$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/cfcb4d91-fce8-39bc-ad86-9b80be29b856.roa File: cfcb4d91-fce8-39bc-ad86-9b80be29b856.roa (raw, json) Hash identifier: EOat74iD2aNtw4Ew/hrq9Bjn/TQkUNoeJHHIXt0AWew= Subject key identifier: A2:53:CF:0B:F0:16:B8:91:F7:72:8B:88:88:F8:FE:5D:32:77:64:DA Certificate issuer: /CN=e8c73746-18f6-4692-80c6-1d7b3e93659a Certificate serial: 010D0C9F4328584E0436272A1617AB45B8B1E720 Authority key identifier: 37:0A:97:59:74:D5:5E:63:86:B7:6A:77:B8:A8:47:1C:2E:C1:31:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/cfcb4d91-fce8-39bc-ad86-9b80be29b856.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 26666 IP address blocks: 162.220.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:36:27:2a:16:17:ab:45:b8:b1:e7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8c73746-18f6-4692-80c6-1d7b3e93659a Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=66cb58b3-cf47-4aad-ba4f-cdef06dd12c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8b:e4:f1:a2:fb:17:3c:bb:f6:c8:eb:36:d8: 70:dc:b7:4d:8d:44:00:aa:d4:b2:a4:9d:79:22:77: d9:3e:c5:79:5d:db:be:05:ad:d0:53:bd:aa:dd:cf: 49:22:3a:58:4c:81:a4:50:31:2c:70:2a:0a:fd:80: 68:47:18:f1:5e:a7:63:31:2b:a0:fa:c4:df:c5:25: 6a:3b:12:29:d1:cb:b5:38:25:70:5e:da:5b:9a:2b: 3e:00:98:1f:be:14:51:6c:3f:55:8e:03:5c:19:e7: 67:c4:41:86:e1:e2:ff:a0:85:34:00:e4:bc:f3:4d: fa:0e:95:de:1e:20:d8:5f:69:6e:05:07:1e:c8:20: 8c:18:a8:2c:e9:a8:2c:42:bc:c0:6d:a5:a7:62:96: 0d:82:6c:57:18:37:ba:99:ef:27:87:15:c0:89:4d: 12:ab:29:c0:b8:d2:90:0e:96:10:28:07:9e:71:83: 39:79:2b:62:e8:f3:a5:5e:7d:8e:f8:7b:79:41:70: 80:8b:b2:4b:d8:10:02:1b:9c:0d:27:4a:18:86:2b: 83:4e:c9:41:f5:c7:fd:97:60:07:e0:31:1b:5a:d8: 62:61:a1:2f:44:f8:5d:47:b4:fb:79:8c:1c:9a:ec: d6:78:51:f6:f3:10:95:b5:ac:5c:07:4c:7f:1f:ef: f3:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:53:CF:0B:F0:16:B8:91:F7:72:8B:88:88:F8:FE:5D:32:77:64:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/cfcb4d91-fce8-39bc-ad86-9b80be29b856.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.crl X509v3 Authority Key Identifier: keyid:37:0A:97:59:74:D5:5E:63:86:B7:6A:77:B8:A8:47:1C:2E:C1:31:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer sbgp-ipAddrBlock: critical IPv4: 162.220.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:12:3c:1b:26:2b:48:36:2b:77:d6:49:89:7d:48:50:4c:23: 13:c0:c6:9b:cc:a5:a1:f5:ab:86:d9:4d:3d:a4:a6:80:7f:35: 63:b5:cf:f6:9b:ee:bb:10:e6:66:a4:37:fe:7c:e9:ad:52:20: 6d:f0:95:bc:33:59:c9:78:2f:8c:0b:75:a4:58:55:b8:ec:15: ac:47:f8:e3:8d:96:4c:3d:30:fe:69:3f:65:5f:d5:a7:45:33: ef:29:4b:ef:b1:32:28:3b:e0:10:9b:ec:7e:82:28:37:3f:cc: 50:cc:60:a0:01:1f:92:c0:1b:65:01:37:9f:c9:c2:a0:67:7d: 0f:90:9c:11:ae:19:cd:34:6f:b8:83:e6:c6:35:39:f8:b1:68: 4b:fd:db:48:db:61:1a:14:f6:ec:d9:07:f7:9e:f6:52:5d:24: a0:90:10:37:bb:eb:0b:d5:6b:d9:93:e6:c0:8e:3a:ad:e8:ee: dc:83:be:33:19:2c:9e:e7:f4:7f:0e:e4:0a:6e:00:1c:db:37: 3c:78:22:9a:f8:a2:9a:99:8f:1a:0a:86:b4:58:a4:f3:d8:49: f6:72:73:62:e4:25:b3:75:e5:23:c0:6f:14:49:5b:39:e7:e2: 67:1f:d2:0f:b9:39:b8:09:86:8a:45:04:d6:93:fd:03:51:7c: 08:aa:d7:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENicqFherRbix5yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZThjNzM3NDYtMThmNi00NjkyLTgwYzYtMWQ3YjNlOTM2 NTlhMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk NjZjYjU4YjMtY2Y0Ny00YWFkLWJhNGYtY2RlZjA2ZGQxMmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4vk8aL7Fzy79sjrNthw3LdNjUQAqtSypJ15 InfZPsV5Xdu+Ba3QU72q3c9JIjpYTIGkUDEscCoK/YBoRxjxXqdjMSug+sTfxSVq OxIp0cu1OCVwXtpbmis+AJgfvhRRbD9VjgNcGednxEGG4eL/oIU0AOS88036DpXe HiDYX2luBQceyCCMGKgs6agsQrzAbaWnYpYNgmxXGDe6me8nhxXAiU0SqynAuNKQ DpYQKAeecYM5eSti6POlXn2O+Ht5QXCAi7JL2BACG5wNJ0oYhiuDTslB9cf9l2AH 4DEbWthiYaEvRPhdR7T7eYwcmuzWeFH28xCVtaxcB0x/H+/z4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJTzwvwFriR93KLiIj4/l0yd2TaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lOGM3 Mzc0Ni0xOGY2LTQ2OTItODBjNi0xZDdiM2U5MzY1OWEvY2ZjYjRkOTEtZmNlOC0z OWJjLWFkODYtOWI4MGJlMjliODU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZThjNzM3NDYtMThmNi00NjkyLTgw YzYtMWQ3YjNlOTM2NTlhL2U4YzczNzQ2LTE4ZjYtNDY5Mi04MGM2LTFkN2IzZTkz NjU5YS5jcmwwHwYDVR0jBBgwFoAUNwqXWXTVXmOGt2p3uKhHHC7BMdkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9lOGM3Mzc0Ni0xOGY2LTQ2OTItODBjNi0xZDdi M2U5MzY1OWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDotwIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUSPBsmK0g2K3fWSYl9SFBMIxPAxpvMpaH1q4bZTT2kpoB/NWO1z/ab 7rsQ5makN/586a1SIG3wlbwzWcl4L4wLdaRYVbjsFaxH+OONlkw9MP5pP2Vf1adF M+8pS++xMig74BCb7H6CKDc/zFDMYKABH5LAG2UBN5/JwqBnfQ+QnBGuGc00b7iD 5sY1OfixaEv920jbYRoU9uzZB/ee9lJdJKCQEDe76wvVa9mT5sCOOq3o7tyDvjMZ LJ7n9H8O5ApuABzbNzx4Ipr4opqZjxoKhrRYpPPYSfZyc2LkJbN15SPAbxRJWznn 4mcf0g+5ObgJhopFBNaT/QNRfAiq1/M= -----END CERTIFICATE-----Generated at Sat Jun 13 10:36:24 2026 by rpki-client