$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/cfe80c02-4451-3852-8f1d-f10baf942eac.roa File: cfe80c02-4451-3852-8f1d-f10baf942eac.roa (raw, json) Hash identifier: 4ci4qr4M4fpJcKae14S9tI62QDTdEE138uU+YSyjh9U= Subject key identifier: 68:F8:E2:7E:03:74:ED:1F:8B:C4:C3:32:32:9F:1B:97:00:F9:08:FC Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584D492A4CF078CD2C10AA51C180 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/cfe80c02-4451-3852-8f1d-f10baf942eac.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 2914 IP address blocks: 170.130.154.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:4c:f0:78:cd:2c:10:aa:51:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=6bc38e82-0cdb-4ead-8e12-117a5f98f4e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:80:b4:81:2b:9e:38:c8:40:b3:42:24:34:d5: 1b:33:45:50:34:02:48:17:af:2f:6a:51:a6:92:08: e5:65:42:69:21:e1:32:1b:60:f8:a6:aa:b5:a9:e6: ad:11:94:30:bf:18:c0:22:61:08:a8:0f:34:0f:88: 13:aa:15:76:05:22:21:31:a2:0a:17:02:ef:36:8e: 58:86:05:dc:02:83:0b:76:71:ef:71:ae:48:31:a1: b1:95:e4:7d:fb:70:08:08:27:e4:d7:f2:a4:b0:92: c5:94:a3:85:78:c6:81:ca:40:6e:81:1c:59:1a:7e: e4:ab:5e:55:98:d3:51:c7:d9:cf:cd:95:06:42:b0: 4b:d7:af:5e:e4:03:56:39:f9:25:ad:a0:92:cc:ad: 16:cc:f5:d8:19:81:a4:1c:14:e4:af:7d:e7:d9:d8: 10:4e:93:44:8e:cd:1c:20:8f:54:8f:a8:5a:c5:76: 4d:02:c9:0d:f6:f3:57:ca:e9:e7:5a:2e:77:66:2b: 12:dc:92:e6:5c:d3:c7:80:00:3a:d5:6b:f9:b3:0d: ec:e6:1d:1b:e0:d4:08:1b:86:6f:84:7f:27:90:0e: 82:e9:50:a7:c4:22:d4:92:b8:0f:89:cc:cd:f2:81: 33:cb:a6:f3:a8:a0:3e:e9:2a:0b:f8:4b:38:2c:45: 70:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F8:E2:7E:03:74:ED:1F:8B:C4:C3:32:32:9F:1B:97:00:F9:08:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/cfe80c02-4451-3852-8f1d-f10baf942eac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 170.130.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:ae:a7:fc:91:38:b6:06:57:ca:4c:ae:1f:42:a6:d7:1a:30: e3:46:d4:5e:54:ca:a7:85:c6:a8:52:d9:60:1e:ce:b1:c6:a6: 64:e7:62:ff:21:e5:32:57:16:b7:1c:9e:61:23:59:f3:0b:9e: b0:95:ff:92:c0:1e:90:3c:be:d5:99:b2:51:f8:5a:d9:93:11: 1e:61:12:ca:2e:0f:d6:0d:19:c1:64:74:3c:08:34:ef:a1:8f: 79:82:d6:ab:3f:82:48:a7:7b:23:ee:01:a7:a2:59:9a:e6:27: 67:89:8e:9c:1b:f4:7a:0e:b6:a8:2c:ea:fc:c0:45:9e:22:a6: f9:9d:1c:3e:ee:ed:f6:d5:cd:38:d1:92:1e:c9:95:75:47:b3: b6:43:04:ff:89:60:6e:1f:39:23:61:4b:d3:5b:1f:80:ff:7b: 18:2c:bc:78:2a:81:dc:a3:2b:ef:5a:67:7b:d9:a4:8b:1c:64: 20:4b:21:44:a0:70:aa:3e:51:35:9c:72:7d:64:e4:77:c4:a7: 8b:25:21:13:70:ba:06:59:b0:00:42:c0:92:8b:b4:9b:62:63: cd:97:11:63:b6:a7:88:2a:1e:ad:91:be:6c:5a:ca:12:fb:67: c4:69:74:72:7b:bf:4c:55:a5:76:32:23:5b:e0:fc:e4:d5:0d: 72:2d:2d:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKkzweM0sEKpRwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk NmJjMzhlODItMGNkYi00ZWFkLThlMTItMTE3YTVmOThmNGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIC0gSueOMhAs0IkNNUbM0VQNAJIF68valGm kgjlZUJpIeEyG2D4pqq1qeatEZQwvxjAImEIqA80D4gTqhV2BSIhMaIKFwLvNo5Y hgXcAoMLdnHvca5IMaGxleR9+3AICCfk1/KksJLFlKOFeMaBykBugRxZGn7kq15V mNNRx9nPzZUGQrBL169e5ANWOfklraCSzK0WzPXYGYGkHBTkr33n2dgQTpNEjs0c II9Uj6haxXZNAskN9vNXyunnWi53ZisS3JLmXNPHgAA61Wv5sw3s5h0b4NQIG4Zv hH8nkA6C6VCnxCLUkrgPiczN8oEzy6bzqKA+6SoL+Es4LEVwKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGj44n4DdO0fi8TDMjKfG5cA+Qj8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvY2ZlODBjMDItNDQ1MS0z ODUyLThmMWQtZjEwYmFmOTQyZWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqoKaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABmup/yROLYGV8pMrh9CptcaMONG1F5UyqeFxqhS2WAezrHGpmTnYv8h 5TJXFrccnmEjWfMLnrCV/5LAHpA8vtWZslH4WtmTER5hEsouD9YNGcFkdDwINO+h j3mC1qs/gkineyPuAaeiWZrmJ2eJjpwb9HoOtqgs6vzARZ4ipvmdHD7u7fbVzTjR kh7JlXVHs7ZDBP+JYG4fOSNhS9NbH4D/exgsvHgqgdyjK+9aZ3vZpIscZCBLIUSg cKo+UTWccn1k5HfEp4slIRNwugZZsABCwJKLtJtiY82XEWO2p4gqHq2RvmxayhL7 Z8RpdHJ7v0xVpXYyI1vg/OTVDXItLXk= -----END CERTIFICATE-----Generated at Thu Mar 26 18:09:31 2026 by rpki-client