$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/cef6eb0b-724e-322b-aeee-15e582a0c54c.roa File: cef6eb0b-724e-322b-aeee-15e582a0c54c.roa (raw, json) Hash identifier: Ys4uCgVrF/ld+uBSwKh9VjzhaSegeaoHmer7N3if7wk= Subject key identifier: 92:B7:F3:05:8D:2E:79:FB:E6:CC:76:24:62:83:0A:D5:53:CF:88:5C Certificate issuer: /CN=7daa4589-66d8-4675-8538-e075ba80ecd3 Certificate serial: 010D0C9F4328584D4EBFB06F412E95E445BF1A40 Authority key identifier: BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/cef6eb0b-724e-322b-aeee-15e582a0c54c.roa Signing time: Fri 27 Mar 2026 13:00:40 +0000 ROA not before: Fri 27 Mar 2026 13:00:40 +0000 ROA not after: Thu 25 Jun 2026 13:00:40 +0000 asID: 20115 IP address blocks: 170.39.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4e:bf:b0:6f:41:2e:95:e4:45:bf:1a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7daa4589-66d8-4675-8538-e075ba80ecd3 Validity Not Before: Mar 27 13:00:40 2026 GMT Not After : Jun 25 13:00:40 2026 GMT Subject: CN=5b172dd3-91ec-413c-9992-10a54a21fdf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:8c:08:cd:df:a7:54:94:85:19:66:75:f7:a0: c3:53:85:af:47:58:b3:a1:68:e6:55:75:0f:be:ac: 0d:98:3d:89:22:60:ec:a4:4d:95:e3:7f:78:77:69: 8c:8b:e6:4c:d5:97:36:90:4b:f4:cf:d7:1d:36:2d: 8e:d2:6f:15:ac:30:f6:b0:6d:b2:fa:92:29:03:f4: 0a:e0:41:fd:d6:03:cc:10:26:bd:eb:31:b7:fa:8d: 74:7b:1f:1b:a7:11:1d:ce:a5:cb:69:9b:61:a1:35: 42:40:5b:ca:bd:25:62:e5:f1:11:07:5f:c7:03:51: a0:9e:a3:41:76:ba:bc:48:6b:ff:d8:d5:f9:59:e5: 3d:39:51:f5:af:3f:27:21:46:65:0d:8a:93:3b:94: 33:08:4c:b5:00:5d:85:c3:6e:17:79:9c:61:46:40: 0c:83:5a:a1:d3:b3:b7:f4:ed:ce:54:85:d5:18:15: 14:86:36:95:fe:50:87:21:a9:f4:d7:90:fa:40:50: 53:bb:0a:c6:3b:3e:3e:16:8d:8a:e8:82:46:3d:38: d7:fc:ac:b5:c6:77:0b:4b:60:9f:3c:00:11:c4:90: aa:35:e9:ee:69:e8:cc:4e:a1:a1:32:63:c9:e4:d3: f1:77:25:37:c9:2f:4b:ab:96:c6:d2:6c:a4:6f:49: fd:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:B7:F3:05:8D:2E:79:FB:E6:CC:76:24:62:83:0A:D5:53:CF:88:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/cef6eb0b-724e-322b-aeee-15e582a0c54c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.crl X509v3 Authority Key Identifier: keyid:BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer sbgp-ipAddrBlock: critical IPv4: 170.39.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:96:e4:33:f7:7c:e2:0c:3f:70:cc:33:dd:d0:1e:b1:8c:d8: a6:35:7c:27:81:b5:6f:2a:d8:75:00:7d:68:94:c6:ea:e2:75: 79:b3:f7:63:fb:5b:4c:78:a9:79:72:01:b8:12:4c:77:97:f5: e8:01:69:52:3f:06:7f:c2:8a:93:d9:8f:7a:a0:75:3d:0f:25: 47:1c:df:31:76:ca:46:10:0c:20:44:82:2d:68:b0:eb:f6:bd: 38:61:ce:3d:8a:8c:2e:b3:4a:61:e7:06:c6:66:b3:cd:b7:4f: fb:15:d9:c0:a7:00:8a:57:da:b7:9e:e7:cc:2c:95:64:25:c6: b9:b5:26:76:84:de:f7:17:6e:4d:b5:fa:d7:2f:d2:3d:45:87: ed:f4:e0:0f:56:66:9f:a1:e3:cd:16:dc:ce:b8:0b:fb:d9:45: c0:c5:96:5b:a4:8f:b3:7f:ae:ec:02:61:81:77:34:6a:49:04: f0:fa:c2:24:10:02:5f:ee:34:4a:9d:a7:71:b4:c1:1d:78:3b: b1:1f:5a:7a:02:47:96:91:e1:59:be:d6:f2:95:3a:6f:39:e4: fb:5f:d0:c9:66:39:bc:3e:58:45:38:e3:10:28:11:4d:a7:f1: e2:c5:03:84:29:17:76:ee:f1:c1:43:0e:de:fb:94:ce:ce:66: 98:01:3c:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ov7BvQS6V5EW/GkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2RhYTQ1ODktNjZkOC00Njc1LTg1MzgtZTA3NWJhODBl Y2QzMB4XDTI2MDMyNzEzMDA0MFoXDTI2MDYyNTEzMDA0MFowLzEtMCsGA1UEAxMk NWIxNzJkZDMtOTFlYy00MTNjLTk5OTItMTBhNTRhMjFmZGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYwIzd+nVJSFGWZ196DDU4WvR1izoWjmVXUP vqwNmD2JImDspE2V4394d2mMi+ZM1Zc2kEv0z9cdNi2O0m8VrDD2sG2y+pIpA/QK 4EH91gPMECa96zG3+o10ex8bpxEdzqXLaZthoTVCQFvKvSVi5fERB1/HA1GgnqNB drq8SGv/2NX5WeU9OVH1rz8nIUZlDYqTO5QzCEy1AF2Fw24XeZxhRkAMg1qh07O3 9O3OVIXVGBUUhjaV/lCHIan015D6QFBTuwrGOz4+Fo2K6IJGPTjX/Ky1xncLS2Cf PAARxJCqNenuaejMTqGhMmPJ5NPxdyU3yS9Lq5bG0mykb0n95QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJK38wWNLnn75sx2JGKDCtVTz4hcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZGFh NDU4OS02NmQ4LTQ2NzUtODUzOC1lMDc1YmE4MGVjZDMvY2VmNmViMGItNzI0ZS0z MjJiLWFlZWUtMTVlNTgyYTBjNTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2RhYTQ1ODktNjZkOC00Njc1LTg1 MzgtZTA3NWJhODBlY2QzLzdkYWE0NTg5LTY2ZDgtNDY3NS04NTM4LWUwNzViYTgw ZWNkMy5jcmwwHwYDVR0jBBgwFoAUv9T+9wqpQOy4VAn0Nps0P4ZaCgIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83ZGFhNDU4OS02NmQ4LTQ2NzUtODUzOC1lMDc1 YmE4MGVjZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqiemMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2W5DP3fOIMP3DMM93QHrGM2KY1fCeBtW8q2HUAfWiUxuridXmz92P7 W0x4qXlyAbgSTHeX9egBaVI/Bn/CipPZj3qgdT0PJUcc3zF2ykYQDCBEgi1osOv2 vThhzj2KjC6zSmHnBsZms823T/sV2cCnAIpX2ree58wslWQlxrm1JnaE3vcXbk21 +tcv0j1Fh+304A9WZp+h480W3M64C/vZRcDFllukj7N/ruwCYYF3NGpJBPD6wiQQ Al/uNEqdp3G0wR14O7EfWnoCR5aR4Vm+1vKVOm855Ptf0MlmObw+WEU44xAoEU2n 8eLFA4QpF3bu8cFDDt77lM7OZpgBPIM= -----END CERTIFICATE-----Generated at Fri Apr 17 03:25:18 2026 by rpki-client