$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38/79f5998a-9c67-3633-9ae6-274922dd2fed.roa File: 79f5998a-9c67-3633-9ae6-274922dd2fed.roa (raw, json) Hash identifier: PfZaJXdSeiRS8+qlgVVIjbivx8bifSitBm1ZnWgb6vI= Subject key identifier: FE:6B:18:A1:EC:74:98:D1:A3:85:8A:0F:DF:28:DE:4B:AC:48:18:B8 Certificate issuer: /CN=ff3b04a3-b7c1-4a03-9427-c1f03d810d38 Certificate serial: 010D0C9F4328584DA6B03057BD602DD84A515040 Authority key identifier: 49:E5:0F:F8:E6:38:B2:38:6D:84:69:D2:BF:67:42:B6:FD:23:09:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38/79f5998a-9c67-3633-9ae6-274922dd2fed.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 16509 IP address blocks: 198.51.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38/ff3b04a3-b7c1-4a03-9427-c1f03d810d38.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38/ff3b04a3-b7c1-4a03-9427-c1f03d810d38.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:30:57:bd:60:2d:d8:4a:51:50:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff3b04a3-b7c1-4a03-9427-c1f03d810d38 Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=1a5cb3a8-325e-44f7-b3ef-441e9f108bee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:25:55:e8:9a:b4:c9:52:35:eb:12:6a:cc:cb: 7f:14:65:f2:22:3b:40:15:fb:c3:e7:91:b3:28:c3: 01:8e:5b:26:f0:fe:47:a9:2f:4a:5f:9c:06:84:52: 15:0d:6e:a2:40:09:12:a8:d8:6e:ad:7f:9b:ee:1c: 7c:0f:34:70:c4:57:73:09:32:85:16:92:74:b5:7b: d3:aa:fb:7c:0b:49:36:25:97:4a:5e:1e:29:2b:74: 70:6e:2a:fe:5d:19:c2:66:4d:26:fe:68:8b:ce:f5: 3b:bd:b3:70:2c:e7:d5:a3:9e:ca:6e:a0:5c:ec:2c: 46:48:bf:05:a5:f8:44:76:e1:47:eb:90:72:38:b0: 58:cf:92:6e:24:59:98:22:94:11:90:20:b7:bd:d3: 94:6d:12:a2:73:63:ff:fa:a1:8a:54:17:e6:2c:31: f8:2b:5c:43:c2:bc:a1:d4:b8:1f:aa:a1:fd:c2:c5: 61:a0:b2:34:39:bc:15:ae:63:a4:71:12:73:0e:f2: 7a:b8:c0:72:af:e6:d3:4d:b4:f2:0a:d2:26:20:09: cb:05:c7:1e:01:b5:4d:c8:f5:d8:d0:2d:4d:83:5d: 26:c2:7c:68:4c:ca:f2:c1:68:03:0a:a9:ac:34:51: 6e:43:9e:64:91:e9:48:11:b5:c0:b1:f3:7a:36:73: c8:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:6B:18:A1:EC:74:98:D1:A3:85:8A:0F:DF:28:DE:4B:AC:48:18:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38/79f5998a-9c67-3633-9ae6-274922dd2fed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38/ff3b04a3-b7c1-4a03-9427-c1f03d810d38.crl X509v3 Authority Key Identifier: keyid:49:E5:0F:F8:E6:38:B2:38:6D:84:69:D2:BF:67:42:B6:FD:23:09:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38.cer sbgp-ipAddrBlock: critical IPv4: 198.51.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:c6:dd:cf:1e:df:c0:01:34:6b:cb:9b:e0:cb:9a:ae:ee:4e: 67:85:2e:d6:f6:c4:8d:1a:97:99:e9:6b:74:1e:e5:32:f1:72: b4:35:bf:a0:da:a0:2e:3a:ec:ac:41:f0:48:45:2f:94:0b:2b: 64:21:32:3a:d0:77:98:f9:5b:60:2d:81:40:82:59:6a:2a:69: a8:b7:16:fc:58:90:29:e5:fe:70:52:c9:50:7e:89:2e:c1:a0: ee:d2:e0:4d:f7:71:19:25:20:86:c3:69:29:83:0b:5a:1e:76: 41:23:71:c1:15:b1:94:9f:6a:c5:b9:b2:40:72:85:13:b3:b5: 37:6c:87:0b:94:9c:9c:24:41:b2:1b:83:f1:2f:4e:48:3f:b9: ba:4a:8e:8d:f8:5e:4f:cd:81:97:40:1d:53:c9:cb:94:1c:f7: 37:91:13:53:ed:a1:bb:03:49:01:4d:9b:57:96:e0:32:30:92: cc:62:b9:4b:2d:c1:ed:46:ba:29:7a:21:84:ff:5d:64:6f:28: 70:42:24:20:09:f1:74:76:b5:7b:5b:45:f9:27:89:3b:57:23: 6a:7a:31:de:85:3c:28:b8:4c:78:32:89:0e:6b:36:a2:07:a7: 02:72:08:35:52:29:4a:ba:63:4e:b7:7c:99:96:f5:9a:1a:17: d8:f4:02:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msDBXvWAt2EpRUEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmYzYjA0YTMtYjdjMS00YTAzLTk0MjctYzFmMDNkODEw ZDM4MB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk MWE1Y2IzYTgtMzI1ZS00NGY3LWIzZWYtNDQxZTlmMTA4YmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyVV6Jq0yVI16xJqzMt/FGXyIjtAFfvD55Gz KMMBjlsm8P5HqS9KX5wGhFIVDW6iQAkSqNhurX+b7hx8DzRwxFdzCTKFFpJ0tXvT qvt8C0k2JZdKXh4pK3Rwbir+XRnCZk0m/miLzvU7vbNwLOfVo57KbqBc7CxGSL8F pfhEduFH65ByOLBYz5JuJFmYIpQRkCC3vdOUbRKic2P/+qGKVBfmLDH4K1xDwryh 1LgfqqH9wsVhoLI0ObwVrmOkcRJzDvJ6uMByr+bTTbTyCtImIAnLBcceAbVNyPXY 0C1Ng10mwnxoTMrywWgDCqmsNFFuQ55kkelIEbXAsfN6NnPI8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP5rGKHsdJjRo4WKD98o3kusSBi4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mZjNi MDRhMy1iN2MxLTRhMDMtOTQyNy1jMWYwM2Q4MTBkMzgvNzlmNTk5OGEtOWM2Ny0z NjMzLTlhZTYtMjc0OTIyZGQyZmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZmYzYjA0YTMtYjdjMS00YTAzLTk0 MjctYzFmMDNkODEwZDM4L2ZmM2IwNGEzLWI3YzEtNGEwMy05NDI3LWMxZjAzZDgx MGQzOC5jcmwwHwYDVR0jBBgwFoAUSeUP+OY4sjhthGnSv2dCtv0jCVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9mZjNiMDRhMy1iN2MxLTRhMDMtOTQyNy1jMWYw M2Q4MTBkMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxjO/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHG3c8e38ABNGvLm+DLmq7uTmeFLtb2xI0al5npa3Qe5TLxcrQ1v6Da oC467KxB8EhFL5QLK2QhMjrQd5j5W2AtgUCCWWoqaai3FvxYkCnl/nBSyVB+iS7B oO7S4E33cRklIIbDaSmDC1oedkEjccEVsZSfasW5skByhROztTdshwuUnJwkQbIb g/EvTkg/ubpKjo34Xk/NgZdAHVPJy5Qc9zeRE1PtobsDSQFNm1eW4DIwksxiuUst we1Guil6IYT/XWRvKHBCJCAJ8XR2tXtbRfkniTtXI2p6Md6FPCi4THgyiQ5rNqIH pwJyCDVSKUq6Y063fJmW9ZoaF9j0AmU= -----END CERTIFICATE-----Generated at Wed May 13 10:02:49 2026 by rpki-client