$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/ddd0c9eb-846f-3b41-b14d-a18fb029e1e2.roa File: ddd0c9eb-846f-3b41-b14d-a18fb029e1e2.roa (raw, json) Hash identifier: J2mpPjr1KYAmKi7Qts4r/EBf8T/A4HJ4CLC5IO37giY= Subject key identifier: 19:11:98:92:F9:3B:D2:66:2D:0D:94:1A:E9:E9:31:68:C9:A8:D3:78 Certificate issuer: /CN=e3fada49-b353-4a69-9b32-1b6ab3729db1 Certificate serial: 010D0C9F4328584D869558662E0D5388763257F0 Authority key identifier: 26:E9:72:DD:F2:AB:6A:0B:0F:65:29:13:47:2F:D8:DF:E5:06:3D:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/ddd0c9eb-846f-3b41-b14d-a18fb029e1e2.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 3855 IP address blocks: 216.249.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:58:66:2e:0d:53:88:76:32:57:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3fada49-b353-4a69-9b32-1b6ab3729db1 Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=1ce30a4d-802a-4aea-9d1b-2227fc54da40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:0d:0c:7e:1f:36:35:a5:e5:bc:fa:0d:a5:65: 29:93:a5:43:46:fb:32:7c:68:f2:3a:11:49:88:0c: 79:76:74:5c:b0:63:4e:d7:69:f3:c1:ff:23:ba:0f: 73:9c:3d:9e:c6:83:9b:6a:e1:23:c6:98:ec:32:89: c5:d3:47:6d:1b:20:97:95:16:a1:28:86:d2:f5:33: 17:63:9d:c0:19:9e:fd:ff:93:57:92:08:96:79:f2: a7:02:98:77:3d:a3:fd:bd:a9:01:88:78:7b:60:a3: 87:a4:6c:c3:47:20:51:53:fa:6c:f2:fd:60:3c:dd: ed:f5:55:2d:9f:88:1d:07:34:1c:29:80:e4:69:30: e9:c9:2c:0c:94:a8:1f:c7:6f:29:ce:0a:29:e0:8d: 8f:01:64:23:a8:e3:be:81:59:ef:00:72:07:d2:89: c7:32:70:61:8a:56:27:3e:72:80:81:9c:56:ef:27: 0a:19:d9:57:1c:74:01:da:7e:f6:c4:7c:e6:6e:7b: e6:ac:8c:16:f0:cb:5f:f5:51:20:e2:c9:25:4c:d3: c4:ce:37:20:ef:1a:af:4f:ad:c8:42:0e:f8:24:72: 7a:41:7d:84:5d:6d:fb:e6:28:6e:57:5e:5a:a0:12: a5:3b:46:dc:61:88:e4:a0:21:e0:82:93:51:79:ce: ae:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:11:98:92:F9:3B:D2:66:2D:0D:94:1A:E9:E9:31:68:C9:A8:D3:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/ddd0c9eb-846f-3b41-b14d-a18fb029e1e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.crl X509v3 Authority Key Identifier: keyid:26:E9:72:DD:F2:AB:6A:0B:0F:65:29:13:47:2F:D8:DF:E5:06:3D:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer sbgp-ipAddrBlock: critical IPv4: 216.249.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:76:6a:1d:a4:4b:45:51:fd:7e:e1:19:a8:e8:fb:e7:18:90: 03:f2:b9:fd:3b:9e:0e:04:2a:3b:58:ac:b1:f0:6b:7a:89:b1: 87:1a:2b:75:98:b2:4c:ad:b9:2f:f2:37:b7:95:cf:a3:f4:29: 13:04:9a:d0:f1:25:87:4b:e9:91:c4:4f:c9:8c:8b:8a:5d:23: 27:b3:91:6a:d0:9f:16:3a:4f:03:da:ea:9c:0c:3d:df:a5:97: 45:46:27:a6:33:41:b7:6a:6c:29:9f:1e:7e:34:f1:cc:3c:e1: 70:f7:b5:c3:10:a0:37:50:96:c1:8d:c7:0a:72:cd:bc:a0:cc: 51:30:07:dc:a3:83:b8:a6:18:9e:14:99:fe:df:e5:5d:98:92: 0d:f4:93:45:be:60:41:cd:0a:1b:7f:78:70:50:75:10:da:45: 76:01:70:6d:36:58:9e:58:7e:dc:72:9b:11:76:77:f2:03:9f: 69:47:62:40:1a:bd:86:db:a2:9a:98:c7:7b:38:15:a5:55:59: 1c:6a:0e:bb:eb:9f:84:b4:b5:c5:e8:c4:51:0b:1e:2e:24:96: 9b:cc:22:d6:e6:1b:16:43:9c:f2:6c:e2:06:ab:58:59:8f:14: 8a:b7:a3:6e:7c:47:3c:94:5a:31:02:9c:7a:b5:07:77:9b:2f: 08:22:e0:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlVhmLg1TiHYyV/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTNmYWRhNDktYjM1My00YTY5LTliMzItMWI2YWIzNzI5 ZGIxMB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk MWNlMzBhNGQtODAyYS00YWVhLTlkMWItMjIyN2ZjNTRkYTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlw0Mfh82NaXlvPoNpWUpk6VDRvsyfGjyOhFJ iAx5dnRcsGNO12nzwf8jug9znD2exoObauEjxpjsMonF00dtGyCXlRahKIbS9TMX Y53AGZ79/5NXkgiWefKnAph3PaP9vakBiHh7YKOHpGzDRyBRU/ps8v1gPN3t9VUt n4gdBzQcKYDkaTDpySwMlKgfx28pzgop4I2PAWQjqOO+gVnvAHIH0onHMnBhilYn PnKAgZxW7ycKGdlXHHQB2n72xHzmbnvmrIwW8Mtf9VEg4sklTNPEzjcg7xqvT63I Qg74JHJ6QX2EXW375ihuV15aoBKlO0bcYYjkoCHggpNRec6u2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBkRmJL5O9JmLQ2UGunpMWjJqNN4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lM2Zh ZGE0OS1iMzUzLTRhNjktOWIzMi0xYjZhYjM3MjlkYjEvZGRkMGM5ZWItODQ2Zi0z YjQxLWIxNGQtYTE4ZmIwMjllMWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZTNmYWRhNDktYjM1My00YTY5LTli MzItMWI2YWIzNzI5ZGIxL2UzZmFkYTQ5LWIzNTMtNGE2OS05YjMyLTFiNmFiMzcy OWRiMS5jcmwwHwYDVR0jBBgwFoAUJuly3fKragsPZSkTRy/Y3+UGPZ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lM2ZhZGE0OS1iMzUzLTRhNjktOWIzMi0xYjZh YjM3MjlkYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2PkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJ2ah2kS0VR/X7hGajo++cYkAPyuf07ng4EKjtYrLHwa3qJsYcaK3WY skytuS/yN7eVz6P0KRMEmtDxJYdL6ZHET8mMi4pdIyezkWrQnxY6TwPa6pwMPd+l l0VGJ6YzQbdqbCmfHn408cw84XD3tcMQoDdQlsGNxwpyzbygzFEwB9yjg7imGJ4U mf7f5V2Ykg30k0W+YEHNCht/eHBQdRDaRXYBcG02WJ5YftxymxF2d/IDn2lHYkAa vYbbopqYx3s4FaVVWRxqDrvrn4S0tcXoxFELHi4klpvMItbmGxZDnPJs4garWFmP FIq3o258RzyUWjECnHq1B3ebLwgi4Fs= -----END CERTIFICATE-----Generated at Fri Apr 17 14:35:38 2026 by rpki-client