$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/0f1f0768-7b3f-36e1-a622-8efb6d8ff0a4.roa File: 0f1f0768-7b3f-36e1-a622-8efb6d8ff0a4.roa (raw, json) Hash identifier: MNW6ZtiuQLBrAM34HBkNlsJVrjGpEOCloWfmYS3UQNQ= Subject key identifier: 64:D0:E8:43:3F:8B:69:18:E8:2D:0C:8C:BE:00:47:97:17:BE:3B:74 Certificate issuer: /CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345 Certificate serial: 010D0C9F4328584D3B34EAEE03B191386E909CC0 Authority key identifier: D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/0f1f0768-7b3f-36e1-a622-8efb6d8ff0a4.roa Signing time: Fri 20 Mar 2026 13:00:40 +0000 ROA not before: Fri 20 Mar 2026 13:00:40 +0000 ROA not after: Thu 18 Jun 2026 13:00:40 +0000 asID: 31898 IP address blocks: 101.45.244.0/22 maxlen: 24 2605:340:400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3b:34:ea:ee:03:b1:91:38:6e:90:9c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345 Validity Not Before: Mar 20 13:00:40 2026 GMT Not After : Jun 18 13:00:40 2026 GMT Subject: CN=b4d012d3-f94f-4c6a-adc9-8bb62fc40da5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b6:da:1b:f7:19:3c:c8:48:4a:cf:ef:7f:e6: 04:66:48:7a:33:23:7d:c0:00:4f:a4:56:3c:86:4c: 68:1d:05:8c:bd:d6:1b:c0:6f:99:28:4e:c6:47:6a: af:f1:6e:3f:17:58:63:38:08:6f:10:7c:80:6d:44: 9f:83:d6:11:91:ce:1a:b7:2a:41:62:ad:ae:7f:55: ff:e0:4a:ff:f5:64:d2:42:53:74:82:48:28:9e:bc: bb:f5:77:cb:4a:4d:e7:83:31:b6:e0:61:d8:17:bc: e2:4e:bf:2e:d2:65:9c:a5:e7:fa:16:1f:71:e3:89: 5c:a9:e1:b1:d4:ca:c3:4d:14:ea:e6:66:32:d9:5c: ba:ea:50:7a:0b:f2:2d:7e:cc:8c:3d:c5:2d:01:ab: f2:33:de:17:69:92:cd:b2:a6:9d:6c:c1:54:80:98: 6d:e8:7c:9a:70:2e:76:50:70:f8:b3:ab:68:86:45: db:db:77:97:1a:3d:c3:27:48:92:ce:a0:33:72:91: ac:83:5d:88:39:ec:0e:52:73:bf:87:25:ce:e4:9a: d4:b3:52:4b:fc:fb:0d:af:bf:18:69:bd:ed:ac:7c: 0b:34:11:9e:6b:bd:ce:4e:41:76:96:be:bb:2b:61: 0a:78:06:71:cd:0b:ac:70:b6:55:b2:50:1e:ec:be: 6b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:D0:E8:43:3F:8B:69:18:E8:2D:0C:8C:BE:00:47:97:17:BE:3B:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/0f1f0768-7b3f-36e1-a622-8efb6d8ff0a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl X509v3 Authority Key Identifier: keyid:D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer sbgp-ipAddrBlock: critical IPv4: 101.45.244.0/22 IPv6: 2605:340:400::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:48:80:49:ef:a5:0d:0a:d4:c9:1c:d5:73:8a:de:4d:65:e6: 4d:a1:cf:1e:46:a9:6d:2a:c0:7c:07:65:e8:eb:bc:45:c7:d9: c3:65:18:23:33:84:09:cc:d4:b6:3f:eb:a3:8b:aa:92:57:0a: d1:bc:c9:1a:e2:a9:01:7d:4e:35:51:c1:c6:09:b3:2c:f3:db: 86:89:02:6c:fe:84:4b:31:b3:94:b4:79:6c:17:29:17:47:6f: b7:f3:aa:bd:75:4e:4d:7b:4e:72:96:74:b2:2d:56:38:67:55: 9d:3b:4f:cd:e9:6a:66:db:bb:20:6b:88:cc:ff:c0:fe:fb:67: 62:01:3c:30:e0:d4:a4:63:b6:50:1d:6c:d0:f3:6e:f7:6f:9c: cb:26:bc:3f:9d:01:42:0e:63:e9:32:d1:e0:c7:31:39:9a:29: 40:0a:38:ae:a4:62:35:cf:e4:49:50:c9:29:72:8e:27:36:aa: 8b:47:df:a5:ff:e4:1b:bc:76:47:a6:73:47:78:7a:0a:b1:5c: dc:4d:05:6f:eb:9b:02:3c:38:ce:73:74:f9:6e:17:91:ac:cd: 46:dd:50:f8:07:4f:1f:75:93:43:8e:7b:5a:3f:c2:c6:86:24: b0:ca:fa:28:72:ad:37:81:77:66:cf:35:fe:c0:ce:ba:1b:8a: 50:d3:a6:54 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE07NOruA7GROG6QnMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ2MzM4YTUtN2M2MC00ZGM1LWIxZDgtMWM1MDRhNGVm MzQ1MB4XDTI2MDMyMDEzMDA0MFoXDTI2MDYxODEzMDA0MFowLzEtMCsGA1UEAxMk YjRkMDEyZDMtZjk0Zi00YzZhLWFkYzktOGJiNjJmYzQwZGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7baG/cZPMhISs/vf+YEZkh6MyN9wABPpFY8 hkxoHQWMvdYbwG+ZKE7GR2qv8W4/F1hjOAhvEHyAbUSfg9YRkc4atypBYq2uf1X/ 4Er/9WTSQlN0gkgonry79XfLSk3ngzG24GHYF7ziTr8u0mWcpef6Fh9x44lcqeGx 1MrDTRTq5mYy2Vy66lB6C/ItfsyMPcUtAavyM94XaZLNsqadbMFUgJht6HyacC52 UHD4s6tohkXb23eXGj3DJ0iSzqAzcpGsg12IOewOUnO/hyXO5JrUs1JL/PsNr78Y ab3trHwLNBGea73OTkF2lr67K2EKeAZxzQuscLZVslAe7L5rNQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFGTQ6EM/i2kY6C0MjL4AR5cXvjt0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYz MzhhNS03YzYwLTRkYzUtYjFkOC0xYzUwNGE0ZWYzNDUvMGYxZjA3NjgtN2IzZi0z NmUxLWE2MjItOGVmYjZkOGZmMGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWQ2MzM4YTUtN2M2MC00ZGM1LWIx ZDgtMWM1MDRhNGVmMzQ1LzFkNjMzOGE1LTdjNjAtNGRjNS1iMWQ4LTFjNTA0YTRl ZjM0NS5jcmwwHwYDVR0jBBgwFoAU2d97ozrzBBGTcYJwMlTvgkEtX1MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYzMzhhNS03YzYwLTRkYzUtYjFkOC0xYzUw NGE0ZWYzNDUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCZS30MA4E AgACMAgDBgAmBQNABDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBqSIBJ76UNCtTJHNVzit5NZeZNoc8eRqlt KsB8B2Xo67xFx9nDZRgjM4QJzNS2P+uji6qSVwrRvMka4qkBfU41UcHGCbMs89uG iQJs/oRLMbOUtHlsFykXR2+386q9dU5Ne05ylnSyLVY4Z1WdO0/N6Wpm27sga4jM /8D++2diATww4NSkY7ZQHWzQ8273b5zLJrw/nQFCDmPpMtHgxzE5milACjiupGI1 z+RJUMkpco4nNqqLR9+l/+QbvHZHpnNHeHoKsVzcTQVv65sCPDjOc3T5bheRrM1G 3VD4B08fdZNDjntaP8LGhiSwyvoocq03gXdmzzX+wM66G4pQ06ZU -----END CERTIFICATE-----Generated at Thu Mar 26 12:24:03 2026 by rpki-client