$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/933b067e-d8b9-3f3b-9787-5f4bd66f5a04.roa File: 933b067e-d8b9-3f3b-9787-5f4bd66f5a04.roa (raw, json) Hash identifier: WNV4idkarEaV1tI1fccZrKLX1uROt/6ZxGps6QxCWk4= Subject key identifier: DE:4D:06:B6:14:25:62:F4:BD:07:FC:D9:38:48:C5:38:E3:3B:17:19 Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Certificate serial: 010D0C9F4328584F093CE47DCFC1BCF344DAAAC0 Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/933b067e-d8b9-3f3b-9787-5f4bd66f5a04.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 14500 IP address blocks: 2607:72c0:300::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:e4:7d:cf:c1:bc:f3:44:da:aa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=1f1c5cd3-030b-48b7-b282-1876cb7d00d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:be:59:f5:2f:2c:2c:d5:48:91:a3:66:66:30: bf:a6:ed:1c:34:a4:0c:69:a5:88:07:c7:72:9f:0d: 8d:d6:45:85:77:68:a3:76:1e:bc:4a:7e:f1:6f:9a: 82:9b:2f:f6:69:67:11:b9:4f:c9:c1:6a:0d:7c:63: aa:1e:c1:95:e6:02:61:19:02:77:20:40:e3:ec:39: 13:f0:62:24:1a:8d:4e:7c:8b:cd:c0:5e:07:04:e7: 84:d1:2e:60:cc:cf:95:23:91:fb:9b:d3:f5:f1:3e: 71:29:43:13:92:00:12:bf:f2:04:0d:78:6c:ef:01: 71:2b:5e:93:8c:8d:14:34:97:76:e4:cd:a1:f8:c1: 5d:fb:5b:de:0a:78:f1:ce:da:cf:ae:a9:6c:a1:68: 55:94:3f:84:5d:c9:9c:c4:58:62:45:b4:3a:9f:6b: a6:fb:dd:80:7b:6d:25:6c:0b:45:16:71:47:34:c3: 20:1c:48:f3:a4:c4:f4:58:39:53:a3:df:1e:c3:7a: 82:62:77:0e:6c:74:04:70:38:bd:2c:ee:54:af:e4: 74:b3:e7:d6:77:57:46:59:22:a4:83:08:c4:5d:f6: 58:b6:14:e3:17:d7:5c:ae:67:36:0d:61:7a:4c:e4: 93:28:85:6a:79:a2:50:d4:59:37:0e:c9:63:9a:49: 1b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:4D:06:B6:14:25:62:F4:BD:07:FC:D9:38:48:C5:38:E3:3B:17:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/933b067e-d8b9-3f3b-9787-5f4bd66f5a04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl X509v3 Authority Key Identifier: keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer sbgp-ipAddrBlock: critical IPv6: 2607:72c0:300::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:11:f2:be:68:54:5f:50:7c:74:ea:f6:35:c3:d4:d6:f0:f6: 15:3a:1a:5f:82:c7:36:8e:71:9f:b5:fe:9c:eb:1d:9e:da:f8: 45:26:20:bc:49:83:9b:f8:9f:58:31:a4:11:5e:bb:9a:e2:90: a5:2a:e2:8a:5b:d9:d8:2c:af:78:7a:13:89:8c:45:e9:b4:9c: 83:51:eb:dc:3a:a9:e5:0b:11:20:98:42:0a:4a:1c:14:7f:b2: cf:0b:0d:d8:a3:99:b7:72:16:66:0f:aa:ee:d2:d0:7d:3a:7a: a8:cc:03:a3:dd:27:14:68:3c:fb:fc:48:bf:ae:38:d1:4a:ac: f4:8d:87:95:30:e0:fd:f8:63:0f:11:06:16:84:cf:f1:d0:21: 6d:5b:ad:ff:e7:81:78:24:02:23:ba:b5:0d:37:9f:ff:c6:a1: 88:ab:70:3e:2d:83:98:1c:f2:32:11:75:c1:0a:d9:86:1d:5e: ef:1b:90:a2:2b:0c:31:bc:1e:89:1e:3f:85:18:90:3e:eb:5e: 54:90:4b:76:ef:17:d7:c6:90:1d:56:1f:37:c0:f3:02:26:99: d9:92:52:cd:5f:82:bc:4f:26:2b:ed:4c:83:b7:d8:4d:2b:b0: 3c:61:7e:c1:aa:c1:9f:59:86:f6:97:74:e4:2a:7a:0b:46:4e: ad:0f:8c:b9 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8JPOR9z8G880TaqsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjOWM0YzctZGU0YS00MDY2LTg3MGUtMzgzZDc3MGQ2 ZDQ3MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk MWYxYzVjZDMtMDMwYi00OGI3LWIyODItMTg3NmNiN2QwMGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyr5Z9S8sLNVIkaNmZjC/pu0cNKQMaaWIB8dy nw2N1kWFd2ijdh68Sn7xb5qCmy/2aWcRuU/JwWoNfGOqHsGV5gJhGQJ3IEDj7DkT 8GIkGo1OfIvNwF4HBOeE0S5gzM+VI5H7m9P18T5xKUMTkgASv/IEDXhs7wFxK16T jI0UNJd25M2h+MFd+1veCnjxztrPrqlsoWhVlD+EXcmcxFhiRbQ6n2um+92Ae20l bAtFFnFHNMMgHEjzpMT0WDlTo98ew3qCYncObHQEcDi9LO5Ur+R0s+fWd1dGWSKk gwjEXfZYthTjF9dcrmc2DWF6TOSTKIVqeaJQ1Fk3DsljmkkbnQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFN5NBrYUJWL0vQf82ThIxTjjOxcZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5 YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcwZDZkNDcvOTMzYjA2N2UtZDhiOS0z ZjNiLTk3ODctNWY0YmQ2NmY1YTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWZjOWM0YzctZGU0YS00MDY2LTg3 MGUtMzgzZDc3MGQ2ZDQ3L2FmYzljNGM3LWRlNGEtNDA2Ni04NzBlLTM4M2Q3NzBk NmQ0Ny5jcmwwHwYDVR0jBBgwFoAUXX3Bvtm/pH6PXLAL1PiCUDDM2fIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNk NzcwZDZkNDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgdywAMw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEATxHyvmhUX1B8dOr2NcPU1vD2FToaX4LHNo5xn7X+nOsdntr4RSYg vEmDm/ifWDGkEV67muKQpSriilvZ2CyveHoTiYxF6bScg1Hr3Dqp5QsRIJhCCkoc FH+yzwsN2KOZt3IWZg+q7tLQfTp6qMwDo90nFGg8+/xIv6440Uqs9I2HlTDg/fhj DxEGFoTP8dAhbVut/+eBeCQCI7q1DTef/8ahiKtwPi2DmBzyMhF1wQrZhh1e7xuQ oisMMbweiR4/hRiQPuteVJBLdu8X18aQHVYfN8DzAiaZ2ZJSzV+CvE8mK+1Mg7fY TSuwPGF+warBn1mG9pd05Cp6C0ZOrQ+MuQ== -----END CERTIFICATE-----Generated at Sat Oct 10 09:57:35 2026 by rpki-client