$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/c3e18ddf-50c8-3c2b-961b-6ce9f03a95d8.roa File: c3e18ddf-50c8-3c2b-961b-6ce9f03a95d8.roa (raw, json) Hash identifier: pNbhE6FGhOm39XGMDF5Eh3HjDNHXXdrkd0g7oZ7Qq5s= Subject key identifier: 29:A7:18:67:41:3B:8F:DF:6F:F0:F8:E4:46:DE:C0:FB:AE:7B:10:AB Certificate issuer: /CN=ffdee3f8-e368-45ea-9a0a-033c591b4971 Certificate serial: 010D0C9F4328584D7F9A8EBF37FEB560C3CF1C80 Authority key identifier: A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/c3e18ddf-50c8-3c2b-961b-6ce9f03a95d8.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 11650 IP address blocks: 216.71.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:8e:bf:37:fe:b5:60:c3:cf:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffdee3f8-e368-45ea-9a0a-033c591b4971 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=5aaab928-1054-4097-a789-bf4e1ac848e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:98:3f:16:a6:5a:b7:73:4b:a2:e7:13:7d:24: f0:fc:8a:3c:11:62:09:6e:ef:16:11:4d:7a:13:a8: ab:9e:9e:bd:6a:47:62:06:3c:36:77:a6:39:6c:4f: c1:e0:7b:9c:8d:e1:fa:b4:fb:b9:14:fb:9d:1a:16: a2:20:0f:cd:c9:18:ad:6b:47:59:28:45:a1:1b:b0: b9:87:e3:da:9a:d9:13:31:eb:90:ba:27:27:c2:44: 1b:cb:ea:fe:4e:e6:e4:c0:3a:4f:b3:af:44:67:d4: 1b:a5:ef:bf:67:bc:1e:44:a2:b0:36:ae:43:e1:69: 13:ba:29:d3:47:33:f9:ee:20:cf:30:78:8c:12:e1: 5d:ed:ac:bf:5c:28:e5:98:e7:6a:cb:58:ba:b2:52: e4:82:8a:af:5f:62:e0:d3:05:55:e1:96:df:53:1a: a3:ea:74:38:47:87:43:c2:0c:80:ba:8c:cc:22:70: 31:f6:0e:28:9b:66:ff:fa:0a:d1:60:75:96:96:2a: 3e:e2:10:86:8a:01:fd:ae:0f:47:ea:b4:73:f8:46: ec:6f:07:7b:64:64:79:8e:4f:e1:52:b9:49:3b:33: 38:6a:77:2e:f4:4e:97:bf:c4:19:97:37:26:6d:64: fa:96:1c:7f:56:05:c9:02:8e:eb:a8:40:f6:78:61: bd:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A7:18:67:41:3B:8F:DF:6F:F0:F8:E4:46:DE:C0:FB:AE:7B:10:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/c3e18ddf-50c8-3c2b-961b-6ce9f03a95d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl X509v3 Authority Key Identifier: keyid:A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer sbgp-ipAddrBlock: critical IPv4: 216.71.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:89:78:35:42:5e:58:81:d8:c8:ce:4b:a5:40:f8:12:d3:07: 31:10:8c:e6:f6:99:cc:3d:78:69:5c:ba:47:b0:3b:ab:c0:a9: 45:36:74:11:97:47:7b:6d:c4:42:90:be:a7:74:85:c4:70:45: 38:8f:dd:80:51:d6:b4:0c:1e:e5:a5:ed:79:4e:4d:13:d9:e3: 88:53:d1:24:d1:18:71:c5:bb:95:f1:16:88:bb:45:4e:6e:55: 2b:79:63:50:2a:5f:9d:64:6f:7c:84:cd:bd:46:bc:60:2e:2d: 04:ac:29:99:56:41:eb:d4:58:08:b9:16:26:a6:bd:d6:0b:2a: c9:81:f5:1f:4b:a7:36:ca:70:65:cf:45:e2:d2:02:fa:1b:4c: 75:46:e6:a4:91:c9:93:e3:73:a6:0d:89:0b:05:10:81:14:c4: e6:f1:70:f2:99:9c:ff:b7:dc:ef:d8:5c:03:9d:85:98:9a:71: 24:c3:c9:17:0b:6d:db:6e:0b:be:3c:c4:59:b7:49:27:2d:f0: 62:b5:8c:fd:20:37:bd:22:5d:75:a9:db:e7:7a:73:69:4c:4c: 01:72:ad:2d:05:33:6c:26:dc:5a:9a:bb:54:6c:42:ee:7e:82: c5:b2:50:fd:b1:a9:57:9a:3d:dd:41:0a:1a:83:ef:51:4e:ca: 00:4b:78:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mo6/N/61YMPPHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZkZWUzZjgtZTM2OC00NWVhLTlhMGEtMDMzYzU5MWI0 OTcxMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk NWFhYWI5MjgtMTA1NC00MDk3LWE3ODktYmY0ZTFhYzg0OGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJg/FqZat3NLoucTfSTw/Io8EWIJbu8WEU16 E6irnp69akdiBjw2d6Y5bE/B4HucjeH6tPu5FPudGhaiIA/NyRita0dZKEWhG7C5 h+PamtkTMeuQuicnwkQby+r+TubkwDpPs69EZ9Qbpe+/Z7weRKKwNq5D4WkTuinT RzP57iDPMHiMEuFd7ay/XCjlmOdqy1i6slLkgoqvX2Lg0wVV4ZbfUxqj6nQ4R4dD wgyAuozMInAx9g4om2b/+grRYHWWlio+4hCGigH9rg9H6rRz+Ebsbwd7ZGR5jk/h UrlJOzM4ancu9E6Xv8QZlzcmbWT6lhx/VgXJAo7rqED2eGG9MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCmnGGdBO4/fb/D45EbewPuuexCrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mZmRl ZTNmOC1lMzY4LTQ1ZWEtOWEwYS0wMzNjNTkxYjQ5NzEvYzNlMThkZGYtNTBjOC0z YzJiLTk2MWItNmNlOWYwM2E5NWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmZkZWUzZjgtZTM2OC00NWVhLTlh MGEtMDMzYzU5MWI0OTcxL2ZmZGVlM2Y4LWUzNjgtNDVlYS05YTBhLTAzM2M1OTFi NDk3MS5jcmwwHwYDVR0jBBgwFoAUozvxxshhdA6a/HFRB4QVpwaz2l8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mZmRlZTNmOC1lMzY4LTQ1ZWEtOWEwYS0wMzNj NTkxYjQ5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2EdAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2JeDVCXliB2MjOS6VA+BLTBzEQjOb2mcw9eGlcukewO6vAqUU2dBGX R3ttxEKQvqd0hcRwRTiP3YBR1rQMHuWl7XlOTRPZ44hT0STRGHHFu5XxFoi7RU5u VSt5Y1AqX51kb3yEzb1GvGAuLQSsKZlWQevUWAi5FiamvdYLKsmB9R9LpzbKcGXP ReLSAvobTHVG5qSRyZPjc6YNiQsFEIEUxObxcPKZnP+33O/YXAOdhZiacSTDyRcL bdtuC748xFm3SSct8GK1jP0gN70iXXWp2+d6c2lMTAFyrS0FM2wm3Fqau1RsQu5+ gsWyUP2xqVeaPd1BChqD71FOygBLeHQ= -----END CERTIFICATE-----Generated at Sun Apr 19 15:31:14 2026 by rpki-client