$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42b354ac-9561-4685-881b-1a696a6082f3/cf9f0201-6d49-3c2a-b07c-eefbedc66226.roa File: cf9f0201-6d49-3c2a-b07c-eefbedc66226.roa (raw, json) Hash identifier: +Khr87nDZyZraJ8YEfPUyIPqqJ2WUTQauHX3tgcP0HY= Subject key identifier: 6B:C0:CE:EA:F3:ED:6E:5C:CE:90:52:DE:26:4E:84:55:79:68:10:F7 Certificate issuer: /CN=42b354ac-9561-4685-881b-1a696a6082f3 Certificate serial: 010D0C9F4328584E0A6FED44298AD3B927654CC0 Authority key identifier: 36:60:47:C9:09:DD:99:F8:16:4D:D7:6B:A7:83:D6:9C:8C:3C:8B:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42b354ac-9561-4685-881b-1a696a6082f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42b354ac-9561-4685-881b-1a696a6082f3/cf9f0201-6d49-3c2a-b07c-eefbedc66226.roa Signing time: Tue 02 Jun 2026 18:32:03 +0000 ROA not before: Tue 02 Jun 2026 18:32:03 +0000 ROA not after: Mon 31 Aug 2026 18:32:03 +0000 asID: 14969 IP address blocks: 162.254.96.0/21 maxlen: 24 192.81.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42b354ac-9561-4685-881b-1a696a6082f3/42b354ac-9561-4685-881b-1a696a6082f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42b354ac-9561-4685-881b-1a696a6082f3/42b354ac-9561-4685-881b-1a696a6082f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42b354ac-9561-4685-881b-1a696a6082f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0a:6f:ed:44:29:8a:d3:b9:27:65:4c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42b354ac-9561-4685-881b-1a696a6082f3 Validity Not Before: Jun 2 18:32:03 2026 GMT Not After : Aug 31 18:32:03 2026 GMT Subject: CN=1ff74922-ed3d-47e7-ab01-57fb94689584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:2d:60:06:97:88:22:55:37:e9:fb:80:6b:f9: 7b:c3:37:01:46:61:27:cd:06:75:5f:87:45:4c:0d: fb:4e:4f:1a:37:9f:f4:a2:7e:ac:44:de:fd:de:3e: d0:d4:b7:8c:2d:1e:20:f2:a6:79:5b:5e:d1:f5:d2: ba:97:58:ad:6a:91:1f:2f:ee:3e:e8:dd:bf:a5:d7: 09:95:6f:58:05:ee:c2:2a:7e:4e:d5:00:a9:8e:e2: 99:3e:4a:88:7a:24:d8:f6:be:95:fc:d9:da:90:8a: 0c:d0:be:06:2f:82:cd:c5:38:62:f9:f9:18:41:7e: 1b:02:eb:6c:60:d2:c6:ca:5c:13:a3:6d:41:9d:b9: 0d:26:67:99:53:7f:c9:2f:05:2f:65:23:e1:4d:43: 6a:8f:d1:3f:db:b4:d8:67:28:c3:b9:72:af:9e:71: 69:3c:0a:22:e9:f7:67:81:ff:16:6e:fa:7c:d7:fa: 5b:d7:28:e4:62:f1:b5:29:f5:bf:a4:81:69:d1:d9: ae:83:b4:68:8f:0e:e7:2c:24:09:af:b2:d2:c4:5c: 86:13:06:d8:08:2e:a7:36:46:0f:b6:bb:1d:a3:5f: 47:b6:28:7d:92:96:75:82:4f:3b:01:dc:08:6c:8b: ee:8c:ad:2f:fc:87:2f:e7:06:67:87:17:88:79:ac: 6b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:C0:CE:EA:F3:ED:6E:5C:CE:90:52:DE:26:4E:84:55:79:68:10:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42b354ac-9561-4685-881b-1a696a6082f3/cf9f0201-6d49-3c2a-b07c-eefbedc66226.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42b354ac-9561-4685-881b-1a696a6082f3/42b354ac-9561-4685-881b-1a696a6082f3.crl X509v3 Authority Key Identifier: keyid:36:60:47:C9:09:DD:99:F8:16:4D:D7:6B:A7:83:D6:9C:8C:3C:8B:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42b354ac-9561-4685-881b-1a696a6082f3.cer sbgp-ipAddrBlock: critical IPv4: 162.254.96.0/21 192.81.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:46:c4:4d:cf:03:73:c9:39:1b:0b:b5:fa:cc:4c:cd:f7:83: 24:ee:48:41:7c:eb:1e:c2:13:73:6b:5a:26:06:a4:fc:be:69: 56:f2:2e:7a:58:e8:69:07:d2:ed:0f:03:32:05:95:84:29:6e: 5a:ae:70:ff:5c:69:9b:f1:7f:23:fb:51:e8:01:d6:8d:d1:7d: a9:83:a3:71:3c:5b:20:62:36:77:c3:06:d5:93:c9:15:1b:bc: 7f:29:b5:9d:3e:1e:64:55:a3:ea:4c:a5:e4:b1:bc:eb:c8:cf: d7:cc:10:b9:6c:89:40:9e:6f:77:9c:d6:c7:ce:d5:29:dd:c0: e1:79:b1:e1:1d:4a:96:59:8a:83:5e:b4:22:16:21:e7:5c:8d: 88:e4:5b:06:d4:58:e4:a1:c1:b5:ee:b9:c1:c9:26:dc:b4:43: b4:c1:19:d4:46:e1:69:9c:24:a6:ec:d2:68:c9:bc:7a:8b:b3: 8d:9e:ef:fe:7c:f7:0e:18:db:82:cb:4a:7b:e8:17:d1:07:15: 4f:58:68:45:0c:78:64:98:3a:1a:ed:a6:47:66:10:9e:44:89: 6a:ae:41:a4:57:83:f9:1c:30:1d:02:8b:e8:c5:09:69:30:d6: a6:56:43:3d:b9:e0:ac:3d:5d:6d:ef:f0:05:de:35:23:9f:1a: d2:af:8f:46 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE4Kb+1EKYrTuSdlTMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDJiMzU0YWMtOTU2MS00Njg1LTg4MWItMWE2OTZhNjA4 MmYzMB4XDTI2MDYwMjE4MzIwM1oXDTI2MDgzMTE4MzIwM1owLzEtMCsGA1UEAxMk MWZmNzQ5MjItZWQzZC00N2U3LWFiMDEtNTdmYjk0Njg5NTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhC1gBpeIIlU36fuAa/l7wzcBRmEnzQZ1X4dF TA37Tk8aN5/0on6sRN793j7Q1LeMLR4g8qZ5W17R9dK6l1itapEfL+4+6N2/pdcJ lW9YBe7CKn5O1QCpjuKZPkqIeiTY9r6V/NnakIoM0L4GL4LNxThi+fkYQX4bAuts YNLGylwTo21BnbkNJmeZU3/JLwUvZSPhTUNqj9E/27TYZyjDuXKvnnFpPAoi6fdn gf8Wbvp81/pb1yjkYvG1KfW/pIFp0dmug7Rojw7nLCQJr7LSxFyGEwbYCC6nNkYP trsdo19Htih9kpZ1gk87AdwIbIvujK0v/Icv5wZnhxeIeaxrwwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFGvAzurz7W5czpBS3iZOhFV5aBD3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MmIz NTRhYy05NTYxLTQ2ODUtODgxYi0xYTY5NmE2MDgyZjMvY2Y5ZjAyMDEtNmQ0OS0z YzJhLWIwN2MtZWVmYmVkYzY2MjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDJiMzU0YWMtOTU2MS00Njg1LTg4 MWItMWE2OTZhNjA4MmYzLzQyYjM1NGFjLTk1NjEtNDY4NS04ODFiLTFhNjk2YTYw ODJmMy5jcmwwHwYDVR0jBBgwFoAUNmBHyQndmfgWTddrp4PWnIw8i5YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MmIzNTRhYy05NTYxLTQ2ODUtODgxYi0xYTY5 NmE2MDgyZjMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDov5gAwQC wFF8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHBGxE3PA3PJORsLtfrMTM33gyTuSEF86x7CE3NrWiYGpPy+ aVbyLnpY6GkH0u0PAzIFlYQpblqucP9caZvxfyP7UegB1o3RfamDo3E8WyBiNnfD BtWTyRUbvH8ptZ0+HmRVo+pMpeSxvOvIz9fMELlsiUCeb3ec1sfO1SndwOF5seEd SpZZioNetCIWIedcjYjkWwbUWOShwbXuucHJJty0Q7TBGdRG4WmcJKbs0mjJvHqL s42e7/589w4Y24LLSnvoF9EHFU9YaEUMeGSYOhrtpkdmEJ5EiWquQaRXg/kcMB0C i+jFCWkw1qZWQz254Kw9XW3v8AXeNSOfGtKvj0Y= -----END CERTIFICATE-----Generated at Sun Jun 14 05:24:09 2026 by rpki-client