$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/8d6bc29c-15ce-302b-b6da-d549f4d67c5d.roa File: 8d6bc29c-15ce-302b-b6da-d549f4d67c5d.roa (raw, json) Hash identifier: ocvGYe8+2qJIZWHhIsvPHcElGSb+eamf4xr9+0yi9UU= Subject key identifier: C9:5E:FA:75:8D:B2:8F:EF:6B:F1:26:6F:B2:B3:C7:A2:51:79:A6:17 Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Certificate serial: 010D0C9F4328584ECD372A5518C51093D4BD0900 Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/8d6bc29c-15ce-302b-b6da-d549f4d67c5d.roa Signing time: Tue 11 Aug 2026 13:00:11 +0000 ROA not before: Tue 11 Aug 2026 13:00:11 +0000 ROA not after: Mon 09 Nov 2026 14:00:11 +0000 asID: 14500 IP address blocks: 2607:72c0:100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 14 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cd:37:2a:55:18:c5:10:93:d4:bd:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Validity Not Before: Aug 11 13:00:11 2026 GMT Not After : Nov 9 14:00:11 2026 GMT Subject: CN=b90747cf-c1cb-4180-af40-33d6da61898a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:76:2d:29:f9:80:8d:67:41:f1:ea:9e:5b:08: 48:ee:69:fb:5a:64:13:98:ac:62:86:40:aa:9c:d8: 3a:6c:32:f3:3d:88:b2:37:12:d9:91:ae:0b:9e:9d: 0f:a5:16:aa:d4:e7:9c:27:f9:4c:e5:74:d6:86:37: d2:2a:b7:83:dc:00:a2:8f:be:a7:a5:5c:a3:96:f1: 8d:9e:a1:d8:74:95:45:a6:ec:7e:2d:f1:c8:b0:77: 3d:db:15:3b:26:51:84:65:77:ed:b7:87:59:12:86: 40:77:9c:07:2b:1f:d2:9e:20:13:fb:75:bb:51:0d: 59:2b:7a:04:c9:4c:61:ba:51:99:6d:ba:63:4e:91: d1:21:e6:e2:38:5d:f0:c9:49:be:9b:41:d2:00:ce: 2f:79:70:8d:7f:1d:d7:20:b8:2e:a0:06:db:29:ae: e1:2c:07:68:de:1b:0b:ca:ee:e1:a0:1d:74:6e:33: 3c:f3:72:8b:eb:6e:75:69:d0:d5:8e:6c:a8:0c:88: 1b:52:7f:9a:53:2d:c0:b9:c1:ad:d0:24:43:97:9b: 02:58:d1:b1:25:2f:37:57:8e:a1:b6:32:8e:5f:16: 20:60:40:13:3f:54:ac:f5:16:b8:10:39:7b:91:40: 67:95:be:93:c6:f9:a9:f5:09:3c:67:3b:12:ae:da: 95:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:5E:FA:75:8D:B2:8F:EF:6B:F1:26:6F:B2:B3:C7:A2:51:79:A6:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/8d6bc29c-15ce-302b-b6da-d549f4d67c5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl X509v3 Authority Key Identifier: keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer sbgp-ipAddrBlock: critical IPv6: 2607:72c0:100::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:29:6e:af:88:40:0c:55:29:8b:3c:d2:a7:4e:05:b1:8f:1b: 43:25:de:86:c2:72:21:5d:38:7a:72:3a:50:f8:96:dd:6c:e9: 83:0f:82:f0:c2:41:a1:49:2f:7e:b1:d1:cc:38:f7:fe:07:17: 44:15:d0:a1:8b:af:8b:03:fc:c5:94:bb:a0:64:0a:d7:80:fe: 15:b7:1f:3f:a0:30:44:be:f1:e5:57:64:d9:61:0a:26:8b:22: 54:2a:78:ad:71:e1:06:dc:38:9f:b0:a5:67:f3:72:08:51:af: 41:fe:3a:c8:b3:2d:4d:66:59:eb:2c:12:bc:77:43:84:01:07: b0:d6:6c:71:e1:db:b0:3c:ad:20:a5:4f:64:5b:a3:af:9b:e4: 01:78:af:2c:28:f3:83:56:a9:c4:93:1c:20:5b:b8:6d:32:54: 82:b4:47:fd:a9:26:c4:df:72:ba:cf:66:bf:e2:e2:d0:53:f5: 16:d4:f7:99:d3:6c:ec:a6:3d:b0:70:0e:6b:39:cf:fc:d5:fb: 6d:69:d0:b1:1b:55:11:03:e6:5b:11:98:3a:65:3a:25:b4:d9: 57:7b:fc:15:3e:b2:8b:0c:e9:48:5f:28:5d:f3:33:ea:e9:7a: 4f:52:92:57:13:4c:53:49:66:92:64:73:56:61:ee:81:d2:87: 95:0f:58:99 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE7NNypVGMUQk9S9CQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjOWM0YzctZGU0YS00MDY2LTg3MGUtMzgzZDc3MGQ2 ZDQ3MB4XDTI2MDgxMTEzMDAxMVoXDTI2MTEwOTE0MDAxMVowLzEtMCsGA1UEAxMk YjkwNzQ3Y2YtYzFjYi00MTgwLWFmNDAtMzNkNmRhNjE4OThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnYtKfmAjWdB8eqeWwhI7mn7WmQTmKxihkCq nNg6bDLzPYiyNxLZka4Lnp0PpRaq1OecJ/lM5XTWhjfSKreD3ACij76npVyjlvGN nqHYdJVFpux+LfHIsHc92xU7JlGEZXftt4dZEoZAd5wHKx/SniAT+3W7UQ1ZK3oE yUxhulGZbbpjTpHRIebiOF3wyUm+m0HSAM4veXCNfx3XILguoAbbKa7hLAdo3hsL yu7hoB10bjM883KL6251adDVjmyoDIgbUn+aUy3AucGt0CRDl5sCWNGxJS83V46h tjKOXxYgYEATP1Ss9Ra4EDl7kUBnlb6Txvmp9Qk8ZzsSrtqVxwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMle+nWNso/va/Emb7Kzx6JReaYXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5 YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcwZDZkNDcvOGQ2YmMyOWMtMTVjZS0z MDJiLWI2ZGEtZDU0OWY0ZDY3YzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWZjOWM0YzctZGU0YS00MDY2LTg3 MGUtMzgzZDc3MGQ2ZDQ3L2FmYzljNGM3LWRlNGEtNDA2Ni04NzBlLTM4M2Q3NzBk NmQ0Ny5jcmwwHwYDVR0jBBgwFoAUXX3Bvtm/pH6PXLAL1PiCUDDM2fIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNk NzcwZDZkNDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgdywAEw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEASClur4hADFUpizzSp04FsY8bQyXehsJyIV04enI6UPiW3Wzpgw+C 8MJBoUkvfrHRzDj3/gcXRBXQoYuviwP8xZS7oGQK14D+FbcfP6AwRL7x5Vdk2WEK JosiVCp4rXHhBtw4n7ClZ/NyCFGvQf46yLMtTWZZ6ywSvHdDhAEHsNZsceHbsDyt IKVPZFujr5vkAXivLCjzg1apxJMcIFu4bTJUgrRH/akmxN9yus9mv+Li0FP1FtT3 mdNs7KY9sHAOaznP/NX7bWnQsRtVEQPmWxGYOmU6JbTZV3v8FT6yiwzpSF8oXfMz 6ul6T1KSVxNMU0lmkmRzVmHugdKHlQ9YmQ== -----END CERTIFICATE-----Generated at Thu Aug 13 13:00:40 2026 by rpki-client