$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/ca96c743-26b4-3af6-9b1c-895a1d32be10.roa File: ca96c743-26b4-3af6-9b1c-895a1d32be10.roa (raw, json) Hash identifier: Ug+y0jw2bF2WIqqHrWwfivrzzSMQ7da2gWhvGehtsLE= Subject key identifier: 9A:5D:15:67:E7:F5:30:96:F3:B5:5F:18:6C:01:71:9C:05:FA:35:9F Certificate issuer: /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Certificate serial: 010D0C9F4328584DA6B0104D32522C0A6844E520 Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/ca96c743-26b4-3af6-9b1c-895a1d32be10.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 13807 IP address blocks: 162.221.232.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:10:4d:32:52:2c:0a:68:44:e5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=9a78d20e-0458-407d-b922-e455a3de4798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:85:13:e6:10:1f:7d:56:bf:3f:62:52:a9:4f: a2:93:aa:0b:eb:3d:17:a7:3a:33:54:ea:62:41:66: ab:0e:13:84:2d:5a:6a:b6:6f:49:8c:bb:88:cd:b3: 67:d5:96:dc:a9:ad:a3:18:8b:07:d6:a7:9c:71:be: 9e:b5:62:54:ab:3a:00:24:5d:72:bc:f3:0b:02:f6: 01:57:39:fd:63:40:20:39:4f:9b:f8:61:20:b9:2a: 40:e9:a4:bb:5f:5e:ec:47:de:12:e8:8b:4d:e1:7e: 29:51:3a:51:ed:ee:fd:a9:c9:ab:df:53:3f:93:91: 19:04:58:d6:39:5e:25:2d:32:b7:2f:c6:ce:58:a1: c0:d8:e0:cb:4a:53:b9:7d:78:58:a7:40:ef:a0:dc: b1:55:ad:fa:54:e1:33:17:e4:77:86:8b:82:e6:c2: 10:a7:16:7f:7c:15:8f:b8:1c:5a:6f:ca:30:18:03: b7:42:f8:b1:7e:15:c5:0a:4d:35:41:42:45:57:08: b3:c3:eb:a0:ac:df:3e:db:6d:98:99:18:f6:e5:d1: a6:89:0c:cc:9f:f7:f0:0f:0c:f2:74:d2:96:c6:e8: f6:dc:ed:03:e4:a8:e5:08:79:7e:05:35:40:b0:a5: e8:78:59:1b:29:46:b1:d1:a3:0f:ff:a5:62:00:b6: c8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:5D:15:67:E7:F5:30:96:F3:B5:5F:18:6C:01:71:9C:05:FA:35:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/ca96c743-26b4-3af6-9b1c-895a1d32be10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl X509v3 Authority Key Identifier: keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer sbgp-ipAddrBlock: critical IPv4: 162.221.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:9f:e8:a7:64:bf:61:ef:ee:74:24:a0:5d:58:dc:83:94:fd: 8a:94:2f:cd:aa:48:56:2f:82:2a:9a:9e:77:28:8e:fc:53:0e: 67:5e:8d:70:f0:93:bd:1c:9b:8b:14:3f:75:d2:b8:27:75:60: b5:26:1b:09:2e:38:0d:43:1b:b9:89:37:e1:00:a7:bf:1d:70: b5:67:21:fa:4d:09:0a:6a:0a:1c:8c:2f:7e:05:0d:15:7c:9e: bd:ed:40:07:c8:6b:bd:ad:00:8a:7f:11:d5:e5:f6:b5:69:ac: 91:a3:dc:9d:9c:1b:89:2b:e2:98:45:75:8e:2b:ab:6c:40:9c: 68:fe:de:78:62:e8:6a:a4:8a:20:02:72:6d:cd:b0:0c:56:b5: 89:98:47:e4:11:0d:31:8d:9b:70:71:0e:e1:80:2e:de:63:1c: 97:66:7d:c2:10:ec:99:a5:2d:c3:f1:9d:4e:1d:f4:7b:a5:ee: 09:e7:35:73:46:41:67:d7:a2:e0:33:59:6c:4b:bc:48:9b:3c: cb:da:c1:03:f5:be:02:e7:1f:aa:6e:d9:83:54:d9:39:63:29: 6b:05:88:1e:20:bd:68:aa:b5:47:6a:0b:07:eb:43:b0:91:51: c1:f9:63:61:a1:85:02:6f:75:de:b4:03:c2:1d:12:9c:57:3f: b9:ba:e2:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msBBNMlIsCmhE5SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3OWItZmU3YWVlMGMw NTM2MB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk OWE3OGQyMGUtMDQ1OC00MDdkLWI5MjItZTQ1NWEzZGU0Nzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIUT5hAffVa/P2JSqU+ik6oL6z0XpzozVOpi QWarDhOELVpqtm9JjLuIzbNn1Zbcqa2jGIsH1qeccb6etWJUqzoAJF1yvPMLAvYB Vzn9Y0AgOU+b+GEguSpA6aS7X17sR94S6ItN4X4pUTpR7e79qcmr31M/k5EZBFjW OV4lLTK3L8bOWKHA2ODLSlO5fXhYp0DvoNyxVa36VOEzF+R3houC5sIQpxZ/fBWP uBxab8owGAO3QvixfhXFCk01QUJFVwizw+ugrN8+222YmRj25dGmiQzMn/fwDwzy dNKWxuj23O0D5KjlCHl+BTVAsKXoeFkbKUax0aMP/6ViALbIKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJpdFWfn9TCW87VfGGwBcZwF+jWfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBm MzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdhZWUwYzA1MzYvY2E5NmM3NDMtMjZiNC0z YWY2LTliMWMtODk1YTFkMzJiZTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3 OWItZmU3YWVlMGMwNTM2L2NmMGYzMWI2LWVmNjItNGRkNS04NzliLWZlN2FlZTBj MDUzNi5jcmwwHwYDVR0jBBgwFoAUuVDNlGKpSLvXorEAEC5ORYttZHswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBmMzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdh ZWUwYzA1MzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCot3oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEaf6Kdkv2Hv7nQkoF1Y3IOU/YqUL82qSFYvgiqanncojvxTDmdejXDw k70cm4sUP3XSuCd1YLUmGwkuOA1DG7mJN+EAp78dcLVnIfpNCQpqChyML34FDRV8 nr3tQAfIa72tAIp/EdXl9rVprJGj3J2cG4kr4phFdY4rq2xAnGj+3nhi6GqkiiAC cm3NsAxWtYmYR+QRDTGNm3BxDuGALt5jHJdmfcIQ7JmlLcPxnU4d9Hul7gnnNXNG QWfXouAzWWxLvEibPMvawQP1vgLnH6pu2YNU2TljKWsFiB4gvWiqtUdqCwfrQ7CR UcH5Y2GhhQJvdd60A8IdEpxXP7m64iY= -----END CERTIFICATE-----Generated at Wed May 13 11:19:22 2026 by rpki-client