$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be7047c2-33bd-411c-802c-e79eb6aea35f/52d8a1d9-779e-3dc7-99e2-52574eefe881.roa File: 52d8a1d9-779e-3dc7-99e2-52574eefe881.roa (raw, json) Hash identifier: L4RJlaLHq5EuE5YR4lxhxHBdNvKciccOGKHndx13GmU= Subject key identifier: 80:5F:53:74:F6:22:F8:13:6D:8A:C1:13:A3:46:70:A7:18:55:D5:3B Certificate issuer: /CN=be7047c2-33bd-411c-802c-e79eb6aea35f Certificate serial: 010D0C9F4328584D1B19E9F3AF57059938182500 Authority key identifier: 55:7C:AA:E6:E4:52:A2:F3:51:4E:FD:84:5E:8F:7D:EE:4E:89:40:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be7047c2-33bd-411c-802c-e79eb6aea35f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be7047c2-33bd-411c-802c-e79eb6aea35f/52d8a1d9-779e-3dc7-99e2-52574eefe881.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 401602 IP address blocks: 2604:960::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be7047c2-33bd-411c-802c-e79eb6aea35f/be7047c2-33bd-411c-802c-e79eb6aea35f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be7047c2-33bd-411c-802c-e79eb6aea35f/be7047c2-33bd-411c-802c-e79eb6aea35f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be7047c2-33bd-411c-802c-e79eb6aea35f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:19:e9:f3:af:57:05:99:38:18:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be7047c2-33bd-411c-802c-e79eb6aea35f Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=277fd411-c037-4110-b497-556c6170ad6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:eb:ad:9b:3b:92:52:d5:50:59:12:6b:2e:3e: e7:5b:2b:ca:17:ba:e6:48:bb:a1:4b:bc:34:57:46: 67:36:26:7f:cf:52:c8:fd:ba:99:f8:46:f1:69:7e: 80:09:62:89:6a:61:4a:2b:2c:ee:12:c4:3c:15:6f: 31:47:f9:37:d8:e6:fd:73:72:f4:2a:8c:71:31:f1: bc:90:b2:e3:36:cb:2a:37:02:9e:eb:6e:ce:38:1a: ff:0e:b3:42:54:e4:8f:e5:be:bd:ad:ef:8f:ba:f4: 78:ef:51:f9:21:fb:9e:23:37:37:95:cd:6d:de:d5: a6:88:ea:96:c5:cf:60:09:c1:68:74:7d:98:c3:07: 64:ef:ea:b9:8c:a9:30:ea:ee:80:9d:fa:52:33:a3: 5e:44:6b:9b:90:9a:ce:e5:e2:82:cc:21:4c:49:18: 4d:73:38:4b:b9:9d:76:83:a4:2e:83:7a:db:88:d1: dc:a1:22:6f:29:fb:df:d7:de:33:75:79:f6:32:04: 4e:f5:7b:97:66:d9:39:70:bf:73:0e:f3:a9:8d:5d: b5:46:58:2c:10:7a:de:66:a0:b7:41:5e:f5:39:e3: 03:99:ed:92:5b:51:79:3b:c2:06:e8:8c:10:9a:07: 8f:00:28:3b:c7:99:b2:8d:1f:71:f7:86:2c:1f:28: 0f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:5F:53:74:F6:22:F8:13:6D:8A:C1:13:A3:46:70:A7:18:55:D5:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be7047c2-33bd-411c-802c-e79eb6aea35f/52d8a1d9-779e-3dc7-99e2-52574eefe881.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be7047c2-33bd-411c-802c-e79eb6aea35f/be7047c2-33bd-411c-802c-e79eb6aea35f.crl X509v3 Authority Key Identifier: keyid:55:7C:AA:E6:E4:52:A2:F3:51:4E:FD:84:5E:8F:7D:EE:4E:89:40:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be7047c2-33bd-411c-802c-e79eb6aea35f.cer sbgp-ipAddrBlock: critical IPv6: 2604:960::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:7c:5f:f6:99:7a:1b:c9:c6:73:55:30:49:30:cf:8d:96:e4: 5c:56:ae:08:15:8d:1c:ee:e9:ce:62:d4:3f:1f:ab:ea:71:31: e0:9e:ec:69:b1:61:6b:b8:32:4b:3a:6e:25:e5:fd:a7:8f:90: 30:a9:e7:bb:7a:46:b6:7c:a2:6b:08:3a:a9:31:6a:9b:84:f6: d6:97:25:fa:85:71:13:38:32:97:1d:51:48:6d:bf:3b:b7:95: 7f:5d:f9:b1:6b:b6:d7:38:2c:fb:52:91:df:0b:6b:53:92:81: 7d:ef:dd:1a:6a:67:59:e2:1f:66:05:ac:39:08:2e:ae:1b:5c: 0b:83:bb:18:f1:46:9c:d2:06:38:8c:16:d2:0e:24:00:a1:d9: dd:93:cd:df:35:5c:1c:05:87:ff:05:be:51:a0:4b:95:50:6f: 50:2a:14:dc:17:4c:a7:cc:13:d1:b7:32:dc:47:ac:f4:e9:16: b5:4b:d4:de:8d:37:b0:79:73:ce:3b:36:7e:5f:06:e4:12:d4: 5b:07:ee:80:f5:8d:0a:87:c7:4c:ff:66:51:8f:dc:81:6b:ef: 90:5a:97:0a:91:7a:39:46:4d:4f:e1:c8:84:f2:fc:25:18:3d: 00:df:d4:4c:51:9b:34:b4:5d:b2:df:b9:8e:8c:e2:a6:32:3e: e4:ea:b0:50 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0bGenzr1cFmTgYJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmU3MDQ3YzItMzNiZC00MTFjLTgwMmMtZTc5ZWI2YWVh MzVmMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk Mjc3ZmQ0MTEtYzAzNy00MTEwLWI0OTctNTU2YzYxNzBhZDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOutmzuSUtVQWRJrLj7nWyvKF7rmSLuhS7w0 V0ZnNiZ/z1LI/bqZ+EbxaX6ACWKJamFKKyzuEsQ8FW8xR/k32Ob9c3L0KoxxMfG8 kLLjNssqNwKe627OOBr/DrNCVOSP5b69re+PuvR471H5IfueIzc3lc1t3tWmiOqW xc9gCcFodH2Ywwdk7+q5jKkw6u6AnfpSM6NeRGubkJrO5eKCzCFMSRhNczhLuZ12 g6Qug3rbiNHcoSJvKfvf194zdXn2MgRO9XuXZtk5cL9zDvOpjV21RlgsEHreZqC3 QV71OeMDme2SW1F5O8IG6IwQmgePACg7x5myjR9x94YsHygPiQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIBfU3T2IvgTbYrBE6NGcKcYVdU7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9iZTcw NDdjMi0zM2JkLTQxMWMtODAyYy1lNzllYjZhZWEzNWYvNTJkOGExZDktNzc5ZS0z ZGM3LTk5ZTItNTI1NzRlZWZlODgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYmU3MDQ3YzItMzNiZC00MTFjLTgw MmMtZTc5ZWI2YWVhMzVmL2JlNzA0N2MyLTMzYmQtNDExYy04MDJjLWU3OWViNmFl YTM1Zi5jcmwwHwYDVR0jBBgwFoAUVXyq5uRSovNRTv2EXo997k6JQHIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9iZTcwNDdjMi0zM2JkLTQxMWMtODAyYy1lNzll YjZhZWEzNWYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQJYDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCAfF/2mXobycZzVTBJMM+NluRcVq4IFY0c7unOYtQ/H6vqcTHgnuxp sWFruDJLOm4l5f2nj5Awqee7eka2fKJrCDqpMWqbhPbWlyX6hXETODKXHVFIbb87 t5V/Xfmxa7bXOCz7UpHfC2tTkoF9790aamdZ4h9mBaw5CC6uG1wLg7sY8Uac0gY4 jBbSDiQAodndk83fNVwcBYf/Bb5RoEuVUG9QKhTcF0ynzBPRtzLcR6z06Ra1S9Te jTeweXPOOzZ+XwbkEtRbB+6A9Y0Kh8dM/2ZRj9yBa++QWpcKkXo5Rk1P4ciE8vwl GD0A39RMUZs0tF2y37mOjOKmMj7k6rBQ -----END CERTIFICATE-----Generated at Thu Mar 26 12:53:11 2026 by rpki-client