$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/cefdea3c-e2c3-3c42-b2b4-748a9b09b2d6.roa File: cefdea3c-e2c3-3c42-b2b4-748a9b09b2d6.roa (raw, json) Hash identifier: w2Js+f5Plq3kL1K5Gvuyk3RsFuNc/zS1N9OY1HC7rDE= Subject key identifier: 71:7B:08:56:C4:EA:DB:89:20:B5:E4:BF:88:E4:34:62:6B:58:B1:E8 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584D5884E962CB70D305B4AAE2B8 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/cefdea3c-e2c3-3c42-b2b4-748a9b09b2d6.roa Signing time: Tue 31 Mar 2026 01:00:23 +0000 ROA not before: Tue 31 Mar 2026 01:00:23 +0000 ROA not after: Mon 29 Jun 2026 01:00:23 +0000 asID: 214025 IP address blocks: 170.130.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:58:84:e9:62:cb:70:d3:05:b4:aa:e2:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Mar 31 01:00:23 2026 GMT Not After : Jun 29 01:00:23 2026 GMT Subject: CN=1ac13590-f223-467e-ad50-8e933d6870ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:9a:78:b7:ab:ff:b1:a4:30:ce:59:6b:99:cb: 7e:32:38:1f:a2:c5:77:48:e5:8f:ca:ed:51:7f:c5: 35:81:25:a1:75:7a:ca:ff:6e:98:89:0f:be:2c:77: 33:ae:b5:b7:4b:8a:04:1c:90:8c:4a:20:1c:04:50: 48:ca:29:95:e3:72:0f:1f:00:92:08:14:a8:7d:af: e4:e9:b4:c4:94:d2:70:e6:78:f7:6c:12:25:0a:4d: 0d:24:29:34:07:f6:19:87:cd:e1:36:09:ab:2c:3e: 1c:2d:56:ee:c2:75:98:d4:3c:04:3d:dc:eb:1e:c1: c1:5e:64:7f:17:30:12:52:fe:7c:76:29:c5:e9:ab: 62:e3:53:94:f2:1b:7c:fb:18:b0:0f:15:07:53:35: dc:6d:19:5d:bb:da:cc:a1:ef:1d:66:fb:bd:6b:87: 5e:35:b7:99:af:15:b5:71:8c:19:0f:66:f5:e7:31: b5:1e:c4:c7:57:9d:be:31:b4:4e:b3:65:f0:4b:8c: f5:b9:c5:c5:9f:61:56:2d:bc:4d:52:ed:d2:2f:e3: 9a:60:73:18:b5:9c:93:1f:20:78:eb:e9:90:af:e3: 2e:fc:cb:00:60:90:77:c2:96:3d:7f:80:d8:55:84: 07:e7:27:62:d4:76:5e:18:04:10:68:26:51:a1:95: b8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:7B:08:56:C4:EA:DB:89:20:B5:E4:BF:88:E4:34:62:6B:58:B1:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/cefdea3c-e2c3-3c42-b2b4-748a9b09b2d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 170.130.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:a2:5f:1c:df:ba:c2:a8:30:56:39:c8:e6:a8:e9:b7:74:6a: 9a:0c:ce:bd:a1:4e:d1:be:0c:89:69:fb:b9:25:13:39:a7:23: 1c:4d:07:ed:ce:50:05:c8:3e:13:83:93:c4:3b:8f:56:5c:cd: db:44:ff:83:71:b2:b9:54:84:46:fa:15:cd:18:57:c9:a8:3e: dc:58:8e:86:88:53:77:ab:0c:f2:ed:8b:16:b4:44:00:6f:13: bb:94:5a:14:39:54:ff:a2:c5:44:f3:0d:01:3a:e1:7f:05:b7: 12:3d:a4:66:ee:e4:ff:a2:9a:29:e2:a7:6a:3a:2c:f4:e1:19: 25:ce:2c:09:dd:b2:e0:14:c0:92:cd:f3:42:12:ad:fe:ce:1c: bd:ad:72:bb:57:a8:57:79:67:5c:c4:38:26:d6:c7:54:6d:b5: 4c:d7:7d:d2:f3:df:22:e0:fd:58:76:7f:7c:9c:62:bb:3c:13: e0:1d:52:02:89:80:7f:c6:c2:d1:9c:a4:3c:0f:2f:cf:27:b1: b5:87:bb:e6:f2:45:a6:57:ff:7a:67:f5:2c:00:c5:64:db:1c: 96:a4:32:eb:2c:31:65:2f:2d:1e:9b:da:96:41:15:a7:87:c9: 10:88:4d:4e:64:41:1a:99:12:5c:60:47:c5:9b:16:47:98:4b: 05:4a:d9:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1YhOliy3DTBbSq4rgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDMzMTAxMDAyM1oXDTI2MDYyOTAxMDAyM1owLzEtMCsGA1UEAxMk MWFjMTM1OTAtZjIyMy00NjdlLWFkNTAtOGU5MzNkNjg3MGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZp4t6v/saQwzllrmct+MjgfosV3SOWPyu1R f8U1gSWhdXrK/26YiQ++LHczrrW3S4oEHJCMSiAcBFBIyimV43IPHwCSCBSofa/k 6bTElNJw5nj3bBIlCk0NJCk0B/YZh83hNgmrLD4cLVbuwnWY1DwEPdzrHsHBXmR/ FzASUv58dinF6ati41OU8ht8+xiwDxUHUzXcbRldu9rMoe8dZvu9a4deNbeZrxW1 cYwZD2b15zG1HsTHV52+MbROs2XwS4z1ucXFn2FWLbxNUu3SL+OaYHMYtZyTHyB4 6+mQr+Mu/MsAYJB3wpY9f4DYVYQH5ydi1HZeGAQQaCZRoZW4vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHF7CFbE6tuJILXkv4jkNGJrWLHoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvY2VmZGVhM2MtZTJjMy0z YzQyLWIyYjQtNzQ4YTliMDliMmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqoIUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKiXxzfusKoMFY5yOao6bd0apoMzr2hTtG+DIlp+7klEzmnIxxNB+3O UAXIPhODk8Q7j1ZczdtE/4NxsrlUhEb6Fc0YV8moPtxYjoaIU3erDPLtixa0RABv E7uUWhQ5VP+ixUTzDQE64X8FtxI9pGbu5P+iminip2o6LPThGSXOLAndsuAUwJLN 80ISrf7OHL2tcrtXqFd5Z1zEOCbWx1RttUzXfdLz3yLg/Vh2f3ycYrs8E+AdUgKJ gH/GwtGcpDwPL88nsbWHu+byRaZX/3pn9SwAxWTbHJakMussMWUvLR6b2pZBFaeH yRCITU5kQRqZElxgR8WbFkeYSwVK2Y4= -----END CERTIFICATE-----Generated at Fri Apr 17 10:34:27 2026 by rpki-client