$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/becdc307-d0d9-396c-b2b6-848eab5f4c5b.roa File: becdc307-d0d9-396c-b2b6-848eab5f4c5b.roa (raw, json) Hash identifier: 4w7wyGohjm+PrV9CbXAVLaPKaFi7M5hNai4v4iJ46xU= Subject key identifier: 88:9C:CE:48:A7:17:F7:94:C6:70:A0:20:53:43:DE:44:05:05:18:A1 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F093CFAB2509291543D9B6E80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/becdc307-d0d9-396c-b2b6-848eab5f4c5b.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 954 IP address blocks: 2001:470:e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:fa:b2:50:92:91:54:3d:9b:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=17368222-83b0-42aa-a4dd-606f7d2cee8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:64:00:4c:d4:72:e2:72:1a:94:86:12:d4:6f: 3a:5e:01:96:b7:de:d0:79:9d:92:7b:cc:36:6c:20: aa:57:b8:a5:a6:01:1c:c0:8a:8c:56:bb:a9:d3:8f: 74:c3:39:e1:0c:1b:b8:63:cd:6d:46:90:bf:76:cb: 0a:c6:78:48:9c:c7:b6:8f:a8:ae:e7:16:dd:ee:89: fb:19:4a:dc:84:69:0c:a9:ab:4c:53:07:a7:3e:ac: 19:70:f0:8c:b8:f9:3f:06:26:7c:b5:c2:16:37:e3: cc:50:3c:ac:d4:da:73:81:6b:b3:1a:cf:6d:49:1a: 42:2f:86:21:a5:58:92:35:ab:27:23:65:ef:dc:07: 02:d0:de:1a:0f:91:d6:2e:ea:e3:05:06:ef:f3:a6: fd:a6:86:89:03:23:85:a0:d3:90:cc:72:9f:60:b2: 77:ef:35:cc:8d:5a:dc:6e:bd:6d:0b:b2:f9:3e:45: 5f:a1:d9:f2:97:71:22:41:ac:0b:01:cf:48:f9:9f: f6:4f:51:fd:06:50:d5:21:da:51:5a:a4:7d:7d:ed: 2e:ae:3f:6e:f3:78:33:eb:c6:4e:9e:0e:94:83:8e: d6:4a:1e:94:04:6e:c2:48:ec:c1:dd:c8:b3:a8:80: 9c:c5:4d:22:a7:68:79:b3:55:94:61:66:60:c4:8f: c7:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:9C:CE:48:A7:17:F7:94:C6:70:A0:20:53:43:DE:44:05:05:18:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/becdc307-d0d9-396c-b2b6-848eab5f4c5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:e0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:ac:b7:38:ca:78:61:00:6f:2a:51:b1:83:3e:af:11:f7:17: 98:5c:38:cb:ff:ad:93:c2:1c:ac:37:26:b8:cc:89:0a:3f:e9: d8:51:0c:fe:49:16:a6:4d:61:2b:13:b6:62:0d:2e:55:b1:00: 1c:0e:0c:b7:1c:a0:3c:ef:f9:96:c5:bb:ca:24:d6:fe:07:5a: e6:b3:48:db:9d:27:34:3d:a2:eb:90:e4:5d:42:90:d1:ff:83: e8:c1:93:8e:b4:a0:cd:98:fe:96:f9:8b:bc:ab:28:bd:18:b8: 46:19:6d:eb:74:a6:53:fb:c5:4e:4e:30:47:d1:fe:82:0c:a9: 6c:b4:98:15:b4:0d:f6:bc:7d:8b:6f:a8:38:c2:72:e2:cf:88: fd:a3:ad:a6:b6:83:6d:5a:cc:49:d4:cb:67:c9:bb:3c:75:7c: b8:68:30:a2:e1:3f:92:fe:6f:87:ff:26:a4:69:ea:68:df:21: 56:16:fd:b7:b8:e5:94:57:9c:b4:9f:2d:a5:4c:bd:68:2e:bc: b0:e9:63:85:14:b6:d4:fb:ec:af:91:73:47:2c:6c:13:1f:15: f9:78:dc:b1:5f:57:5d:ad:d1:b1:16:aa:d5:81:9c:e2:6b:ed: 67:a2:02:84:bf:0d:23:83:8a:04:37:09:a4:c6:4b:65:74:29: 1d:97:07:2c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8JPPqyUJKRVD2bboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk MTczNjgyMjItODNiMC00MmFhLWE0ZGQtNjA2ZjdkMmNlZThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWQATNRy4nIalIYS1G86XgGWt97QeZ2Se8w2 bCCqV7ilpgEcwIqMVrup0490wznhDBu4Y81tRpC/dssKxnhInMe2j6iu5xbd7on7 GUrchGkMqatMUwenPqwZcPCMuPk/BiZ8tcIWN+PMUDys1NpzgWuzGs9tSRpCL4Yh pViSNasnI2Xv3AcC0N4aD5HWLurjBQbv86b9poaJAyOFoNOQzHKfYLJ37zXMjVrc br1tC7L5PkVfodnyl3EiQawLAc9I+Z/2T1H9BlDVIdpRWqR9fe0urj9u83gz68ZO ng6Ug47WSh6UBG7CSOzB3cizqICcxU0ip2h5s1WUYWZgxI/HeQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIiczkinF/eUxnCgIFND3kQFBRihMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYmVjZGMzMDctZDBkOS0z OTZjLWIyYjYtODQ4ZWFiNWY0YzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcADg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC6stzjKeGEAbypRsYM+rxH3F5hcOMv/rZPCHKw3JrjMiQo/6dhR DP5JFqZNYSsTtmINLlWxABwODLccoDzv+ZbFu8ok1v4HWuazSNudJzQ9ouuQ5F1C kNH/g+jBk460oM2Y/pb5i7yrKL0YuEYZbet0plP7xU5OMEfR/oIMqWy0mBW0Dfa8 fYtvqDjCcuLPiP2jraa2g21azEnUy2fJuzx1fLhoMKLhP5L+b4f/JqRp6mjfIVYW /be45ZRXnLSfLaVMvWguvLDpY4UUttT77K+Rc0csbBMfFfl43LFfV12t0bEWqtWB nOJr7WeiAoS/DSODigQ3CaTGS2V0KR2XByw= -----END CERTIFICATE-----Generated at Sat Sep 12 09:03:37 2026 by rpki-client