$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/a04f4449-a649-3911-bf78-79e06327d3a8.roa File: a04f4449-a649-3911-bf78-79e06327d3a8.roa (raw, json) Hash identifier: qVl4o2n7kCrHjvZ4g1RfaDc4L/LVOb9awkRL5B1mK0g= Subject key identifier: 8F:9E:C7:2C:93:B3:96:97:E3:95:92:14:8D:13:F6:2D:23:80:1A:80 Certificate issuer: /CN=ffdee3f8-e368-45ea-9a0a-033c591b4971 Certificate serial: 010D0C9F4328584D52434F7B52B9C769DA5FF580 Authority key identifier: A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/a04f4449-a649-3911-bf78-79e06327d3a8.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 11650 IP address blocks: 216.195.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:4f:7b:52:b9:c7:69:da:5f:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffdee3f8-e368-45ea-9a0a-033c591b4971 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=8d6cf220-383e-4302-ac73-a3c24a708c12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:1d:8a:4c:ff:e0:a3:84:b1:7b:83:ed:d5:56: 63:3c:8c:fb:81:34:a9:80:9f:ba:b5:06:66:2c:17: b6:22:c1:a1:29:f0:5e:c7:02:cd:32:f5:ba:9a:05: d7:53:c8:72:c2:f0:4c:cc:cd:99:b6:e0:f9:4d:e9: 5f:8a:e5:55:e3:bc:be:47:9a:6d:02:4d:a9:ef:ae: cc:b3:02:e4:46:1c:09:02:1f:3d:6a:d2:41:b5:b0: 5f:dd:33:fc:d6:a9:bd:e3:cc:ce:63:48:60:f9:0c: e7:e0:22:0f:93:29:6c:b5:01:3a:cc:b8:3c:3d:7c: 11:a8:89:26:b9:08:50:97:da:a6:c4:48:7d:c7:d4: 5b:5a:34:09:09:eb:1f:46:da:e2:94:80:78:66:51: f9:f1:0d:40:00:5a:4c:77:06:28:2f:83:99:8b:cd: 28:4a:04:c5:10:ca:a8:f2:66:f3:c0:8e:aa:11:2f: 5f:f4:bb:72:f8:51:8e:ef:5e:e5:fd:d2:e2:43:4f: 0e:d9:3f:0f:29:f6:e9:f4:b1:63:16:fc:3a:7c:f7: eb:f9:64:b8:6f:3d:2e:33:f9:f8:9b:77:f6:4b:f2: 89:1f:ea:58:7d:fa:96:d8:97:35:e7:e4:75:f6:4f: f8:a6:07:e3:88:4c:f9:8b:88:2e:14:3c:15:62:9f: eb:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:9E:C7:2C:93:B3:96:97:E3:95:92:14:8D:13:F6:2D:23:80:1A:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/a04f4449-a649-3911-bf78-79e06327d3a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl X509v3 Authority Key Identifier: keyid:A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer sbgp-ipAddrBlock: critical IPv4: 216.195.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:e5:e4:d1:f8:ec:5d:92:74:78:9e:f5:05:ee:b4:db:80:c3: 41:66:f7:5d:a9:86:be:1a:35:66:a5:8b:a6:f9:dd:b9:4d:82: c9:c1:82:9d:e0:57:1f:0f:5c:d1:3a:bf:9b:1b:cb:15:0e:c0: ef:64:e9:51:a3:48:4d:c0:f7:31:a0:fb:d9:03:b5:2f:40:4a: 6d:8b:8f:ba:07:a9:a1:1c:22:4a:a1:f7:aa:b1:6c:57:05:2f: e5:b7:dc:d1:4e:a9:9e:d7:1c:18:18:ea:f0:38:25:4b:50:f9: ae:62:ba:79:15:56:74:16:a5:82:27:41:4f:9c:6e:96:b6:15: 0c:05:4a:64:80:5b:aa:f4:56:d7:cb:aa:f6:2c:b4:a4:36:64: 33:43:ac:d2:e6:d2:ab:51:9e:e0:d2:a1:98:f7:b0:3a:c4:a9: a7:73:68:ab:d1:24:70:83:00:a5:13:41:c1:53:c1:32:90:30: 2d:35:07:aa:dd:2e:fb:3d:42:37:40:c5:fa:a9:31:33:8b:96: 0a:70:71:92:e8:3a:3e:52:da:76:86:35:2b:28:ff:65:e2:4e: 11:fc:20:f7:fa:9d:96:5e:dc:11:b1:aa:df:83:d7:f2:ee:03: 7c:be:7a:17:d6:0d:a1:cc:ca:01:88:86:24:97:5c:4e:9f:7f: 6b:49:59:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ097UrnHadpf9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZkZWUzZjgtZTM2OC00NWVhLTlhMGEtMDMzYzU5MWI0 OTcxMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk OGQ2Y2YyMjAtMzgzZS00MzAyLWFjNzMtYTNjMjRhNzA4YzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjx2KTP/go4Sxe4Pt1VZjPIz7gTSpgJ+6tQZm LBe2IsGhKfBexwLNMvW6mgXXU8hywvBMzM2ZtuD5TelfiuVV47y+R5ptAk2p767M swLkRhwJAh89atJBtbBf3TP81qm948zOY0hg+Qzn4CIPkylstQE6zLg8PXwRqIkm uQhQl9qmxEh9x9RbWjQJCesfRtrilIB4ZlH58Q1AAFpMdwYoL4OZi80oSgTFEMqo 8mbzwI6qES9f9Lty+FGO717l/dLiQ08O2T8PKfbp9LFjFvw6fPfr+WS4bz0uM/n4 m3f2S/KJH+pYffqW2Jc15+R19k/4pgfjiEz5i4guFDwVYp/r8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI+exyyTs5aX45WSFI0T9i0jgBqAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mZmRl ZTNmOC1lMzY4LTQ1ZWEtOWEwYS0wMzNjNTkxYjQ5NzEvYTA0ZjQ0NDktYTY0OS0z OTExLWJmNzgtNzllMDYzMjdkM2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmZkZWUzZjgtZTM2OC00NWVhLTlh MGEtMDMzYzU5MWI0OTcxL2ZmZGVlM2Y4LWUzNjgtNDVlYS05YTBhLTAzM2M1OTFi NDk3MS5jcmwwHwYDVR0jBBgwFoAUozvxxshhdA6a/HFRB4QVpwaz2l8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mZmRlZTNmOC1lMzY4LTQ1ZWEtOWEwYS0wMzNj NTkxYjQ5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2MMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ3l5NH47F2SdHie9QXutNuAw0Fm912phr4aNWali6b53blNgsnBgp3g Vx8PXNE6v5sbyxUOwO9k6VGjSE3A9zGg+9kDtS9ASm2Lj7oHqaEcIkqh96qxbFcF L+W33NFOqZ7XHBgY6vA4JUtQ+a5iunkVVnQWpYInQU+cbpa2FQwFSmSAW6r0VtfL qvYstKQ2ZDNDrNLm0qtRnuDSoZj3sDrEqadzaKvRJHCDAKUTQcFTwTKQMC01B6rd Lvs9QjdAxfqpMTOLlgpwcZLoOj5S2naGNSso/2XiThH8IPf6nZZe3BGxqt+D1/Lu A3y+ehfWDaHMygGIhiSXXE6ff2tJWVA= -----END CERTIFICATE-----Generated at Fri Apr 3 17:57:03 2026 by rpki-client