$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf1b758d-53cd-4b34-8f1e-86f4156d959a/cf3ac50c-dea7-3183-83e5-bec20ee35a81.roa File: cf3ac50c-dea7-3183-83e5-bec20ee35a81.roa (raw, json) Hash identifier: zkk1uUTyKJKzGB6pMjURRfOhq2lG/qyHwwEurM+Uri0= Subject key identifier: 1F:12:0E:D7:5A:4E:15:EA:51:BE:16:5C:CC:5D:4D:4A:27:77:DE:FB Certificate issuer: /CN=cf1b758d-53cd-4b34-8f1e-86f4156d959a Certificate serial: 010D0C9F4328584E6DD4C47212B89081E7DB7740 Authority key identifier: B5:55:E2:75:50:CD:19:41:A0:96:47:44:29:A2:9D:B9:1A:F7:81:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf1b758d-53cd-4b34-8f1e-86f4156d959a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf1b758d-53cd-4b34-8f1e-86f4156d959a/cf3ac50c-dea7-3183-83e5-bec20ee35a81.roa Signing time: Wed 08 Jul 2026 09:00:12 +0000 ROA not before: Wed 08 Jul 2026 09:00:12 +0000 ROA not after: Tue 06 Oct 2026 09:00:12 +0000 asID: 399928 IP address blocks: 167.234.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf1b758d-53cd-4b34-8f1e-86f4156d959a/cf1b758d-53cd-4b34-8f1e-86f4156d959a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf1b758d-53cd-4b34-8f1e-86f4156d959a/cf1b758d-53cd-4b34-8f1e-86f4156d959a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf1b758d-53cd-4b34-8f1e-86f4156d959a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6d:d4:c4:72:12:b8:90:81:e7:db:77:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf1b758d-53cd-4b34-8f1e-86f4156d959a Validity Not Before: Jul 8 09:00:12 2026 GMT Not After : Oct 6 09:00:12 2026 GMT Subject: CN=79d3dc53-0fc0-40ad-9f41-2dbfe08ee0c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:fd:4f:c6:bb:2e:4d:41:a7:1f:10:ff:fc:e9: ed:39:b5:d9:7c:f0:e1:60:ea:d2:b1:da:05:9a:07: fd:b4:e6:b5:ce:9d:17:12:65:9f:3e:a6:87:c0:a5: 59:3b:51:d7:fb:d9:c6:4a:e4:8b:e3:9d:f0:dd:f4: 96:7e:53:c8:65:27:24:fa:ca:0b:47:3c:62:d0:ec: 06:d8:fe:74:7e:81:53:7c:35:c0:a9:b5:97:ba:d6: 51:ee:7c:12:b2:e4:a8:96:7d:09:26:5a:9a:92:ea: fc:2e:92:99:21:cb:ad:59:f5:ff:14:7a:ef:d8:de: b7:86:e9:5c:52:01:04:5f:64:a4:ac:be:73:c7:4b: 9f:ec:63:89:f9:93:35:24:af:1b:9e:2f:ac:ba:e7: 8a:78:6f:7b:5f:c3:89:41:e7:6c:d6:8c:cc:10:ec: 71:d7:31:e3:b2:8e:e6:0d:a1:90:75:7e:7e:53:1a: 03:44:0a:11:02:b9:e6:52:90:5c:24:3b:2a:a2:0e: 96:ea:f6:f1:10:ac:0c:7e:53:20:bc:7b:75:07:51: ec:5e:a0:11:0a:6c:b7:1f:02:ea:b6:7c:fe:b6:b8: 92:3a:8e:d5:55:75:76:e4:e0:1c:98:58:f3:cc:6b: 5a:8e:cc:5b:98:6b:b4:47:96:2a:7a:6a:d3:81:e7: ae:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:12:0E:D7:5A:4E:15:EA:51:BE:16:5C:CC:5D:4D:4A:27:77:DE:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf1b758d-53cd-4b34-8f1e-86f4156d959a/cf3ac50c-dea7-3183-83e5-bec20ee35a81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf1b758d-53cd-4b34-8f1e-86f4156d959a/cf1b758d-53cd-4b34-8f1e-86f4156d959a.crl X509v3 Authority Key Identifier: keyid:B5:55:E2:75:50:CD:19:41:A0:96:47:44:29:A2:9D:B9:1A:F7:81:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf1b758d-53cd-4b34-8f1e-86f4156d959a.cer sbgp-ipAddrBlock: critical IPv4: 167.234.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:20:ca:c4:2b:42:76:45:42:1c:97:41:e6:29:4f:30:96:03: bf:6f:40:3f:02:47:e0:73:a1:57:8a:e0:46:4e:38:08:7b:6f: 5f:30:ea:8e:73:09:2f:48:7e:96:7d:18:4c:6b:00:44:cb:71: 96:e6:b6:8f:87:1a:ba:39:f0:8c:eb:e0:88:c4:26:65:4a:5e: ee:90:11:0c:c0:7f:df:b0:cb:76:3b:0a:90:91:f0:44:3c:2e: b3:f3:37:de:e1:51:69:5d:df:6b:fe:9e:b8:35:8d:c8:4a:58: 8b:4c:5a:d7:33:d4:c4:22:eb:bf:a1:c7:bc:3f:b7:5d:68:96: d2:ff:46:22:8c:fc:52:b9:72:df:ee:a1:01:2b:dc:6e:2c:0d: 29:0a:1b:79:0a:bb:de:73:5b:3c:e0:3f:9e:90:32:dd:77:d2: 94:54:b6:f4:b1:6d:15:c5:2d:71:a0:3d:d5:52:e6:17:83:f3: d8:ed:6b:1b:af:9b:d3:46:f1:ad:2b:b7:22:0c:48:4e:85:38: 39:6e:97:1e:42:94:56:1f:51:59:7b:e4:b7:70:f8:82:ac:ca: 21:91:42:bb:2f:80:67:45:c9:38:08:c5:aa:5c:ae:6d:3d:5c: 37:dc:2a:a5:6e:42:cb:a2:93:a6:8b:b0:b7:e3:e1:17:bf:4a: 2e:17:f4:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5t1MRyEriQgefbd0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YxYjc1OGQtNTNjZC00YjM0LThmMWUtODZmNDE1NmQ5 NTlhMB4XDTI2MDcwODA5MDAxMloXDTI2MTAwNjA5MDAxMlowLzEtMCsGA1UEAxMk NzlkM2RjNTMtMGZjMC00MGFkLTlmNDEtMmRiZmUwOGVlMGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7v1PxrsuTUGnHxD//OntObXZfPDhYOrSsdoF mgf9tOa1zp0XEmWfPqaHwKVZO1HX+9nGSuSL453w3fSWflPIZSck+soLRzxi0OwG 2P50foFTfDXAqbWXutZR7nwSsuSoln0JJlqakur8LpKZIcutWfX/FHrv2N63hulc UgEEX2SkrL5zx0uf7GOJ+ZM1JK8bni+suueKeG97X8OJQeds1ozMEOxx1zHjso7m DaGQdX5+UxoDRAoRArnmUpBcJDsqog6W6vbxEKwMflMgvHt1B1HsXqARCmy3HwLq tnz+triSOo7VVXV25OAcmFjzzGtajsxbmGu0R5YqemrTgeeu+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8SDtdaThXqUb4WXMxdTUond977MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jZjFi NzU4ZC01M2NkLTRiMzQtOGYxZS04NmY0MTU2ZDk1OWEvY2YzYWM1MGMtZGVhNy0z MTgzLTgzZTUtYmVjMjBlZTM1YTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvY2YxYjc1OGQtNTNjZC00YjM0LThm MWUtODZmNDE1NmQ5NTlhL2NmMWI3NThkLTUzY2QtNGIzNC04ZjFlLTg2ZjQxNTZk OTU5YS5jcmwwHwYDVR0jBBgwFoAUtVXidVDNGUGglkdEKaKduRr3gRgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jZjFiNzU4ZC01M2NkLTRiMzQtOGYxZS04NmY0 MTU2ZDk1OWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEp+pQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKAgysQrQnZFQhyXQeYpTzCWA79vQD8CR+BzoVeK4EZOOAh7b18w6o5z CS9IfpZ9GExrAETLcZbmto+HGro58Izr4IjEJmVKXu6QEQzAf9+wy3Y7CpCR8EQ8 LrPzN97hUWld32v+nrg1jchKWItMWtcz1MQi67+hx7w/t11oltL/RiKM/FK5ct/u oQEr3G4sDSkKG3kKu95zWzzgP56QMt130pRUtvSxbRXFLXGgPdVS5heD89jtaxuv m9NG8a0rtyIMSE6FODlulx5ClFYfUVl75Ldw+IKsyiGRQrsvgGdFyTgIxapcrm09 XDfcKqVuQsuik6aLsLfj4Re/Si4X9AY= -----END CERTIFICATE-----Generated at Fri Jul 24 14:01:15 2026 by rpki-client