$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/b02811c2-ab72-3845-927e-12fb04c97d6f.roa File: b02811c2-ab72-3845-927e-12fb04c97d6f.roa (raw, json) Hash identifier: ZWmGhZ/RuzhGfv+npFl46GVzNbTsP22zYb9sChHAaHs= Subject key identifier: FB:BF:9D:65:29:C0:4E:9F:43:86:3B:DF:B8:34:DD:93:48:58:A4:9C Certificate issuer: /CN=209f0328-0af3-4de3-a043-8072346acdf7 Certificate serial: 010D0C9F4328584D4A8F9651719AD5CC1704B340 Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/b02811c2-ab72-3845-927e-12fb04c97d6f.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 7782 IP address blocks: 2001:4948::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:96:51:71:9a:d5:cc:17:04:b3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7 Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=f4f8b750-31bf-4e78-a34e-db8dbac7263f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:35:ef:36:90:25:8b:4c:89:3f:a4:93:fd:7c: cc:70:d6:82:96:fe:a4:1e:d5:93:65:5c:15:d4:4f: 35:17:1e:29:eb:ef:9d:60:cf:f6:85:e1:2f:aa:31: 0c:3b:f2:35:60:ab:17:52:f9:5f:58:3a:8b:58:40: c1:f1:51:4f:98:0d:86:27:ba:33:0d:cc:03:dc:c6: 05:57:05:f1:86:28:d4:09:d1:87:98:b0:13:38:a4: 12:a0:d7:e4:9a:21:ee:b0:cc:d1:42:01:9c:c4:78: 75:27:a4:98:3f:d4:b7:49:93:7f:78:4f:71:f7:d3: 42:24:85:eb:18:af:3e:40:cf:1e:0e:79:c9:58:ae: 4f:d3:b8:2c:3e:b7:64:f1:45:6c:8b:21:a6:8c:c6: 42:14:f7:99:2b:fd:36:3e:10:79:fa:15:27:78:26: ab:95:86:09:03:87:57:d2:28:74:17:21:5c:6c:9e: 90:1f:b6:9c:1f:41:be:26:02:00:f0:b5:82:b5:8b: dd:61:3d:27:92:24:07:a3:20:56:c2:76:da:b0:0a: f3:5f:d4:d3:5c:ca:34:ad:23:e0:07:7e:47:5a:35: d8:53:c4:2d:3d:94:29:2a:f1:c8:31:75:aa:78:e3: 3e:99:f1:d7:ee:55:b8:40:ef:10:26:ca:ce:05:0c: b5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:BF:9D:65:29:C0:4E:9F:43:86:3B:DF:B8:34:DD:93:48:58:A4:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/b02811c2-ab72-3845-927e-12fb04c97d6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl X509v3 Authority Key Identifier: keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer sbgp-ipAddrBlock: critical IPv6: 2001:4948::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:af:b4:83:0c:bf:39:5f:13:5d:94:5d:9c:db:d2:18:a3:80: 5c:84:78:2b:d4:2b:22:ef:03:e5:6d:a7:e3:4f:ea:e4:aa:25: bb:27:cd:7e:59:0b:47:79:45:25:15:fe:db:3a:fd:e5:5f:e3: a0:f8:13:71:59:f8:4b:bc:e7:89:0a:96:1e:49:d5:3d:54:19: 5c:de:24:cb:d9:15:1a:84:1d:40:ad:10:78:b6:84:ae:39:a7: e1:1a:a2:47:96:e2:08:75:bf:21:37:07:a7:54:8e:9f:97:34: 19:69:db:86:01:45:0a:ff:b1:70:c6:53:63:44:d0:6a:bd:ac: b9:30:89:c3:25:8a:60:5b:fc:66:af:78:19:c4:c8:af:8f:ac: 6c:2b:e1:2b:06:7a:87:53:41:e0:86:0a:af:f9:c1:24:09:64: ed:b3:d7:2e:f4:94:ba:df:70:5a:3d:60:7b:a8:32:22:91:15: 40:00:89:64:24:f2:16:13:ea:19:c6:5b:64:9c:bb:bc:88:91: 21:cd:0a:c1:93:54:a0:b9:a9:97:43:e1:68:8b:dc:5d:75:9c: df:30:5d:db:24:02:db:19:a7:73:88:b6:08:bf:14:5e:79:12: 42:17:0e:3e:3d:e3:93:94:9b:df:a0:1b:0b:a1:06:b6:8f:34: 1c:04:c1:cd -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1Kj5ZRcZrVzBcEs0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA5ZjAzMjgtMGFmMy00ZGUzLWEwNDMtODA3MjM0NmFj ZGY3MB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk ZjRmOGI3NTAtMzFiZi00ZTc4LWEzNGUtZGI4ZGJhYzcyNjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjXvNpAli0yJP6ST/XzMcNaClv6kHtWTZVwV 1E81Fx4p6++dYM/2heEvqjEMO/I1YKsXUvlfWDqLWEDB8VFPmA2GJ7ozDcwD3MYF VwXxhijUCdGHmLATOKQSoNfkmiHusMzRQgGcxHh1J6SYP9S3SZN/eE9x99NCJIXr GK8+QM8eDnnJWK5P07gsPrdk8UVsiyGmjMZCFPeZK/02PhB5+hUneCarlYYJA4dX 0ih0FyFcbJ6QH7acH0G+JgIA8LWCtYvdYT0nkiQHoyBWwnbasArzX9TTXMo0rSPg B35HWjXYU8QtPZQpKvHIMXWqeOM+mfHX7lW4QO8QJsrOBQy1jwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPu/nWUpwE6fQ4Y737g03ZNIWKScMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlm MDMyOC0wYWYzLTRkZTMtYTA0My04MDcyMzQ2YWNkZjcvYjAyODExYzItYWI3Mi0z ODQ1LTkyN2UtMTJmYjA0Yzk3ZDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA5ZjAzMjgtMGFmMy00ZGUzLWEw NDMtODA3MjM0NmFjZGY3LzIwOWYwMzI4LTBhZjMtNGRlMy1hMDQzLTgwNzIzNDZh Y2RmNy5jcmwwHwYDVR0jBBgwFoAUsoIq0bI2KU20SE/OQcx6IpRLZAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlmMDMyOC0wYWYzLTRkZTMtYTA0My04MDcy MzQ2YWNkZjcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAFJSDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBXr7SDDL85XxNdlF2c29IYo4BchHgr1Csi7wPlbafjT+rkqiW7J81+ WQtHeUUlFf7bOv3lX+Og+BNxWfhLvOeJCpYeSdU9VBlc3iTL2RUahB1ArRB4toSu OafhGqJHluIIdb8hNwenVI6flzQZaduGAUUK/7FwxlNjRNBqvay5MInDJYpgW/xm r3gZxMivj6xsK+ErBnqHU0Hghgqv+cEkCWTts9cu9JS633BaPWB7qDIikRVAAIlk JPIWE+oZxltknLu8iJEhzQrBk1SguamXQ+Foi9xddZzfMF3bJALbGadziLYIvxRe eRJCFw4+PeOTlJvfoBsLoQa2jzQcBMHN -----END CERTIFICATE-----Generated at Thu Mar 26 03:55:35 2026 by rpki-client