$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bac49063-78ed-4cca-a152-73b0c601c1bb/a0be1c20-09b7-35fb-b383-81c337bd7b9b.roa File: a0be1c20-09b7-35fb-b383-81c337bd7b9b.roa (raw, json) Hash identifier: hTehH+um3kZz/fk7ewLXal02RkmwNktTS5+aLNPpJxE= Subject key identifier: ED:F0:F2:1B:EC:2A:E7:57:62:BB:9E:35:EB:60:94:98:58:97:EF:53 Certificate issuer: /CN=bac49063-78ed-4cca-a152-73b0c601c1bb Certificate serial: 010D0C9F4328584F093CDD6884810DEFBD498A00 Authority key identifier: B6:E1:DA:35:C9:CA:68:3E:39:F5:CF:67:64:78:89:DB:A5:A4:47:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bac49063-78ed-4cca-a152-73b0c601c1bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bac49063-78ed-4cca-a152-73b0c601c1bb/a0be1c20-09b7-35fb-b383-81c337bd7b9b.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 54058 IP address blocks: 2620:cb:8000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bac49063-78ed-4cca-a152-73b0c601c1bb/bac49063-78ed-4cca-a152-73b0c601c1bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bac49063-78ed-4cca-a152-73b0c601c1bb/bac49063-78ed-4cca-a152-73b0c601c1bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bac49063-78ed-4cca-a152-73b0c601c1bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:dd:68:84:81:0d:ef:bd:49:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bac49063-78ed-4cca-a152-73b0c601c1bb Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=12480d96-c876-4578-806c-45bcde32b129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4e:15:b7:37:2a:64:97:09:13:fa:cc:0d:7f: 72:28:66:25:f2:e8:9e:81:39:b7:e0:9c:0c:6d:22: 31:eb:f2:0b:94:12:10:6a:c0:00:40:59:64:71:90: ea:6e:20:52:c5:b9:82:1b:3f:9a:04:b9:fe:1d:5f: be:fc:1d:b7:ec:aa:9d:f3:4b:8c:bf:6c:a1:88:dc: 6f:88:5d:2a:b1:27:fa:88:9e:d6:7c:90:5f:da:3b: 4d:a0:87:25:f3:87:60:11:03:ec:a6:fc:e1:1b:58: f6:60:4f:63:dd:f7:8d:37:d9:ce:2b:00:f6:31:ce: 65:74:6b:68:d4:4f:e4:f6:eb:89:70:42:6b:92:ef: d6:09:e3:df:a8:9d:36:a1:14:f6:f6:5f:83:2a:58: 32:58:ca:82:60:fa:66:16:97:49:c2:ff:39:f0:9f: 76:19:02:11:da:e5:f8:90:de:6c:cc:c1:96:c1:ef: 8e:92:52:57:92:04:e9:61:c4:c8:84:58:f5:06:25: 5d:e6:39:55:cf:a1:30:12:57:a3:c0:7a:de:53:69: 6f:80:6a:e0:ff:17:a4:5e:0f:c8:33:7c:87:67:75: 5f:66:d8:97:db:5b:37:67:12:b1:85:ad:c3:a4:4c: 07:06:c0:56:77:bc:98:4c:f0:a0:e1:fe:7b:a7:e8: 6d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:F0:F2:1B:EC:2A:E7:57:62:BB:9E:35:EB:60:94:98:58:97:EF:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bac49063-78ed-4cca-a152-73b0c601c1bb/a0be1c20-09b7-35fb-b383-81c337bd7b9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bac49063-78ed-4cca-a152-73b0c601c1bb/bac49063-78ed-4cca-a152-73b0c601c1bb.crl X509v3 Authority Key Identifier: keyid:B6:E1:DA:35:C9:CA:68:3E:39:F5:CF:67:64:78:89:DB:A5:A4:47:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bac49063-78ed-4cca-a152-73b0c601c1bb.cer sbgp-ipAddrBlock: critical IPv6: 2620:cb:8000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:9c:1f:a3:8f:d9:f4:c3:3e:e6:bf:30:1f:66:12:b2:4f:d0: 79:09:20:0a:eb:f4:b0:ac:37:7e:3e:9e:71:5a:98:76:8b:5c: c7:a3:a5:94:5c:79:2a:d7:36:c4:b3:04:65:12:40:18:e3:84: 6c:5a:0c:ac:60:cc:c7:e8:6d:26:26:eb:8e:4e:19:0f:fe:ff: b4:30:32:38:5a:aa:74:cc:77:5b:32:51:6d:d1:5c:52:20:c8: 16:9a:7e:ea:33:cb:38:ff:8e:fe:46:27:fa:8b:d5:9d:9d:0b: cd:f9:63:ca:e8:bb:87:c2:24:fe:e0:79:8b:d0:65:cc:92:00: 88:20:51:13:0b:cc:29:94:87:1e:a8:c5:d1:43:5e:7f:ae:af: 57:3d:9d:10:b1:21:c6:fd:2d:a9:83:48:ce:8c:1c:bd:90:d1: 90:68:e0:26:de:47:54:da:80:f8:df:5a:06:4b:e6:ed:b6:56: b7:5c:64:71:3f:aa:c9:59:ac:ff:28:dd:20:ba:09:8a:20:00: cc:64:ac:b3:1f:87:d5:76:46:3e:c7:39:4e:2a:0b:96:c8:4e: 2a:3c:04:36:17:69:85:c5:5b:85:b1:0c:9d:74:14:50:a5:89: 3d:c4:19:33:70:9f:39:17:5e:47:83:33:9a:a7:6a:5c:d9:5c: 73:46:6f:10 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8JPN1ohIEN771JigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFjNDkwNjMtNzhlZC00Y2NhLWExNTItNzNiMGM2MDFj MWJiMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk MTI0ODBkOTYtYzg3Ni00NTc4LTgwNmMtNDViY2RlMzJiMTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2k4VtzcqZJcJE/rMDX9yKGYl8uiegTm34JwM bSIx6/ILlBIQasAAQFlkcZDqbiBSxbmCGz+aBLn+HV++/B237Kqd80uMv2yhiNxv iF0qsSf6iJ7WfJBf2jtNoIcl84dgEQPspvzhG1j2YE9j3feNN9nOKwD2Mc5ldGto 1E/k9uuJcEJrku/WCePfqJ02oRT29l+DKlgyWMqCYPpmFpdJwv858J92GQIR2uX4 kN5szMGWwe+OklJXkgTpYcTIhFj1BiVd5jlVz6EwElejwHreU2lvgGrg/xekXg/I M3yHZ3VfZtiX21s3ZxKxha3DpEwHBsBWd7yYTPCg4f57p+htZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO3w8hvsKudXYrueNetglJhYl+9TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iYWM0 OTA2My03OGVkLTRjY2EtYTE1Mi03M2IwYzYwMWMxYmIvYTBiZTFjMjAtMDliNy0z NWZiLWIzODMtODFjMzM3YmQ3YjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmFjNDkwNjMtNzhlZC00Y2NhLWEx NTItNzNiMGM2MDFjMWJiL2JhYzQ5MDYzLTc4ZWQtNGNjYS1hMTUyLTczYjBjNjAx YzFiYi5jcmwwHwYDVR0jBBgwFoAUtuHaNcnKaD459c9nZHiJ26WkR6UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iYWM0OTA2My03OGVkLTRjY2EtYTE1Mi03M2Iw YzYwMWMxYmIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAy4AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABucH6OP2fTDPua/MB9mErJP0HkJIArr9LCsN34+nnFamHaLXMej pZRceSrXNsSzBGUSQBjjhGxaDKxgzMfobSYm645OGQ/+/7QwMjhaqnTMd1syUW3R XFIgyBaafuozyzj/jv5GJ/qL1Z2dC835Y8rou4fCJP7geYvQZcySAIggURMLzCmU hx6oxdFDXn+ur1c9nRCxIcb9LamDSM6MHL2Q0ZBo4CbeR1TagPjfWgZL5u22Vrdc ZHE/qslZrP8o3SC6CYogAMxkrLMfh9V2Rj7HOU4qC5bITio8BDYXaYXFW4WxDJ10 FFCliT3EGTNwnzkXXkeDM5qnalzZXHNGbxA= -----END CERTIFICATE-----Generated at Sat Oct 3 17:38:43 2026 by rpki-client