$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/c1bc0023-1ba0-3167-a2e2-8b9f4c80c012.roa File: c1bc0023-1ba0-3167-a2e2-8b9f4c80c012.roa (raw, json) Hash identifier: 3XvUxdOredOoo/Z+hutEfGKzpXK8UDRmNda8iChlzk8= Subject key identifier: D8:3F:C6:59:71:F7:05:58:3A:73:15:03:3C:7E:B2:B2:28:67:EE:AE Certificate issuer: /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Certificate serial: 010D0C9F4328584CC611EF16DF9C1EDE0DFA1C00 Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/c1bc0023-1ba0-3167-a2e2-8b9f4c80c012.roa Signing time: Fri 06 Feb 2026 14:00:40 +0000 ROA not before: Fri 06 Feb 2026 14:00:40 +0000 ROA not after: Thu 07 May 2026 13:00:40 +0000 asID: 13807 IP address blocks: 24.72.216.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c6:11:ef:16:df:9c:1e:de:0d:fa:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Validity Not Before: Feb 6 14:00:40 2026 GMT Not After : May 7 13:00:40 2026 GMT Subject: CN=ab2a286b-88ee-4c35-ba5b-c2b4c1289634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:83:c8:a1:5f:21:cd:bc:cf:00:14:1b:ea:ab: b7:7a:1a:8b:df:ea:ae:83:0c:c7:f1:75:15:8a:5b: 88:b9:33:87:56:0f:ce:80:8d:b3:a8:aa:fb:a9:ca: f2:3d:3b:a1:0a:3b:de:a9:5b:54:0c:52:41:54:df: e4:99:b7:5f:e8:e6:c7:27:4d:c6:9d:24:3d:f0:46: 10:6f:36:5d:db:ad:71:aa:27:91:ab:36:2f:2a:60: c2:e3:bf:67:36:33:fa:b0:e6:87:1f:3d:f6:bc:79: 3e:1c:25:a4:0c:44:99:51:32:a0:6e:37:9c:f1:92: cc:50:2d:ea:00:a1:ee:b0:14:ce:bd:6b:15:e7:5c: 05:a9:5c:0c:04:42:d3:86:87:a5:d1:9d:dc:67:2f: 9b:84:04:d1:63:84:b0:0b:de:54:86:1a:67:d8:77: 1c:01:0d:38:49:02:ad:5a:bd:57:c5:3a:15:9b:d9: df:c9:b7:76:2b:de:8d:8a:df:06:4e:43:23:c7:66: fb:46:a6:6f:55:fe:07:bc:15:97:16:00:7a:3f:ef: 83:2f:b1:de:0e:41:20:be:2b:4b:9c:78:72:1a:30: 0a:96:05:e8:df:3b:5b:9c:a6:04:34:77:56:04:37: c8:b8:49:48:0a:21:67:11:ab:f4:f8:11:1e:71:c1: 45:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:3F:C6:59:71:F7:05:58:3A:73:15:03:3C:7E:B2:B2:28:67:EE:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/c1bc0023-1ba0-3167-a2e2-8b9f4c80c012.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl X509v3 Authority Key Identifier: keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer sbgp-ipAddrBlock: critical IPv4: 24.72.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:37:6e:79:b1:42:3a:d6:b4:aa:04:d3:2f:1f:34:f3:ca:ed: 3a:d2:65:3b:c4:a5:f0:ab:23:a7:2c:2c:1b:fc:e2:a2:cd:96: eb:0d:01:58:30:07:38:39:1f:ea:8e:69:52:89:9f:f0:a9:bf: ac:e6:cc:c3:ba:9d:1c:83:e1:37:e6:cf:14:73:07:af:88:d9: 75:d1:ac:60:b2:f5:f6:8c:b6:45:f9:ad:7e:93:73:1f:b0:42: 14:59:b6:ef:60:fb:4c:4a:45:42:3a:22:f7:6f:ac:32:8b:93: ea:b2:4d:90:7d:a1:19:7e:24:06:21:2d:0d:05:18:8b:54:e8: 50:b8:09:43:1d:61:c5:ee:65:16:47:22:82:d5:10:09:e9:34: 8c:52:e5:38:b2:a2:6a:72:32:a1:08:07:ca:f4:58:18:0f:2f: d8:8b:23:7b:63:d5:99:7d:07:c3:e0:30:8e:8e:fb:25:9f:18: 04:54:36:fc:19:b2:7e:df:9d:83:27:3e:9e:30:4d:fc:eb:4e: b4:25:33:fc:c3:28:02:ad:a1:3d:5c:56:5e:cf:1d:26:6e:f6: 85:26:3d:8f:87:82:b1:10:88:90:f0:f6:cf:0a:b9:9e:41:9b: 3e:94:67:38:b1:43:d5:06:1b:ea:02:9e:6e:2f:f3:6a:3d:bd: d0:bd:c4:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzGEe8W35we3g36HAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3OWItZmU3YWVlMGMw NTM2MB4XDTI2MDIwNjE0MDA0MFoXDTI2MDUwNzEzMDA0MFowLzEtMCsGA1UEAxMk YWIyYTI4NmItODhlZS00YzM1LWJhNWItYzJiNGMxMjg5NjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4PIoV8hzbzPABQb6qu3ehqL3+qugwzH8XUV iluIuTOHVg/OgI2zqKr7qcryPTuhCjveqVtUDFJBVN/kmbdf6ObHJ03GnSQ98EYQ bzZd261xqieRqzYvKmDC479nNjP6sOaHHz32vHk+HCWkDESZUTKgbjec8ZLMUC3q AKHusBTOvWsV51wFqVwMBELThoel0Z3cZy+bhATRY4SwC95Uhhpn2HccAQ04SQKt Wr1XxToVm9nfybd2K96Nit8GTkMjx2b7RqZvVf4HvBWXFgB6P++DL7HeDkEgvitL nHhyGjAKlgXo3ztbnKYENHdWBDfIuElICiFnEav0+BEeccFFNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNg/xllx9wVYOnMVAzx+srIoZ+6uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBm MzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdhZWUwYzA1MzYvYzFiYzAwMjMtMWJhMC0z MTY3LWEyZTItOGI5ZjRjODBjMDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3 OWItZmU3YWVlMGMwNTM2L2NmMGYzMWI2LWVmNjItNGRkNS04NzliLWZlN2FlZTBj MDUzNi5jcmwwHwYDVR0jBBgwFoAUuVDNlGKpSLvXorEAEC5ORYttZHswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBmMzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdh ZWUwYzA1MzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGEjYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA43bnmxQjrWtKoE0y8fNPPK7TrSZTvEpfCrI6csLBv84qLNlusNAVgw Bzg5H+qOaVKJn/Cpv6zmzMO6nRyD4TfmzxRzB6+I2XXRrGCy9faMtkX5rX6Tcx+w QhRZtu9g+0xKRUI6IvdvrDKLk+qyTZB9oRl+JAYhLQ0FGItU6FC4CUMdYcXuZRZH IoLVEAnpNIxS5TiyompyMqEIB8r0WBgPL9iLI3tj1Zl9B8PgMI6O+yWfGARUNvwZ sn7fnYMnPp4wTfzrTrQlM/zDKAKtoT1cVl7PHSZu9oUmPY+HgrEQiJDw9s8KuZ5B mz6UZzixQ9UGG+oCnm4v82o9vdC9xCE= -----END CERTIFICATE-----Generated at Mon Mar 2 06:26:27 2026 by rpki-client