$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/cf4be9dc-75c5-3f44-b4d0-65e111847482.roa File: cf4be9dc-75c5-3f44-b4d0-65e111847482.roa (raw, json) Hash identifier: 3J/FEa5Gs1iqHhHME6fdgmnSQzYVQpUxBBSNz6qPCfs= Subject key identifier: CB:D2:A6:68:EA:AC:89:D7:6C:B5:ED:CB:63:60:5B:FF:8B:C6:68:55 Certificate issuer: /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109 Certificate serial: 010D0C9F4328584DA6B026F3882EB778E5205D80 Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/cf4be9dc-75c5-3f44-b4d0-65e111847482.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 4922 IP address blocks: 204.111.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:26:f3:88:2e:b7:78:e5:20:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109 Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=959389ab-0432-4162-b1c2-fea226c79dc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a8:94:73:a6:33:d5:74:43:27:c9:31:e0:14: 7e:bd:f2:7d:22:01:87:26:94:6c:60:06:c6:f7:6d: 39:a6:1f:96:28:19:0b:2a:96:ac:b0:fd:08:00:0c: 65:10:88:60:96:d9:7f:ab:69:c7:fd:53:1d:6d:34: c6:88:08:92:aa:d0:93:9f:39:7b:a9:5c:36:c2:e5: 87:15:1a:65:b5:37:cc:be:39:68:df:e7:60:1e:c2: 21:88:5e:c8:18:bd:be:14:9f:2d:58:1b:03:ff:bf: 0d:c1:27:91:fb:44:1e:22:6b:18:6b:a2:66:70:82: d3:55:e8:fa:85:db:1b:ed:0c:06:88:30:7e:54:13: e8:89:2d:f6:25:c2:67:fd:74:eb:fe:3e:0c:e0:9c: 5a:05:8f:79:0a:48:d9:ec:f6:4f:20:09:0e:e5:89: 0b:88:83:cc:62:5a:55:b7:ef:60:de:59:34:dc:b6: 6b:20:8f:c5:db:3f:fd:f4:57:4f:3b:63:69:1f:1b: 45:d6:2a:9c:e1:7c:30:d3:5a:dc:4f:00:98:27:a2: 38:50:f7:66:f3:6b:4f:48:71:3f:b7:b6:b4:97:3f: 07:14:35:44:9e:b9:55:d8:af:57:21:c2:70:61:ec: 2b:a6:0d:16:9f:ff:19:69:90:c9:40:3c:09:d9:8b: df:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:D2:A6:68:EA:AC:89:D7:6C:B5:ED:CB:63:60:5B:FF:8B:C6:68:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/cf4be9dc-75c5-3f44-b4d0-65e111847482.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl X509v3 Authority Key Identifier: keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer sbgp-ipAddrBlock: critical IPv4: 204.111.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:7b:05:d4:c8:d6:14:07:bd:3c:47:44:48:c7:8b:e3:48:a5: c3:f8:d8:10:98:9a:4f:60:e0:a1:b2:f4:84:89:12:df:e0:7e: 04:75:7c:d7:c4:91:09:7d:42:90:53:37:66:78:04:a4:99:43: d3:4c:22:b9:d8:69:60:10:16:0f:0b:81:68:64:ed:8c:e2:d7: 51:cb:c0:9a:12:be:ac:30:3a:42:9c:d1:a4:f4:07:70:1e:10: c6:91:78:cf:27:7c:94:3a:e3:93:8c:4f:56:78:7e:35:11:06: ba:d4:64:35:9a:44:a7:a6:b5:3e:39:8f:79:94:a3:0d:7b:af: f1:93:a1:de:6b:30:87:05:15:05:e7:d0:5c:a0:5e:ed:73:28: b9:43:f4:78:d9:c7:8d:b8:d6:f1:a1:35:26:88:36:59:73:bc: 05:81:39:db:ee:d7:08:24:ee:bf:89:59:73:85:89:42:bb:50: 0d:7f:99:18:28:2b:f0:a7:d8:d4:68:11:0f:7a:fb:6a:17:9d: b5:2c:9a:b8:d6:3a:5f:68:3a:d6:1a:e4:ce:50:f7:31:ab:52: 27:d5:13:02:94:b5:4c:ba:8a:32:59:57:1e:2d:03:2f:cf:d5: 01:b1:28:c5:bc:e4:f8:f8:8e:35:a7:33:32:5d:8f:37:e8:42: 99:e7:38:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msCbziC63eOUgXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI2ZjIyZjktM2ViNi00NTM0LWFmNWUtOWQ1NzE1ZWEz MTA5MB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk OTU5Mzg5YWItMDQzMi00MTYyLWIxYzItZmVhMjI2Yzc5ZGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6iUc6Yz1XRDJ8kx4BR+vfJ9IgGHJpRsYAbG 9205ph+WKBkLKpassP0IAAxlEIhgltl/q2nH/VMdbTTGiAiSqtCTnzl7qVw2wuWH FRpltTfMvjlo3+dgHsIhiF7IGL2+FJ8tWBsD/78NwSeR+0QeImsYa6JmcILTVej6 hdsb7QwGiDB+VBPoiS32JcJn/XTr/j4M4JxaBY95CkjZ7PZPIAkO5YkLiIPMYlpV t+9g3lk03LZrII/F2z/99FdPO2NpHxtF1iqc4Xww01rcTwCYJ6I4UPdm82tPSHE/ t7a0lz8HFDVEnrlV2K9XIcJwYewrpg0Wn/8ZaZDJQDwJ2YvfjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMvSpmjqrInXbLXty2NgW/+LxmhVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84YjZm MjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3MTVlYTMxMDkvY2Y0YmU5ZGMtNzVjNS0z ZjQ0LWI0ZDAtNjVlMTExODQ3NDgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGI2ZjIyZjktM2ViNi00NTM0LWFm NWUtOWQ1NzE1ZWEzMTA5LzhiNmYyMmY5LTNlYjYtNDUzNC1hZjVlLTlkNTcxNWVh MzEwOS5jcmwwHwYDVR0jBBgwFoAUZlnDfJtBAob0x8/CZoobNxbE1hUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84YjZmMjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3 MTVlYTMxMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHzG+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZ7BdTI1hQHvTxHREjHi+NIpcP42BCYmk9g4KGy9ISJEt/gfgR1fNfE kQl9QpBTN2Z4BKSZQ9NMIrnYaWAQFg8LgWhk7Yzi11HLwJoSvqwwOkKc0aT0B3Ae EMaReM8nfJQ645OMT1Z4fjURBrrUZDWaRKemtT45j3mUow17r/GTod5rMIcFFQXn 0FygXu1zKLlD9HjZx4241vGhNSaINllzvAWBOdvu1wgk7r+JWXOFiUK7UA1/mRgo K/Cn2NRoEQ96+2oXnbUsmrjWOl9oOtYa5M5Q9zGrUifVEwKUtUy6ijJZVx4tAy/P 1QGxKMW85Pj4jjWnMzJdjzfoQpnnOHQ= -----END CERTIFICATE-----Generated at Wed May 13 10:33:40 2026 by rpki-client