$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/9ec58a3b-8704-3120-b6b5-10e77d09643b.roa File: 9ec58a3b-8704-3120-b6b5-10e77d09643b.roa (raw, json) Hash identifier: nHZI/xp3Rm3q+89iVaTkGo2oTVS+qz2gXm6XJyAMGbI= Subject key identifier: 91:B6:A8:1F:38:A7:3A:0A:49:BF:2C:29:31:AD:6B:69:43:55:41:3F Certificate issuer: /CN=ffdee3f8-e368-45ea-9a0a-033c591b4971 Certificate serial: 010D0C9F4328584D52434FD4337EE8ECADE91A80 Authority key identifier: A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/9ec58a3b-8704-3120-b6b5-10e77d09643b.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 11650 IP address blocks: 159.242.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:4f:d4:33:7e:e8:ec:ad:e9:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffdee3f8-e368-45ea-9a0a-033c591b4971 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=ee591c3a-9e0e-438a-99e0-dd70d3b307c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c6:a0:b3:b5:31:95:17:33:e4:98:f6:9a:d7: 05:81:b0:19:4f:d2:e8:16:b0:24:7d:89:b9:57:c5: db:31:5b:9f:f9:72:0c:b1:9d:5c:21:90:7c:b5:34: c1:ac:be:a3:0e:5a:03:5a:85:19:b0:a6:44:ec:ab: 54:06:65:a8:db:19:cd:56:47:53:4d:1e:1b:68:2e: c4:0b:ff:db:4b:5e:13:e0:b6:bb:9f:07:dd:35:e9: 74:e3:28:58:f5:4c:84:c7:76:2f:15:66:05:7b:b4: 80:d5:ab:ac:ff:cf:ae:30:75:74:12:63:de:b9:0d: bd:11:af:11:42:92:3e:c2:aa:65:d5:4d:e8:75:85: 42:8f:68:f3:b8:7b:6d:ca:a4:18:f6:66:be:ec:fe: 09:c1:1b:8e:9f:c5:83:19:e5:d8:53:03:7b:8b:1c: bc:cb:d0:48:9c:09:ad:ba:d9:c0:a0:0d:3c:26:d8: cf:56:f3:81:a7:e9:ee:a3:27:a4:ec:00:42:50:ac: 9c:14:d7:52:11:10:6e:74:ea:13:82:d6:c5:5d:05: 95:36:be:47:73:51:8f:1a:31:44:e5:f0:b7:63:d7: 9f:88:68:23:51:64:c2:fd:7a:e7:ff:dc:b7:07:52: 41:8e:8a:9f:18:87:e9:59:ef:6d:d7:3a:17:ff:b7: f7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B6:A8:1F:38:A7:3A:0A:49:BF:2C:29:31:AD:6B:69:43:55:41:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/9ec58a3b-8704-3120-b6b5-10e77d09643b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl X509v3 Authority Key Identifier: keyid:A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer sbgp-ipAddrBlock: critical IPv4: 159.242.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:b9:78:cd:b4:40:9f:a0:5d:0c:40:66:e7:44:f9:ab:89:1d: d5:80:3c:8e:4a:da:5f:a1:48:4a:67:10:98:91:7e:71:8c:5d: f7:37:d0:3a:b2:80:a2:53:6f:4b:85:fe:33:81:10:88:0e:f7: a5:2a:90:07:d3:4d:65:33:51:69:dd:68:39:f8:6e:18:08:bb: f2:45:1a:f5:dd:07:13:70:c0:61:e5:7c:8b:8c:15:4c:a1:26: 40:20:fd:e3:3b:f7:7e:05:0e:62:f2:c6:a1:3a:6b:82:ce:ec: e9:09:0e:1c:b3:b4:61:bb:74:3a:6a:b8:5e:24:fc:8f:66:43: 3a:a4:50:39:fe:7e:e5:5e:b1:20:93:61:a3:12:f9:c7:d4:67: 26:78:ee:ee:71:02:4d:f2:a3:3a:d4:79:7a:13:56:71:86:1f: 8c:fb:5a:55:bf:ea:ae:e1:7a:01:bb:fb:b0:49:fb:01:af:7d: 3d:d5:37:e2:8e:e9:ad:8f:2f:88:d4:fc:d4:e0:33:cd:6e:95: 57:cf:3b:dd:b2:a8:98:5f:d9:6e:7e:8d:5d:a6:9b:7e:c6:0d: 16:3e:99:a3:07:64:45:21:7f:47:1b:f1:15:ec:58:f7:00:c7: 30:94:47:e8:0a:68:ae:a8:6f:03:ff:a3:45:82:b5:34:9f:84: 16:fc:c7:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ0/UM37o7K3pGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZkZWUzZjgtZTM2OC00NWVhLTlhMGEtMDMzYzU5MWI0 OTcxMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk ZWU1OTFjM2EtOWUwZS00MzhhLTk5ZTAtZGQ3MGQzYjMwN2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsags7UxlRcz5Jj2mtcFgbAZT9LoFrAkfYm5 V8XbMVuf+XIMsZ1cIZB8tTTBrL6jDloDWoUZsKZE7KtUBmWo2xnNVkdTTR4baC7E C//bS14T4La7nwfdNel04yhY9UyEx3YvFWYFe7SA1aus/8+uMHV0EmPeuQ29Ea8R QpI+wqpl1U3odYVCj2jzuHttyqQY9ma+7P4JwRuOn8WDGeXYUwN7ixy8y9BInAmt utnAoA08JtjPVvOBp+nuoyek7ABCUKycFNdSERBudOoTgtbFXQWVNr5Hc1GPGjFE 5fC3Y9efiGgjUWTC/Xrn/9y3B1JBjoqfGIfpWe9t1zoX/7f3lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJG2qB84pzoKSb8sKTGta2lDVUE/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mZmRl ZTNmOC1lMzY4LTQ1ZWEtOWEwYS0wMzNjNTkxYjQ5NzEvOWVjNThhM2ItODcwNC0z MTIwLWI2YjUtMTBlNzdkMDk2NDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmZkZWUzZjgtZTM2OC00NWVhLTlh MGEtMDMzYzU5MWI0OTcxL2ZmZGVlM2Y4LWUzNjgtNDVlYS05YTBhLTAzM2M1OTFi NDk3MS5jcmwwHwYDVR0jBBgwFoAUozvxxshhdA6a/HFRB4QVpwaz2l8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mZmRlZTNmOC1lMzY4LTQ1ZWEtOWEwYS0wMzNj NTkxYjQ5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEn/LQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKK5eM20QJ+gXQxAZudE+auJHdWAPI5K2l+hSEpnEJiRfnGMXfc30Dqy gKJTb0uF/jOBEIgO96UqkAfTTWUzUWndaDn4bhgIu/JFGvXdBxNwwGHlfIuMFUyh JkAg/eM7934FDmLyxqE6a4LO7OkJDhyztGG7dDpquF4k/I9mQzqkUDn+fuVesSCT YaMS+cfUZyZ47u5xAk3yozrUeXoTVnGGH4z7WlW/6q7hegG7+7BJ+wGvfT3VN+KO 6a2PL4jU/NTgM81ulVfPO92yqJhf2W5+jV2mm37GDRY+maMHZEUhf0cb8RXsWPcA xzCUR+gKaK6obwP/o0WCtTSfhBb8x2o= -----END CERTIFICATE-----Generated at Fri Apr 3 17:57:12 2026 by rpki-client