$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/6827d8d3-c2aa-3fca-b605-e469bc50b92f.roa File: 6827d8d3-c2aa-3fca-b605-e469bc50b92f.roa (raw, json) Hash identifier: n+YYmlCNeuIp+jf+0V0PEfty++zeUCjNuxQCEc7pVSk= Subject key identifier: 30:1B:C5:68:84:A9:BE:80:27:DA:31:4F:A2:8D:62:98:64:0D:5D:5B Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584CB2873629B45314DE215866C0 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/6827d8d3-c2aa-3fca-b605-e469bc50b92f.roa Signing time: Fri 30 Jan 2026 14:00:40 +0000 ROA not before: Fri 30 Jan 2026 14:00:40 +0000 ROA not after: Thu 30 Apr 2026 13:00:40 +0000 asID: 30058 IP address blocks: 2001:49f0:d049::/48 maxlen: 48 2001:49f0:d04a::/48 maxlen: 48 2001:49f0:d077::/48 maxlen: 48 2001:49f0:d078::/48 maxlen: 48 2001:49f0:d07a::/48 maxlen: 48 2001:49f0:d07b::/48 maxlen: 48 2001:49f0:d07d::/48 maxlen: 48 2001:49f0:d07e::/48 maxlen: 48 2001:49f0:d07f::/48 maxlen: 48 2001:49f0:d081::/48 maxlen: 48 2001:49f0:d082::/48 maxlen: 48 2001:49f0:d083::/48 maxlen: 48 2001:49f0:d084::/48 maxlen: 48 2001:49f0:d087::/48 maxlen: 48 2001:49f0:d089::/48 maxlen: 48 2001:49f0:d08a::/48 maxlen: 48 2001:49f0:d08f::/48 maxlen: 48 2001:49f0:d097::/49 maxlen: 49 2001:49f0:d0a5::/48 maxlen: 48 2001:49f0:d0b2::/48 maxlen: 48 2001:49f0:d0b3::/48 maxlen: 48 2001:49f0:d0b4::/48 maxlen: 48 2001:49f0:d0b5::/48 maxlen: 48 2001:49f0:d0b6::/48 maxlen: 48 2001:49f0:d0d5::/48 maxlen: 48 2001:49f0:d0d6::/48 maxlen: 48 2001:49f0:d0d7::/48 maxlen: 48 2001:49f0:d0dd::/48 maxlen: 48 2001:49f0:d0e1::/48 maxlen: 48 2001:49f0:d0e2::/48 maxlen: 48 2001:49f0:d0e3::/48 maxlen: 48 2001:49f0:d105::/48 maxlen: 48 2001:49f0:d106::/48 maxlen: 48 2001:49f0:d107::/48 maxlen: 48 2001:49f0:d108::/48 maxlen: 48 2001:49f0:d109::/48 maxlen: 48 2001:49f0:d10a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b2:87:36:29:b4:53:14:de:21:58:66:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Jan 30 14:00:40 2026 GMT Not After : Apr 30 13:00:40 2026 GMT Subject: CN=1bc5d35a-3908-4b7a-8e4e-7af383a575b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3b:02:99:fe:13:fe:ab:13:0c:2f:07:8c:55: 5e:31:2c:0d:30:9a:05:7d:6c:26:4c:cb:de:d4:a1: 69:aa:82:4a:7d:61:98:90:a8:95:13:77:86:32:29: c9:a8:34:25:af:25:51:83:a7:33:b3:3d:86:8f:31: a9:a4:d8:c2:c9:e6:8b:d9:29:2b:91:22:2f:75:d7: 45:85:50:6a:b0:33:e2:b8:64:80:d1:cc:3a:dd:93: 93:b1:4f:bc:55:32:53:d5:d3:25:27:3d:6e:5c:1d: f5:20:8a:7f:96:fd:a0:92:07:ac:13:28:6c:33:75: a9:11:9c:61:e2:73:f8:7b:2b:9d:54:91:5e:ff:8f: f2:32:31:47:1c:75:41:3e:60:d8:81:93:bc:62:3e: d9:fb:29:c3:d6:36:75:35:08:6e:29:3c:1b:c9:8d: 06:b8:5a:52:9f:a0:fd:6f:3f:8a:e6:dd:8f:d8:65: fb:25:34:60:f7:3b:23:1f:53:bc:56:fc:7c:e9:b1: b3:c5:0e:65:d8:aa:55:4e:4e:3f:11:52:4d:01:c1: 7b:8f:89:96:35:ac:01:94:0c:3a:c1:80:7d:7f:6a: 2a:b1:8e:8c:c5:68:33:17:c0:af:65:83:52:cd:3d: 54:43:04:4b:09:c6:cd:b7:57:5a:37:82:5a:ee:97: dd:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:1B:C5:68:84:A9:BE:80:27:DA:31:4F:A2:8D:62:98:64:0D:5D:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/6827d8d3-c2aa-3fca-b605-e469bc50b92f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv6: 2001:49f0:d049::-2001:49f0:d04a:ffff:ffff:ffff:ffff:ffff 2001:49f0:d077::-2001:49f0:d078:ffff:ffff:ffff:ffff:ffff 2001:49f0:d07a::/47 2001:49f0:d07d::-2001:49f0:d07f:ffff:ffff:ffff:ffff:ffff 2001:49f0:d081::-2001:49f0:d084:ffff:ffff:ffff:ffff:ffff 2001:49f0:d087::/48 2001:49f0:d089::-2001:49f0:d08a:ffff:ffff:ffff:ffff:ffff 2001:49f0:d08f::/48 2001:49f0:d097::/49 2001:49f0:d0a5::/48 2001:49f0:d0b2::-2001:49f0:d0b6:ffff:ffff:ffff:ffff:ffff 2001:49f0:d0d5::-2001:49f0:d0d7:ffff:ffff:ffff:ffff:ffff 2001:49f0:d0dd::/48 2001:49f0:d0e1::-2001:49f0:d0e3:ffff:ffff:ffff:ffff:ffff 2001:49f0:d105::-2001:49f0:d10a:ffff:ffff:ffff:ffff:ffff X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:24:ea:72:ee:93:0d:28:63:8b:8b:54:3f:f3:c0:00:93:48: 5a:c1:f9:83:c4:94:a6:c2:5c:fd:74:05:67:80:98:86:8f:fd: 00:a4:38:a9:d5:f3:0a:30:0a:17:1d:27:9a:08:60:c7:d8:91: fc:54:ea:51:07:6f:39:02:1c:ec:23:63:c7:91:55:64:fd:15: 26:38:db:f4:4c:e9:87:87:2a:59:00:38:6b:ad:9a:2a:d7:9b: 0b:de:84:65:ee:be:29:e4:1c:86:4e:94:e5:43:ee:47:96:4c: 79:bd:70:25:cc:94:fe:a1:b3:16:b2:96:8c:2f:94:64:9e:12: e6:a9:ac:05:14:17:61:a3:24:81:78:fd:b7:07:35:5b:e0:c3: 9e:55:22:e8:70:ed:c5:c9:f4:a1:c9:e9:1a:c6:8c:5f:f5:fa: 7a:58:56:1e:16:fc:d8:03:a7:bb:e5:cb:2a:eb:e9:f0:ef:82: 57:aa:07:00:eb:f7:21:32:68:b1:e9:f1:a4:45:6a:4d:0b:4d: 20:78:bf:af:34:bd:f6:e3:38:71:fd:ef:d9:4b:d9:08:87:bf: 7d:bb:73:d1:7a:50:ca:0d:3f:a9:00:b4:16:4b:ab:7c:41:27: c2:d7:09:f6:75:25:6f:9b:fb:16:85:da:55:f4:0d:83:8b:d6: 01:dd:e4:41 -----BEGIN CERTIFICATE----- MIIHLjCCBhagAwIBAgIUAQ0Mn0MoWEyyhzYptFMU3iFYZsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI2MDEzMDE0MDA0MFoXDTI2MDQzMDEzMDA0MFowLzEtMCsGA1UEAxMk MWJjNWQzNWEtMzkwOC00YjdhLThlNGUtN2FmMzgzYTU3NWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjsCmf4T/qsTDC8HjFVeMSwNMJoFfWwmTMve 1KFpqoJKfWGYkKiVE3eGMinJqDQlryVRg6czsz2GjzGppNjCyeaL2SkrkSIvdddF hVBqsDPiuGSA0cw63ZOTsU+8VTJT1dMlJz1uXB31IIp/lv2gkgesEyhsM3WpEZxh 4nP4eyudVJFe/4/yMjFHHHVBPmDYgZO8Yj7Z+ynD1jZ1NQhuKTwbyY0GuFpSn6D9 bz+K5t2P2GX7JTRg9zsjH1O8Vvx86bGzxQ5l2KpVTk4/EVJNAcF7j4mWNawBlAw6 wYB9f2oqsY6MxWgzF8CvZYNSzT1UQwRLCcbNt1daN4Ja7pfdlQIDAQABo4IEQDCC BDwwHQYDVR0OBBYEFDAbxWiEqb6AJ9oxT6KNYphkDV1bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvNjgyN2Q4ZDMtYzJhYS0z ZmNhLWI2MDUtZTQ2OWJjNTBiOTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMIIBCAYIKwYBBQUHAQcBAf8EgfgwgfUwgfIEAgACMIHrMBID BwAgAUnw0EkDBwAgAUnw0EowEgMHACABSfDQdwMHACABSfDQeAMHASABSfDQejAS AwcAIAFJ8NB9AwcHIAFJ8NAAMBIDBwAgAUnw0IEDBwAgAUnw0IQDBwAgAUnw0Icw EgMHACABSfDQiQMHACABSfDQigMHACABSfDQjwMIByABSfDQlwADBwAgAUnw0KUw EgMHASABSfDQsgMHACABSfDQtjASAwcAIAFJ8NDVAwcDIAFJ8NDQAwcAIAFJ8NDd MBIDBwAgAUnw0OEDBwIgAUnw0OAwEgMHACABSfDRBQMHACABSfDRCjBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQBxJOpy7pMNKGOLi1Q/88AAk0hawfmDxJSmwlz9dAVngJiGj/0ApDip1fMKMAoX HSeaCGDH2JH8VOpRB285AhzsI2PHkVVk/RUmONv0TOmHhypZADhrrZoq15sL3oRl 7r4p5ByGTpTlQ+5Hlkx5vXAlzJT+obMWspaML5RknhLmqawFFBdhoySBeP23BzVb 4MOeVSLocO3FyfShyekaxoxf9fp6WFYeFvzYA6e75csq6+nw74JXqgcA6/chMmix 6fGkRWpNC00geL+vNL324zhx/e/ZS9kIh799u3PRelDKDT+pALQWS6t8QSfC1wn2 dSVvm/sWhdpV9A2Di9YB3eRB -----END CERTIFICATE-----Generated at Sun Mar 1 20:28:31 2026 by rpki-client