$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6b527806-37a2-4d56-8213-ee9130cd0038/af0a68e8-1233-3f5c-ac36-7661fe7ef612.roa File: af0a68e8-1233-3f5c-ac36-7661fe7ef612.roa (raw, json) Hash identifier: LUEyzAngI77qFTG5rYeU1t+O55d60vgDW3ksXOhbLXo= Subject key identifier: 0F:99:9F:32:06:24:EC:7F:A4:B5:AC:37:6C:27:65:AC:46:A9:DC:7D Certificate issuer: /CN=6b527806-37a2-4d56-8213-ee9130cd0038 Certificate serial: 010D0C9F4328584D65153EEFECA3BE163305AF00 Authority key identifier: 07:C2:64:48:5D:A7:EF:C9:73:52:27:BF:22:8B:06:EF:71:41:16:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6b527806-37a2-4d56-8213-ee9130cd0038.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6b527806-37a2-4d56-8213-ee9130cd0038/af0a68e8-1233-3f5c-ac36-7661fe7ef612.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 400760 IP address blocks: 2606:f840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6b527806-37a2-4d56-8213-ee9130cd0038/6b527806-37a2-4d56-8213-ee9130cd0038.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6b527806-37a2-4d56-8213-ee9130cd0038/6b527806-37a2-4d56-8213-ee9130cd0038.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6b527806-37a2-4d56-8213-ee9130cd0038.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:3e:ef:ec:a3:be:16:33:05:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b527806-37a2-4d56-8213-ee9130cd0038 Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=2a42824a-2fef-4965-b554-74ea92366c23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d0:85:56:a5:a1:8f:d9:7e:1d:5e:0f:51:cc: e9:e2:06:60:51:57:d4:fb:a0:66:a2:9f:75:35:94: c2:62:85:7e:8e:6a:5b:1f:31:55:e1:ee:4b:28:ea: 97:cd:00:ce:c2:07:bc:49:b3:3a:28:e6:3f:69:a3: 4a:bc:ff:a5:4e:08:91:d6:dd:ae:2c:88:ea:21:e9: c8:63:13:1f:fc:84:b6:8d:69:99:6e:da:db:cb:85: fa:7e:ae:c4:ac:11:76:26:62:fc:d6:52:1b:6e:38: 40:14:1e:ea:37:11:c1:e1:ef:c0:2a:65:41:36:d7: 28:3e:62:72:08:e3:36:f9:f5:e8:fa:45:23:d0:7e: d8:03:ff:39:1c:00:8b:82:84:7c:e4:61:c2:e2:37: fd:b1:77:41:8f:1c:a1:72:9a:7e:01:c4:a0:3a:db: a0:45:5a:18:d8:43:1d:f3:7f:d0:fb:d1:3d:3c:1a: bc:b0:87:e6:6d:1b:30:4b:67:ae:22:1b:c8:f1:b2: bf:29:f8:21:03:92:3b:23:02:4f:02:85:bd:2c:69: ab:5f:db:db:32:6e:e6:12:b0:be:77:45:60:eb:c2: e4:dd:97:22:56:8b:8f:ed:cb:6b:b3:c1:8f:4f:03: af:b3:99:3e:77:4f:5d:ad:1c:ad:d9:82:ba:7d:57: c3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:99:9F:32:06:24:EC:7F:A4:B5:AC:37:6C:27:65:AC:46:A9:DC:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6b527806-37a2-4d56-8213-ee9130cd0038/af0a68e8-1233-3f5c-ac36-7661fe7ef612.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6b527806-37a2-4d56-8213-ee9130cd0038/6b527806-37a2-4d56-8213-ee9130cd0038.crl X509v3 Authority Key Identifier: keyid:07:C2:64:48:5D:A7:EF:C9:73:52:27:BF:22:8B:06:EF:71:41:16:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6b527806-37a2-4d56-8213-ee9130cd0038.cer sbgp-ipAddrBlock: critical IPv6: 2606:f840::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:a7:3f:0c:c1:b3:fb:6d:40:7c:4e:be:24:aa:20:88:04:fe: b1:35:77:27:2d:db:66:52:0c:61:92:9c:67:b4:04:ba:c3:ed: 0d:f0:95:6c:20:a2:94:c5:68:63:11:12:1c:13:6f:04:16:68: d6:11:b4:e5:f8:16:75:b7:95:82:85:ef:ce:b7:ab:22:f6:96: ed:0b:ad:63:f0:7e:c3:a6:18:b2:2f:0b:50:f0:97:2b:da:b2: 70:cc:55:e1:88:ff:a6:4d:ea:a5:9f:9b:cd:da:f8:68:bf:08: bc:ae:76:49:78:52:0d:4b:24:05:86:66:d4:46:10:01:4f:f7: d2:e5:9a:71:00:bb:e3:38:63:29:80:e6:6a:66:db:8f:34:23: e5:d0:9f:c5:d2:f8:62:8f:1d:43:45:57:63:52:2d:82:81:6a: 80:d6:78:2f:34:77:75:cc:60:09:66:4d:08:59:f6:02:d6:d8: 30:1e:23:73:4b:2a:b1:a7:4f:eb:03:02:6c:c8:97:26:7e:e6: 95:b0:38:ac:36:6c:46:9c:03:a2:50:4e:88:32:d3:1f:c1:71: a4:72:ea:44:30:b8:96:02:09:74:e3:32:74:61:23:5a:19:2d: 82:18:59:4f:cf:0d:cc:a5:2d:b4:56:32:ca:2f:e1:36:08:e4: 63:2c:07:87 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1lFT7v7KO+FjMFrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmI1Mjc4MDYtMzdhMi00ZDU2LTgyMTMtZWU5MTMwY2Qw MDM4MB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk MmE0MjgyNGEtMmZlZi00OTY1LWI1NTQtNzRlYTkyMzY2YzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNCFVqWhj9l+HV4PUczp4gZgUVfU+6Bmop91 NZTCYoV+jmpbHzFV4e5LKOqXzQDOwge8SbM6KOY/aaNKvP+lTgiR1t2uLIjqIenI YxMf/IS2jWmZbtrby4X6fq7ErBF2JmL81lIbbjhAFB7qNxHB4e/AKmVBNtcoPmJy COM2+fXo+kUj0H7YA/85HACLgoR85GHC4jf9sXdBjxyhcpp+AcSgOtugRVoY2EMd 83/Q+9E9PBq8sIfmbRswS2euIhvI8bK/KfghA5I7IwJPAoW9LGmrX9vbMm7mErC+ d0Vg68Lk3ZciVouP7ctrs8GPTwOvs5k+d09drRyt2YK6fVfDqwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFA+ZnzIGJOx/pLWsN2wnZaxGqdx9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi82YjUy NzgwNi0zN2EyLTRkNTYtODIxMy1lZTkxMzBjZDAwMzgvYWYwYTY4ZTgtMTIzMy0z ZjVjLWFjMzYtNzY2MWZlN2VmNjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNmI1Mjc4MDYtMzdhMi00ZDU2LTgy MTMtZWU5MTMwY2QwMDM4LzZiNTI3ODA2LTM3YTItNGQ1Ni04MjEzLWVlOTEzMGNk MDAzOC5jcmwwHwYDVR0jBBgwFoAUB8JkSF2n78lzUie/IosG73FBFrIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi82YjUyNzgwNi0zN2EyLTRkNTYtODIxMy1lZTkx MzBjZDAwMzguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgb4QDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAlpz8MwbP7bUB8Tr4kqiCIBP6xNXcnLdtmUgxhkpxntAS6w+0N8JVs IKKUxWhjERIcE28EFmjWEbTl+BZ1t5WChe/Ot6si9pbtC61j8H7DphiyLwtQ8Jcr 2rJwzFXhiP+mTeqln5vN2vhovwi8rnZJeFINSyQFhmbURhABT/fS5ZpxALvjOGMp gOZqZtuPNCPl0J/F0vhijx1DRVdjUi2CgWqA1ngvNHd1zGAJZk0IWfYC1tgwHiNz Syqxp0/rAwJsyJcmfuaVsDisNmxGnAOiUE6IMtMfwXGkcupEMLiWAgl04zJ0YSNa GS2CGFlPzw3MpS20VjLKL+E2CORjLAeH -----END CERTIFICATE-----Generated at Mon Apr 13 12:10:59 2026 by rpki-client