$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be7047c2-33bd-411c-802c-e79eb6aea35f/52d8a1d9-779e-3dc7-99e2-52574eefe881.roa File: 52d8a1d9-779e-3dc7-99e2-52574eefe881.roa (raw, json) Hash identifier: tMlPymj7Urk21eVKv8odpvEDzFg2KghMkbDJgpM8luQ= Subject key identifier: 08:4D:E4:EA:16:01:AA:B9:AC:2B:AB:70:E0:33:C5:BD:8A:E2:96:8D Certificate issuer: /CN=be7047c2-33bd-411c-802c-e79eb6aea35f Certificate serial: 010D0C9F4328584EA799912A3A3ADA393BD5DE00 Authority key identifier: 55:7C:AA:E6:E4:52:A2:F3:51:4E:FD:84:5E:8F:7D:EE:4E:89:40:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be7047c2-33bd-411c-802c-e79eb6aea35f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be7047c2-33bd-411c-802c-e79eb6aea35f/52d8a1d9-779e-3dc7-99e2-52574eefe881.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 401602 IP address blocks: 2604:960::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be7047c2-33bd-411c-802c-e79eb6aea35f/be7047c2-33bd-411c-802c-e79eb6aea35f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be7047c2-33bd-411c-802c-e79eb6aea35f/be7047c2-33bd-411c-802c-e79eb6aea35f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be7047c2-33bd-411c-802c-e79eb6aea35f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:99:91:2a:3a:3a:da:39:3b:d5:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be7047c2-33bd-411c-802c-e79eb6aea35f Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=594948af-112e-4c59-bb3c-60806a586ffe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:cc:10:9b:d9:7b:1f:85:59:71:63:88:09:3c: ef:a0:0c:25:85:d6:a4:c9:ab:1d:a3:69:fc:73:a6: 5a:59:04:80:ca:5c:c4:56:5c:5c:38:d5:5b:7f:53: db:0b:d0:89:24:51:fe:de:84:d4:23:c2:03:7a:fa: 31:eb:06:e7:f8:47:e5:38:a6:0e:8f:57:f1:09:02: 16:1b:f8:1f:6e:6f:61:02:47:c8:17:36:8f:a7:c5: 82:e1:57:1a:2b:cd:ed:64:eb:f8:d7:a3:41:96:9e: 48:3e:54:7b:00:bf:16:0e:42:e0:64:75:9a:4b:42: ff:ce:98:0a:2c:ee:b9:b6:56:f0:bc:cb:8b:4a:45: 6d:74:85:85:4a:f2:18:67:36:e7:2a:5f:42:f0:22: d2:29:5a:01:2f:58:b6:36:27:ff:c1:98:4b:01:27: bd:11:34:b6:67:f2:5d:57:f7:ab:e7:bf:a3:7e:ea: 51:12:6f:c6:d5:49:ea:f0:11:df:56:62:5d:81:21: e8:ec:4b:fd:13:17:83:8a:cc:92:81:d8:c4:81:f7: 68:8a:05:5d:45:ea:f1:4f:65:d7:36:98:ef:d2:af: 74:76:b7:7b:e2:f6:6e:2a:d3:68:93:f0:42:10:ee: 87:b6:dc:1a:e1:5e:6a:21:85:0c:a1:8a:e8:a8:94: b8:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:4D:E4:EA:16:01:AA:B9:AC:2B:AB:70:E0:33:C5:BD:8A:E2:96:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be7047c2-33bd-411c-802c-e79eb6aea35f/52d8a1d9-779e-3dc7-99e2-52574eefe881.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be7047c2-33bd-411c-802c-e79eb6aea35f/be7047c2-33bd-411c-802c-e79eb6aea35f.crl X509v3 Authority Key Identifier: keyid:55:7C:AA:E6:E4:52:A2:F3:51:4E:FD:84:5E:8F:7D:EE:4E:89:40:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be7047c2-33bd-411c-802c-e79eb6aea35f.cer sbgp-ipAddrBlock: critical IPv6: 2604:960::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:92:0b:6e:6c:85:ab:30:18:d9:19:9f:88:6a:53:d7:03:3b: b9:00:b6:46:59:13:ec:01:13:ba:02:47:5d:6f:ef:3f:40:a8: c0:21:93:95:90:d8:f9:62:d4:3b:d4:08:44:a5:8d:fc:c9:e9: b4:0a:26:e1:7a:fe:9e:73:7e:89:0e:78:a3:a0:0f:bd:0a:50: 57:24:42:57:7b:b0:24:cb:80:a2:1f:55:88:e1:6d:22:53:f6: 13:21:bf:94:4e:2a:9b:b1:ae:bd:c3:15:40:bf:a4:7e:ad:b5: 2c:0c:9d:4a:97:9d:c4:19:28:e2:4d:92:26:c8:59:38:c0:1d: bc:b7:bc:46:12:89:12:0f:5d:29:4f:68:53:28:bd:4d:ca:a8: 74:ae:d2:b5:44:69:d2:fa:f2:14:5f:fc:b1:66:20:00:08:4f: 45:c7:e2:71:a7:8c:9a:f4:bf:f2:da:e6:e5:68:d3:90:8d:87: 35:5a:b7:65:78:2f:ed:a3:33:2f:20:69:ef:24:ad:5f:b0:99: c0:7e:5d:10:fe:0d:76:5e:15:98:bc:da:a4:09:e2:d6:5b:b0: 1d:c2:ea:4c:43:49:9b:eb:be:82:be:e4:cd:ab:c0:98:4d:8b: a6:6c:0c:6e:1e:e6:95:c4:41:96:84:62:c4:d8:b6:2f:97:52: 8e:a1:d6:1f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nmZEqOjraOTvV3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmU3MDQ3YzItMzNiZC00MTFjLTgwMmMtZTc5ZWI2YWVh MzVmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NTk0OTQ4YWYtMTEyZS00YzU5LWJiM2MtNjA4MDZhNTg2ZmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMwQm9l7H4VZcWOICTzvoAwlhdakyasdo2n8 c6ZaWQSAylzEVlxcONVbf1PbC9CJJFH+3oTUI8IDevox6wbn+EflOKYOj1fxCQIW G/gfbm9hAkfIFzaPp8WC4VcaK83tZOv416NBlp5IPlR7AL8WDkLgZHWaS0L/zpgK LO65tlbwvMuLSkVtdIWFSvIYZzbnKl9C8CLSKVoBL1i2Nif/wZhLASe9ETS2Z/Jd V/er57+jfupREm/G1Unq8BHfVmJdgSHo7Ev9ExeDisySgdjEgfdoigVdRerxT2XX Npjv0q90drd74vZuKtNok/BCEO6Httwa4V5qIYUMoYroqJS4awIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAhN5OoWAaq5rCurcOAzxb2K4paNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9iZTcw NDdjMi0zM2JkLTQxMWMtODAyYy1lNzllYjZhZWEzNWYvNTJkOGExZDktNzc5ZS0z ZGM3LTk5ZTItNTI1NzRlZWZlODgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYmU3MDQ3YzItMzNiZC00MTFjLTgw MmMtZTc5ZWI2YWVhMzVmL2JlNzA0N2MyLTMzYmQtNDExYy04MDJjLWU3OWViNmFl YTM1Zi5jcmwwHwYDVR0jBBgwFoAUVXyq5uRSovNRTv2EXo997k6JQHIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9iZTcwNDdjMi0zM2JkLTQxMWMtODAyYy1lNzll YjZhZWEzNWYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQJYDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA+kgtubIWrMBjZGZ+IalPXAzu5ALZGWRPsARO6Akddb+8/QKjAIZOV kNj5YtQ71AhEpY38yem0Cibhev6ec36JDnijoA+9ClBXJEJXe7Aky4CiH1WI4W0i U/YTIb+UTiqbsa69wxVAv6R+rbUsDJ1Kl53EGSjiTZImyFk4wB28t7xGEokSD10p T2hTKL1Nyqh0rtK1RGnS+vIUX/yxZiAACE9Fx+Jxp4ya9L/y2ublaNOQjYc1Wrdl eC/tozMvIGnvJK1fsJnAfl0Q/g12XhWYvNqkCeLWW7AdwupMQ0mb676CvuTNq8CY TYumbAxuHuaVxEGWhGLE2LYvl1KOodYf -----END CERTIFICATE-----Generated at Thu Aug 27 03:02:44 2026 by rpki-client