$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/8d0f3289-4f04-3390-b0f7-ead2fa143cd4.roa File: 8d0f3289-4f04-3390-b0f7-ead2fa143cd4.roa (raw, json) Hash identifier: RnRM0kIrMzCZncGF8CzuybQBuPgibJdYALRf3+Hsdy0= Subject key identifier: B9:02:01:BD:13:85:7E:C8:A8:4B:BD:25:BE:39:87:4B:84:98:FD:54 Certificate issuer: /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Certificate serial: 010D0C9F4328584D5E1A602DD145D0695812C300 Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/8d0f3289-4f04-3390-b0f7-ead2fa143cd4.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 13807 IP address blocks: 223.165.96.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:60:2d:d1:45:d0:69:58:12:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=6cf981f1-7a29-4450-b0cd-4b1b0d1c49a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:11:6f:26:a5:25:6e:42:66:6b:39:14:24:4b: 85:68:df:55:b5:63:27:cd:e4:f0:ee:30:4a:f4:71: 9f:8d:c4:03:8d:9c:dd:43:09:ee:7e:32:d6:12:d2: 11:bf:b7:36:10:4f:5c:b7:f7:b9:bb:a0:b9:98:7e: 69:0a:23:44:d4:23:1f:f7:6a:32:df:0a:93:0a:19: fa:48:26:1a:70:07:ba:8a:74:58:76:3c:ec:e9:83: 7f:3f:1c:2d:25:4d:1e:76:24:00:02:1e:d2:90:85: 60:41:24:da:9f:24:4e:2d:07:43:44:27:1f:72:dd: ae:ef:d7:83:7d:32:59:d3:b8:0b:8e:c1:ec:0d:70: 90:74:22:ff:00:d5:99:f0:b6:b5:80:80:ae:ca:fc: 7f:c7:f5:82:3f:43:07:3e:09:1c:ff:9f:22:e5:b9: ab:7b:d9:e8:6f:7a:06:4d:76:f2:6d:f5:f0:87:29: 27:e4:af:82:00:e5:49:43:3c:f4:5a:1b:a8:1d:9c: 92:92:50:e3:a1:eb:b5:dc:19:6b:37:b6:ea:2f:fe: 81:04:7a:e7:6e:ba:51:8a:7b:81:d3:89:5a:62:f1: af:68:19:ab:79:2e:bc:c0:ec:a8:cc:a1:11:d6:d1: 16:c8:77:f1:a1:51:f8:56:21:78:5c:51:53:94:cb: b7:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:02:01:BD:13:85:7E:C8:A8:4B:BD:25:BE:39:87:4B:84:98:FD:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/8d0f3289-4f04-3390-b0f7-ead2fa143cd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl X509v3 Authority Key Identifier: keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer sbgp-ipAddrBlock: critical IPv4: 223.165.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:cd:32:9a:82:00:d6:04:a4:eb:ed:1c:52:98:33:fb:a0:ea: 30:36:f2:1b:5c:ee:41:bf:62:d8:59:e3:c0:0e:1e:be:1a:90: 82:4a:9b:ed:93:aa:be:f4:1e:74:2e:cc:bf:93:f3:bd:2e:2a: b9:42:76:af:d1:43:c7:96:96:76:3f:64:57:55:5b:37:5e:3d: 70:0f:3f:4d:25:63:76:8d:a9:10:e3:de:7e:c3:50:b2:3c:f5: d9:3e:63:f4:8c:89:01:81:c0:97:d4:65:9b:c0:ac:cd:02:14: 23:7e:a2:0e:21:71:0d:c4:4e:56:ad:2a:bc:f3:5a:91:c7:4a: 0f:7a:ab:d8:ec:67:8b:3e:e9:87:e6:6e:5b:94:a2:97:ad:bf: bc:b1:db:0d:e0:cc:e4:6a:c3:30:eb:3b:ac:e8:a2:f2:c8:08: d7:1e:02:03:65:b1:f7:08:75:2d:3a:4f:fe:4e:3f:e4:74:b2: f2:80:ee:92:21:6b:71:92:e0:8e:92:0c:3e:bd:40:88:82:b6: 6c:31:89:fd:de:35:32:d8:75:d9:4b:95:e3:db:22:f8:03:7f: 55:e4:76:8b:66:86:9c:23:56:b9:f5:3f:6e:06:1e:7f:1a:90: 09:ab:5b:4e:42:b3:41:34:c9:2e:4b:7e:17:b2:df:17:f6:0e: d1:b5:1a:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGmAt0UXQaVgSwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3OWItZmU3YWVlMGMw NTM2MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk NmNmOTgxZjEtN2EyOS00NDUwLWIwY2QtNGIxYjBkMWM0OWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBFvJqUlbkJmazkUJEuFaN9VtWMnzeTw7jBK 9HGfjcQDjZzdQwnufjLWEtIRv7c2EE9ct/e5u6C5mH5pCiNE1CMf92oy3wqTChn6 SCYacAe6inRYdjzs6YN/PxwtJU0ediQAAh7SkIVgQSTanyROLQdDRCcfct2u79eD fTJZ07gLjsHsDXCQdCL/ANWZ8La1gICuyvx/x/WCP0MHPgkc/58i5bmre9nob3oG TXbybfXwhykn5K+CAOVJQzz0WhuoHZySklDjoeu13BlrN7bqL/6BBHrnbrpRinuB 04laYvGvaBmreS68wOyozKER1tEWyHfxoVH4ViF4XFFTlMu3qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkCAb0ThX7IqEu9Jb45h0uEmP1UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBm MzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdhZWUwYzA1MzYvOGQwZjMyODktNGYwNC0z MzkwLWIwZjctZWFkMmZhMTQzY2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3 OWItZmU3YWVlMGMwNTM2L2NmMGYzMWI2LWVmNjItNGRkNS04NzliLWZlN2FlZTBj MDUzNi5jcmwwHwYDVR0jBBgwFoAUuVDNlGKpSLvXorEAEC5ORYttZHswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBmMzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdh ZWUwYzA1MzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE36VgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHNMpqCANYEpOvtHFKYM/ug6jA28htc7kG/YthZ48AOHr4akIJKm+2T qr70HnQuzL+T870uKrlCdq/RQ8eWlnY/ZFdVWzdePXAPP00lY3aNqRDj3n7DULI8 9dk+Y/SMiQGBwJfUZZvArM0CFCN+og4hcQ3ETlatKrzzWpHHSg96q9jsZ4s+6Yfm bluUopetv7yx2w3gzORqwzDrO6zoovLICNceAgNlsfcIdS06T/5OP+R0svKA7pIh a3GS4I6SDD69QIiCtmwxif3eNTLYddlLlePbIvgDf1XkdotmhpwjVrn1P24GHn8a kAmrW05Cs0E0yS5Lfhey3xf2DtG1GjI= -----END CERTIFICATE-----Generated at Fri Apr 17 21:48:04 2026 by rpki-client