$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/8d6bc29c-15ce-302b-b6da-d549f4d67c5d.roa File: 8d6bc29c-15ce-302b-b6da-d549f4d67c5d.roa (raw, json) Hash identifier: 6Gz30/xsBXBOenN0LZojh3ldBeCUABJr2UFyTbNvhlI= Subject key identifier: 1F:BE:73:56:12:DF:73:92:87:38:92:45:8A:66:74:69:47:CF:9E:B9 Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Certificate serial: 010D0C9F4328584F6F230C3B697150A401D07B40 Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/8d6bc29c-15ce-302b-b6da-d549f4d67c5d.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 14500 IP address blocks: 2607:72c0:100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:23:0c:3b:69:71:50:a4:01:d0:7b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=331d0a00-a9ad-48b6-83de-4185c1d686c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3d:74:45:2e:e1:33:26:69:c2:a3:f2:da:35: ec:08:b7:a8:bb:4d:aa:38:9e:ab:f1:e2:b9:7b:8b: 9f:98:c1:84:55:4c:3f:60:f7:45:23:82:99:8d:d5: 8c:61:7c:db:e3:b4:a7:24:07:9f:8d:eb:6c:21:ab: 65:4e:a3:6d:29:4c:ac:e3:ac:be:55:8c:bc:c3:3f: 12:6c:3f:c1:e4:1d:78:5a:47:ed:63:c8:81:c6:42: 72:3d:a5:19:a3:0f:72:92:b0:89:4b:29:bf:43:13: 2f:14:c2:79:da:24:8e:77:c6:6c:67:62:18:bd:fc: 61:2d:2f:09:69:f4:6f:40:d5:d2:27:48:9e:60:18: 77:6b:31:ed:71:5f:41:84:24:de:fe:09:e7:c1:8f: 7c:88:7e:00:95:73:bb:e1:5d:a9:6d:32:5c:b1:aa: 2f:bb:67:99:90:e5:56:7a:fd:9d:d4:e3:9d:55:cf: 7b:5c:84:c5:43:95:b9:52:52:52:06:0a:2c:b1:51: db:dd:55:80:91:5d:c4:4a:43:35:87:03:72:b2:b4: 57:b6:81:9a:dc:6b:d5:b1:91:ba:22:55:36:4c:18: 53:9a:ac:00:b7:f8:8d:d1:58:bf:bf:c4:18:a6:ef: f6:66:5c:e0:25:cc:d3:d7:e1:3b:49:f6:5b:bf:fe: 49:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:BE:73:56:12:DF:73:92:87:38:92:45:8A:66:74:69:47:CF:9E:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/8d6bc29c-15ce-302b-b6da-d549f4d67c5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl X509v3 Authority Key Identifier: keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer sbgp-ipAddrBlock: critical IPv6: 2607:72c0:100::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:35:e8:91:50:e8:9e:1a:dd:8b:e2:a8:46:05:7a:5c:d4:7b: 55:c0:93:69:e2:ea:f3:31:e6:55:a5:af:8c:27:b0:9b:5a:a0: c9:66:3f:63:8c:51:c2:99:19:6b:9b:58:b2:b2:d0:af:8e:da: 12:e1:b0:e5:3c:4e:3a:7d:a3:b7:df:7f:fe:8c:31:10:62:90: c4:bd:63:b5:52:e3:97:cd:4f:ae:d1:aa:bd:a9:65:c8:09:fa: a4:7f:af:2a:45:24:b1:6f:af:13:21:62:7b:00:b7:c3:76:b9: 69:c4:64:31:5c:84:33:7b:12:45:71:48:85:97:a5:eb:e2:66: b2:2c:20:2f:97:64:b1:07:0e:59:7a:75:43:eb:fe:ef:ab:ff: 3a:dd:66:3a:af:ea:10:7f:38:23:ad:0d:f0:47:63:fb:a5:ee: 3c:43:56:b4:4f:99:a7:98:9a:0e:ac:0c:d2:83:53:6b:aa:57: f5:e0:60:0e:cd:b6:bd:f5:1a:a9:26:ed:a7:31:92:61:e0:cb: 14:c7:1c:6c:89:8f:c7:28:16:46:4b:e8:2a:ed:4a:b3:83:d0: e8:77:1a:6e:97:da:5e:f4:a8:31:91:31:d6:9f:98:ea:4b:c1: ea:d8:4b:81:45:f7:a8:2b:af:ee:a6:1a:29:0e:07:17:4a:c0: ca:53:83:50 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9vIww7aXFQpAHQe0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjOWM0YzctZGU0YS00MDY2LTg3MGUtMzgzZDc3MGQ2 ZDQ3MB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk MzMxZDBhMDAtYTlhZC00OGI2LTgzZGUtNDE4NWMxZDY4NmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuT10RS7hMyZpwqPy2jXsCLeou02qOJ6r8eK5 e4ufmMGEVUw/YPdFI4KZjdWMYXzb47SnJAefjetsIatlTqNtKUys46y+VYy8wz8S bD/B5B14WkftY8iBxkJyPaUZow9ykrCJSym/QxMvFMJ52iSOd8ZsZ2IYvfxhLS8J afRvQNXSJ0ieYBh3azHtcV9BhCTe/gnnwY98iH4AlXO74V2pbTJcsaovu2eZkOVW ev2d1OOdVc97XITFQ5W5UlJSBgossVHb3VWAkV3ESkM1hwNysrRXtoGa3GvVsZG6 IlU2TBhTmqwAt/iN0Vi/v8QYpu/2ZlzgJczT1+E7SfZbv/5J7wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFB++c1YS33OShziSRYpmdGlHz565MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5 YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcwZDZkNDcvOGQ2YmMyOWMtMTVjZS0z MDJiLWI2ZGEtZDU0OWY0ZDY3YzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWZjOWM0YzctZGU0YS00MDY2LTg3 MGUtMzgzZDc3MGQ2ZDQ3L2FmYzljNGM3LWRlNGEtNDA2Ni04NzBlLTM4M2Q3NzBk NmQ0Ny5jcmwwHwYDVR0jBBgwFoAUXX3Bvtm/pH6PXLAL1PiCUDDM2fIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNk NzcwZDZkNDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgdywAEw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAATXokVDonhrdi+KoRgV6XNR7VcCTaeLq8zHmVaWvjCewm1qgyWY/ Y4xRwpkZa5tYsrLQr47aEuGw5TxOOn2jt99//owxEGKQxL1jtVLjl81PrtGqvall yAn6pH+vKkUksW+vEyFiewC3w3a5acRkMVyEM3sSRXFIhZel6+JmsiwgL5dksQcO WXp1Q+v+76v/Ot1mOq/qEH84I60N8Edj+6XuPENWtE+Zp5iaDqwM0oNTa6pX9eBg Ds22vfUaqSbtpzGSYeDLFMccbImPxygWRkvoKu1Ks4PQ6HcabpfaXvSoMZEx1p+Y 6kvB6thLgUX3qCuv7qYaKQ4HF0rAylODUA== -----END CERTIFICATE-----Generated at Sat Oct 10 20:52:14 2026 by rpki-client