$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/d3e538fe-a4fd-3aa1-b448-5be623b75db5.roa File: d3e538fe-a4fd-3aa1-b448-5be623b75db5.roa (raw, json) Hash identifier: m8DGwPY96dOIQ8eTKXyxenal82tXRQTlkidQu6V/Eps= Subject key identifier: E8:46:C1:6F:4F:5E:E1:45:36:C5:47:FF:DB:07:56:FF:AA:69:F7:DA Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584CF8524B8107F7D25C1536B080 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/d3e538fe-a4fd-3aa1-b448-5be623b75db5.roa Signing time: Tue 24 Feb 2026 14:00:41 +0000 ROA not before: Tue 24 Feb 2026 14:00:41 +0000 ROA not after: Mon 25 May 2026 13:00:41 +0000 asID: 1239 IP address blocks: 2001:49f0:d009::/48 maxlen: 48 2001:49f0:d014::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f8:52:4b:81:07:f7:d2:5c:15:36:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Feb 24 14:00:41 2026 GMT Not After : May 25 13:00:41 2026 GMT Subject: CN=ae3b76e6-a072-4d49-8eca-dd7b1f290b0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:3c:eb:44:49:3a:e5:f9:09:e9:6b:df:ac:3a: c3:22:96:30:4c:15:e9:29:a2:db:9f:72:c6:aa:2b: 12:c8:5f:16:c8:5b:80:e0:7f:0e:1e:87:d6:2c:5d: d2:76:65:30:8f:ab:dd:e0:51:82:ba:81:3d:3a:ac: 56:d1:2c:72:71:6e:77:2a:3c:57:6c:dd:c7:ec:0c: 90:6a:ea:8e:4b:78:f6:b5:6e:30:44:1e:fb:1f:7c: 4d:77:67:2b:3e:cf:3d:1a:3a:44:4b:de:60:8b:62: 0c:f7:75:03:a7:6a:5f:fe:54:55:7c:17:01:5d:b6: 27:1f:09:e4:db:a0:c0:f4:db:60:25:1d:c8:9c:b2: d9:55:e0:b3:96:39:ba:2a:65:78:61:d0:ea:db:4e: d1:a2:35:d7:d6:c8:00:53:97:a4:36:f6:e1:ab:c8: 36:27:39:74:5c:77:d0:f2:ec:6c:65:e9:d6:82:f6: 9a:76:8c:61:a2:dc:d6:71:79:f3:d7:9b:89:ce:ff: ed:bd:d7:0d:37:d2:eb:ff:45:b2:c1:0f:34:10:5c: 2b:e9:74:f3:09:91:ac:cd:57:f3:b9:e0:bd:38:f1: f4:49:5f:85:2d:43:7a:2b:04:5e:45:85:35:9d:4a: e2:73:6c:52:c4:a2:e1:86:c9:bf:f2:66:3e:34:e6: 07:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:46:C1:6F:4F:5E:E1:45:36:C5:47:FF:DB:07:56:FF:AA:69:F7:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/d3e538fe-a4fd-3aa1-b448-5be623b75db5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv6: 2001:49f0:d009::/48 2001:49f0:d014::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:91:3e:7c:b8:23:de:48:1f:ca:d8:7d:fe:e8:08:f5:f4:6a: e6:c3:96:16:a4:d4:3b:15:1e:8b:47:89:b7:65:fa:da:8a:64: ee:0c:e5:20:66:3e:f1:b0:61:35:df:86:63:b0:3c:64:51:b4: fe:8b:d6:66:ab:0b:35:bb:ae:e5:51:f5:d2:1d:8f:50:e4:d2: fe:8f:31:c2:56:ba:82:07:62:9f:41:da:69:68:ec:dd:ec:45: aa:5e:eb:ed:a6:42:54:3f:ed:0f:cc:20:5c:e0:a3:ee:bf:55: 22:29:f1:0b:ab:da:20:fd:37:c4:12:12:4d:e2:70:18:45:ea: d7:44:5b:b0:fd:01:c2:04:00:de:01:fa:30:a5:5c:23:62:f7: fe:d8:00:5e:db:37:bd:da:6a:ea:bd:78:f6:6a:c2:4b:7e:73: ea:9c:29:73:05:53:4c:b5:fe:bc:d0:b4:f0:c1:32:0b:ae:d0: f9:3f:a2:2b:9b:ca:e6:de:35:d0:df:4d:f3:dc:61:c0:d9:7a: ce:ec:81:38:35:3c:ad:41:d9:f7:73:de:73:0f:03:f0:09:8c: 5d:01:66:10:d8:a5:8d:e7:30:77:52:4d:e2:1c:8f:3c:db:24: 5c:cd:46:89:df:53:53:92:5e:ec:65:4f:d3:08:dd:44:31:45: 47:25:37:14 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEz4UkuBB/fSXBU2sIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI2MDIyNDE0MDA0MVoXDTI2MDUyNTEzMDA0MVowLzEtMCsGA1UEAxMk YWUzYjc2ZTYtYTA3Mi00ZDQ5LThlY2EtZGQ3YjFmMjkwYjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTzrREk65fkJ6WvfrDrDIpYwTBXpKaLbn3LG qisSyF8WyFuA4H8OHofWLF3SdmUwj6vd4FGCuoE9OqxW0SxycW53KjxXbN3H7AyQ auqOS3j2tW4wRB77H3xNd2crPs89GjpES95gi2IM93UDp2pf/lRVfBcBXbYnHwnk 26DA9NtgJR3InLLZVeCzljm6KmV4YdDq207RojXX1sgAU5ekNvbhq8g2Jzl0XHfQ 8uxsZenWgvaadoxhotzWcXnz15uJzv/tvdcNN9Lr/0WywQ80EFwr6XTzCZGszVfz ueC9OPH0SV+FLUN6KwReRYU1nUric2xSxKLhhsm/8mY+NOYH9QIDAQABo4IDYTCC A10wHQYDVR0OBBYEFOhGwW9PXuFFNsVH/9sHVv+qaffaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvZDNlNTM4ZmUtYTRmZC0z YWExLWI0NDgtNWJlNjIzYjc1ZGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAIAFJ8NAJ AwcAIAFJ8NAUMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBACuRPny4I95IH8rYff7oCPX0aubDlhak1DsVHotH ibdl+tqKZO4M5SBmPvGwYTXfhmOwPGRRtP6L1marCzW7ruVR9dIdj1Dk0v6PMcJW uoIHYp9B2mlo7N3sRape6+2mQlQ/7Q/MIFzgo+6/VSIp8Qur2iD9N8QSEk3icBhF 6tdEW7D9AcIEAN4B+jClXCNi9/7YAF7bN73aauq9ePZqwkt+c+qcKXMFU0y1/rzQ tPDBMguu0Pk/oiubyubeNdDfTfPcYcDZes7sgTg1PK1B2fdz3nMPA/AJjF0BZhDY pY3nMHdSTeIcjzzbJFzNRonfU1OSXuxlT9MI3UQxRUclNxQ= -----END CERTIFICATE-----Generated at Sun Mar 1 22:47:23 2026 by rpki-client