OnFOWYpou4dzyb9P136MZIGY7aevNazh0uYbOZ/MXIm/IfvhHNkOkavK2ajZy bNg4zkIsWH9/B5cS6OwNhXaCpPcao9QSNC5uFt2Jlw781rt5I9DCEPYLdC4Ydo76 0dn5ebHHGBceBmDA/AAtvlwrugBPrh05unHr6vB/UNBdbeZIYJ23CjTOnr9jgFuV nd02P3Qw9Lq1jHGtF81Ud/6uZ3+sMYHLEvN4KWQ/Ax91OlUWlqUGab6tkyQipiiD FGRL5QFICJ4pelJEYRPfh3q0cEiAbIuE3HWo9pG7vZ6zexui2QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFAr0+/uABx0yj6aWNXcIIZ8d9kbSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hZjNk YTU2My04Njg5LTRlYmQtYTU1My0zMWEyZjMxMDExM2EvNzZmNjdmODQtNjY5My0z YTMzLThiZjItMmI0ZTVkNTM2YjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYWYzZGE1NjMtODY4OS00ZWJkLWE1 NTMtMzFhMmYzMTAxMTNhL2FmM2RhNTYzLTg2ODktNGViZC1hNTUzLTMxYTJmMzEw MTEzYS5jcmwwHwYDVR0jBBgwFoAUpq/bvLa9B8T8UIC72m3cN+BpkuAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hZjNkYTU2My04Njg5LTRlYmQtYTU1My0zMWEy ZjMxMDExM2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL7IQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAECYPY5uK1RclCyHkbe2pivUtQ/S+8ASmBycAZ0q36gweQvIsgHBg W367oHQkScBxoUePvoAR5U2skJCn/GDTn/C1k+ZEd8W5MvXWcrprZrlJSuE0vpGo Rt+pLCcaZaOKbGioeg51LjTafGFXFCs18QKjtgdt+oc7PbRmecyRr59j0a7ltf3G YVzVvGJZckcEeu0NM5nnaECQarD4l9U1losfM05Bd9pdKY8wsFm63TIy3nh6XO08 IqV2Ks1wLoFTtP2B0p7PDCRZ+NOgEC91EXjhSlb7KT6jThqs/jJa33D6w/JnPx06 IVaChbDTRSWI2/QEofCjTs0qArwd7ShP1g== -----END CERTIFICATE-----Generated at Thu Mar 26 17:49:05 2026 by rpki-client