$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afac2040-708d-3723-a444-3b0663b57f5b.roa File: afac2040-708d-3723-a444-3b0663b57f5b.roa (raw, json) Hash identifier: Wvour1UEXlc2lsMGtzAAX+vgMXfPqXfNKmpJKfYCkmM= Subject key identifier: A2:4E:C4:9A:D7:FF:5D:91:9F:E3:13:64:7B:83:B7:A9:95:21:E2:46 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584E296F18476B908888BE1C1600 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afac2040-708d-3723-a444-3b0663b57f5b.roa Signing time: Sat 13 Jun 2026 21:00:12 +0000 ROA not before: Sat 13 Jun 2026 21:00:12 +0000 ROA not after: Fri 11 Sep 2026 21:00:12 +0000 asID: 15169 IP address blocks: 2600:1902:140::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:29:6f:18:47:6b:90:88:88:be:1c:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jun 13 21:00:12 2026 GMT Not After : Sep 11 21:00:12 2026 GMT Subject: CN=4c512367-6ba2-48ce-bcd4-f2a1b33a056b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ba:37:ad:27:d0:d4:7f:b3:84:45:1a:3c:fb: d7:e2:4a:3e:45:f8:c3:67:d8:c9:80:e2:93:df:d7: c6:e0:6b:a2:c6:56:00:0b:c7:cb:67:87:33:c2:7f: 0c:1a:b2:36:d0:a0:f2:ea:8b:60:80:51:50:3d:82: c8:13:7d:1d:03:e0:fe:20:bd:83:f0:3e:10:fc:50: a2:96:c0:76:f6:88:2d:4f:f5:5b:a7:cc:af:57:b3: c2:56:fd:99:a4:87:0c:3a:41:80:e4:ce:f1:af:68: 67:81:7f:8a:73:0d:9f:7a:1b:54:eb:8a:d0:c8:a6: aa:f2:ad:26:dd:6a:45:9b:84:ad:9a:43:fd:5f:ec: 8d:6d:4c:bf:fb:e4:a1:d9:f3:41:24:1f:62:d3:d3: ed:91:d2:32:71:df:63:2f:cc:a4:28:12:30:d4:ec: 8b:b4:32:68:c7:b4:a3:6d:90:43:79:05:e9:b6:44: 9d:0f:90:fa:93:68:d3:2a:a4:c0:52:b2:55:01:9f: 8e:1a:39:67:9d:05:63:48:ab:49:2c:f8:76:05:9f: 24:97:b9:6b:db:8e:9e:7d:eb:2d:29:af:56:a0:a0: f0:ca:8f:1e:62:d4:13:e2:96:2a:47:4d:5b:ca:54: ab:0f:6f:05:0f:e3:d4:ec:1a:da:b6:09:0e:fa:b0: 48:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:4E:C4:9A:D7:FF:5D:91:9F:E3:13:64:7B:83:B7:A9:95:21:E2:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afac2040-708d-3723-a444-3b0663b57f5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv6: 2600:1902:140::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:70:82:02:c4:54:db:4e:0b:92:19:7b:cd:2c:d4:39:67:dd: ba:b6:1f:58:60:5e:c1:32:a4:85:bc:56:19:a0:6e:6d:ec:52: 3b:6f:89:07:e1:07:27:8f:61:bc:3b:ca:e4:31:c1:2f:02:a6: a0:99:be:8c:b7:b1:b9:f0:52:79:2f:76:b8:f2:a0:5e:d6:69: 6f:96:2e:3f:ff:4f:9d:25:27:f8:62:17:a0:85:3e:39:36:aa: 20:6e:97:79:f3:de:55:b7:64:ee:a5:9b:e5:0c:13:d2:d0:85: 11:13:4d:42:15:59:8a:e9:61:ae:d4:2a:44:d9:fc:24:e0:2f: ab:44:32:27:22:4b:49:63:c8:4f:8d:7f:f1:04:a3:83:5c:56: 70:a1:c2:88:c0:16:7b:62:12:77:f8:30:fc:97:95:73:c5:1e: 87:84:57:79:57:85:58:fe:ee:aa:5b:3b:f3:c5:fe:24:a5:f7: 60:b1:4f:58:48:40:ce:2d:0b:db:ad:7c:f3:ec:0b:23:fc:f1: 4e:ae:43:fe:78:5c:34:9c:42:5f:39:70:81:ac:7a:5f:45:52: 1c:24:52:45:b4:2c:5d:86:ab:bd:05:13:d0:71:ca:9d:cf:59: 31:c1:09:61:06:7b:5a:b0:03:58:75:fe:85:c4:0d:81:6f:e7: 3d:fc:8f:60 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4pbxhHa5CIiL4cFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDYxMzIxMDAxMloXDTI2MDkxMTIxMDAxMlowLzEtMCsGA1UEAxMk NGM1MTIzNjctNmJhMi00OGNlLWJjZDQtZjJhMWIzM2EwNTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLo3rSfQ1H+zhEUaPPvX4ko+RfjDZ9jJgOKT 39fG4GuixlYAC8fLZ4czwn8MGrI20KDy6otggFFQPYLIE30dA+D+IL2D8D4Q/FCi lsB29ogtT/Vbp8yvV7PCVv2ZpIcMOkGA5M7xr2hngX+Kcw2fehtU64rQyKaq8q0m 3WpFm4StmkP9X+yNbUy/++Sh2fNBJB9i09PtkdIycd9jL8ykKBIw1OyLtDJox7Sj bZBDeQXptkSdD5D6k2jTKqTAUrJVAZ+OGjlnnQVjSKtJLPh2BZ8kl7lr246efest Ka9WoKDwyo8eYtQT4pYqR01bylSrD28FD+PU7BratgkO+rBIYQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKJOxJrX/12Rn+MTZHuDt6mVIeJGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWZhYzIwNDAtNzA4ZC0z NzIzLWE0NDQtM2IwNjYzYjU3ZjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAZAgFA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAExwggLEVNtOC5IZe80s1Dln3bq2H1hgXsEypIW8Vhmgbm3sUjtv iQfhByePYbw7yuQxwS8CpqCZvoy3sbnwUnkvdrjyoF7WaW+WLj//T50lJ/hiF6CF Pjk2qiBul3nz3lW3ZO6lm+UME9LQhRETTUIVWYrpYa7UKkTZ/CTgL6tEMiciS0lj yE+Nf/EEo4NcVnChwojAFntiEnf4MPyXlXPFHoeEV3lXhVj+7qpbO/PF/iSl92Cx T1hIQM4tC9utfPPsCyP88U6uQ/54XDScQl85cIGsel9FUhwkUkW0LF2Gq70FE9Bx yp3PWTHBCWEGe1qwA1h1/oXEDYFv5z38j2A= -----END CERTIFICATE-----Generated at Sun Jun 14 02:17:32 2026 by rpki-client