$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/83e4d0b1-59e4-36a3-bb5b-a2cead0ccf2e.roa File: 83e4d0b1-59e4-36a3-bb5b-a2cead0ccf2e.roa (raw, json) Hash identifier: YZy//ewwOV1dhHCqtNEOWnbWEJNfB4Gxx7NSotzdvYo= Subject key identifier: BD:A8:EA:43:F1:BE:33:39:CB:1A:8A:16:96:BC:59:50:05:60:5A:68 Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Certificate serial: 010D0C9F4328584F3B7D227C2D92DECD712C1380 Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/83e4d0b1-59e4-36a3-bb5b-a2cead0ccf2e.roa Signing time: Sun 20 Sep 2026 01:00:11 +0000 ROA not before: Sun 20 Sep 2026 01:00:11 +0000 ROA not after: Sat 19 Dec 2026 02:00:11 +0000 asID: 14500 IP address blocks: 2607:72c0:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3b:7d:22:7c:2d:92:de:cd:71:2c:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Validity Not Before: Sep 20 01:00:11 2026 GMT Not After : Dec 19 02:00:11 2026 GMT Subject: CN=6aee6a7c-7892-4d12-8e59-7acf4b2bc516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:45:e3:df:3c:5a:f7:37:f3:1f:a9:15:93:c4: 18:23:39:37:25:8d:e9:74:ee:01:31:62:9a:c4:da: 8f:3b:09:60:11:28:64:2a:a1:ee:a9:54:b7:15:92: d0:af:64:e5:2b:19:bd:64:2a:13:9e:67:20:a7:d7: 1b:9f:21:bd:cc:15:d3:78:66:1a:23:aa:b6:20:5e: d3:cc:f3:cd:e6:68:ca:f1:1e:5b:21:be:74:8a:70: 1d:47:3b:38:f2:ef:3a:45:11:80:62:15:dc:71:0e: 6e:67:46:17:e9:a5:b6:07:3b:95:4d:17:b5:6a:69: 59:dc:60:7c:e8:53:69:d0:0b:f9:49:b4:d5:2b:e3: 76:f9:4e:af:4c:25:37:a3:7a:d7:00:6a:0f:24:bb: cf:cf:d6:41:af:5a:1d:a6:56:46:54:fa:4a:6e:a9: 88:fc:32:7f:c8:91:3a:81:aa:b4:55:f0:ec:dc:54: 6b:f4:24:bc:16:6c:dc:ee:d2:f8:c8:a4:9e:7b:c4: 08:c2:6d:3e:a9:3c:6b:53:dd:11:42:4e:a7:28:37: ae:f9:24:89:15:2a:37:4d:da:05:08:89:87:4e:08: 05:9a:18:e3:0f:b5:34:51:dc:d9:df:90:dc:10:b8: 9d:49:b7:d0:e8:36:e0:59:d3:f0:14:1a:f0:76:4d: 49:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:A8:EA:43:F1:BE:33:39:CB:1A:8A:16:96:BC:59:50:05:60:5A:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/83e4d0b1-59e4-36a3-bb5b-a2cead0ccf2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl X509v3 Authority Key Identifier: keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer sbgp-ipAddrBlock: critical IPv6: 2607:72c0:1000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:ee:7b:5f:a6:bd:16:a4:12:86:58:af:94:f2:b4:27:e7:49: 72:45:69:39:d6:f5:67:72:b3:20:76:22:d6:50:a9:7d:b8:93: 08:d0:60:62:e2:53:de:6f:ef:c2:c0:3b:22:65:be:a1:c4:10: fd:82:66:cf:2d:a3:ec:14:48:3d:d8:34:ba:dd:18:d9:43:ed: 8f:40:14:10:6e:2b:2a:54:b5:fa:46:9f:9c:3e:1f:dc:54:41: 24:fb:93:b8:ac:34:b8:2e:33:43:50:82:e0:a0:cf:6f:78:bb: 1b:a1:81:c6:c2:cd:32:81:20:e8:a0:1f:c3:e0:49:24:e0:2c: 7d:85:7a:bb:24:98:0e:cd:62:5d:0e:ab:dc:73:c2:90:b1:5d: 8a:0a:e9:7f:ea:0d:af:49:f8:9d:cd:da:0e:1a:f6:56:f2:b5: 5a:5c:02:d2:c2:59:96:b9:7e:24:eb:c3:c8:e8:82:a9:0b:cb: ff:91:0d:23:b8:b1:64:f8:aa:1e:90:7e:fe:ad:4c:da:42:86: 8b:a7:91:f9:3c:31:8d:a7:d8:71:40:3a:0e:5d:a2:2c:39:ae: 90:16:51:c8:5d:54:b3:34:17:5e:00:b9:7a:52:06:9f:d2:da: 27:58:92:45:ba:ed:c4:c7:5d:b8:bd:9a:ad:9f:a8:95:d5:e2: 76:47:a9:a9 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE87fSJ8LZLezXEsE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjOWM0YzctZGU0YS00MDY2LTg3MGUtMzgzZDc3MGQ2 ZDQ3MB4XDTI2MDkyMDAxMDAxMVoXDTI2MTIxOTAyMDAxMVowLzEtMCsGA1UEAxMk NmFlZTZhN2MtNzg5Mi00ZDEyLThlNTktN2FjZjRiMmJjNTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA60Xj3zxa9zfzH6kVk8QYIzk3JY3pdO4BMWKa xNqPOwlgEShkKqHuqVS3FZLQr2TlKxm9ZCoTnmcgp9cbnyG9zBXTeGYaI6q2IF7T zPPN5mjK8R5bIb50inAdRzs48u86RRGAYhXccQ5uZ0YX6aW2BzuVTRe1amlZ3GB8 6FNp0Av5SbTVK+N2+U6vTCU3o3rXAGoPJLvPz9ZBr1odplZGVPpKbqmI/DJ/yJE6 gaq0VfDs3FRr9CS8Fmzc7tL4yKSee8QIwm0+qTxrU90RQk6nKDeu+SSJFSo3TdoF CImHTggFmhjjD7U0UdzZ35DcELidSbfQ6DbgWdPwFBrwdk1JzQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFL2o6kPxvjM5yxqKFpa8WVAFYFpoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5 YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcwZDZkNDcvODNlNGQwYjEtNTllNC0z NmEzLWJiNWItYTJjZWFkMGNjZjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWZjOWM0YzctZGU0YS00MDY2LTg3 MGUtMzgzZDc3MGQ2ZDQ3L2FmYzljNGM3LWRlNGEtNDA2Ni04NzBlLTM4M2Q3NzBk NmQ0Ny5jcmwwHwYDVR0jBBgwFoAUXX3Bvtm/pH6PXLAL1PiCUDDM2fIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNk NzcwZDZkNDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgdywBAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEARe57X6a9FqQShlivlPK0J+dJckVpOdb1Z3KzIHYi1lCpfbiTCNBg YuJT3m/vwsA7ImW+ocQQ/YJmzy2j7BRIPdg0ut0Y2UPtj0AUEG4rKlS1+kafnD4f 3FRBJPuTuKw0uC4zQ1CC4KDPb3i7G6GBxsLNMoEg6KAfw+BJJOAsfYV6uySYDs1i XQ6r3HPCkLFdigrpf+oNr0n4nc3aDhr2VvK1WlwC0sJZlrl+JOvDyOiCqQvL/5EN I7ixZPiqHpB+/q1M2kKGi6eR+TwxjafYcUA6Dl2iLDmukBZRyF1UszQXXgC5elIG n9LaJ1iSRbrtxMdduL2arZ+oldXidkepqQ== -----END CERTIFICATE-----Generated at Sat Oct 10 15:11:30 2026 by rpki-client