$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cf2d46e9-d6f4-37f8-98d7-6b9515235e1d.roa File: cf2d46e9-d6f4-37f8-98d7-6b9515235e1d.roa (raw, json) Hash identifier: UIFW5zwdq/N8z3jJ0/zChCMRXbhIStF0zgsCpeWR6lQ= Subject key identifier: 9F:3D:6B:14:FC:B5:6D:02:D4:48:E9:78:22:AD:F2:BE:50:E3:B6:AA Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584CCE720E08C4C8E2709191A800 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cf2d46e9-d6f4-37f8-98d7-6b9515235e1d.roa Signing time: Mon 09 Feb 2026 14:00:39 +0000 ROA not before: Mon 09 Feb 2026 14:00:39 +0000 ROA not after: Sun 10 May 2026 13:00:39 +0000 asID: 3949 IP address blocks: 130.94.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ce:72:0e:08:c4:c8:e2:70:91:91:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Feb 9 14:00:39 2026 GMT Not After : May 10 13:00:39 2026 GMT Subject: CN=ce2c5225-47db-47a2-be29-1e04c6c886f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f7:33:aa:40:4d:f3:f7:51:0e:17:04:7d:86: c7:2c:36:86:24:43:43:87:d5:71:1e:cb:e7:ef:a6: 99:44:58:6f:63:28:40:72:eb:9c:b7:e5:0f:e6:0d: 48:63:e3:d8:6d:42:6b:f7:e4:63:61:56:30:e8:1a: f6:a6:ca:2d:a5:55:98:57:13:91:47:dd:b4:27:dd: da:9c:28:01:5e:74:d0:81:f9:a8:15:49:35:06:06: 6c:f0:76:f9:60:cc:ee:84:5d:61:d4:f0:a0:29:c4: a1:87:3c:32:e2:38:2f:5a:23:7e:5f:fc:fc:c6:ff: 9b:26:1d:73:1d:00:69:1b:84:b3:a9:51:61:22:03: 62:1e:3f:7b:d5:7a:0c:ab:71:18:71:f9:82:c8:1b: af:10:e9:e4:c9:a0:2c:9a:af:0e:14:ee:b1:2f:77: c8:53:88:c8:d1:7b:65:f5:a4:95:46:93:8a:80:36: 37:e4:7c:39:f2:38:5d:05:98:4b:c1:7e:42:da:b4: cc:0d:f0:32:84:16:55:01:93:a1:23:86:7c:6f:82: 97:7c:b1:c0:64:cb:2f:d5:0a:1e:bd:f6:dc:08:e3: f7:c4:85:11:e2:d8:d8:3d:42:4c:4c:3d:5d:e2:bb: 94:de:a8:ef:cb:9b:a4:fc:6e:ae:f9:3f:98:f9:dd: 56:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:3D:6B:14:FC:B5:6D:02:D4:48:E9:78:22:AD:F2:BE:50:E3:B6:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cf2d46e9-d6f4-37f8-98d7-6b9515235e1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 130.94.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:69:1f:01:93:64:e3:48:65:c7:ea:55:f9:a4:d7:7f:a8:e1: 39:ed:69:a6:0b:27:01:73:29:26:46:01:20:16:97:8b:70:18: dd:ff:36:d0:48:09:c5:3d:01:63:2a:b1:5e:ba:a7:c8:86:ea: df:bf:36:b8:29:be:89:0c:48:61:21:98:11:cc:68:cb:17:62: aa:7f:b6:9e:f9:5a:31:46:15:0d:5b:cb:97:4f:d3:59:1d:32: 01:5d:f4:29:3e:3b:d6:eb:78:b2:ad:90:77:0c:ed:84:dd:d1: fb:a4:2f:df:47:6f:91:6e:0d:67:b4:a7:8e:28:cf:43:e9:70: 4f:b4:2e:e0:cd:b5:5b:c3:06:54:48:01:24:61:e2:31:7c:6d: d4:41:96:55:8e:83:cd:22:b7:8e:85:7f:38:8a:1c:82:89:79: d9:5d:7a:aa:46:1d:d2:f8:ff:01:46:e7:c7:f6:02:0f:ba:9d: 10:00:a3:63:94:46:f0:8a:f0:3a:71:5c:89:f0:f0:05:a6:69: f1:52:1a:e4:90:79:b5:68:f7:a8:70:26:82:c2:4c:4c:e6:e7: 8d:7d:97:8f:39:5f:fe:6f:64:e4:12:da:72:3d:be:58:39:16: 20:55:a0:e3:69:7a:f4:0d:aa:e9:e3:f8:d0:a4:8f:e5:07:bc: ef:01:79:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzOcg4IxMjicJGRqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDIwOTE0MDAzOVoXDTI2MDUxMDEzMDAzOVowLzEtMCsGA1UEAxMk Y2UyYzUyMjUtNDdkYi00N2EyLWJlMjktMWUwNGM2Yzg4NmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPczqkBN8/dRDhcEfYbHLDaGJENDh9VxHsvn 76aZRFhvYyhAcuuct+UP5g1IY+PYbUJr9+RjYVYw6Br2psotpVWYVxORR920J93a nCgBXnTQgfmoFUk1BgZs8Hb5YMzuhF1h1PCgKcShhzwy4jgvWiN+X/z8xv+bJh1z HQBpG4SzqVFhIgNiHj971XoMq3EYcfmCyBuvEOnkyaAsmq8OFO6xL3fIU4jI0Xtl 9aSVRpOKgDY35Hw58jhdBZhLwX5C2rTMDfAyhBZVAZOhI4Z8b4KXfLHAZMsv1Qoe vfbcCOP3xIUR4tjYPUJMTD1d4ruU3qjvy5uk/G6u+T+Y+d1W8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ89axT8tW0C1EjpeCKt8r5Q47aqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvY2YyZDQ2ZTktZDZmNC0z N2Y4LTk4ZDctNmI5NTE1MjM1ZTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgl7wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhpHwGTZONIZcfqVfmk13+o4TntaaYLJwFzKSZGASAWl4twGN3/NtBI CcU9AWMqsV66p8iG6t+/NrgpvokMSGEhmBHMaMsXYqp/tp75WjFGFQ1by5dP01kd MgFd9Ck+O9breLKtkHcM7YTd0fukL99Hb5FuDWe0p44oz0PpcE+0LuDNtVvDBlRI ASRh4jF8bdRBllWOg80it46FfziKHIKJedldeqpGHdL4/wFG58f2Ag+6nRAAo2OU RvCK8DpxXInw8AWmafFSGuSQebVo96hwJoLCTEzm5419l485X/5vZOQS2nI9vlg5 FiBVoONpevQNqunj+NCkj+UHvO8Beec= -----END CERTIFICATE-----Generated at Mon Mar 2 07:49:42 2026 by rpki-client