$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/48d069ba-5ef8-3f64-a653-d806fe8fd001.roa File: 48d069ba-5ef8-3f64-a653-d806fe8fd001.roa (raw, json) Hash identifier: Om6vwQQ9RSg8mIU0nJCyiZKFZWIRkc26iko3f7B40cc= Subject key identifier: BE:6A:8E:91:06:F6:73:A5:DA:DC:21:2A:3E:94:F7:3D:BF:2D:4A:20 Certificate issuer: /CN=966830a4-0e6f-49a1-9823-af2ae92ac7f2 Certificate serial: 010D0C9F4328584D4A8FA2E021013200083674C0 Authority key identifier: DC:5F:4D:B6:AA:A1:18:41:1D:62:8B:AC:74:A8:80:61:BF:05:14:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/48d069ba-5ef8-3f64-a653-d806fe8fd001.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 32329 IP address blocks: 207.53.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:a2:e0:21:01:32:00:08:36:74:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=966830a4-0e6f-49a1-9823-af2ae92ac7f2 Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=5b4c00e5-5b4c-4a1d-b06a-974d11c84b0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c1:69:27:2d:28:e5:f1:30:dc:a0:95:f5:74: 8e:84:57:f2:b4:01:f6:97:6e:d5:dd:66:42:9f:2a: 66:ee:9f:15:53:4e:d1:64:7b:77:4d:60:40:fa:04: 04:17:b1:2f:52:cc:95:89:5f:b8:b9:44:50:6d:7c: 7d:58:a5:27:e5:18:6a:79:a9:a9:73:f7:33:13:9b: c9:7b:5b:d4:6a:39:5d:19:83:8f:7d:11:03:1a:86: 77:12:8e:a1:a1:03:83:fb:8b:d0:46:28:64:cd:bc: 3c:ba:b0:aa:82:8e:0c:d7:01:bb:75:24:63:e9:1e: 5e:8e:8e:db:02:37:6e:31:df:3c:20:9f:58:e8:26: 4d:9a:2e:40:7c:fd:ce:e9:79:6c:f1:53:5b:6d:92: 1f:46:8c:fd:58:db:e7:39:c9:79:ae:3e:b7:a3:30: 2e:9e:f2:73:0e:b7:32:8f:09:a6:85:6b:af:6c:98: 2c:dc:7d:b0:d6:ee:58:56:69:fa:8a:c2:c0:a5:ff: 83:78:fc:47:41:09:2e:18:50:1e:ee:4d:d1:c4:8f: a0:3b:43:73:7a:b1:98:38:df:75:00:8d:ac:a3:06: 02:bd:83:7a:ac:02:0e:69:15:d7:f8:ad:7a:59:b9: a1:95:17:7d:9a:d8:86:e5:09:b1:41:68:c5:d3:1e: 73:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:6A:8E:91:06:F6:73:A5:DA:DC:21:2A:3E:94:F7:3D:BF:2D:4A:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/48d069ba-5ef8-3f64-a653-d806fe8fd001.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.crl X509v3 Authority Key Identifier: keyid:DC:5F:4D:B6:AA:A1:18:41:1D:62:8B:AC:74:A8:80:61:BF:05:14:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer sbgp-ipAddrBlock: critical IPv4: 207.53.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:3a:4a:4f:94:6d:83:37:a7:82:56:fb:f9:d5:7b:86:1c:45: d3:8f:a7:ba:f0:c6:51:84:17:6e:f6:ff:a7:6a:35:4a:47:5c: b3:3a:f9:91:ad:4d:29:11:e8:af:d8:ae:c3:53:27:5a:86:db: a7:e8:d5:52:60:6e:6b:db:ad:d8:0d:db:3f:26:f6:bb:24:c7: dc:31:5b:8f:e7:41:77:a0:6f:70:c5:f3:47:ec:34:37:16:49: 0e:6f:d4:f6:f4:3d:c8:5d:2e:32:fd:12:a5:d8:0c:54:cf:ab: 01:11:83:89:b3:65:e6:33:24:32:c5:e3:ac:eb:51:6e:88:89: ff:1b:c6:6a:0c:f8:96:39:4a:52:38:4e:85:b4:30:4f:a3:fe: 4b:aa:4f:3f:cb:26:6e:90:3b:19:f3:bb:be:38:30:4e:b7:27: 18:07:9f:07:95:32:4b:13:20:1e:cb:8b:71:93:81:b4:77:49: 2c:99:6c:5b:d4:5d:35:ac:af:12:4e:d1:34:a2:ad:c5:28:03: 5a:11:83:ce:40:70:95:83:cb:d3:8b:de:1a:a7:54:c8:97:2b: ef:73:a1:05:b8:ae:ac:07:b2:87:da:53:60:89:06:0e:05:fe: 7d:29:bf:15:60:47:92:72:4c:df:3c:33:3b:51:f4:53:0a:ae: 7d:16:78:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj6LgIQEyAAg2dMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTY2ODMwYTQtMGU2Zi00OWExLTk4MjMtYWYyYWU5MmFj N2YyMB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk NWI0YzAwZTUtNWI0Yy00YTFkLWIwNmEtOTc0ZDExYzg0YjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsFpJy0o5fEw3KCV9XSOhFfytAH2l27V3WZC nypm7p8VU07RZHt3TWBA+gQEF7EvUsyViV+4uURQbXx9WKUn5Rhqeampc/czE5vJ e1vUajldGYOPfREDGoZ3Eo6hoQOD+4vQRihkzbw8urCqgo4M1wG7dSRj6R5ejo7b AjduMd88IJ9Y6CZNmi5AfP3O6Xls8VNbbZIfRoz9WNvnOcl5rj63ozAunvJzDrcy jwmmhWuvbJgs3H2w1u5YVmn6isLApf+DePxHQQkuGFAe7k3RxI+gO0NzerGYON91 AI2sowYCvYN6rAIOaRXX+K16WbmhlRd9mtiG5QmxQWjF0x5zDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL5qjpEG9nOl2twhKj6U9z2/LUogMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85NjY4 MzBhNC0wZTZmLTQ5YTEtOTgyMy1hZjJhZTkyYWM3ZjIvNDhkMDY5YmEtNWVmOC0z ZjY0LWE2NTMtZDgwNmZlOGZkMDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTY2ODMwYTQtMGU2Zi00OWExLTk4 MjMtYWYyYWU5MmFjN2YyLzk2NjgzMGE0LTBlNmYtNDlhMS05ODIzLWFmMmFlOTJh YzdmMi5jcmwwHwYDVR0jBBgwFoAU3F9NtqqhGEEdYousdKiAYb8FFEMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85NjY4MzBhNC0wZTZmLTQ5YTEtOTgyMy1hZjJh ZTkyYWM3ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzzX8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALI6Sk+UbYM3p4JW+/nVe4YcRdOPp7rwxlGEF272/6dqNUpHXLM6+ZGt TSkR6K/YrsNTJ1qG26fo1VJgbmvbrdgN2z8m9rskx9wxW4/nQXegb3DF80fsNDcW SQ5v1Pb0PchdLjL9EqXYDFTPqwERg4mzZeYzJDLF46zrUW6Iif8bxmoM+JY5SlI4 ToW0ME+j/kuqTz/LJm6QOxnzu744ME63JxgHnweVMksTIB7Li3GTgbR3SSyZbFvU XTWsrxJO0TSircUoA1oRg85AcJWDy9OL3hqnVMiXK+9zoQW4rqwHsofaU2CJBg4F /n0pvxVgR5JyTN88MztR9FMKrn0WeFM= -----END CERTIFICATE-----Generated at Thu Mar 26 16:58:43 2026 by rpki-client