$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063/0b541ea5-e7ff-3a00-ac39-abab44ea5935.roa File: 0b541ea5-e7ff-3a00-ac39-abab44ea5935.roa (raw, json) Hash identifier: tbFgtN69HDYBIznc8+osz2PmQdcIiWQFfLeZFIqzVxs= Subject key identifier: B3:1E:61:51:A5:45:B3:C3:68:57:67:65:60:F5:A3:A9:C8:42:AF:41 Certificate issuer: /CN=89be2efa-3c2f-46d2-b5e7-cb8d95369063 Certificate serial: 010D0C9F4328584D15A25496A9FBFE4B9F9BE080 Authority key identifier: 2B:AE:52:79:C2:10:4E:67:05:19:3C:05:4C:B8:27:EE:1C:A5:95:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063/0b541ea5-e7ff-3a00-ac39-abab44ea5935.roa Signing time: Sat 07 Mar 2026 02:00:32 +0000 ROA not before: Sat 07 Mar 2026 02:00:32 +0000 ROA not after: Fri 05 Jun 2026 01:00:32 +0000 asID: 14237 IP address blocks: 216.152.248.0/21 maxlen: 24 2606:e580::/32 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063/89be2efa-3c2f-46d2-b5e7-cb8d95369063.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063/89be2efa-3c2f-46d2-b5e7-cb8d95369063.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:15:a2:54:96:a9:fb:fe:4b:9f:9b:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89be2efa-3c2f-46d2-b5e7-cb8d95369063 Validity Not Before: Mar 7 02:00:32 2026 GMT Not After : Jun 5 01:00:32 2026 GMT Subject: CN=338a78a1-c453-46a3-acd9-4264fd59f5d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f5:2a:74:35:13:db:9a:f9:aa:6c:42:30:60: 0d:7b:e9:c7:23:8e:2d:30:ea:eb:20:e5:5f:80:74: a6:55:e3:fc:74:da:58:98:ae:5d:52:41:f1:7f:3a: b8:70:ff:d9:ca:c3:02:21:85:c9:9a:28:f9:00:0b: ca:50:00:db:ce:f7:6c:3e:a5:82:db:2a:51:43:3a: c8:ba:41:d2:e5:b5:71:77:5f:5b:9a:47:c2:f6:1b: f4:a8:23:aa:b3:9a:5f:df:95:44:27:a8:26:17:79: d4:f7:ba:fd:80:fd:e1:b9:fd:3e:12:a9:91:82:68: 87:a2:fc:1c:c2:8d:0a:0a:88:55:74:42:c2:b7:1a: 48:5e:cb:06:4e:87:6b:b8:38:4e:19:a6:7a:93:08: 2b:a0:3e:76:d8:5b:bb:db:70:da:f2:f6:d7:a0:2f: 0f:04:6a:75:b5:18:f2:a0:93:8a:f2:d8:5b:13:a1: 5d:14:2b:7d:5f:24:31:76:89:14:f1:f7:c2:b7:5c: 8f:e8:25:5d:7d:bc:ee:06:0f:2c:d9:6b:5e:01:e7: 61:a7:9d:07:b7:8f:49:28:fb:6c:45:36:18:37:63: 8c:2a:af:3b:8c:02:22:b5:55:9f:83:68:5b:f1:0a: 51:5a:bf:a0:3c:48:4f:9b:27:82:57:df:0d:6a:10: e2:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:1E:61:51:A5:45:B3:C3:68:57:67:65:60:F5:A3:A9:C8:42:AF:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063/0b541ea5-e7ff-3a00-ac39-abab44ea5935.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063/89be2efa-3c2f-46d2-b5e7-cb8d95369063.crl X509v3 Authority Key Identifier: keyid:2B:AE:52:79:C2:10:4E:67:05:19:3C:05:4C:B8:27:EE:1C:A5:95:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063.cer sbgp-ipAddrBlock: critical IPv4: 216.152.248.0/21 IPv6: 2606:e580::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:68:b2:ac:9b:57:85:22:b2:dc:14:a4:22:44:2b:15:83:9a: e0:35:45:5d:9f:71:f2:2d:6a:a8:83:d5:16:74:c5:7e:e1:c7: 48:1f:64:5e:f6:b8:91:fb:da:20:8b:92:f7:22:84:4b:af:82: 0e:5d:cc:9b:8d:39:35:58:16:99:18:49:5a:90:6b:49:17:c4: 33:32:f7:a0:be:e4:6b:7e:2f:05:81:3f:74:05:83:7e:af:c2: aa:21:a5:b3:47:14:f2:9a:af:fb:64:86:96:5c:a2:dc:bc:67: 61:c8:f2:3b:bf:7c:0f:e7:72:97:a1:4c:fb:78:52:d0:1d:d5: e4:7a:08:8e:2e:ba:e2:29:20:27:6d:78:12:8b:dd:d6:7b:31: c5:4f:65:49:3e:ff:f1:44:23:c7:93:ed:98:e5:ec:2a:28:47: 90:8e:e9:04:e4:34:9a:c4:e1:a2:0d:77:f1:22:15:81:6a:2a: 12:31:36:f6:17:83:81:c3:d1:b8:77:d7:b4:56:c3:98:d7:c9: 7a:d6:c4:45:bf:cb:0b:d6:52:fe:3e:56:0c:de:5d:30:ec:c0: d0:ab:36:4a:ba:33:0a:98:87:e9:4f:da:22:15:d3:03:ef:87: 6b:aa:de:06:70:cd:f5:2b:ab:ee:04:f1:d3:9b:af:36:a6:37: 0a:ca:a0:82 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE0VolSWqfv+S5+b4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODliZTJlZmEtM2MyZi00NmQyLWI1ZTctY2I4ZDk1MzY5 MDYzMB4XDTI2MDMwNzAyMDAzMloXDTI2MDYwNTAxMDAzMlowLzEtMCsGA1UEAxMk MzM4YTc4YTEtYzQ1My00NmEzLWFjZDktNDI2NGZkNTlmNWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/UqdDUT25r5qmxCMGANe+nHI44tMOrrIOVf gHSmVeP8dNpYmK5dUkHxfzq4cP/ZysMCIYXJmij5AAvKUADbzvdsPqWC2ypRQzrI ukHS5bVxd19bmkfC9hv0qCOqs5pf35VEJ6gmF3nU97r9gP3huf0+EqmRgmiHovwc wo0KCohVdELCtxpIXssGTodruDhOGaZ6kwgroD522Fu723Da8vbXoC8PBGp1tRjy oJOK8thbE6FdFCt9XyQxdokU8ffCt1yP6CVdfbzuBg8s2WteAedhp50Ht49JKPts RTYYN2OMKq87jAIitVWfg2hb8QpRWr+gPEhPmyeCV98NahDi5wIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFLMeYVGlRbPDaFdnZWD1o6nIQq9BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84OWJl MmVmYS0zYzJmLTQ2ZDItYjVlNy1jYjhkOTUzNjkwNjMvMGI1NDFlYTUtZTdmZi0z YTAwLWFjMzktYWJhYjQ0ZWE1OTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvODliZTJlZmEtM2MyZi00NmQyLWI1 ZTctY2I4ZDk1MzY5MDYzLzg5YmUyZWZhLTNjMmYtNDZkMi1iNWU3LWNiOGQ5NTM2 OTA2My5jcmwwHwYDVR0jBBgwFoAUK65SecIQTmcFGTwFTLgn7hyllaswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84OWJlMmVmYS0zYzJmLTQ2ZDItYjVlNy1jYjhk OTUzNjkwNjMuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQD2Jj4MA0E AgACMAcDBQAmBuWAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAGBosqybV4UistwUpCJEKxWDmuA1RV2fcfIt aqiD1RZ0xX7hx0gfZF72uJH72iCLkvcihEuvgg5dzJuNOTVYFpkYSVqQa0kXxDMy 96C+5Gt+LwWBP3QFg36vwqohpbNHFPKar/tkhpZcoty8Z2HI8ju/fA/ncpehTPt4 UtAd1eR6CI4uuuIpICdteBKL3dZ7McVPZUk+//FEI8eT7Zjl7CooR5CO6QTkNJrE 4aINd/EiFYFqKhIxNvYXg4HD0bh317RWw5jXyXrWxEW/ywvWUv4+VgzeXTDswNCr Nkq6MwqYh+lP2iIV0wPvh2uq3gZwzfUrq+4E8dObrzamNwrKoII= -----END CERTIFICATE-----Generated at Thu Mar 26 08:51:25 2026 by rpki-client