$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/b810e319-cb8b-3cfc-8a59-ef8e0a611ef2.roa File: b810e319-cb8b-3cfc-8a59-ef8e0a611ef2.roa (raw, json) Hash identifier: ztCExqor7a/RnqHoETFxya4SgGpw4ReSiqwUD8x9KQ0= Subject key identifier: 29:2F:57:D0:18:8F:E4:42:79:2E:98:B0:7A:98:BE:3C:43:CA:6D:67 Certificate issuer: /CN=ffdee3f8-e368-45ea-9a0a-033c591b4971 Certificate serial: 010D0C9F4328584D7F9A8E9B6BF9C369C87DE340 Authority key identifier: A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/b810e319-cb8b-3cfc-8a59-ef8e0a611ef2.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 11650 IP address blocks: 198.46.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:8e:9b:6b:f9:c3:69:c8:7d:e3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffdee3f8-e368-45ea-9a0a-033c591b4971 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=3957c5c5-6cbf-4102-9b37-be7827c3f4c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:59:e8:d8:f5:12:03:aa:32:ce:ee:c3:9c:7e: b5:09:70:40:03:2e:e2:fa:90:66:87:b9:d1:09:61: ab:1a:a2:36:a2:f9:25:d1:d4:96:e8:d8:c6:ad:4b: 49:9b:b9:16:05:e8:79:e4:79:52:d8:d0:f6:82:88: c6:3e:6b:75:54:f3:b1:44:34:c8:db:d5:e9:0d:56: e6:de:ca:8c:be:92:1a:02:d3:79:0c:bc:ca:79:01: 89:b8:7b:9e:41:85:c8:e8:e2:4b:d5:dd:d8:49:a1: 21:f4:60:e6:20:e0:f7:a6:c7:83:eb:5e:de:ba:56: ee:cd:89:37:3f:f8:43:59:ca:1e:a3:73:d9:fc:c2: 11:1a:36:0c:e0:58:cc:0b:96:34:1f:c6:0f:11:15: 30:24:c9:49:aa:a1:7e:2d:0c:53:2c:f1:a1:38:6d: 16:f3:51:ea:83:e8:d3:16:b6:a6:b8:ce:5e:7b:43: cd:e6:3f:c7:15:03:b4:b8:5e:d2:27:27:ff:f8:dd: 7d:af:d4:25:b6:b2:0b:4c:ca:83:10:c3:bd:0a:73: f3:e7:c4:f5:99:49:e5:b9:1f:79:0f:dc:45:8a:33: 60:5c:b7:d5:c7:2f:69:25:94:db:c7:87:ee:6d:e8: 56:20:f8:ad:56:16:94:83:c7:7a:b1:4e:1c:32:95: 6e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:2F:57:D0:18:8F:E4:42:79:2E:98:B0:7A:98:BE:3C:43:CA:6D:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/b810e319-cb8b-3cfc-8a59-ef8e0a611ef2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl X509v3 Authority Key Identifier: keyid:A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer sbgp-ipAddrBlock: critical IPv4: 198.46.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:6c:95:f3:6c:16:53:97:92:a1:ff:e2:0c:27:45:38:88:43: 44:0b:e9:a8:80:03:a5:0b:e9:ef:42:92:be:f2:71:c5:c1:1e: 2a:36:d9:6c:f7:4a:0e:36:b8:65:c7:2e:9a:a2:6f:79:0a:11: 82:da:ae:6c:31:92:d1:fb:4d:c2:f5:d4:4d:a9:f4:5f:0e:01: 6c:09:64:39:d2:6a:7b:2e:b4:6b:83:8c:af:02:f9:e0:e5:73: fc:01:30:62:5a:cd:8e:b8:f6:64:f6:93:4c:d9:80:be:50:d8: d0:c6:6a:72:e8:02:91:ad:59:4b:f7:f3:d3:30:c0:6e:57:39: 9b:18:d2:ed:36:71:bd:7d:99:63:04:c7:e1:f7:5f:84:ac:de: 74:10:7c:08:35:e2:0b:c0:1a:17:f1:8d:f5:97:49:2c:f3:7a: b5:be:27:b5:c4:10:e1:f7:52:58:9b:ab:a6:8d:7c:10:3f:80: 31:57:51:c3:64:55:6f:5d:6a:de:e9:35:84:71:40:cc:20:d6: 4c:fb:ad:1b:af:90:57:18:e3:ee:e1:e8:6b:ec:e7:0f:45:96: c3:c7:7a:18:14:00:a3:af:e9:9e:a9:45:25:49:4a:ef:82:b0: 10:c8:82:70:ad:3f:c5:67:19:2d:df:5f:97:53:ad:71:16:43: 43:20:eb:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mo6ba/nDach940AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZkZWUzZjgtZTM2OC00NWVhLTlhMGEtMDMzYzU5MWI0 OTcxMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk Mzk1N2M1YzUtNmNiZi00MTAyLTliMzctYmU3ODI3YzNmNGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFno2PUSA6oyzu7DnH61CXBAAy7i+pBmh7nR CWGrGqI2ovkl0dSW6NjGrUtJm7kWBeh55HlS2ND2gojGPmt1VPOxRDTI29XpDVbm 3sqMvpIaAtN5DLzKeQGJuHueQYXI6OJL1d3YSaEh9GDmIOD3pseD617eulbuzYk3 P/hDWcoeo3PZ/MIRGjYM4FjMC5Y0H8YPERUwJMlJqqF+LQxTLPGhOG0W81Hqg+jT FramuM5ee0PN5j/HFQO0uF7SJyf/+N19r9QltrILTMqDEMO9CnPz58T1mUnluR95 D9xFijNgXLfVxy9pJZTbx4fubehWIPitVhaUg8d6sU4cMpVu/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkvV9AYj+RCeS6YsHqYvjxDym1nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mZmRl ZTNmOC1lMzY4LTQ1ZWEtOWEwYS0wMzNjNTkxYjQ5NzEvYjgxMGUzMTktY2I4Yi0z Y2ZjLThhNTktZWY4ZTBhNjExZWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmZkZWUzZjgtZTM2OC00NWVhLTlh MGEtMDMzYzU5MWI0OTcxL2ZmZGVlM2Y4LWUzNjgtNDVlYS05YTBhLTAzM2M1OTFi NDk3MS5jcmwwHwYDVR0jBBgwFoAUozvxxshhdA6a/HFRB4QVpwaz2l8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mZmRlZTNmOC1lMzY4LTQ1ZWEtOWEwYS0wMzNj NTkxYjQ5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExi4QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhslfNsFlOXkqH/4gwnRTiIQ0QL6aiAA6UL6e9Ckr7yccXBHio22Wz3 Sg42uGXHLpqib3kKEYLarmwxktH7TcL11E2p9F8OAWwJZDnSansutGuDjK8C+eDl c/wBMGJazY649mT2k0zZgL5Q2NDGanLoApGtWUv389MwwG5XOZsY0u02cb19mWME x+H3X4Ss3nQQfAg14gvAGhfxjfWXSSzzerW+J7XEEOH3Ulibq6aNfBA/gDFXUcNk VW9dat7pNYRxQMwg1kz7rRuvkFcY4+7h6Gvs5w9FlsPHehgUAKOv6Z6pRSVJSu+C sBDIgnCtP8VnGS3fX5dTrXEWQ0Mg65k= -----END CERTIFICATE-----Generated at Sun Apr 19 15:29:28 2026 by rpki-client