$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/cfcb4d91-fce8-39bc-ad86-9b80be29b856.roa File: cfcb4d91-fce8-39bc-ad86-9b80be29b856.roa (raw, json) Hash identifier: ug9in6EgM+Jq37kMyFREZh/K1gjDAzBLy/3RqChNhC8= Subject key identifier: 87:29:14:F1:9D:11:B4:EF:8E:93:87:C9:A8:EC:AD:0A:34:09:7C:7D Certificate issuer: /CN=e8c73746-18f6-4692-80c6-1d7b3e93659a Certificate serial: 010D0C9F4328584D237A749D1B86E68E9C56BBC0 Authority key identifier: 37:0A:97:59:74:D5:5E:63:86:B7:6A:77:B8:A8:47:1C:2E:C1:31:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/cfcb4d91-fce8-39bc-ad86-9b80be29b856.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 26666 IP address blocks: 162.220.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:74:9d:1b:86:e6:8e:9c:56:bb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8c73746-18f6-4692-80c6-1d7b3e93659a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=30ff7bdf-5c52-43a0-aec5-308d1b44826c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:c1:4e:0a:44:cd:77:9d:ca:52:71:7e:06:6a: bc:a0:58:26:1d:27:57:13:40:5c:86:46:6a:a9:be: 80:c3:ab:65:69:ed:96:53:ec:d7:8a:93:2b:15:ba: 61:c9:ad:b8:a2:85:f0:48:30:7d:30:bb:12:31:b6: 19:8a:fb:96:41:7b:8d:98:0b:40:6a:3c:e8:b0:2e: ae:0c:df:f2:ab:4f:48:92:08:e4:8e:ad:32:86:df: 13:28:4c:b6:bd:0e:0a:e6:8b:e1:c2:94:4a:c8:b7: b2:95:fb:c4:f5:22:9a:91:62:fe:c4:3f:bd:74:b1: 14:d6:6c:c4:7c:8b:54:5d:68:91:ad:21:71:58:85: e2:4a:c0:ed:6a:ed:01:8e:e3:63:ce:68:b3:81:41: 5a:3e:33:79:e0:a3:a9:32:e5:e6:26:ac:8a:c6:b3: 86:d0:44:22:e9:76:3b:25:97:30:75:e9:9f:e5:b3: 12:81:46:aa:07:a3:2d:09:18:3c:7b:05:11:ba:d1: b2:8f:ac:76:cb:db:4a:02:e3:3a:f3:6d:ce:79:20: d7:a1:6f:e5:80:a7:16:fb:63:c4:2d:a5:cb:7b:0b: 6d:7b:80:20:5f:7e:d6:1c:4a:b3:04:e2:1f:ab:30: 48:1f:30:22:02:fa:9e:c8:2f:1d:f7:24:ec:d2:f3: b4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:29:14:F1:9D:11:B4:EF:8E:93:87:C9:A8:EC:AD:0A:34:09:7C:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/cfcb4d91-fce8-39bc-ad86-9b80be29b856.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.crl X509v3 Authority Key Identifier: keyid:37:0A:97:59:74:D5:5E:63:86:B7:6A:77:B8:A8:47:1C:2E:C1:31:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer sbgp-ipAddrBlock: critical IPv4: 162.220.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:d5:39:ec:12:fb:3e:c2:96:0a:e6:29:71:14:10:8d:e4:91: 4d:c1:74:50:64:5b:0f:33:15:2d:0e:c4:e8:c6:d5:54:31:63: 02:c3:3c:49:15:4a:b7:ff:ad:74:33:dd:6a:4a:f5:c2:34:e9: 44:9e:69:7c:f0:00:6c:ba:57:8e:1e:31:6e:97:4b:2e:f1:65: ee:96:a9:79:84:32:61:f7:4b:06:05:ed:f9:44:2b:f6:4a:88: 23:61:c5:92:54:d4:65:8b:fb:b9:f2:f1:97:92:78:28:0c:71: 7b:86:ec:87:05:2b:0e:04:c5:18:4f:24:e7:48:10:ed:26:88: 28:e7:ef:c7:a3:ac:a6:12:ec:25:06:93:92:8f:a5:f8:aa:2e: bf:03:81:f5:dd:89:6b:fd:46:b9:79:d9:e4:37:a5:e8:e9:57: 2f:27:0c:90:15:a0:76:a0:6b:7b:26:23:41:3a:3e:80:b8:56: b1:4a:bd:24:ac:ee:af:0a:b4:89:17:f9:1d:42:1d:ed:29:ac: eb:f1:2a:45:8f:57:87:d9:48:9d:6c:4b:72:44:23:46:5a:0e: 14:ba:ef:0d:7d:18:23:57:15:77:b1:05:db:87:a5:47:03:e8: 36:89:90:90:4c:75:16:62:b9:94:ff:6e:46:c6:60:84:fa:ab: 23:4c:41:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jenSdG4bmjpxWu8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZThjNzM3NDYtMThmNi00NjkyLTgwYzYtMWQ3YjNlOTM2 NTlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MzBmZjdiZGYtNWM1Mi00M2EwLWFlYzUtMzA4ZDFiNDQ4MjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMFOCkTNd53KUnF+Bmq8oFgmHSdXE0BchkZq qb6Aw6tlae2WU+zXipMrFbphya24ooXwSDB9MLsSMbYZivuWQXuNmAtAajzosC6u DN/yq09Ikgjkjq0yht8TKEy2vQ4K5ovhwpRKyLeylfvE9SKakWL+xD+9dLEU1mzE fItUXWiRrSFxWIXiSsDtau0BjuNjzmizgUFaPjN54KOpMuXmJqyKxrOG0EQi6XY7 JZcwdemf5bMSgUaqB6MtCRg8ewURutGyj6x2y9tKAuM6823OeSDXoW/lgKcW+2PE LaXLewtte4AgX37WHEqzBOIfqzBIHzAiAvqeyC8d9yTs0vO0nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIcpFPGdEbTvjpOHyajsrQo0CXx9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lOGM3 Mzc0Ni0xOGY2LTQ2OTItODBjNi0xZDdiM2U5MzY1OWEvY2ZjYjRkOTEtZmNlOC0z OWJjLWFkODYtOWI4MGJlMjliODU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZThjNzM3NDYtMThmNi00NjkyLTgw YzYtMWQ3YjNlOTM2NTlhL2U4YzczNzQ2LTE4ZjYtNDY5Mi04MGM2LTFkN2IzZTkz NjU5YS5jcmwwHwYDVR0jBBgwFoAUNwqXWXTVXmOGt2p3uKhHHC7BMdkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9lOGM3Mzc0Ni0xOGY2LTQ2OTItODBjNi0xZDdi M2U5MzY1OWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDotwIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPVOewS+z7ClgrmKXEUEI3kkU3BdFBkWw8zFS0OxOjG1VQxYwLDPEkV Srf/rXQz3WpK9cI06USeaXzwAGy6V44eMW6XSy7xZe6WqXmEMmH3SwYF7flEK/ZK iCNhxZJU1GWL+7ny8ZeSeCgMcXuG7IcFKw4ExRhPJOdIEO0miCjn78ejrKYS7CUG k5KPpfiqLr8DgfXdiWv9Rrl52eQ3pejpVy8nDJAVoHaga3smI0E6PoC4VrFKvSSs 7q8KtIkX+R1CHe0prOvxKkWPV4fZSJ1sS3JEI0ZaDhS67w19GCNXFXexBduHpUcD 6DaJkJBMdRZiuZT/bkbGYIT6qyNMQTI= -----END CERTIFICATE-----Generated at Thu Mar 26 07:39:06 2026 by rpki-client