$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/e5028175-5311-307b-b633-50ccd9ee601e.roa File: e5028175-5311-307b-b633-50ccd9ee601e.roa (raw, json) Hash identifier: hEBXamAQJna3REz7CayZNyg9XNDGfZo41TguM1wU5KM= Subject key identifier: CC:48:72:F6:54:AF:FA:CF:34:F1:39:32:AD:48:94:50:BD:A5:D3:9C Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584D651526C9413141C1C0D368C0 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/e5028175-5311-307b-b633-50ccd9ee601e.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 16696 IP address blocks: 199.249.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:26:c9:41:31:41:c1:c0:d3:68:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=cb03551f-ff51-41b1-aada-9591f3f56e76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:cf:07:a0:b7:da:1f:aa:cc:93:c7:c2:0e:08: e3:49:d5:6f:87:01:6f:37:f5:81:4e:49:47:bf:de: 74:de:77:a7:f8:4b:a8:15:8a:16:5d:15:ff:92:88: cb:ff:b0:2a:48:cb:31:30:8c:6f:47:a4:0e:87:e2: 79:d0:d3:cc:64:07:2b:b4:d3:9a:2f:03:20:24:e3: f1:de:07:7a:2f:20:fe:96:1f:aa:e9:c6:35:be:76: 6b:c4:42:bc:f8:70:3c:f3:16:9c:88:15:b8:29:a4: 9d:0e:f1:8a:9a:da:49:ea:37:20:56:a9:8c:81:e9: 21:89:d8:b6:a0:9e:4d:f5:e3:d6:e0:93:42:0a:c0: be:ad:0c:43:a9:15:a8:b1:ff:53:e5:fd:02:b9:d4: cf:af:74:17:23:d9:41:a3:d3:d6:fe:f4:ef:df:34: a1:e4:ea:32:46:f9:3a:7e:c4:ea:de:22:80:14:eb: 9b:51:9a:82:41:f1:7c:50:05:8a:e6:f6:4f:23:1f: 0a:a1:5e:1c:b5:77:f9:d8:9b:ed:41:0d:fd:75:28: b8:2f:9e:26:a2:cc:d3:eb:6b:80:3c:52:e7:bc:37: 67:48:17:80:20:b7:14:62:3a:f8:1f:fa:12:2e:98: 6c:bc:b0:b9:67:9b:46:83:1c:6a:1d:2a:12:48:e7: 54:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:48:72:F6:54:AF:FA:CF:34:F1:39:32:AD:48:94:50:BD:A5:D3:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/e5028175-5311-307b-b633-50ccd9ee601e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 199.249.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:59:05:0d:e7:3b:74:e4:ed:05:5d:af:fd:6c:73:36:1a:b8: e4:7a:a8:44:fa:37:cf:73:62:a8:ba:9f:83:0a:41:79:8e:e9: 7d:ee:db:b8:61:5a:79:5d:bf:80:94:ca:54:39:61:c0:d0:ec: 74:47:24:5b:ff:74:be:8f:9e:f7:b0:c3:95:6d:61:c0:f9:92: 06:6a:4a:c6:fc:79:f6:da:db:95:ba:e2:65:f7:df:63:9d:bf: 42:e8:6c:4f:dd:06:9a:37:9e:33:25:e8:24:46:6d:75:67:5a: d5:98:a4:01:ca:3f:9d:28:ea:97:00:de:09:15:89:da:7f:cb: 87:e9:c1:b6:33:d2:e7:d0:e2:d4:45:ed:52:78:80:62:64:7c: 07:60:fd:c3:06:51:ef:60:7f:d8:fb:6b:66:12:c5:ba:b9:c0: 4e:2f:e1:50:71:4b:4d:88:c2:1e:3f:cc:4f:f9:97:4f:f8:6d: dd:06:e7:e5:4e:e3:c2:15:28:bf:44:fd:4d:26:df:47:bc:76: 43:c2:cb:4a:13:8e:e2:79:d4:4c:69:8a:fe:c3:0b:17:5d:86: ae:82:19:bd:76:89:bf:c2:6b:0d:70:61:9d:e8:2d:d6:b6:9d: 4e:10:f3:db:4b:84:6d:72:62:cc:70:94:d8:74:34:16:6b:78: 04:81:93:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFSbJQTFBwcDTaMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk Y2IwMzU1MWYtZmY1MS00MWIxLWFhZGEtOTU5MWYzZjU2ZTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAps8HoLfaH6rMk8fCDgjjSdVvhwFvN/WBTklH v9503nen+EuoFYoWXRX/kojL/7AqSMsxMIxvR6QOh+J50NPMZAcrtNOaLwMgJOPx 3gd6LyD+lh+q6cY1vnZrxEK8+HA88xaciBW4KaSdDvGKmtpJ6jcgVqmMgekhidi2 oJ5N9ePW4JNCCsC+rQxDqRWosf9T5f0CudTPr3QXI9lBo9PW/vTv3zSh5OoyRvk6 fsTq3iKAFOubUZqCQfF8UAWK5vZPIx8KoV4ctXf52JvtQQ39dSi4L54moszT62uA PFLnvDdnSBeAILcUYjr4H/oSLphsvLC5Z5tGgxxqHSoSSOdUgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMxIcvZUr/rPNPE5Mq1IlFC9pdOcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvZTUwMjgxNzUtNTMxMS0z MDdiLWI2MzMtNTBjY2Q5ZWU2MDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/nZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9ZBQ3nO3Tk7QVdr/1sczYauOR6qET6N89zYqi6n4MKQXmO6X3u27hh Wnldv4CUylQ5YcDQ7HRHJFv/dL6Pnveww5VtYcD5kgZqSsb8efba25W64mX332Od v0LobE/dBpo3njMl6CRGbXVnWtWYpAHKP50o6pcA3gkVidp/y4fpwbYz0ufQ4tRF 7VJ4gGJkfAdg/cMGUe9gf9j7a2YSxbq5wE4v4VBxS02Iwh4/zE/5l0/4bd0G5+VO 48IVKL9E/U0m30e8dkPCy0oTjuJ51Expiv7DCxddhq6CGb12ib/Caw1wYZ3oLda2 nU4Q89tLhG1yYsxwlNh0NBZreASBk60= -----END CERTIFICATE-----Generated at Fri Apr 17 13:05:22 2026 by rpki-client