$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/a6d1ed7b-f421-3700-ba40-7269eaf217ab.roa File: a6d1ed7b-f421-3700-ba40-7269eaf217ab.roa (raw, json) Hash identifier: Ga5liaFilpYYCe9gGm2r9a4tR4NzB5xxJUCdPTP5OyA= Subject key identifier: BD:29:FF:0B:00:C9:2E:0F:C6:75:00:E9:27:DA:9F:3B:A6:C6:E1:F8 Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Certificate serial: 010D0C9F4328584F093CE1A767AC500050B2B6C0 Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/a6d1ed7b-f421-3700-ba40-7269eaf217ab.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 14500 IP address blocks: 2607:72c0::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:e1:a7:67:ac:50:00:50:b2:b6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=95293414-e8a3-48e8-ab53-2acc4099dfd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:23:81:0f:95:e9:9d:95:c0:d2:76:25:0f:b8: cd:09:68:a5:ff:93:8e:99:6f:df:bb:65:e9:6e:0d: 71:7e:ce:6e:2e:c5:f5:94:66:f9:17:cb:73:d2:ea: 33:8e:4b:9c:a0:bf:cd:1a:b0:94:80:50:41:67:a3: 31:ac:ca:88:ab:da:44:6e:cd:4b:40:dc:9a:f8:8e: 3d:cd:bc:52:a5:53:4a:e0:52:5e:65:fb:85:7e:c1: 5a:13:1f:7a:00:91:1c:d3:dc:01:d9:24:6d:31:16: a9:0d:f6:cf:28:e2:de:e1:a9:4f:3c:36:36:1e:d7: 2e:4e:52:03:d7:53:7d:bd:74:87:51:91:77:84:ac: 4e:1d:cc:22:8f:99:91:0d:1a:05:4e:71:7a:45:6c: 33:79:b7:73:8b:66:bd:10:25:6f:1e:0e:62:ae:3a: 43:61:35:91:47:82:c4:c8:12:58:b8:99:c1:ae:51: 8b:ff:5b:39:d6:22:af:a7:7a:50:69:ba:32:a7:5a: a2:d0:57:44:b8:1c:56:07:0b:09:51:5d:e2:2a:4c: 33:31:a6:8f:47:b7:62:19:fb:df:86:87:31:e0:9d: 50:09:da:d0:e6:4d:36:55:eb:24:56:02:9e:5c:df: 82:0f:31:71:4f:4a:46:c9:c7:aa:ea:17:b2:c1:ec: 19:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:29:FF:0B:00:C9:2E:0F:C6:75:00:E9:27:DA:9F:3B:A6:C6:E1:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/a6d1ed7b-f421-3700-ba40-7269eaf217ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl X509v3 Authority Key Identifier: keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer sbgp-ipAddrBlock: critical IPv6: 2607:72c0::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:71:a4:32:10:7a:0f:e5:41:b5:1a:9e:a0:dd:21:6b:cc:f8: 31:cd:20:dc:cf:02:99:9e:75:10:9b:b5:13:a2:47:14:83:59: da:52:37:b8:9a:93:4d:0c:64:8b:7f:63:53:cf:8c:40:5a:b9: 96:58:aa:1a:af:19:a2:0f:52:57:f9:7f:f8:b0:e8:2d:69:91: 14:1b:46:2e:c3:96:6a:a9:7a:ae:7a:76:46:d6:be:4f:35:67: af:e6:46:91:fd:68:d2:28:1e:f5:f6:2e:06:e1:a5:2e:18:a0: 7a:f2:74:93:f4:0b:2b:21:1d:f9:1e:12:09:30:5b:43:5d:f4: 7e:62:1c:65:07:52:fe:f4:a4:a0:df:53:f2:04:49:73:ca:9b: fb:13:41:46:de:7a:7e:c3:0a:7f:8a:ce:93:27:9e:dc:90:e5: 60:00:5f:4c:f2:6b:56:e2:b9:98:47:3c:83:b7:2f:63:7e:5a: 76:87:5d:ce:bf:5b:0c:e7:f6:ba:0d:05:24:37:2e:22:aa:0a: 9c:cc:4c:6d:a3:b6:9d:d9:47:69:d1:33:54:6e:a5:25:b6:d9: 9a:f9:9b:26:68:8c:4d:1d:f4:26:08:3b:25:3a:64:71:d6:29: 95:5d:dc:19:6e:af:18:f4:7e:85:af:af:20:c7:be:05:60:98: 7d:aa:7c:75 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8JPOGnZ6xQAFCytsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjOWM0YzctZGU0YS00MDY2LTg3MGUtMzgzZDc3MGQ2 ZDQ3MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk OTUyOTM0MTQtZThhMy00OGU4LWFiNTMtMmFjYzQwOTlkZmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniOBD5XpnZXA0nYlD7jNCWil/5OOmW/fu2Xp bg1xfs5uLsX1lGb5F8tz0uozjkucoL/NGrCUgFBBZ6MxrMqIq9pEbs1LQNya+I49 zbxSpVNK4FJeZfuFfsFaEx96AJEc09wB2SRtMRapDfbPKOLe4alPPDY2HtcuTlID 11N9vXSHUZF3hKxOHcwij5mRDRoFTnF6RWwzebdzi2a9ECVvHg5irjpDYTWRR4LE yBJYuJnBrlGL/1s51iKvp3pQaboyp1qi0FdEuBxWBwsJUV3iKkwzMaaPR7diGfvf hocx4J1QCdrQ5k02VeskVgKeXN+CDzFxT0pGyceq6heywewZeQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFL0p/wsAyS4PxnUA6SfanzumxuH4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5 YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcwZDZkNDcvYTZkMWVkN2ItZjQyMS0z NzAwLWJhNDAtNzI2OWVhZjIxN2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWZjOWM0YzctZGU0YS00MDY2LTg3 MGUtMzgzZDc3MGQ2ZDQ3L2FmYzljNGM3LWRlNGEtNDA2Ni04NzBlLTM4M2Q3NzBk NmQ0Ny5jcmwwHwYDVR0jBBgwFoAUXX3Bvtm/pH6PXLAL1PiCUDDM2fIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNk NzcwZDZkNDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgdywAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAoHGkMhB6D+VBtRqeoN0ha8z4Mc0g3M8CmZ51EJu1E6JHFINZ2lI3 uJqTTQxki39jU8+MQFq5lliqGq8Zog9SV/l/+LDoLWmRFBtGLsOWaql6rnp2Rta+ TzVnr+ZGkf1o0ige9fYuBuGlLhigevJ0k/QLKyEd+R4SCTBbQ130fmIcZQdS/vSk oN9T8gRJc8qb+xNBRt56fsMKf4rOkyee3JDlYABfTPJrVuK5mEc8g7cvY35adodd zr9bDOf2ug0FJDcuIqoKnMxMbaO2ndlHadEzVG6lJbbZmvmbJmiMTR30Jgg7JTpk cdYplV3cGW6vGPR+ha+vIMe+BWCYfap8dQ== -----END CERTIFICATE-----Generated at Mon Oct 12 20:48:22 2026 by rpki-client