$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/dede31bf-e82b-3380-8794-1fc710158b40.roa File: dede31bf-e82b-3380-8794-1fc710158b40.roa (raw, json) Hash identifier: C3gPATDe40J2cGUAtvuakpQVbHJ6MYMEULOcf1n4hqc= Subject key identifier: 8E:1F:B8:3E:5C:90:86:0B:4F:98:7F:D0:EC:05:C3:4F:17:77:62:81 Certificate issuer: /CN=af8fc859-9134-44b2-9e4c-267a8d2386da Certificate serial: 010D0C9F4328584DDE85CBAE195A5D8C56C1F340 Authority key identifier: E5:BA:56:A9:8D:07:88:84:D2:E8:65:31:8B:56:B7:BC:F8:8B:EB:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/dede31bf-e82b-3380-8794-1fc710158b40.roa Signing time: Mon 18 May 2026 01:00:24 +0000 ROA not before: Mon 18 May 2026 01:00:24 +0000 ROA not after: Sun 16 Aug 2026 01:00:24 +0000 asID: 32242 IP address blocks: 2620:48:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/af8fc859-9134-44b2-9e4c-267a8d2386da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/af8fc859-9134-44b2-9e4c-267a8d2386da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:de:85:cb:ae:19:5a:5d:8c:56:c1:f3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af8fc859-9134-44b2-9e4c-267a8d2386da Validity Not Before: May 18 01:00:24 2026 GMT Not After : Aug 16 01:00:24 2026 GMT Subject: CN=3bde37fc-0dd8-4604-ba25-0b21e192f3f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d4:c7:cb:5e:15:12:16:83:94:b8:5c:c9:b1: b5:66:a3:2f:aa:b0:dc:67:fa:23:8a:38:e6:33:2c: 8a:98:d7:1f:52:76:fd:d2:e7:8f:e5:34:fe:46:47: f4:da:ae:13:0c:a8:33:ab:47:93:3c:19:7e:61:86: 8d:f9:ef:73:4b:5f:53:de:ca:79:7b:09:17:5a:0a: d8:19:a3:da:e8:d5:57:1e:55:77:13:58:2d:2a:e2: cd:6d:b4:da:0c:3a:3f:3c:fd:63:39:b4:68:ca:74: 83:9b:da:be:05:85:4d:bf:96:3d:34:97:dd:d4:2c: a2:29:72:de:03:08:46:e3:7d:e9:94:94:f5:a1:d8: 4d:ab:c2:1b:f0:d6:3d:a4:7b:14:3e:3b:6f:36:64: 85:66:ff:b3:a6:bc:e8:64:8d:66:f2:e9:1f:31:93: fb:87:b6:de:1d:78:e5:eb:b6:3b:38:ff:ed:b3:18: 99:09:17:aa:9f:bd:9c:0a:f2:23:f1:52:1e:92:cb: 6e:5c:69:e9:c9:14:55:d5:24:28:30:68:26:05:4b: 08:0b:7b:22:fc:16:cb:b5:77:00:b8:8d:ff:80:f4: 65:b7:98:76:d7:12:7a:03:77:4f:a4:7f:61:68:35: c2:fd:0b:07:6f:7e:d0:1d:df:fb:23:08:99:0f:5c: b3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:1F:B8:3E:5C:90:86:0B:4F:98:7F:D0:EC:05:C3:4F:17:77:62:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/dede31bf-e82b-3380-8794-1fc710158b40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/af8fc859-9134-44b2-9e4c-267a8d2386da.crl X509v3 Authority Key Identifier: keyid:E5:BA:56:A9:8D:07:88:84:D2:E8:65:31:8B:56:B7:BC:F8:8B:EB:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da.cer sbgp-ipAddrBlock: critical IPv6: 2620:48:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:6c:a5:ab:95:2c:c7:09:b4:2d:50:cd:95:fb:9a:4d:2f:c9: fb:6f:56:12:db:0c:44:dd:8f:d3:91:21:6c:13:5b:07:83:e4: ea:16:4f:3a:e1:31:ad:7e:85:68:a3:a7:17:f7:1a:87:66:58: 96:01:06:9e:25:fb:43:05:c7:2f:b2:c1:0e:fb:44:68:b8:f0: 7b:c8:81:75:52:d8:5e:f8:68:7d:b2:d0:22:d3:97:ee:b2:17: ba:51:e2:ed:77:dd:b2:31:61:1e:86:b6:88:99:6e:d9:6c:d9: e0:14:94:a3:5b:2d:0c:5d:c0:9d:ad:9e:2a:b1:06:bd:f6:62: 43:6d:e2:2c:ac:16:8b:02:17:7e:c1:30:a8:6e:a9:84:4d:ea: a9:82:1c:c0:05:02:01:55:f4:c1:6d:ac:65:a0:15:ae:b3:2f: 63:0f:35:35:2b:ed:74:13:07:af:7f:ff:65:a1:3b:77:05:ac: bd:3d:52:f0:7e:0a:f5:29:92:b5:2c:aa:a8:cb:a2:10:51:c0: 69:1b:b1:c1:81:63:d8:3a:d2:b0:d2:14:5b:87:a4:ff:91:50: eb:d4:a2:bb:bf:48:d1:ac:69:3a:71:15:0e:74:86:de:67:03: e7:e1:44:c9:45:14:2d:a6:6f:80:b2:bf:46:4b:d7:6d:2a:c3: 8d:07:b7:04 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3ehcuuGVpdjFbB80AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY4ZmM4NTktOTEzNC00NGIyLTllNGMtMjY3YThkMjM4 NmRhMB4XDTI2MDUxODAxMDAyNFoXDTI2MDgxNjAxMDAyNFowLzEtMCsGA1UEAxMk M2JkZTM3ZmMtMGRkOC00NjA0LWJhMjUtMGIyMWUxOTJmM2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidTHy14VEhaDlLhcybG1ZqMvqrDcZ/ojijjm MyyKmNcfUnb90ueP5TT+Rkf02q4TDKgzq0eTPBl+YYaN+e9zS19T3sp5ewkXWgrY GaPa6NVXHlV3E1gtKuLNbbTaDDo/PP1jObRoynSDm9q+BYVNv5Y9NJfd1CyiKXLe AwhG433plJT1odhNq8Ib8NY9pHsUPjtvNmSFZv+zprzoZI1m8ukfMZP7h7beHXjl 67Y7OP/tsxiZCReqn72cCvIj8VIekstuXGnpyRRV1SQoMGgmBUsIC3si/BbLtXcA uI3/gPRlt5h21xJ6A3dPpH9haDXC/QsHb37QHd/7IwiZD1yz+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI4fuD5ckIYLT5h/0OwFw08Xd2KBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hZjhm Yzg1OS05MTM0LTQ0YjItOWU0Yy0yNjdhOGQyMzg2ZGEvZGVkZTMxYmYtZTgyYi0z MzgwLTg3OTQtMWZjNzEwMTU4YjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWY4ZmM4NTktOTEzNC00NGIyLTll NGMtMjY3YThkMjM4NmRhL2FmOGZjODU5LTkxMzQtNDRiMi05ZTRjLTI2N2E4ZDIz ODZkYS5jcmwwHwYDVR0jBBgwFoAU5bpWqY0HiITS6GUxi1a3vPiL62AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hZjhmYzg1OS05MTM0LTQ0YjItOWU0Yy0yNjdh OGQyMzg2ZGEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAASKAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFpspauVLMcJtC1QzZX7mk0vyftvVhLbDETdj9ORIWwTWweD5OoW TzrhMa1+hWijpxf3GodmWJYBBp4l+0MFxy+ywQ77RGi48HvIgXVS2F74aH2y0CLT l+6yF7pR4u133bIxYR6GtoiZbtls2eAUlKNbLQxdwJ2tniqxBr32YkNt4iysFosC F37BMKhuqYRN6qmCHMAFAgFV9MFtrGWgFa6zL2MPNTUr7XQTB69//2WhO3cFrL09 UvB+CvUpkrUsqqjLohBRwGkbscGBY9g60rDSFFuHpP+RUOvUoru/SNGsaTpxFQ50 ht5nA+fhRMlFFC2mb4Cyv0ZL120qw40HtwQ= -----END CERTIFICATE-----Generated at Thu May 21 12:35:58 2026 by rpki-client