$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/6bef6a91-06e6-310f-bedc-e4ed84f07de3.roa File: 6bef6a91-06e6-310f-bedc-e4ed84f07de3.roa (raw, json) Hash identifier: fB5tCBQ9MVCdAR/BLAAyjNNpE2EIfArO0XjlnHKgLyY= Subject key identifier: AD:97:70:42:0C:68:49:B2:E4:40:71:87:DB:04:C6:89:C0:28:10:C5 Certificate issuer: /CN=aa34647f-3229-480c-9b05-3cf0b00fa173 Certificate serial: 010D0C9F4328584D15A251E032C7B0BF13F0F580 Authority key identifier: F6:64:CD:56:E5:2F:5C:B7:81:9C:2B:48:FB:1B:CD:5B:9C:C7:FA:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/6bef6a91-06e6-310f-bedc-e4ed84f07de3.roa Signing time: Sat 07 Mar 2026 02:00:32 +0000 ROA not before: Sat 07 Mar 2026 02:00:32 +0000 ROA not after: Fri 05 Jun 2026 01:00:32 +0000 asID: 42000 IP address blocks: 203.31.160.0/24 maxlen: 24 2602:f666:10::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/aa34647f-3229-480c-9b05-3cf0b00fa173.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/aa34647f-3229-480c-9b05-3cf0b00fa173.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:15:a2:51:e0:32:c7:b0:bf:13:f0:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa34647f-3229-480c-9b05-3cf0b00fa173 Validity Not Before: Mar 7 02:00:32 2026 GMT Not After : Jun 5 01:00:32 2026 GMT Subject: CN=f1c5664c-b362-4afe-b086-298e7e8d849e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:20:be:a4:de:d7:ea:d0:89:a4:18:1f:b3:e0: 7e:73:b5:f8:f5:7a:b0:ec:46:52:5d:e5:b5:62:c4: 9a:27:a6:38:10:be:5b:79:58:9b:59:8c:30:8d:b8: 72:96:d2:73:fc:b2:ae:fc:ce:b1:a3:70:e1:50:6a: 78:c3:39:0e:72:48:97:df:bf:77:02:ff:2d:91:ca: 42:79:33:b2:50:32:21:70:6b:fd:5d:a4:61:95:03: 80:95:90:d4:56:21:0d:85:3c:8c:a1:7c:a3:0b:5a: 00:f2:d6:5f:3a:14:97:9b:1a:26:b5:11:03:e7:e7: fd:6c:c3:04:9b:3e:b9:f7:e1:33:8a:5a:fc:bd:5c: ba:76:d0:fe:ef:c3:a1:22:4e:ff:08:1a:6b:5f:3f: d8:47:c7:db:2f:11:ab:18:a0:76:a6:99:10:7a:67: c7:51:e9:c0:30:99:9e:7b:5a:b4:15:d8:13:1a:e4: 00:bd:47:42:2f:3d:6d:32:af:78:07:8c:99:75:13: 01:a8:75:7b:c0:f4:fe:43:62:13:fb:51:05:cf:b3: 13:ad:e7:b6:4e:0d:2e:c6:0b:bc:b8:ed:f5:ca:c3: 75:b1:d0:01:e3:43:03:77:00:e3:ec:f7:ea:b6:5e: ec:9a:50:a1:dc:18:02:cc:28:1e:93:3a:b2:82:1f: 32:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:97:70:42:0C:68:49:B2:E4:40:71:87:DB:04:C6:89:C0:28:10:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/6bef6a91-06e6-310f-bedc-e4ed84f07de3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/aa34647f-3229-480c-9b05-3cf0b00fa173.crl X509v3 Authority Key Identifier: keyid:F6:64:CD:56:E5:2F:5C:B7:81:9C:2B:48:FB:1B:CD:5B:9C:C7:FA:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173.cer sbgp-ipAddrBlock: critical IPv4: 203.31.160.0/24 IPv6: 2602:f666:10::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:bf:01:12:4e:ad:ec:dc:82:f4:f2:31:9a:b2:fd:7f:4e:1e: 5b:76:f5:16:de:3f:33:5f:49:e2:7f:63:03:4a:01:6b:95:4a: 30:99:63:30:b9:56:5f:1b:45:bd:69:99:16:64:95:73:31:ed: 02:65:c9:4e:9d:e8:5e:19:f9:a7:6f:8e:75:31:49:0d:2d:3e: fa:c6:a0:7e:5c:6a:93:37:f2:b4:5e:b2:ee:be:42:d5:b0:76: 5f:b3:c7:ce:7f:33:fe:11:91:bd:97:06:60:52:80:64:c9:dc: 48:0b:d3:b9:6c:43:c1:74:fc:24:2b:60:19:fb:40:c5:94:6f: dd:11:4c:3a:76:16:98:71:53:02:a5:4c:00:39:a8:26:cb:7a: ca:1d:06:a5:0b:19:d9:61:e6:50:ee:53:3a:07:14:6d:02:16: d5:ca:ba:72:e9:8d:f7:9e:0a:aa:0f:81:78:ad:81:49:e3:5b: 78:8a:6b:6f:aa:fd:86:75:66:f6:d2:e3:dd:3a:de:d7:b4:99: 22:6b:0a:12:8e:6c:42:80:c7:4a:48:52:55:7c:08:2e:78:f1: 40:5a:10:9e:e4:7c:a4:ff:4a:3e:f5:32:f6:1a:0c:16:00:b8: 5b:a9:01:8b:c9:bb:07:07:e9:17:b6:0c:1e:a9:fa:cd:52:20: 95:b4:ec:44 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE0VolHgMsewvxPw9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzNDY0N2YtMzIyOS00ODBjLTliMDUtM2NmMGIwMGZh MTczMB4XDTI2MDMwNzAyMDAzMloXDTI2MDYwNTAxMDAzMlowLzEtMCsGA1UEAxMk ZjFjNTY2NGMtYjM2Mi00YWZlLWIwODYtMjk4ZTdlOGQ4NDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryC+pN7X6tCJpBgfs+B+c7X49Xqw7EZSXeW1 YsSaJ6Y4EL5beVibWYwwjbhyltJz/LKu/M6xo3DhUGp4wzkOckiX3793Av8tkcpC eTOyUDIhcGv9XaRhlQOAlZDUViENhTyMoXyjC1oA8tZfOhSXmxomtRED5+f9bMME mz659+Ezilr8vVy6dtD+78OhIk7/CBprXz/YR8fbLxGrGKB2ppkQemfHUenAMJme e1q0FdgTGuQAvUdCLz1tMq94B4yZdRMBqHV7wPT+Q2IT+1EFz7MTree2Tg0uxgu8 uO31ysN1sdAB40MDdwDj7Pfqtl7smlCh3BgCzCgekzqygh8yNwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFK2XcEIMaEmy5EBxh9sExonAKBDFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hYTM0 NjQ3Zi0zMjI5LTQ4MGMtOWIwNS0zY2YwYjAwZmExNzMvNmJlZjZhOTEtMDZlNi0z MTBmLWJlZGMtZTRlZDg0ZjA3ZGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYWEzNDY0N2YtMzIyOS00ODBjLTli MDUtM2NmMGIwMGZhMTczL2FhMzQ2NDdmLTMyMjktNDgwYy05YjA1LTNjZjBiMDBm YTE3My5jcmwwHwYDVR0jBBgwFoAU9mTNVuUvXLeBnCtI+xvNW5zH+qYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hYTM0NjQ3Zi0zMjI5LTQ4MGMtOWIwNS0zY2Yw YjAwZmExNzMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAyx+gMA8E AgACMAkDBwQmAvZmABAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAJL8BEk6t7NyC9PIxmrL9f04eW3b1Ft4/ M19J4n9jA0oBa5VKMJljMLlWXxtFvWmZFmSVczHtAmXJTp3oXhn5p2+OdTFJDS0+ +sagflxqkzfytF6y7r5C1bB2X7PHzn8z/hGRvZcGYFKAZMncSAvTuWxDwXT8JCtg GftAxZRv3RFMOnYWmHFTAqVMADmoJst6yh0GpQsZ2WHmUO5TOgcUbQIW1cq6cumN 954Kqg+BeK2BSeNbeIprb6r9hnVm9tLj3Tre17SZImsKEo5sQoDHSkhSVXwILnjx QFoQnuR8pP9KPvUy9hoMFgC4W6kBi8m7BwfpF7YMHqn6zVIglbTsRA== -----END CERTIFICATE-----Generated at Thu Mar 26 03:42:54 2026 by rpki-client