$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cf6ae818-e71f-354e-a80a-9c7d6682c4ab.roa File: cf6ae818-e71f-354e-a80a-9c7d6682c4ab.roa (raw, json) Hash identifier: jttQBWstQDqZpDWX0NevA1upo95vQIbCZMX3dhmRqic= Subject key identifier: 97:AE:C3:77:77:08:6E:46:A9:27:0C:70:6E:97:60:B2:80:19:DE:CE Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584DC6CB10720237CB700475AA80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cf6ae818-e71f-354e-a80a-9c7d6682c4ab.roa Signing time: Sat 09 May 2026 13:00:31 +0000 ROA not before: Sat 09 May 2026 13:00:31 +0000 ROA not after: Fri 07 Aug 2026 13:00:31 +0000 asID: 54253 IP address blocks: 159.112.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c6:cb:10:72:02:37:cb:70:04:75:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: May 9 13:00:31 2026 GMT Not After : Aug 7 13:00:31 2026 GMT Subject: CN=32dcdda3-58e7-49fa-b67f-dd405f493e25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:7c:8d:9c:6e:e8:13:0e:fa:d8:5a:39:a5:75: 6f:ec:b4:a8:89:00:23:d0:bf:a6:c5:f7:69:06:ca: ce:28:f4:af:65:e0:bc:78:3d:33:fa:b1:04:0a:25: c6:26:82:81:1f:58:73:85:69:10:fd:ca:fc:64:d5: 43:21:83:69:51:51:b3:cb:fc:23:3c:ae:6d:dc:76: fc:d5:21:cc:76:60:d2:5a:c0:0d:d7:c1:21:73:a1: a4:b4:38:4a:13:73:17:98:68:a3:58:2c:81:90:67: 71:64:97:35:4e:5e:f2:0a:66:99:17:d6:3c:4e:e4: a3:3c:c8:55:8e:a7:1c:bd:39:7d:e4:2b:cb:ff:21: d8:4b:14:5d:71:f0:64:7d:e8:97:57:86:b5:67:a5: c1:a8:86:e4:9a:44:8b:0a:67:fe:d0:cb:0d:87:cb: 53:bf:6c:4a:14:f9:a6:f3:85:7e:ae:50:b2:bc:50: b1:86:dd:92:8f:ee:68:da:16:b1:7c:c0:72:53:98: ad:bb:48:60:c7:8f:0e:62:e5:01:75:e5:98:63:33: 3e:eb:5d:17:7c:00:6c:b5:fc:25:02:0a:69:df:00: 0d:d8:00:d7:fb:1c:3c:d2:e7:0b:c7:dc:d0:91:93: 2c:f7:6c:04:ab:58:3a:f6:7d:e9:6b:dc:35:8f:07: 94:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:AE:C3:77:77:08:6E:46:A9:27:0C:70:6E:97:60:B2:80:19:DE:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cf6ae818-e71f-354e-a80a-9c7d6682c4ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 159.112.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:7b:7b:14:2d:14:1b:bf:31:b1:63:b2:4f:5b:2e:85:be:0c: c3:56:91:95:5e:ac:77:c9:43:16:8d:e9:3b:88:e4:bf:82:4c: 79:26:3d:3f:3b:07:b8:35:d5:92:6b:46:9b:53:8c:36:b3:5c: b8:f6:57:c4:9c:93:a0:ce:04:3a:05:f9:b8:dd:49:45:8f:2c: 9f:bf:b8:d5:e5:ce:1d:19:77:f6:66:e7:83:09:2c:66:b1:f5: d6:a5:10:9a:38:30:4b:a8:40:7e:d3:2c:07:c2:d5:6d:1e:ec: 51:f9:c1:f3:9c:aa:6d:03:8c:1a:7c:3c:bf:7c:b4:0c:83:cc: 36:00:01:f4:cf:72:40:63:77:c0:46:ad:87:47:7b:79:24:4d: 81:83:aa:80:1f:22:c5:d5:96:a8:75:03:dd:18:e7:d0:69:7e: 01:04:fa:18:e7:87:c5:73:de:20:d9:08:c9:4d:bd:e2:c7:ed: c5:24:c9:f2:79:68:f4:bd:ee:97:3f:2e:0f:da:3c:25:e3:10: 58:52:e6:6c:a7:6f:38:dd:2f:d0:d1:36:a8:d9:91:41:94:c7: 58:04:da:ca:93:f5:17:48:22:a2:71:d9:1f:3a:9e:f9:2a:0c: b2:46:fa:e1:a8:2c:f6:ff:35:ba:bc:0b:70:89:2e:fc:f4:1d: 04:3f:74:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3GyxByAjfLcAR1qoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDUwOTEzMDAzMVoXDTI2MDgwNzEzMDAzMVowLzEtMCsGA1UEAxMk MzJkY2RkYTMtNThlNy00OWZhLWI2N2YtZGQ0MDVmNDkzZTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3yNnG7oEw762Fo5pXVv7LSoiQAj0L+mxfdp BsrOKPSvZeC8eD0z+rEECiXGJoKBH1hzhWkQ/cr8ZNVDIYNpUVGzy/wjPK5t3Hb8 1SHMdmDSWsAN18Ehc6GktDhKE3MXmGijWCyBkGdxZJc1Tl7yCmaZF9Y8TuSjPMhV jqccvTl95CvL/yHYSxRdcfBkfeiXV4a1Z6XBqIbkmkSLCmf+0MsNh8tTv2xKFPmm 84V+rlCyvFCxht2Sj+5o2haxfMByU5itu0hgx48OYuUBdeWYYzM+610XfABstfwl Agpp3wAN2ADX+xw80ucLx9zQkZMs92wEq1g69n3pa9w1jweUnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJeuw3d3CG5GqScMcG6XYLKAGd7OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvY2Y2YWU4MTgtZTcxZi0z NTRlLWE4MGEtOWM3ZDY2ODJjNGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn3ClMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJ7exQtFBu/MbFjsk9bLoW+DMNWkZVerHfJQxaN6TuI5L+CTHkmPT87 B7g11ZJrRptTjDazXLj2V8Sck6DOBDoF+bjdSUWPLJ+/uNXlzh0Zd/Zm54MJLGax 9dalEJo4MEuoQH7TLAfC1W0e7FH5wfOcqm0DjBp8PL98tAyDzDYAAfTPckBjd8BG rYdHe3kkTYGDqoAfIsXVlqh1A90Y59BpfgEE+hjnh8Vz3iDZCMlNveLH7cUkyfJ5 aPS97pc/Lg/aPCXjEFhS5mynbzjdL9DRNqjZkUGUx1gE2sqT9RdIIqJx2R86nvkq DLJG+uGoLPb/Nbq8C3CJLvz0HQQ/dFA= -----END CERTIFICATE-----Generated at Wed May 13 07:27:35 2026 by rpki-client