$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/842e43e1-9687-3482-aa4c-e20b9020a6ad.roa File: 842e43e1-9687-3482-aa4c-e20b9020a6ad.roa (raw, json) Hash identifier: QvrB0+tHBxgcczGOFXhDmFEczfjfSd9ExGA//frvTEw= Subject key identifier: EC:5C:2E:63:40:6B:ED:25:D9:07:EA:85:E7:A6:52:A5:AC:BD:00:2E Certificate issuer: /CN=af4b288d-bc7b-443a-b3f4-52662b22717a Certificate serial: 010D0C9F4328584F4975E2592DC8991B1FD1B07C Authority key identifier: 33:00:06:6E:0F:90:44:FD:C5:20:B6:BA:C7:52:F3:7D:C9:E2:A4:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/842e43e1-9687-3482-aa4c-e20b9020a6ad.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 401431 IP address blocks: 2602:f7c5::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:e2:59:2d:c8:99:1b:1f:d1:b0:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af4b288d-bc7b-443a-b3f4-52662b22717a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f8ff5683-f878-459b-b890-e788259b42c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:72:1c:32:ec:2f:35:f2:e1:40:8a:ac:33:e3: 95:e8:fa:1c:de:bf:74:b3:bb:74:70:77:54:22:27: 33:bf:a0:ac:f9:1f:12:dd:a3:e1:45:2a:78:22:b7: 2a:45:3a:55:0d:d0:c8:cf:95:a4:08:a6:8b:05:a9: e1:57:90:f4:7d:c2:e9:4c:21:74:49:9e:eb:28:c0: 36:67:9f:6e:a8:81:ef:58:0c:fe:62:d5:f9:cc:8d: 50:5f:a7:18:3a:6f:7c:e0:5b:48:4c:80:e7:d9:5f: 69:2e:9f:7f:34:62:4c:6d:39:0d:a2:cb:3d:66:18: 17:2b:6d:f3:c1:51:60:d0:f5:c8:04:7b:e0:f5:c8: 22:76:fa:4e:05:e8:88:eb:08:a8:7f:58:ee:32:ee: 6f:ce:c4:8f:4f:9b:87:91:0b:c7:f9:10:4f:bb:1e: b8:19:dd:67:ee:5f:65:f4:21:d1:8e:db:0e:17:90: 33:33:13:56:5a:b8:0e:01:90:3b:cf:9a:dc:88:58: c4:10:c5:04:a5:68:df:96:6d:a3:56:af:40:52:b8: 85:79:5e:5a:06:50:e5:ff:e5:09:2e:aa:85:b6:b0: 08:55:29:ef:0a:56:41:d5:b2:df:75:02:33:7e:04: 06:23:ec:23:b2:8b:5f:39:88:37:f5:c3:11:9e:db: 5e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:5C:2E:63:40:6B:ED:25:D9:07:EA:85:E7:A6:52:A5:AC:BD:00:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/842e43e1-9687-3482-aa4c-e20b9020a6ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.crl X509v3 Authority Key Identifier: keyid:33:00:06:6E:0F:90:44:FD:C5:20:B6:BA:C7:52:F3:7D:C9:E2:A4:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a.cer sbgp-ipAddrBlock: critical IPv6: 2602:f7c5::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:ca:7f:ae:f6:bc:5d:71:0e:81:c8:3f:46:b4:ec:ac:f9:dc: a0:35:fb:ba:26:b4:b7:4b:c2:91:bb:0d:f4:0e:0f:ed:c5:34: 95:a2:6f:cc:2e:fd:5c:92:3d:d9:61:7c:ce:83:15:09:9d:a8: 2b:fe:c2:fc:43:20:ff:f6:5c:54:e0:4d:71:2b:ca:23:df:fd: c9:a5:b7:7f:1e:1b:41:5d:27:3d:f3:c8:b2:de:4d:78:16:b8: ec:24:f7:d0:02:db:98:4f:9f:d3:67:d8:96:7e:46:27:a4:da: d2:60:ce:bc:57:22:c0:77:c5:47:86:c7:f2:02:f1:dc:73:6a: a5:a2:4b:47:ae:f8:df:dd:fe:24:92:2a:f5:54:ab:6e:c7:95: f1:e0:83:5b:e8:9d:43:ba:b1:8c:4f:9e:36:ec:da:9a:94:36: b8:fb:74:a4:bf:ad:c0:cc:e8:1a:90:ee:ef:24:20:b5:44:d0: 63:88:a9:d3:f0:c2:c2:dd:6f:41:ba:2a:37:d0:7a:c0:66:2c: 7d:ab:0a:3a:6f:d5:d7:0b:e8:f4:a6:ab:0f:1e:37:e0:c2:33: c2:f3:3e:b3:ac:2f:94:b4:49:86:9c:f5:8e:ac:b8:33:1d:63: 41:01:17:5d:71:73:f9:52:10:0d:f8:e6:cb:85:31:c7:18:c7: 20:91:ec:38 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9JdeJZLciZGx/RsHwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY0YjI4OGQtYmM3Yi00NDNhLWIzZjQtNTI2NjJiMjI3 MTdhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjhmZjU2ODMtZjg3OC00NTliLWI4OTAtZTc4ODI1OWI0MmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XIcMuwvNfLhQIqsM+OV6Poc3r90s7t0cHdU Iiczv6Cs+R8S3aPhRSp4IrcqRTpVDdDIz5WkCKaLBanhV5D0fcLpTCF0SZ7rKMA2 Z59uqIHvWAz+YtX5zI1QX6cYOm984FtITIDn2V9pLp9/NGJMbTkNoss9ZhgXK23z wVFg0PXIBHvg9cgidvpOBeiI6wiof1juMu5vzsSPT5uHkQvH+RBPux64Gd1n7l9l 9CHRjtsOF5AzMxNWWrgOAZA7z5rciFjEEMUEpWjflm2jVq9AUriFeV5aBlDl/+UJ LqqFtrAIVSnvClZB1bLfdQIzfgQGI+wjsotfOYg39cMRntteRQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFOxcLmNAa+0l2QfqheemUqWsvQAuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZjRi Mjg4ZC1iYzdiLTQ0M2EtYjNmNC01MjY2MmIyMjcxN2EvODQyZTQzZTEtOTY4Ny0z NDgyLWFhNGMtZTIwYjkwMjBhNmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWY0YjI4OGQtYmM3Yi00NDNhLWIz ZjQtNTI2NjJiMjI3MTdhL2FmNGIyODhkLWJjN2ItNDQzYS1iM2Y0LTUyNjYyYjIy NzE3YS5jcmwwHwYDVR0jBBgwFoAUMwAGbg+QRP3FILa6x1LzfcnipMwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZjRiMjg4ZC1iYzdiLTQ0M2EtYjNmNC01MjY2 MmIyMjcxN2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL3xQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAZ8p/rva8XXEOgcg/RrTsrPncoDX7uia0t0vCkbsN9A4P7cU0laJv zC79XJI92WF8zoMVCZ2oK/7C/EMg//ZcVOBNcSvKI9/9yaW3fx4bQV0nPfPIst5N eBa47CT30ALbmE+f02fYln5GJ6Ta0mDOvFciwHfFR4bH8gLx3HNqpaJLR674393+ JJIq9VSrbseV8eCDW+idQ7qxjE+eNuzampQ2uPt0pL+twMzoGpDu7yQgtUTQY4ip 0/DCwt1vQboqN9B6wGYsfasKOm/V1wvo9KarDx434MIzwvM+s6wvlLRJhpz1jqy4 Mx1jQQEXXXFz+VIQDfjmy4UxxxjHIJHsOA== -----END CERTIFICATE-----Generated at Sat Oct 3 13:09:56 2026 by rpki-client