$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/9ff280db-99d3-3021-aa5e-b41e7078f63b.roa File: 9ff280db-99d3-3021-aa5e-b41e7078f63b.roa (raw, json) Hash identifier: 8GZef3B0HPkBqE7iD5r1ekvjiUEIcXSE261Upt+EEDo= Subject key identifier: 0C:EB:00:A0:D9:EB:B0:CE:CA:42:E8:0C:95:F2:58:82:3A:58:ED:90 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584D65152E8588EF74F38F52AD38 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/9ff280db-99d3-3021-aa5e-b41e7078f63b.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 16696 IP address blocks: 170.199.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:2e:85:88:ef:74:f3:8f:52:ad:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=d9debe65-2894-4dfa-83c8-3859c9e93133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:49:80:db:b6:f2:ad:d1:d6:b9:2c:0f:25:2c: 0b:b5:70:dd:4d:73:f9:eb:8f:23:e0:a0:1d:d9:23: 89:bb:ad:e4:f1:2f:88:45:a4:44:36:72:ba:c5:80: 05:85:a6:81:a4:d8:bd:d1:de:01:78:66:84:62:f8: fc:7e:2f:17:c4:fd:52:87:4f:0f:b2:65:98:52:a7: 2d:c7:d0:53:1d:24:52:7f:12:cb:65:94:28:b4:25: 28:e8:66:3b:b6:22:19:1b:5e:b3:af:41:89:26:aa: e6:23:40:07:62:0a:9c:31:bc:af:6f:a5:4c:02:b7: 7d:40:c5:15:7d:ff:65:f6:86:e0:d6:a4:c2:a0:bc: 48:7d:1d:fa:12:5c:16:1b:c4:b3:23:d5:0c:e5:8e: e1:7c:61:82:04:20:78:69:49:0e:11:34:16:e5:b9: 61:98:60:54:7a:c5:5e:2f:78:35:4a:70:aa:a6:78: ee:d9:30:fe:4e:56:8f:1b:c3:dd:a0:a2:e2:88:fb: 39:8f:8d:c7:6c:2f:be:0c:de:55:56:19:30:77:a1: 1a:cc:e7:d7:f2:45:05:0d:a6:08:8f:cf:df:88:f1: df:2b:c2:0a:a9:78:c0:51:f2:9f:30:42:03:e4:6e: f3:07:33:28:50:68:52:0d:2b:52:74:46:57:72:6c: 93:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:EB:00:A0:D9:EB:B0:CE:CA:42:E8:0C:95:F2:58:82:3A:58:ED:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/9ff280db-99d3-3021-aa5e-b41e7078f63b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 170.199.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:29:52:1c:7e:0b:8a:6a:1d:45:6a:a8:26:38:56:36:8d:5c: 91:13:35:19:e4:fe:49:0e:d4:04:48:a8:d2:fa:b8:f2:27:78: c8:3e:77:0f:c2:1c:c2:e6:d3:e7:71:61:9f:b0:24:b2:c6:e1: c6:d2:0f:55:dc:53:ef:11:e9:22:ae:91:45:a4:9f:e7:b0:ec: fd:1d:86:3b:c6:b7:00:5e:50:38:05:8f:22:21:6f:03:0a:f4: bb:65:e0:b5:a1:58:7a:89:5a:fc:83:be:21:3f:19:65:a8:62: 61:f6:e4:e4:2b:d4:1c:f9:ed:a9:6e:da:dd:fe:15:68:6e:c3: ef:48:1f:b4:7a:c4:92:a9:7c:3b:13:fa:a5:28:03:8d:22:1a: 14:ad:a2:c2:73:ec:e0:3a:32:9d:ad:b0:ea:45:6a:25:fe:1b: 14:9a:f6:09:1e:e7:17:9b:6b:62:51:59:ab:b7:05:5f:5f:d6: 69:5e:ba:da:f2:93:73:90:ec:1e:f9:1e:a6:89:9d:49:8c:9c: b6:06:00:86:97:3f:1b:4d:f6:10:c2:1a:7f:85:46:b2:9f:9a: 30:6c:5e:54:d5:31:b3:ca:b5:18:4f:2f:c3:8c:1f:87:a1:0a: 7f:e3:4a:ea:d1:ce:8d:52:f7:9c:71:b3:48:9c:72:e3:3f:b9: 99:ba:a3:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFS6FiO90849SrTgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk ZDlkZWJlNjUtMjg5NC00ZGZhLTgzYzgtMzg1OWM5ZTkzMTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0mA27byrdHWuSwPJSwLtXDdTXP5648j4KAd 2SOJu63k8S+IRaRENnK6xYAFhaaBpNi90d4BeGaEYvj8fi8XxP1Sh08PsmWYUqct x9BTHSRSfxLLZZQotCUo6GY7tiIZG16zr0GJJqrmI0AHYgqcMbyvb6VMArd9QMUV ff9l9obg1qTCoLxIfR36ElwWG8SzI9UM5Y7hfGGCBCB4aUkOETQW5blhmGBUesVe L3g1SnCqpnju2TD+TlaPG8PdoKLiiPs5j43HbC++DN5VVhkwd6EazOfX8kUFDaYI j8/fiPHfK8IKqXjAUfKfMEID5G7zBzMoUGhSDStSdEZXcmyTyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzrAKDZ67DOykLoDJXyWII6WO2QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvOWZmMjgwZGItOTlkMy0z MDIxLWFhNWUtYjQxZTcwNzhmNjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqsf0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwpUhx+C4pqHUVqqCY4VjaNXJETNRnk/kkO1ARIqNL6uPIneMg+dw/C HMLm0+dxYZ+wJLLG4cbSD1XcU+8R6SKukUWkn+ew7P0dhjvGtwBeUDgFjyIhbwMK 9Ltl4LWhWHqJWvyDviE/GWWoYmH25OQr1Bz57alu2t3+FWhuw+9IH7R6xJKpfDsT +qUoA40iGhStosJz7OA6Mp2tsOpFaiX+GxSa9gke5xeba2JRWau3BV9f1mleutry k3OQ7B75HqaJnUmMnLYGAIaXPxtN9hDCGn+FRrKfmjBsXlTVMbPKtRhPL8OMH4eh Cn/jSurRzo1S95xxs0iccuM/uZm6o/U= -----END CERTIFICATE-----Generated at Fri Apr 17 09:58:31 2026 by rpki-client