$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/3fae15e1-900a-373e-b386-d052905c9332.roa File: 3fae15e1-900a-373e-b386-d052905c9332.roa (raw, json) Hash identifier: Qmq4/HWzEZIS8pW8kdlm0P8Xdcx92n5xs4ndrA8dNCc= Subject key identifier: 33:B2:70:15:70:60:05:26:9A:E5:A8:FD:47:2A:37:6D:71:47:46:22 Certificate issuer: /CN=d170fca2-5f74-4408-8dc9-597ba031cfe2 Certificate serial: 010D0C9F4328584D65150D3BB92EEB663B01CEC0 Authority key identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/3fae15e1-900a-373e-b386-d052905c9332.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 30097 IP address blocks: 199.87.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:0d:3b:b9:2e:eb:66:3b:01:ce:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d170fca2-5f74-4408-8dc9-597ba031cfe2 Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=eccd3cac-5019-4163-9fcf-6db7118e0514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:9c:13:bd:4d:9f:0a:a5:68:f3:c2:c8:11:65: 2f:ea:77:eb:b4:53:26:a0:01:88:2c:28:f8:3e:12: d4:30:93:4b:42:64:0d:66:01:aa:9e:fc:71:02:16: 51:56:09:22:cf:05:84:ad:7b:ce:f5:b4:a9:f3:36: c6:28:6a:c0:28:2f:cc:13:43:19:11:46:ae:9e:fe: ed:dd:b6:17:56:76:8d:56:fb:8b:5e:01:eb:87:05: b7:97:39:d5:88:58:f0:20:33:f2:d2:ee:8a:3b:03: d7:a7:fd:11:80:ee:49:54:8c:7c:79:bc:3f:e3:b1: e7:e6:1c:01:9b:d6:dc:f6:d7:c2:e9:c5:2a:be:3c: 4c:42:a9:5f:55:1b:68:fd:08:f6:fe:4f:62:39:73: 25:2c:2f:36:b9:38:e2:6e:fd:d0:f2:50:8d:59:95: d5:da:67:89:77:ea:6c:01:ea:0a:46:3f:89:03:80: 40:01:9d:b6:5f:78:a7:a8:58:61:ce:ed:58:22:da: 9b:4e:a4:dd:8c:d8:33:f5:73:fc:57:80:63:95:c9: cf:a7:29:d7:79:fb:d3:d3:6c:bb:d9:5e:f5:e3:6c: b8:28:be:3e:c1:b1:53:66:4c:02:e5:88:0c:fb:a5: 06:50:c1:63:80:00:80:18:9c:58:63:a9:54:28:3a: bb:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:B2:70:15:70:60:05:26:9A:E5:A8:FD:47:2A:37:6D:71:47:46:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/3fae15e1-900a-373e-b386-d052905c9332.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl X509v3 Authority Key Identifier: keyid:FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer sbgp-ipAddrBlock: critical IPv4: 199.87.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cc:d4:b7:61:b5:09:5b:ac:3d:be:37:0a:25:58:0c:db:2e:06: 32:0a:89:13:0d:53:05:e9:44:2d:26:15:70:a1:51:1f:82:57: 15:9b:12:68:bd:6d:6a:d8:95:06:ad:e1:05:65:29:b9:ae:b7: 17:c5:cb:89:47:64:0b:f1:2b:57:61:20:22:89:4b:f1:10:6b: bf:d1:f0:a2:83:60:0c:1e:bc:90:a9:4c:98:6d:8a:73:b6:19: ff:fa:d8:30:b2:12:05:d2:d0:28:80:0e:d4:04:d5:87:a1:1e: 31:80:63:b7:17:fe:52:28:57:52:eb:c0:f1:4d:10:15:c9:95: 12:63:a7:40:c1:11:d9:73:5f:0e:e0:65:78:10:49:85:c2:62: 63:9f:51:dc:fc:8f:3a:cf:86:6e:48:4e:59:60:f9:cc:3b:78: a1:2b:ee:c6:b0:88:51:9c:08:cf:f7:74:6a:1e:33:f0:cd:90: 38:25:60:41:e7:72:bb:ef:4f:c1:96:90:64:76:fd:ec:3d:93: 53:cd:9a:fd:4c:b7:be:f4:1b:21:6a:b5:38:75:81:c6:c8:19: 66:25:3b:c1:36:cb:5b:fa:cc:c3:8d:09:06:cc:16:25:e3:cf: 44:d6:bb:ac:ab:96:e4:1d:df:9d:cf:70:94:1f:c3:52:48:58: 6b:f1:2e:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFQ07uS7rZjsBzsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDE3MGZjYTItNWY3NC00NDA4LThkYzktNTk3YmEwMzFj ZmUyMB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk ZWNjZDNjYWMtNTAxOS00MTYzLTlmY2YtNmRiNzExOGUwNTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipwTvU2fCqVo88LIEWUv6nfrtFMmoAGILCj4 PhLUMJNLQmQNZgGqnvxxAhZRVgkizwWErXvO9bSp8zbGKGrAKC/ME0MZEUaunv7t 3bYXVnaNVvuLXgHrhwW3lznViFjwIDPy0u6KOwPXp/0RgO5JVIx8ebw/47Hn5hwB m9bc9tfC6cUqvjxMQqlfVRto/Qj2/k9iOXMlLC82uTjibv3Q8lCNWZXV2meJd+ps AeoKRj+JA4BAAZ22X3inqFhhzu1YItqbTqTdjNgz9XP8V4BjlcnPpynXefvT02y7 2V7142y4KL4+wbFTZkwC5YgM+6UGUMFjgACAGJxYY6lUKDq7HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDOycBVwYAUmmuWo/UcqN21xR0YiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kMTcw ZmNhMi01Zjc0LTQ0MDgtOGRjOS01OTdiYTAzMWNmZTIvM2ZhZTE1ZTEtOTAwYS0z NzNlLWIzODYtZDA1MjkwNWM5MzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDE3MGZjYTItNWY3NC00NDA4LThk YzktNTk3YmEwMzFjZmUyL2QxNzBmY2EyLTVmNzQtNDQwOC04ZGM5LTU5N2JhMDMx Y2ZlMi5jcmwwHwYDVR0jBBgwFoAU/yi6m0JreiTZpKu3kU29s28/Yp4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kMTcwZmNhMi01Zjc0LTQ0MDgtOGRjOS01OTdi YTAzMWNmZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1csMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMzUt2G1CVusPb43CiVYDNsuBjIKiRMNUwXpRC0mFXChUR+CVxWbEmi9 bWrYlQat4QVlKbmutxfFy4lHZAvxK1dhICKJS/EQa7/R8KKDYAwevJCpTJhtinO2 Gf/62DCyEgXS0CiADtQE1YehHjGAY7cX/lIoV1LrwPFNEBXJlRJjp0DBEdlzXw7g ZXgQSYXCYmOfUdz8jzrPhm5ITllg+cw7eKEr7sawiFGcCM/3dGoeM/DNkDglYEHn crvvT8GWkGR2/ew9k1PNmv1Mt770GyFqtTh1gcbIGWYlO8E2y1v6zMONCQbMFiXj z0TWu6yrluQd353PcJQfw1JIWGvxLls= -----END CERTIFICATE-----Generated at Tue Apr 7 13:31:26 2026 by rpki-client