$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/842e43e1-9687-3482-aa4c-e20b9020a6ad.roa File: 842e43e1-9687-3482-aa4c-e20b9020a6ad.roa (raw, json) Hash identifier: lPQbwU8rT1nKRKCTvBUqNM9eOekg9rql9dbXthUDCSw= Subject key identifier: AE:FA:F1:6A:93:BE:46:7C:52:16:B2:EB:4B:8F:85:EA:81:01:82:30 Certificate issuer: /CN=af4b288d-bc7b-443a-b3f4-52662b22717a Certificate serial: 010D0C9F4328584EA7870722B1634B624FA25FC0 Authority key identifier: 33:00:06:6E:0F:90:44:FD:C5:20:B6:BA:C7:52:F3:7D:C9:E2:A4:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/842e43e1-9687-3482-aa4c-e20b9020a6ad.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 401431 IP address blocks: 2602:f7c5::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:07:22:b1:63:4b:62:4f:a2:5f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af4b288d-bc7b-443a-b3f4-52662b22717a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=87ec864e-4078-417c-82cd-d8026cf89248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:40:08:c4:aa:d0:d1:10:5b:3a:b6:25:8e:4f: 7f:5c:9e:91:6e:17:e2:96:99:b0:1f:b1:5b:41:ec: 0c:17:89:6f:58:f1:10:07:20:b7:3e:da:ad:30:f7: b0:71:68:6f:14:fb:2f:21:29:9d:5c:ec:3d:f6:aa: cb:11:09:cf:bb:5b:fb:2c:50:a2:23:0b:14:1d:2d: ed:57:02:91:23:1b:0c:06:da:64:89:7f:1d:74:6f: b7:da:ec:c9:26:09:2a:06:d5:3c:35:c7:c1:89:4b: 5a:3b:59:38:f5:50:22:36:5d:d3:2b:48:8f:b0:cd: 40:d2:0c:df:0b:b5:4c:6e:2e:46:53:74:8d:2e:82: 9a:cb:5d:fd:11:39:fc:b5:d2:1c:e7:26:41:97:3c: 90:3c:0e:d8:b7:b7:01:9c:45:9d:2f:94:2c:0f:ed: 7d:3a:2d:e9:3d:f4:a3:c8:3d:39:d6:46:c1:68:50: c8:59:12:31:c3:a1:90:36:aa:05:48:c9:ac:05:ea: 8c:b4:be:fa:b9:a4:39:28:f8:59:bd:45:e2:81:d2: 72:00:18:89:94:97:c9:b9:6e:f4:bb:4e:03:99:a3: b8:bd:73:2d:64:13:2f:65:dd:4d:74:1a:b5:4e:ff: 91:a1:d9:f1:d3:60:08:6c:97:4f:10:58:cb:93:7e: 46:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:FA:F1:6A:93:BE:46:7C:52:16:B2:EB:4B:8F:85:EA:81:01:82:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/842e43e1-9687-3482-aa4c-e20b9020a6ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.crl X509v3 Authority Key Identifier: keyid:33:00:06:6E:0F:90:44:FD:C5:20:B6:BA:C7:52:F3:7D:C9:E2:A4:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a.cer sbgp-ipAddrBlock: critical IPv6: 2602:f7c5::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:15:63:87:8c:b3:db:af:09:dd:10:13:a8:78:13:e8:50:6f: f6:aa:52:19:0c:ad:e2:aa:96:a4:58:52:b7:d1:c5:72:48:42: a6:18:15:78:c5:20:19:94:75:25:b5:5b:df:e2:ec:f1:70:79: bb:48:ce:2f:a0:e2:d2:e0:56:0d:8c:d5:85:19:02:cf:e6:eb: 6b:c2:70:8c:82:c7:6b:4d:81:c8:35:4e:79:f1:48:fe:50:25: 7c:c7:a0:e6:ef:72:45:0b:b3:60:28:06:b5:09:8d:c5:05:54: 1e:0c:9a:46:0a:b1:25:ad:37:5d:de:bc:27:3d:9a:27:e9:85: f6:09:51:1d:55:a9:51:3e:6a:20:97:1a:6b:13:72:ff:80:0a: 24:9a:c5:0c:53:86:43:fd:5c:9b:a1:8b:0a:b0:64:93:b1:11: 6e:67:02:db:2a:49:e6:05:ca:1a:a6:53:86:40:7d:d9:fe:d3: 5a:5c:6e:c5:5d:fd:aa:a5:9b:eb:e1:93:b9:d0:e6:9a:e9:93: 41:23:6a:d5:c5:52:63:f6:5a:a9:2c:64:70:ff:80:2b:2d:a9: 48:d8:31:df:c1:41:3c:28:1b:37:0a:c7:c2:54:88:ac:7a:3e: 0e:c2:81:02:1c:11:6b:a0:85:3e:dc:67:5b:9c:08:bd:b7:af: 68:f1:0d:46 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE6nhwcisWNLYk+iX8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY0YjI4OGQtYmM3Yi00NDNhLWIzZjQtNTI2NjJiMjI3 MTdhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODdlYzg2NGUtNDA3OC00MTdjLTgyY2QtZDgwMjZjZjg5MjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0AIxKrQ0RBbOrYljk9/XJ6RbhfilpmwH7Fb QewMF4lvWPEQByC3PtqtMPewcWhvFPsvISmdXOw99qrLEQnPu1v7LFCiIwsUHS3t VwKRIxsMBtpkiX8ddG+32uzJJgkqBtU8NcfBiUtaO1k49VAiNl3TK0iPsM1A0gzf C7VMbi5GU3SNLoKay139ETn8tdIc5yZBlzyQPA7Yt7cBnEWdL5QsD+19Oi3pPfSj yD051kbBaFDIWRIxw6GQNqoFSMmsBeqMtL76uaQ5KPhZvUXigdJyABiJlJfJuW70 u04DmaO4vXMtZBMvZd1NdBq1Tv+Rodnx02AIbJdPEFjLk35GnwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFK768WqTvkZ8Uhay60uPheqBAYIwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZjRi Mjg4ZC1iYzdiLTQ0M2EtYjNmNC01MjY2MmIyMjcxN2EvODQyZTQzZTEtOTY4Ny0z NDgyLWFhNGMtZTIwYjkwMjBhNmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWY0YjI4OGQtYmM3Yi00NDNhLWIz ZjQtNTI2NjJiMjI3MTdhL2FmNGIyODhkLWJjN2ItNDQzYS1iM2Y0LTUyNjYyYjIy NzE3YS5jcmwwHwYDVR0jBBgwFoAUMwAGbg+QRP3FILa6x1LzfcnipMwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZjRiMjg4ZC1iYzdiLTQ0M2EtYjNmNC01MjY2 MmIyMjcxN2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL3xQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAYBVjh4yz268J3RATqHgT6FBv9qpSGQyt4qqWpFhSt9HFckhCphgV eMUgGZR1JbVb3+Ls8XB5u0jOL6Di0uBWDYzVhRkCz+bra8JwjILHa02ByDVOefFI /lAlfMeg5u9yRQuzYCgGtQmNxQVUHgyaRgqxJa03Xd68Jz2aJ+mF9glRHVWpUT5q IJcaaxNy/4AKJJrFDFOGQ/1cm6GLCrBkk7ERbmcC2ypJ5gXKGqZThkB92f7TWlxu xV39qqWb6+GTudDmmumTQSNq1cVSY/ZaqSxkcP+AKy2pSNgx38FBPCgbNwrHwlSI rHo+DsKBAhwRa6CFPtxnW5wIvbevaPENRg== -----END CERTIFICATE-----Generated at Wed Jul 29 07:51:48 2026 by rpki-client