$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/20551fed-8091-3df7-8169-f36d6f164c32.roa File: 20551fed-8091-3df7-8169-f36d6f164c32.roa (raw, json) Hash identifier: FLQ9DfwUH/85N8CE4YzYZqQ0LpTLpHY7gb/fq2bfFHM= Subject key identifier: 70:E6:53:31:EF:CF:BD:F9:76:87:5F:DD:35:BF:CA:82:9A:49:CF:6C Certificate issuer: /CN=ffdee3f8-e368-45ea-9a0a-033c591b4971 Certificate serial: 010D0C9F4328584D7F9A8ECBAC73E81DC93AC600 Authority key identifier: A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/20551fed-8091-3df7-8169-f36d6f164c32.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 11650 IP address blocks: 216.176.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:8e:cb:ac:73:e8:1d:c9:3a:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffdee3f8-e368-45ea-9a0a-033c591b4971 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=2ce01294-a7f8-4a77-b0f3-e630563147a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:99:2d:68:3e:84:ce:fe:6c:a1:3c:4a:50:81: be:3e:15:dc:32:81:b5:f3:0e:85:a0:18:3f:75:3e: d3:5d:03:5b:85:96:5f:01:ec:26:0d:e0:60:9c:08: 5d:16:f3:13:26:dd:05:d9:a4:1a:e0:a3:16:5c:54: a3:15:a2:af:37:ce:a7:4c:9c:ca:fe:f2:e6:fa:3c: e1:1e:e5:7f:8f:2e:25:bc:9b:cc:24:ed:cd:b8:e9: e6:94:2d:84:4e:e1:d9:8b:bd:7e:e8:66:e9:0b:bd: ff:e3:21:9e:f0:99:25:83:4c:3b:0d:fd:63:50:45: 6f:c6:65:a6:86:bb:dd:be:0f:15:8f:0a:1f:bb:f2: 5f:40:88:96:68:ff:2b:88:07:2b:bd:25:f6:e9:00: 04:77:ca:9a:b1:aa:99:c0:2b:b6:17:b4:51:ea:0c: 2c:42:72:52:85:b7:cd:b1:e9:9d:dd:16:c9:f0:59: b1:1a:6e:42:72:07:c9:c2:21:66:40:f7:0b:9e:74: 22:36:42:44:6f:40:69:c9:5f:ca:de:c0:59:cb:94: 49:07:4e:ff:a7:44:68:ce:4e:2b:59:8e:36:79:0c: 43:28:f6:46:c6:e6:80:86:57:d0:0d:dd:0b:8c:8d: 60:b2:20:18:5a:2c:64:76:78:e0:4c:83:8c:17:b9: 65:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E6:53:31:EF:CF:BD:F9:76:87:5F:DD:35:BF:CA:82:9A:49:CF:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/20551fed-8091-3df7-8169-f36d6f164c32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl X509v3 Authority Key Identifier: keyid:A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer sbgp-ipAddrBlock: critical IPv4: 216.176.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:33:61:19:f3:6e:af:6f:ab:76:6b:e2:2f:ca:0d:dc:49:5f: 7d:8a:a8:78:3f:61:cf:ca:7c:74:67:5d:e8:4b:b8:ea:d9:32: 6e:a1:67:34:ac:28:02:a5:79:29:b5:a1:b4:7e:bd:fd:29:2f: 13:ee:08:15:29:cb:69:23:12:a9:cb:54:87:15:5a:bd:9d:ad: 8c:b1:4d:fb:80:60:79:21:33:ac:48:42:2e:ca:72:c8:fa:cc: dc:6c:4f:11:8d:a4:30:b1:8c:b9:c5:37:ea:46:c5:6a:fe:64: a2:57:1c:44:69:47:cf:38:b0:9f:bf:ff:c9:1c:4f:e6:21:d9: 8b:02:3f:aa:14:8f:75:e6:c7:d6:5a:bf:fb:b1:88:16:c9:67: 4c:41:4e:08:94:53:4e:88:5d:dc:3c:06:bd:09:39:ba:f2:e0: 1b:36:ec:4d:91:42:fb:9b:e6:c9:97:ad:ea:2b:4d:c4:0f:0e: a7:bf:e8:f2:be:1b:c8:91:52:11:bd:48:16:bc:58:6f:b9:ec: d9:43:d4:59:59:0c:ef:d3:8c:37:db:d8:f9:88:fa:98:74:04: 46:3a:b0:c0:00:a6:a8:57:70:ad:7f:02:5e:49:50:17:6e:62: e7:19:f8:59:39:83:5a:46:4f:7b:3f:4a:3c:1d:b4:a1:89:57: 49:6e:81:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mo7LrHPoHck6xgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZkZWUzZjgtZTM2OC00NWVhLTlhMGEtMDMzYzU5MWI0 OTcxMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk MmNlMDEyOTQtYTdmOC00YTc3LWIwZjMtZTYzMDU2MzE0N2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZktaD6Ezv5soTxKUIG+PhXcMoG18w6FoBg/ dT7TXQNbhZZfAewmDeBgnAhdFvMTJt0F2aQa4KMWXFSjFaKvN86nTJzK/vLm+jzh HuV/jy4lvJvMJO3NuOnmlC2ETuHZi71+6GbpC73/4yGe8Jklg0w7Df1jUEVvxmWm hrvdvg8Vjwofu/JfQIiWaP8riAcrvSX26QAEd8qasaqZwCu2F7RR6gwsQnJShbfN semd3RbJ8FmxGm5CcgfJwiFmQPcLnnQiNkJEb0BpyV/K3sBZy5RJB07/p0Rozk4r WY42eQxDKPZGxuaAhlfQDd0LjI1gsiAYWixkdnjgTIOMF7llPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHDmUzHvz735dodf3TW/yoKaSc9sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mZmRl ZTNmOC1lMzY4LTQ1ZWEtOWEwYS0wMzNjNTkxYjQ5NzEvMjA1NTFmZWQtODA5MS0z ZGY3LTgxNjktZjM2ZDZmMTY0YzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmZkZWUzZjgtZTM2OC00NWVhLTlh MGEtMDMzYzU5MWI0OTcxL2ZmZGVlM2Y4LWUzNjgtNDVlYS05YTBhLTAzM2M1OTFi NDk3MS5jcmwwHwYDVR0jBBgwFoAUozvxxshhdA6a/HFRB4QVpwaz2l8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mZmRlZTNmOC1lMzY4LTQ1ZWEtOWEwYS0wMzNj NTkxYjQ5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2LCgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJEzYRnzbq9vq3Zr4i/KDdxJX32KqHg/Yc/KfHRnXehLuOrZMm6hZzSs KAKleSm1obR+vf0pLxPuCBUpy2kjEqnLVIcVWr2drYyxTfuAYHkhM6xIQi7Kcsj6 zNxsTxGNpDCxjLnFN+pGxWr+ZKJXHERpR884sJ+//8kcT+Yh2YsCP6oUj3Xmx9Za v/uxiBbJZ0xBTgiUU06IXdw8Br0JObry4Bs27E2RQvub5smXreorTcQPDqe/6PK+ G8iRUhG9SBa8WG+57NlD1FlZDO/TjDfb2PmI+ph0BEY6sMAApqhXcK1/Al5JUBdu YucZ+Fk5g1pGT3s/SjwdtKGJV0lugVo= -----END CERTIFICATE-----Generated at Sun Apr 19 15:31:48 2026 by rpki-client