$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf1b758d-53cd-4b34-8f1e-86f4156d959a/cf3ac50c-dea7-3183-83e5-bec20ee35a81.roa File: cf3ac50c-dea7-3183-83e5-bec20ee35a81.roa (raw, json) Hash identifier: Ec6YTMwoQ8zlAJf2M7VoCyetd8gIMynJqyA2FDxsyqQ= Subject key identifier: 95:29:89:FF:F1:A3:2E:06:CB:22:9A:E0:9D:36:45:AA:9E:15:9D:B3 Certificate issuer: /CN=cf1b758d-53cd-4b34-8f1e-86f4156d959a Certificate serial: 010D0C9F4328584F1037929E9507B97144AB0580 Authority key identifier: B5:55:E2:75:50:CD:19:41:A0:96:47:44:29:A2:9D:B9:1A:F7:81:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf1b758d-53cd-4b34-8f1e-86f4156d959a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf1b758d-53cd-4b34-8f1e-86f4156d959a/cf3ac50c-dea7-3183-83e5-bec20ee35a81.roa Signing time: Fri 04 Sep 2026 13:00:12 +0000 ROA not before: Fri 04 Sep 2026 13:00:12 +0000 ROA not after: Thu 03 Dec 2026 14:00:12 +0000 asID: 399928 IP address blocks: 167.234.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf1b758d-53cd-4b34-8f1e-86f4156d959a/cf1b758d-53cd-4b34-8f1e-86f4156d959a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf1b758d-53cd-4b34-8f1e-86f4156d959a/cf1b758d-53cd-4b34-8f1e-86f4156d959a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf1b758d-53cd-4b34-8f1e-86f4156d959a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:10:37:92:9e:95:07:b9:71:44:ab:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf1b758d-53cd-4b34-8f1e-86f4156d959a Validity Not Before: Sep 4 13:00:12 2026 GMT Not After : Dec 3 14:00:12 2026 GMT Subject: CN=c92f1f9e-6c4a-4891-99a5-eb7f67c6a140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:83:14:d3:90:f0:55:d1:6f:1f:72:2b:86:dd: de:f8:8a:95:b9:0a:9f:e9:4d:9d:cb:71:00:d1:81: 27:99:08:eb:35:23:59:2d:99:bb:63:44:3c:26:b2: 2a:5e:5a:a7:7c:78:33:2b:61:9e:7d:c8:02:f6:fe: cc:b7:ff:6d:3e:79:97:68:86:ff:85:24:9d:5b:47: 8f:6a:69:19:29:57:b8:b1:59:5c:3d:33:58:1e:c2: 5c:cb:7c:ba:80:5e:9d:e6:4b:38:93:b3:55:cd:15: 16:ed:cc:55:5d:ec:b9:38:6c:81:19:cd:4d:11:67: eb:20:ac:ae:43:d8:88:1c:3d:fa:4b:2a:59:be:0f: 63:1d:88:2f:a4:db:23:d2:51:1e:8d:15:df:b4:45: c6:33:e5:39:09:03:fc:53:a8:ab:dc:62:e3:1f:97: 8e:7a:bd:8d:96:71:cd:55:72:06:7c:14:45:37:d9: 5d:4d:77:a1:34:6e:2a:a6:df:73:fb:25:36:42:25: f1:b3:cc:79:f6:b8:ed:96:2a:7b:07:23:ef:4b:af: 78:c7:62:50:8c:76:02:99:ae:62:61:04:ba:1e:08: c8:be:b4:2a:5d:8b:0a:f7:ab:73:98:a1:6b:18:7b: ab:c4:97:e7:f8:39:ea:c6:ea:45:3b:ad:9d:81:11: 94:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:29:89:FF:F1:A3:2E:06:CB:22:9A:E0:9D:36:45:AA:9E:15:9D:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf1b758d-53cd-4b34-8f1e-86f4156d959a/cf3ac50c-dea7-3183-83e5-bec20ee35a81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf1b758d-53cd-4b34-8f1e-86f4156d959a/cf1b758d-53cd-4b34-8f1e-86f4156d959a.crl X509v3 Authority Key Identifier: keyid:B5:55:E2:75:50:CD:19:41:A0:96:47:44:29:A2:9D:B9:1A:F7:81:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf1b758d-53cd-4b34-8f1e-86f4156d959a.cer sbgp-ipAddrBlock: critical IPv4: 167.234.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:ba:a4:cd:bc:48:82:27:2e:54:e2:58:b3:5a:6e:3a:2f:f3: f6:48:0e:55:8d:cd:16:81:a8:5a:60:79:9c:7f:b7:99:ca:cd: b9:5d:34:52:e2:6f:07:42:4d:1d:f2:8a:4e:3c:80:d1:1a:c6: 8e:c0:3c:93:fc:dc:c1:23:f8:78:39:5b:c3:58:33:2f:93:29: 46:10:f1:ce:c0:c8:4d:67:c0:af:7d:a6:5b:80:d7:3f:22:74: 0a:e1:cc:b0:89:90:28:3c:42:56:80:b6:e2:8b:bc:58:c3:fb: 3b:3f:ea:90:52:15:0d:f1:55:c9:f7:f9:b3:e4:04:49:99:96: 3c:18:b1:ea:bc:59:77:7d:87:30:61:f8:8b:f9:cf:f6:6c:31: 96:c0:48:b0:ce:e0:71:04:08:18:bd:0c:b5:b2:33:95:8f:08: 87:55:92:ad:fd:85:1c:c4:85:dd:4a:ce:e4:35:98:34:a1:e5: 01:66:ed:20:ca:a5:ae:02:ea:fb:18:8c:61:96:2d:d0:0d:11: 96:64:b2:1e:7a:22:49:2b:a3:a8:f1:4a:29:6e:8f:16:7f:2d: 48:e7:01:01:46:9b:4f:28:a4:e3:93:98:9f:d9:72:0a:9e:bc: 8f:1f:1b:42:82:36:21:c8:59:35:03:32:4a:0e:d6:43:db:12: 95:f9:d9:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8QN5KelQe5cUSrBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YxYjc1OGQtNTNjZC00YjM0LThmMWUtODZmNDE1NmQ5 NTlhMB4XDTI2MDkwNDEzMDAxMloXDTI2MTIwMzE0MDAxMlowLzEtMCsGA1UEAxMk YzkyZjFmOWUtNmM0YS00ODkxLTk5YTUtZWI3ZjY3YzZhMTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIMU05DwVdFvH3Irht3e+IqVuQqf6U2dy3EA 0YEnmQjrNSNZLZm7Y0Q8JrIqXlqnfHgzK2GefcgC9v7Mt/9tPnmXaIb/hSSdW0eP amkZKVe4sVlcPTNYHsJcy3y6gF6d5ks4k7NVzRUW7cxVXey5OGyBGc1NEWfrIKyu Q9iIHD36SypZvg9jHYgvpNsj0lEejRXftEXGM+U5CQP8U6ir3GLjH5eOer2NlnHN VXIGfBRFN9ldTXehNG4qpt9z+yU2QiXxs8x59rjtlip7ByPvS694x2JQjHYCma5i YQS6HgjIvrQqXYsK96tzmKFrGHurxJfn+DnqxupFO62dgRGUrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJUpif/xoy4GyyKa4J02RaqeFZ2zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jZjFi NzU4ZC01M2NkLTRiMzQtOGYxZS04NmY0MTU2ZDk1OWEvY2YzYWM1MGMtZGVhNy0z MTgzLTgzZTUtYmVjMjBlZTM1YTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvY2YxYjc1OGQtNTNjZC00YjM0LThm MWUtODZmNDE1NmQ5NTlhL2NmMWI3NThkLTUzY2QtNGIzNC04ZjFlLTg2ZjQxNTZk OTU5YS5jcmwwHwYDVR0jBBgwFoAUtVXidVDNGUGglkdEKaKduRr3gRgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jZjFiNzU4ZC01M2NkLTRiMzQtOGYxZS04NmY0 MTU2ZDk1OWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEp+pQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIq6pM28SIInLlTiWLNabjov8/ZIDlWNzRaBqFpgeZx/t5nKzbldNFLi bwdCTR3yik48gNEaxo7APJP83MEj+Hg5W8NYMy+TKUYQ8c7AyE1nwK99pluA1z8i dArhzLCJkCg8QlaAtuKLvFjD+zs/6pBSFQ3xVcn3+bPkBEmZljwYseq8WXd9hzBh +Iv5z/ZsMZbASLDO4HEECBi9DLWyM5WPCIdVkq39hRzEhd1KzuQ1mDSh5QFm7SDK pa4C6vsYjGGWLdANEZZksh56Ikkro6jxSilujxZ/LUjnAQFGm08opOOTmJ/Zcgqe vI8fG0KCNiHIWTUDMkoO1kPbEpX52VM= -----END CERTIFICATE-----Generated at Tue Sep 29 15:50:50 2026 by rpki-client