$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/af661c18-5dff-4d85-9a6f-659490c4ca99/d81b35d0-6073-370a-af7b-e3600929036c.roa File: d81b35d0-6073-370a-af7b-e3600929036c.roa (raw, json) Hash identifier: 7f+HKRwaLeWjNAsdb48rR+hD3R8I9oRyFQ0/4tmk44c= Subject key identifier: 50:04:09:99:B4:00:A3:E2:1B:DD:5B:F1:1F:A0:E5:0A:32:50:8D:30 Certificate issuer: /CN=af661c18-5dff-4d85-9a6f-659490c4ca99 Certificate serial: 010D0C9F4328584D6D7513DF5E4AEDAD14A43400 Authority key identifier: 41:26:26:80:04:A2:FF:06:D2:8D:7E:7F:84:0A:A0:46:6A:12:D2:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/af661c18-5dff-4d85-9a6f-659490c4ca99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/af661c18-5dff-4d85-9a6f-659490c4ca99/d81b35d0-6073-370a-af7b-e3600929036c.roa Signing time: Tue 07 Apr 2026 13:00:30 +0000 ROA not before: Tue 07 Apr 2026 13:00:30 +0000 ROA not after: Mon 06 Jul 2026 13:00:30 +0000 asID: 396908 IP address blocks: 2602:f828::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/af661c18-5dff-4d85-9a6f-659490c4ca99/af661c18-5dff-4d85-9a6f-659490c4ca99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/af661c18-5dff-4d85-9a6f-659490c4ca99/af661c18-5dff-4d85-9a6f-659490c4ca99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/af661c18-5dff-4d85-9a6f-659490c4ca99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:75:13:df:5e:4a:ed:ad:14:a4:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af661c18-5dff-4d85-9a6f-659490c4ca99 Validity Not Before: Apr 7 13:00:30 2026 GMT Not After : Jul 6 13:00:30 2026 GMT Subject: CN=06c2640e-e09c-4683-af18-7515caf47819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:aa:cd:b6:7a:b2:04:3e:07:e9:bd:97:48:2c: 9f:7a:c7:7a:bf:c1:2b:c2:bc:5b:3f:8c:41:ae:16: 03:98:9e:dd:de:f3:00:a5:f0:48:77:d2:c2:3d:70: de:b1:3d:e1:53:6a:1f:fe:c0:a9:d0:b6:c2:19:fa: a0:50:51:90:00:d1:4c:55:ea:b5:02:9b:76:e7:55: 08:e9:4f:03:bd:2a:78:61:ae:83:71:02:cc:8c:be: 16:93:fd:64:8b:ca:17:56:14:e0:35:4a:c8:2f:d8: 0c:77:db:b0:46:d4:48:8d:f6:a5:2f:ba:ee:f4:1c: 6d:23:bf:e8:53:79:2e:d7:cb:cd:07:d4:8a:82:33: a8:bf:53:a1:13:12:05:2d:6e:a3:2b:21:cf:f6:08: 39:82:22:a9:1b:3d:88:df:2c:83:71:c0:3b:df:ee: 57:02:7e:ef:80:54:28:5c:c4:76:b3:18:35:87:fb: 7e:ec:04:dd:44:a8:ea:44:7e:8a:6b:96:18:ad:8e: 3a:57:9f:3f:44:35:d7:07:e8:3f:40:30:6e:f9:99: c2:78:ad:9e:0b:39:8f:c0:53:08:8b:37:32:fd:f9: 47:04:aa:0e:61:e5:4a:0f:fc:29:40:dd:50:c1:52: 41:2e:2f:40:68:7e:d4:b2:b4:4e:5f:ef:92:03:48: 21:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:04:09:99:B4:00:A3:E2:1B:DD:5B:F1:1F:A0:E5:0A:32:50:8D:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/af661c18-5dff-4d85-9a6f-659490c4ca99/d81b35d0-6073-370a-af7b-e3600929036c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/af661c18-5dff-4d85-9a6f-659490c4ca99/af661c18-5dff-4d85-9a6f-659490c4ca99.crl X509v3 Authority Key Identifier: keyid:41:26:26:80:04:A2:FF:06:D2:8D:7E:7F:84:0A:A0:46:6A:12:D2:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/af661c18-5dff-4d85-9a6f-659490c4ca99.cer sbgp-ipAddrBlock: critical IPv6: 2602:f828::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:49:7e:08:52:23:ef:5e:ff:10:48:bd:37:cb:84:92:d7:e5: 75:2c:b3:f4:fa:7e:b2:cf:26:29:09:06:aa:f3:9a:8b:55:5f: 38:90:b0:2b:06:e7:5f:bb:8d:8d:a0:0d:20:73:0e:89:44:6e: 46:73:57:76:5a:61:e9:49:76:bd:d7:39:36:c0:32:13:b4:e6: e4:a5:ed:eb:c0:17:a9:25:6e:5d:11:85:7a:f9:b3:24:e2:cb: b6:3d:a0:19:8c:9a:d9:fd:22:76:1e:9c:2c:6e:b7:c9:fd:1c: ad:51:26:d9:b1:d8:33:fd:bd:66:bf:12:9b:ad:17:1a:35:36: f9:97:ab:1f:be:58:d7:04:ca:40:36:8c:1b:d6:19:45:80:f2: dc:18:58:6e:58:30:a0:ca:41:df:dc:b2:da:ab:4b:a4:92:e3: 33:47:df:0a:1b:b0:79:a4:d6:f6:55:aa:94:12:f9:17:87:9d: 7e:b1:bc:7d:1f:2a:a3:a8:f9:c4:36:36:34:1e:a4:ae:65:69: b0:46:25:cc:5c:ef:e1:82:26:21:73:46:0c:4e:58:c0:dd:b3: 1d:0a:b9:9e:82:b9:4c:20:7e:33:89:06:fa:c7:f8:bf:d2:60: 37:81:fd:27:75:2e:eb:2d:f3:7a:1a:58:00:e7:17:74:68:0f: f5:d8:1c:e9 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1tdRPfXkrtrRSkNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY2NjFjMTgtNWRmZi00ZDg1LTlhNmYtNjU5NDkwYzRj YTk5MB4XDTI2MDQwNzEzMDAzMFoXDTI2MDcwNjEzMDAzMFowLzEtMCsGA1UEAxMk MDZjMjY0MGUtZTA5Yy00NjgzLWFmMTgtNzUxNWNhZjQ3ODE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqrNtnqyBD4H6b2XSCyfesd6v8ErwrxbP4xB rhYDmJ7d3vMApfBId9LCPXDesT3hU2of/sCp0LbCGfqgUFGQANFMVeq1Apt251UI 6U8DvSp4Ya6DcQLMjL4Wk/1ki8oXVhTgNUrIL9gMd9uwRtRIjfalL7ru9BxtI7/o U3ku18vNB9SKgjOov1OhExIFLW6jKyHP9gg5giKpGz2I3yyDccA73+5XAn7vgFQo XMR2sxg1h/t+7ATdRKjqRH6Ka5YYrY46V58/RDXXB+g/QDBu+ZnCeK2eCzmPwFMI izcy/flHBKoOYeVKD/wpQN1QwVJBLi9AaH7UsrROX++SA0ghMQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFFAECZm0AKPiG91b8R+g5QoyUI0wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9hZjY2 MWMxOC01ZGZmLTRkODUtOWE2Zi02NTk0OTBjNGNhOTkvZDgxYjM1ZDAtNjA3My0z NzBhLWFmN2ItZTM2MDA5MjkwMzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvYWY2NjFjMTgtNWRmZi00ZDg1LTlh NmYtNjU5NDkwYzRjYTk5L2FmNjYxYzE4LTVkZmYtNGQ4NS05YTZmLTY1OTQ5MGM0 Y2E5OS5jcmwwHwYDVR0jBBgwFoAUQSYmgASi/wbSjX5/hAqgRmoS0uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9hZjY2MWMxOC01ZGZmLTRkODUtOWE2Zi02NTk0 OTBjNGNhOTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL4KAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAf0l+CFIj717/EEi9N8uEktfldSyz9Pp+ss8mKQkGqvOai1VfOJCw KwbnX7uNjaANIHMOiURuRnNXdlph6Ul2vdc5NsAyE7Tm5KXt68AXqSVuXRGFevmz JOLLtj2gGYya2f0idh6cLG63yf0crVEm2bHYM/29Zr8Sm60XGjU2+ZerH75Y1wTK QDaMG9YZRYDy3BhYblgwoMpB39yy2qtLpJLjM0ffChuweaTW9lWqlBL5F4edfrG8 fR8qo6j5xDY2NB6krmVpsEYlzFzv4YImIXNGDE5YwN2zHQq5noK5TCB+M4kG+sf4 v9JgN4H9J3Uu6y3zehpYAOcXdGgP9dgc6Q== -----END CERTIFICATE-----Generated at Tue Apr 7 19:38:45 2026 by rpki-client