$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/50c037f8-b0f5-3c3b-8ffe-4395e49c6756.roa File: 50c037f8-b0f5-3c3b-8ffe-4395e49c6756.roa (raw, json) Hash identifier: FohtXqIThxHGrcp33VY3SfDPl79Fg2rD8bL1mfmnsOc= Subject key identifier: 26:A0:AA:0A:3F:C4:ED:6B:73:E7:AD:82:18:20:47:27:22:12:BB:64 Certificate issuer: /CN=ffdee3f8-e368-45ea-9a0a-033c591b4971 Certificate serial: 010D0C9F4328584D7F9A8EB34A4703DB3F9C3C00 Authority key identifier: A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/50c037f8-b0f5-3c3b-8ffe-4395e49c6756.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 11650 IP address blocks: 199.96.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:8e:b3:4a:47:03:db:3f:9c:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffdee3f8-e368-45ea-9a0a-033c591b4971 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=51ea06d2-0f64-457f-b394-61036dc673ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4d:f9:ec:c5:ac:ad:85:87:6b:83:b2:eb:3f: 3a:09:6c:b5:5b:73:53:25:5a:d1:e0:b2:b1:d9:29: 1c:cf:90:44:46:63:c1:ec:21:11:b4:17:96:f6:b6: 11:50:47:f0:46:f7:f9:de:9d:fa:71:3b:3b:c1:fd: 87:59:f1:b6:2f:a5:bd:1d:f6:c3:cc:c3:77:60:e5: 1f:00:64:06:b7:c9:91:e6:2e:07:d5:3f:76:53:bd: 48:b3:00:d8:8e:92:60:ae:93:6e:46:f6:1d:a5:c9: 54:6b:27:75:69:3e:52:8b:bb:be:e1:fb:be:d9:85: 95:cf:0d:53:88:63:58:f3:13:ab:9c:16:12:3a:32: 15:63:7a:ee:7a:f0:43:05:39:d0:fb:a4:26:65:5e: 94:a1:0c:6b:dd:42:5b:7c:2e:b1:a0:23:4a:6d:56: 14:11:44:a2:0d:7e:28:d1:8e:d5:b0:c1:7f:ba:5d: 51:9e:fe:da:30:50:ad:39:39:87:0d:dc:dc:ce:3d: 65:80:17:c1:a8:f9:bc:5f:29:91:d9:55:74:35:51: 7e:87:7b:f6:fb:fa:46:e2:26:71:2d:a3:80:31:cf: 31:84:42:3a:5e:85:bb:26:d0:4a:de:44:d1:16:49: 3b:ba:04:2b:ec:80:d5:87:ca:80:0f:93:1d:b2:0e: 3e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:A0:AA:0A:3F:C4:ED:6B:73:E7:AD:82:18:20:47:27:22:12:BB:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/50c037f8-b0f5-3c3b-8ffe-4395e49c6756.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl X509v3 Authority Key Identifier: keyid:A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer sbgp-ipAddrBlock: critical IPv4: 199.96.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:6d:fb:1c:36:6c:dd:82:6f:36:ef:e8:6f:b9:42:8f:70:30: 88:0e:ac:99:15:70:db:e6:b0:bb:60:9e:60:8d:bb:ce:fe:0c: ed:ef:9d:0a:cf:99:84:6e:15:49:f0:b5:30:96:f2:47:70:a4: 26:92:11:32:f4:21:70:b2:28:fd:ac:6a:c9:24:4b:80:ed:b8: e3:52:75:28:35:3f:80:2e:3e:32:cb:cd:89:03:66:0b:58:a4: b9:bc:42:9d:6a:f4:0e:f0:46:4f:79:fa:f0:17:49:a9:28:6e: 02:7a:4f:60:b6:9f:55:a4:cf:b4:86:39:c5:c1:91:d9:71:ea: 8d:8e:26:e1:a5:48:40:5e:6c:5c:6a:04:89:dc:90:b4:ab:fa: 50:99:57:72:56:9d:10:a5:d5:ce:a8:6c:69:95:eb:c0:34:e2: fb:19:95:c8:cf:00:bd:c1:b7:e7:50:29:e3:d7:a9:c3:91:95: 7a:d1:90:22:8c:25:ee:3c:de:60:0a:25:7d:d5:95:6d:d2:86: 17:e2:ad:23:24:3d:ac:03:a4:15:d9:9a:64:85:7b:0a:77:f3: fa:93:b8:36:f3:85:0a:bd:6d:c9:77:65:7a:66:f1:44:12:e4: df:01:b0:59:32:df:c0:ee:06:7c:bf:51:eb:a5:ec:92:1f:02: 18:fc:da:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mo6zSkcD2z+cPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZkZWUzZjgtZTM2OC00NWVhLTlhMGEtMDMzYzU5MWI0 OTcxMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk NTFlYTA2ZDItMGY2NC00NTdmLWIzOTQtNjEwMzZkYzY3M2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyE357MWsrYWHa4Oy6z86CWy1W3NTJVrR4LKx 2Skcz5BERmPB7CERtBeW9rYRUEfwRvf53p36cTs7wf2HWfG2L6W9HfbDzMN3YOUf AGQGt8mR5i4H1T92U71IswDYjpJgrpNuRvYdpclUayd1aT5Si7u+4fu+2YWVzw1T iGNY8xOrnBYSOjIVY3ruevBDBTnQ+6QmZV6UoQxr3UJbfC6xoCNKbVYUEUSiDX4o 0Y7VsMF/ul1Rnv7aMFCtOTmHDdzczj1lgBfBqPm8XymR2VV0NVF+h3v2+/pG4iZx LaOAMc8xhEI6XoW7JtBK3kTRFkk7ugQr7IDVh8qAD5Mdsg4+FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCagqgo/xO1rc+etghggRyciErtkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mZmRl ZTNmOC1lMzY4LTQ1ZWEtOWEwYS0wMzNjNTkxYjQ5NzEvNTBjMDM3ZjgtYjBmNS0z YzNiLThmZmUtNDM5NWU0OWM2NzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmZkZWUzZjgtZTM2OC00NWVhLTlh MGEtMDMzYzU5MWI0OTcxL2ZmZGVlM2Y4LWUzNjgtNDVlYS05YTBhLTAzM2M1OTFi NDk3MS5jcmwwHwYDVR0jBBgwFoAUozvxxshhdA6a/HFRB4QVpwaz2l8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mZmRlZTNmOC1lMzY4LTQ1ZWEtOWEwYS0wMzNj NTkxYjQ5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx2BgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5t+xw2bN2Cbzbv6G+5Qo9wMIgOrJkVcNvmsLtgnmCNu87+DO3vnQrP mYRuFUnwtTCW8kdwpCaSETL0IXCyKP2saskkS4DtuONSdSg1P4AuPjLLzYkDZgtY pLm8Qp1q9A7wRk95+vAXSakobgJ6T2C2n1Wkz7SGOcXBkdlx6o2OJuGlSEBebFxq BInckLSr+lCZV3JWnRCl1c6obGmV68A04vsZlcjPAL3Bt+dQKePXqcORlXrRkCKM Je483mAKJX3VlW3ShhfirSMkPawDpBXZmmSFewp38/qTuDbzhQq9bcl3ZXpm8UQS 5N8BsFky38DuBny/Ueul7JIfAhj82gA= -----END CERTIFICATE-----Generated at Sun Apr 19 15:30:52 2026 by rpki-client