$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cf0e8cab-b2c2-300f-8787-dd79f7157452.roa File: cf0e8cab-b2c2-300f-8787-dd79f7157452.roa (raw, json) Hash identifier: jtzQtu+uvSQSldIBGxNeB+mCAY517zSci8LsC91E45M= Subject key identifier: 57:C5:03:53:02:2F:5C:35:47:71:45:F7:AE:B8:EA:6D:EB:61:37:75 Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F4328584D2A74EA21E92F7CFD7ACF6480 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cf0e8cab-b2c2-300f-8787-dd79f7157452.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 20115 IP address blocks: 173.40.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:ea:21:e9:2f:7c:fd:7a:cf:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=5396550c-8b45-4672-84e2-c587173eeaa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:57:28:7e:6c:fd:d4:78:cf:f6:94:4b:c8:7a: 56:05:93:cf:54:9f:bb:2f:19:81:66:26:14:1e:c1: 1f:ed:42:7e:a2:fa:2e:49:b1:82:af:b8:40:8e:a1: 8a:49:08:c2:3b:cf:5d:38:65:5c:d7:f7:1e:61:2e: 7f:3a:3a:90:5c:a9:81:90:28:41:62:1d:89:e1:da: d0:d4:7c:5d:89:ff:6c:34:f9:76:94:62:14:60:ce: 78:6b:8d:6b:3a:e5:e3:58:f0:d7:ae:d1:74:7e:43: 4f:32:d1:d1:14:fe:8e:a6:60:ec:ed:4f:44:14:a5: 06:07:40:c9:e8:e3:7f:0c:ae:cd:d6:89:d6:5c:b6: c3:09:d4:cf:74:3b:2f:59:78:8c:83:be:68:19:00: c5:4e:84:14:8a:72:df:22:11:e1:72:05:4d:10:98: c4:40:e5:8c:bc:7b:bb:a9:b2:fd:3d:86:95:43:b9: b1:e4:97:f4:80:c6:0d:28:a8:79:87:c2:14:a3:8a: 1a:ac:55:64:7a:75:3c:c2:9f:6d:70:e5:4a:67:d3: 16:e3:68:14:28:20:8d:e2:3a:b5:f9:48:e7:a2:e2: 5d:60:12:14:e8:4d:dd:ee:c4:5a:4f:86:27:27:dd: be:de:41:88:2f:ad:a4:39:39:ad:c9:52:3a:45:e5: a3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:C5:03:53:02:2F:5C:35:47:71:45:F7:AE:B8:EA:6D:EB:61:37:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cf0e8cab-b2c2-300f-8787-dd79f7157452.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 173.40.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:9e:f7:13:ef:3d:08:bc:66:86:ec:37:0d:1c:8b:59:f3:9f: d2:a4:c6:f0:43:0d:b0:b9:6e:47:21:6b:e9:2c:8d:cc:70:2e: a2:07:90:fb:9b:ba:8e:1d:d6:3a:c3:e4:c7:c8:4e:01:61:c8: 1b:76:ed:28:d7:61:c5:75:8e:d7:3f:57:30:41:f5:94:91:86: fb:52:5c:3b:a6:b6:89:1d:e8:8c:5e:1f:f0:7a:b5:76:03:54: 7b:48:c1:cf:15:af:89:b7:cc:c4:cf:20:57:94:32:83:54:ab: 5f:ee:1d:f3:a4:61:8b:0b:f4:60:21:48:26:15:31:e9:2f:0d: d5:fc:7c:68:4a:42:94:e2:68:fb:37:fd:45:94:e2:5b:a4:06: 68:4f:cc:5d:af:07:09:36:d6:17:6c:23:bf:eb:53:91:bf:98: cc:53:cf:64:ea:b0:82:26:6d:35:3f:d7:82:88:dd:05:98:eb: 7c:01:08:d7:fa:ad:6b:e0:24:a8:33:d9:c2:c3:24:7d:6f:04: 5b:17:ab:70:16:57:9d:20:f5:76:9a:4f:b3:7d:c2:2d:f8:80: 0f:62:5e:f1:a9:b6:59:ac:a4:f0:61:9f:30:a9:16:0e:25:eb: 5a:1e:8d:d0:d3:04:db:9b:52:f9:ae:3e:3d:ec:b0:fb:04:00: 01:6f:25:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdOoh6S98/XrPZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk NTM5NjU1MGMtOGI0NS00NjcyLTg0ZTItYzU4NzE3M2VlYWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlcofmz91HjP9pRLyHpWBZPPVJ+7LxmBZiYU HsEf7UJ+ovouSbGCr7hAjqGKSQjCO89dOGVc1/ceYS5/OjqQXKmBkChBYh2J4drQ 1Hxdif9sNPl2lGIUYM54a41rOuXjWPDXrtF0fkNPMtHRFP6OpmDs7U9EFKUGB0DJ 6ON/DK7N1onWXLbDCdTPdDsvWXiMg75oGQDFToQUinLfIhHhcgVNEJjEQOWMvHu7 qbL9PYaVQ7mx5Jf0gMYNKKh5h8IUo4oarFVkenU8wp9tcOVKZ9MW42gUKCCN4jq1 +UjnouJdYBIU6E3d7sRaT4YnJ92+3kGIL62kOTmtyVI6ReWjawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFfFA1MCL1w1R3FF96646m3rYTd1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvY2YwZThjYWItYjJjMi0z MDBmLTg3ODctZGQ3OWY3MTU3NDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrSj8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADae9xPvPQi8ZobsNw0ci1nzn9KkxvBDDbC5bkcha+ksjcxwLqIHkPub uo4d1jrD5MfITgFhyBt27SjXYcV1jtc/VzBB9ZSRhvtSXDumtokd6IxeH/B6tXYD VHtIwc8Vr4m3zMTPIFeUMoNUq1/uHfOkYYsL9GAhSCYVMekvDdX8fGhKQpTiaPs3 /UWU4lukBmhPzF2vBwk21hdsI7/rU5G/mMxTz2TqsIImbTU/14KI3QWY63wBCNf6 rWvgJKgz2cLDJH1vBFsXq3AWV50g9XaaT7N9wi34gA9iXvGptlmspPBhnzCpFg4l 61oejdDTBNubUvmuPj3ssPsEAAFvJTM= -----END CERTIFICATE-----Generated at Thu Mar 26 19:44:04 2026 by rpki-client