$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/933b067e-d8b9-3f3b-9787-5f4bd66f5a04.roa File: 933b067e-d8b9-3f3b-9787-5f4bd66f5a04.roa (raw, json) Hash identifier: W7cn8Jnov9pctMQgC5xPdTtE41Cvu/1HYXiUCXHVCmU= Subject key identifier: 7A:47:1C:A0:5E:22:E0:59:39:47:6A:BC:4B:2B:D1:69:8A:B6:9E:52 Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Certificate serial: 010D0C9F4328584E66DA11F040D2B257D1ABC400 Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/933b067e-d8b9-3f3b-9787-5f4bd66f5a04.roa Signing time: Sun 05 Jul 2026 21:00:11 +0000 ROA not before: Sun 05 Jul 2026 21:00:11 +0000 ROA not after: Sat 03 Oct 2026 21:00:11 +0000 asID: 14500 IP address blocks: 2607:72c0:300::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:66:da:11:f0:40:d2:b2:57:d1:ab:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Validity Not Before: Jul 5 21:00:11 2026 GMT Not After : Oct 3 21:00:11 2026 GMT Subject: CN=1dbb5327-9359-43a1-891d-c1929231bd36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:90:d3:c3:18:46:b4:29:d1:5e:1b:1b:97:ac: a6:6c:d2:24:b1:03:db:8d:57:21:23:1a:40:af:49: 68:e1:f3:a1:ca:5f:f9:3d:67:13:ea:5b:7d:aa:70: 6d:1d:b2:b5:9c:13:2e:74:43:0a:8b:82:a3:be:60: 2d:1f:e0:d8:20:36:d6:cb:22:b6:cb:1c:75:4f:c5: 2d:65:61:a9:d3:b7:5f:e2:cd:b9:03:c0:ca:b4:65: 88:cc:8f:07:ed:b9:d5:8b:6d:2f:55:f7:84:c7:6e: 98:0b:b8:ab:6e:26:34:73:b8:60:64:db:a1:86:0b: 03:3d:6f:f8:d7:a2:d2:e9:6e:82:4a:30:d5:4f:38: 8e:74:27:9f:5f:1b:e0:94:3c:eb:99:9c:50:3b:fc: 5c:89:25:a0:49:9a:7a:d8:5f:70:d2:4d:2a:1c:b0: a6:23:f0:fb:15:c9:c9:e5:d2:8a:d8:72:2c:37:54: 5c:82:59:3e:5c:0e:18:44:04:93:fd:81:94:1d:b2: 5b:00:34:5d:b0:25:d4:7b:98:f4:5f:9b:5f:0a:02: d0:1b:9b:66:87:90:51:d5:47:23:69:05:17:ad:fd: 6e:d9:fe:fc:60:e0:76:0f:da:20:1c:f4:ef:d1:77: 8a:9d:b7:4a:1f:57:c1:e2:fb:88:79:4e:9c:46:63: e8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:47:1C:A0:5E:22:E0:59:39:47:6A:BC:4B:2B:D1:69:8A:B6:9E:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/933b067e-d8b9-3f3b-9787-5f4bd66f5a04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl X509v3 Authority Key Identifier: keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer sbgp-ipAddrBlock: critical IPv6: 2607:72c0:300::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:23:2d:93:6a:b7:47:b7:1b:4d:3a:51:45:64:d3:cd:03:95: b3:db:f0:8a:ce:c3:8e:e9:f1:65:14:d7:7b:b4:3f:49:33:ec: dd:97:a1:d0:7d:ed:68:5e:b1:71:b6:5d:47:5c:8e:85:c5:17: 89:ad:fa:76:01:bb:e7:5a:e4:89:25:d1:be:91:15:49:aa:5d: b1:9a:96:e7:a2:fe:29:c7:46:1c:a4:c6:90:d0:83:83:19:75: 13:bc:40:08:b3:23:bf:29:92:99:ea:97:e8:32:9c:d9:d3:90: 7d:33:be:62:84:78:06:bd:9e:cc:b0:1a:75:ab:93:bd:ba:ef: e8:f0:90:7e:ee:c8:d7:f3:cf:e7:12:3f:9e:2b:d7:30:70:c6: 8f:a4:04:5d:47:df:0e:ba:bf:fd:73:8a:04:8e:26:63:9d:8f: 38:57:64:bd:f3:dc:42:28:ba:38:1e:6f:38:f7:88:2c:60:16: 8c:c8:3b:22:29:bb:37:a9:e1:08:c7:08:30:1d:03:a5:75:a9: 78:34:2f:c4:7d:2d:60:91:04:13:e5:e5:06:68:42:21:24:17: 12:71:ff:ab:91:8e:36:0c:64:58:11:d9:fe:f4:3b:91:ce:b0: 11:fb:62:3c:53:8e:41:f0:e4:00:c6:3c:85:71:79:3d:69:e6: 7d:d9:94:32 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE5m2hHwQNKyV9GrxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjOWM0YzctZGU0YS00MDY2LTg3MGUtMzgzZDc3MGQ2 ZDQ3MB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk MWRiYjUzMjctOTM1OS00M2ExLTg5MWQtYzE5MjkyMzFiZDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJDTwxhGtCnRXhsbl6ymbNIksQPbjVchIxpA r0lo4fOhyl/5PWcT6lt9qnBtHbK1nBMudEMKi4KjvmAtH+DYIDbWyyK2yxx1T8Ut ZWGp07df4s25A8DKtGWIzI8H7bnVi20vVfeEx26YC7irbiY0c7hgZNuhhgsDPW/4 16LS6W6CSjDVTziOdCefXxvglDzrmZxQO/xciSWgSZp62F9w0k0qHLCmI/D7FcnJ 5dKK2HIsN1Rcglk+XA4YRAST/YGUHbJbADRdsCXUe5j0X5tfCgLQG5tmh5BR1Ucj aQUXrf1u2f78YOB2D9ogHPTv0XeKnbdKH1fB4vuIeU6cRmPozwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHpHHKBeIuBZOUdqvEsr0WmKtp5SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5 YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcwZDZkNDcvOTMzYjA2N2UtZDhiOS0z ZjNiLTk3ODctNWY0YmQ2NmY1YTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWZjOWM0YzctZGU0YS00MDY2LTg3 MGUtMzgzZDc3MGQ2ZDQ3L2FmYzljNGM3LWRlNGEtNDA2Ni04NzBlLTM4M2Q3NzBk NmQ0Ny5jcmwwHwYDVR0jBBgwFoAUXX3Bvtm/pH6PXLAL1PiCUDDM2fIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNk NzcwZDZkNDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgdywAMw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEACiMtk2q3R7cbTTpRRWTTzQOVs9vwis7DjunxZRTXe7Q/STPs3Zeh 0H3taF6xcbZdR1yOhcUXia36dgG751rkiSXRvpEVSapdsZqW56L+KcdGHKTGkNCD gxl1E7xACLMjvymSmeqX6DKc2dOQfTO+YoR4Br2ezLAadauTvbrv6PCQfu7I1/PP 5xI/nivXMHDGj6QEXUffDrq//XOKBI4mY52POFdkvfPcQii6OB5vOPeILGAWjMg7 Iim7N6nhCMcIMB0DpXWpeDQvxH0tYJEEE+XlBmhCISQXEnH/q5GONgxkWBHZ/vQ7 kc6wEftiPFOOQfDkAMY8hXF5PWnmfdmUMg== -----END CERTIFICATE-----Generated at Fri Jul 24 12:51:41 2026 by rpki-client