$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/befc84f3-62e1-4148-9252-a5e35e1f9afc/44c2d3b5-fb9c-378f-8f1b-c457d969c969.roa File: 44c2d3b5-fb9c-378f-8f1b-c457d969c969.roa (raw, json) Hash identifier: 8h3j9XdpbBf9nIdOh4n8RcOkDFDClE0rUou/vota90o= Subject key identifier: E7:FC:3F:10:7D:01:02:E3:01:BA:6E:71:9F:35:BE:52:BE:AB:ED:75 Certificate issuer: /CN=befc84f3-62e1-4148-9252-a5e35e1f9afc Certificate serial: 010D0C9F4328584F27F257A33C7612517507AB00 Authority key identifier: DD:01:73:23:06:8C:E9:3A:D3:27:EC:4D:D8:3C:F7:71:0E:9E:A5:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/befc84f3-62e1-4148-9252-a5e35e1f9afc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/befc84f3-62e1-4148-9252-a5e35e1f9afc/44c2d3b5-fb9c-378f-8f1b-c457d969c969.roa Signing time: Sun 13 Sep 2026 01:00:12 +0000 ROA not before: Sun 13 Sep 2026 01:00:12 +0000 ROA not after: Sat 12 Dec 2026 02:00:12 +0000 asID: 2732 IP address blocks: 2607:23c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/befc84f3-62e1-4148-9252-a5e35e1f9afc/befc84f3-62e1-4148-9252-a5e35e1f9afc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/befc84f3-62e1-4148-9252-a5e35e1f9afc/befc84f3-62e1-4148-9252-a5e35e1f9afc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/befc84f3-62e1-4148-9252-a5e35e1f9afc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:27:f2:57:a3:3c:76:12:51:75:07:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=befc84f3-62e1-4148-9252-a5e35e1f9afc Validity Not Before: Sep 13 01:00:12 2026 GMT Not After : Dec 12 02:00:12 2026 GMT Subject: CN=5332f0ea-def7-4eea-a1d0-7add203ed893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f0:a4:9f:50:16:30:3b:a9:98:96:b6:3e:61: 03:53:ae:fb:6d:6a:db:a1:ed:0e:8d:09:f4:55:61: 3e:dc:70:29:ab:bf:34:8c:9c:e5:84:1f:00:7c:e8: 95:c9:32:4d:55:60:74:da:1f:dd:7d:cf:ce:00:a8: ab:4e:56:9c:86:5b:6a:35:2a:16:53:b2:8b:62:37: 56:8e:d5:30:2f:84:0f:1a:5a:d3:f6:be:c8:e2:92: 2b:cd:fe:49:f5:04:2b:6e:ef:12:6b:f2:98:19:4f: 85:db:34:49:96:83:b7:ab:f6:74:56:4c:45:f7:6c: a1:0d:51:66:5b:35:0b:60:29:0a:59:da:76:ef:5a: 79:c7:29:2b:be:db:95:2a:a6:eb:5d:23:15:cc:58: f8:ac:f3:22:d8:4f:88:f1:4b:4a:a3:8b:f5:c3:60: fd:51:45:92:8d:ae:e6:bb:1e:4c:33:17:08:ce:03: ff:54:c1:bf:03:e7:e0:dc:70:29:eb:66:db:05:5e: 6d:7f:86:d7:df:b3:2c:d3:ca:15:ae:3e:c3:fa:d7: 3b:3c:b6:06:d8:cb:2f:40:79:43:ed:f8:bb:a5:6b: 81:b6:8c:19:4e:7d:1f:9f:1e:c3:b7:dc:d4:84:cf: 1d:6c:b0:0d:68:fd:ce:7f:90:28:9e:7d:fb:c0:43: 0c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:FC:3F:10:7D:01:02:E3:01:BA:6E:71:9F:35:BE:52:BE:AB:ED:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/befc84f3-62e1-4148-9252-a5e35e1f9afc/44c2d3b5-fb9c-378f-8f1b-c457d969c969.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/befc84f3-62e1-4148-9252-a5e35e1f9afc/befc84f3-62e1-4148-9252-a5e35e1f9afc.crl X509v3 Authority Key Identifier: keyid:DD:01:73:23:06:8C:E9:3A:D3:27:EC:4D:D8:3C:F7:71:0E:9E:A5:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/befc84f3-62e1-4148-9252-a5e35e1f9afc.cer sbgp-ipAddrBlock: critical IPv6: 2607:23c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:ac:b4:30:0d:55:10:ef:88:8b:95:d9:e6:aa:9c:07:33:c7: 0f:b8:a0:71:b6:11:98:7b:c3:47:db:e6:f2:34:da:37:98:5f: 26:6b:93:03:20:3b:36:91:77:24:c0:40:9d:5c:65:68:c5:1c: d2:38:5f:b8:93:05:6a:1b:57:c9:ef:ff:ad:d3:86:47:af:cf: a3:3d:70:7f:ef:f2:db:60:8b:68:10:9f:07:82:2b:e6:aa:21: 38:fd:30:1c:34:18:cd:ca:1e:0d:ee:b1:98:eb:1a:7d:bf:06: 6e:1b:5a:ab:da:36:92:b3:7a:be:2b:10:06:e0:0b:2b:bf:f0: 1d:dd:05:12:07:9a:8b:70:b9:9d:a3:2c:49:23:78:dd:dd:8e: 22:26:fc:ea:52:95:82:79:b0:ff:e9:aa:03:48:29:99:62:a1: 8f:2f:ca:fe:be:01:7e:c3:a5:37:26:eb:c9:df:5d:ac:7e:ae: d3:cc:09:10:33:91:f9:55:d3:67:06:96:f7:b9:17:82:9a:42: 18:12:66:56:c0:5d:c3:17:4c:f9:e3:45:3b:fb:05:29:ec:98: a7:c1:f5:03:d0:da:a4:c3:61:30:8f:cd:e8:54:dc:70:73:d6: d4:9a:49:c9:f7:02:52:e4:9e:09:96:2f:4d:a8:ce:44:9c:9e: 09:10:15:4c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8n8lejPHYSUXUHqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmVmYzg0ZjMtNjJlMS00MTQ4LTkyNTItYTVlMzVlMWY5 YWZjMB4XDTI2MDkxMzAxMDAxMloXDTI2MTIxMjAyMDAxMlowLzEtMCsGA1UEAxMk NTMzMmYwZWEtZGVmNy00ZWVhLWExZDAtN2FkZDIwM2VkODkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvCkn1AWMDupmJa2PmEDU677bWrboe0OjQn0 VWE+3HApq780jJzlhB8AfOiVyTJNVWB02h/dfc/OAKirTlachltqNSoWU7KLYjdW jtUwL4QPGlrT9r7I4pIrzf5J9QQrbu8Sa/KYGU+F2zRJloO3q/Z0VkxF92yhDVFm WzULYCkKWdp271p5xykrvtuVKqbrXSMVzFj4rPMi2E+I8UtKo4v1w2D9UUWSja7m ux5MMxcIzgP/VMG/A+fg3HAp62bbBV5tf4bX37Ms08oVrj7D+tc7PLYG2MsvQHlD 7fi7pWuBtowZTn0fnx7Dt9zUhM8dbLANaP3Of5Aonn37wEMM/QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOf8PxB9AQLjAbpucZ81vlK+q+11MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9iZWZj ODRmMy02MmUxLTQxNDgtOTI1Mi1hNWUzNWUxZjlhZmMvNDRjMmQzYjUtZmI5Yy0z NzhmLThmMWItYzQ1N2Q5NjljOTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvYmVmYzg0ZjMtNjJlMS00MTQ4LTky NTItYTVlMzVlMWY5YWZjL2JlZmM4NGYzLTYyZTEtNDE0OC05MjUyLWE1ZTM1ZTFm OWFmYy5jcmwwHwYDVR0jBBgwFoAU3QFzIwaM6TrTJ+xN2Dz3cQ6epVYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi9iZWZjODRmMy02MmUxLTQxNDgtOTI1Mi1hNWUz NWUxZjlhZmMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcjwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA2rLQwDVUQ74iLldnmqpwHM8cPuKBxthGYe8NH2+byNNo3mF8ma5MD IDs2kXckwECdXGVoxRzSOF+4kwVqG1fJ7/+t04ZHr8+jPXB/7/LbYItoEJ8Hgivm qiE4/TAcNBjNyh4N7rGY6xp9vwZuG1qr2jaSs3q+KxAG4Asrv/Ad3QUSB5qLcLmd oyxJI3jd3Y4iJvzqUpWCebD/6aoDSCmZYqGPL8r+vgF+w6U3JuvJ312sfq7TzAkQ M5H5VdNnBpb3uReCmkIYEmZWwF3DF0z540U7+wUp7JinwfUD0Nqkw2Ewj83oVNxw c9bUmknJ9wJS5J4Jli9NqM5EnJ4JEBVM -----END CERTIFICATE-----Generated at Sat Sep 26 14:57:44 2026 by rpki-client