$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/bef997ff-d1a4-374c-b453-c9348e59c5c4.roa File: bef997ff-d1a4-374c-b453-c9348e59c5c4.roa (raw, json) Hash identifier: yI9dVWK+bDGQn8Pe5GnJUe9NyC5UiboAg+RvUM/ehG8= Subject key identifier: 4A:9B:AD:03:40:98:DD:B2:FB:56:98:B6:7B:E6:E8:EF:A6:3D:15:52 Certificate issuer: /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7 Certificate serial: 010D0C9F4328584F4973F9BDDD950EE2DC1663C0 Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/bef997ff-d1a4-374c-b453-c9348e59c5c4.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 2604:a940:302::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:f9:bd:dd:95:0e:e2:dc:16:63:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=10456e54-3fba-466e-9248-040f1e74d66e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:20:d9:27:75:20:09:ea:b4:5e:01:e4:7f:6f: 68:c4:7c:c9:56:8e:56:43:37:55:b3:29:75:64:41: a2:2a:e1:dd:a5:1a:46:9d:26:ab:56:c5:49:87:b8: 04:12:e4:f9:35:68:66:dd:eb:21:ca:e6:de:e7:69: 59:7b:ec:d3:e4:bc:3d:c1:f6:2a:20:b6:39:da:c3: d3:8a:86:6e:52:b6:e6:1c:d5:1d:0b:1d:a4:d1:ad: e7:30:cc:8a:81:13:5a:d1:5f:e6:97:ea:aa:5a:83: e8:bb:64:83:65:70:3f:1f:dd:65:6c:e6:4d:30:ee: 4b:ee:d3:a5:27:7e:33:70:6a:81:be:d2:11:07:76: 95:26:a9:6c:bd:71:0d:7c:92:59:22:79:b9:c6:ac: 39:94:48:bf:ff:78:d2:08:21:08:27:74:39:83:3b: 0b:c8:37:60:5d:d6:8e:4b:87:73:83:24:2c:e0:8a: f6:94:0b:94:94:7c:45:4d:51:ca:6e:3f:51:ef:49: 92:d2:52:b7:f9:4f:cf:6a:2e:68:f6:67:57:e3:f8: 4c:31:a5:35:06:87:96:f0:96:d0:7c:a6:ae:ec:56: eb:4a:ed:11:8a:12:de:a4:61:b9:78:c0:8d:49:1e: b9:bb:00:bc:6e:25:a2:59:fa:0e:1e:b2:e3:0d:35: 09:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:9B:AD:03:40:98:DD:B2:FB:56:98:B6:7B:E6:E8:EF:A6:3D:15:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/bef997ff-d1a4-374c-b453-c9348e59c5c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl X509v3 Authority Key Identifier: keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer sbgp-ipAddrBlock: critical IPv6: 2604:a940:302::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:dc:34:91:cc:93:fe:b1:43:88:3c:c7:52:f4:fe:d7:10:b1: ce:a6:dd:4c:e4:09:92:29:23:6f:ef:d8:c2:e3:c8:3b:38:eb: 72:00:c3:a5:e7:6f:66:50:c6:65:43:bc:86:3e:db:41:40:cf: 91:b8:94:e1:36:b9:4b:5e:5b:4d:69:e3:16:8b:35:57:09:f7: d2:b2:c0:5b:bc:b4:46:45:7f:2a:8c:15:ce:d4:06:56:66:91: ab:27:88:bd:6d:36:04:44:ad:19:44:43:5b:72:ef:dd:30:db: eb:c8:76:97:96:6a:0e:c8:98:3e:1a:cf:f3:bc:d3:78:02:22: 2d:7f:7a:5c:c4:d1:66:26:2d:3c:44:e9:76:db:a7:46:b5:9a: e5:ae:47:ec:50:62:0e:a2:9c:48:cf:a4:75:07:13:a2:67:57: 70:d5:b9:d1:85:b7:2e:33:82:16:56:c1:99:0d:3c:ef:03:0f: a0:9d:67:5c:20:94:c1:a9:9a:a6:47:e5:9d:23:45:7a:4e:84: b5:0b:87:70:6f:ea:d6:0e:48:6e:7d:b2:c9:77:59:a5:4f:98: c7:d4:70:f5:50:94:21:0b:50:ed:b1:40:98:57:d2:c1:23:50: 26:72:6c:85:5a:09:07:f5:04:e7:83:a2:74:e3:8c:47:4d:89: 18:02:c1:cd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jc/m93ZUO4twWY8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk OWU3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTA0NTZlNTQtM2ZiYS00NjZlLTkyNDgtMDQwZjFlNzRkNjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyDZJ3UgCeq0XgHkf29oxHzJVo5WQzdVsyl1 ZEGiKuHdpRpGnSarVsVJh7gEEuT5NWhm3eshyube52lZe+zT5Lw9wfYqILY52sPT ioZuUrbmHNUdCx2k0a3nMMyKgRNa0V/ml+qqWoPou2SDZXA/H91lbOZNMO5L7tOl J34zcGqBvtIRB3aVJqlsvXENfJJZInm5xqw5lEi//3jSCCEIJ3Q5gzsLyDdgXdaO S4dzgyQs4Ir2lAuUlHxFTVHKbj9R70mS0lK3+U/Pai5o9mdX4/hMMaU1BoeW8JbQ fKau7FbrSu0RihLepGG5eMCNSR65uwC8biWiWfoOHrLjDTUJ6QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEqbrQNAmN2y+1aYtnvm6O+mPRVSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvYmVmOTk3ZmYtZDFhNC0z NzRjLWI0NTMtYzkzNDhlNTljNWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3 M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4 ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5 NDc5OGQ5ZTcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgSpQAMC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG/cNJHMk/6xQ4g8x1L0/tcQsc6m3UzkCZIpI2/v2MLjyDs463IA w6Xnb2ZQxmVDvIY+20FAz5G4lOE2uUteW01p4xaLNVcJ99KywFu8tEZFfyqMFc7U BlZmkasniL1tNgRErRlEQ1ty790w2+vIdpeWag7ImD4az/O803gCIi1/elzE0WYm LTxE6Xbbp0a1muWuR+xQYg6inEjPpHUHE6JnV3DVudGFty4zghZWwZkNPO8DD6Cd Z1wglMGpmqZH5Z0jRXpOhLULh3Bv6tYOSG59ssl3WaVPmMfUcPVQlCELUO2xQJhX 0sEjUCZybIVaCQf1BOeDonTjjEdNiRgCwc0= -----END CERTIFICATE-----Generated at Sun Sep 27 03:50:00 2026 by rpki-client