$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf1b758d-53cd-4b34-8f1e-86f4156d959a/cf3ac50c-dea7-3183-83e5-bec20ee35a81.roa File: cf3ac50c-dea7-3183-83e5-bec20ee35a81.roa (raw, json) Hash identifier: WbY2WArkDSAckgNXIA60g5e89o9c62gaiKvpstPZnxg= Subject key identifier: E6:64:A3:3C:C5:9C:98:59:78:C8:74:79:44:22:FE:DB:D4:47:C1:8D Certificate issuer: /CN=cf1b758d-53cd-4b34-8f1e-86f4156d959a Certificate serial: 010D0C9F4328584CACF1C08FEFADC35956E51480 Authority key identifier: B5:55:E2:75:50:CD:19:41:A0:96:47:44:29:A2:9D:B9:1A:F7:81:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf1b758d-53cd-4b34-8f1e-86f4156d959a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf1b758d-53cd-4b34-8f1e-86f4156d959a/cf3ac50c-dea7-3183-83e5-bec20ee35a81.roa Signing time: Wed 28 Jan 2026 14:00:36 +0000 ROA not before: Wed 28 Jan 2026 14:00:36 +0000 ROA not after: Tue 28 Apr 2026 13:00:36 +0000 asID: 399928 IP address blocks: 167.234.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf1b758d-53cd-4b34-8f1e-86f4156d959a/cf1b758d-53cd-4b34-8f1e-86f4156d959a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf1b758d-53cd-4b34-8f1e-86f4156d959a/cf1b758d-53cd-4b34-8f1e-86f4156d959a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf1b758d-53cd-4b34-8f1e-86f4156d959a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ac:f1:c0:8f:ef:ad:c3:59:56:e5:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf1b758d-53cd-4b34-8f1e-86f4156d959a Validity Not Before: Jan 28 14:00:36 2026 GMT Not After : Apr 28 13:00:36 2026 GMT Subject: CN=a457303f-2129-418e-a261-47ca448886e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9a:fa:cf:89:6d:e2:99:ba:57:9a:86:7e:34: 49:7e:7d:43:1e:0f:48:6d:e2:6c:02:a6:0f:fb:90: eb:ef:a5:78:d2:84:1b:00:ed:a8:0e:9e:e1:4e:a6: f8:82:8f:62:3d:d5:b2:f7:d6:3a:98:8d:8c:0d:1c: 95:ad:25:72:00:ea:85:75:e0:30:8b:20:09:52:f8: 60:3c:d9:ec:1d:04:8d:b2:66:1b:cc:da:24:ee:0a: 07:ce:65:5e:10:2c:11:b2:45:c8:17:3e:b7:f0:db: 3e:93:28:66:db:f0:4f:63:96:3f:68:d5:95:56:44: c6:61:d7:cc:53:1f:77:6f:70:73:f8:76:2e:ac:92: df:5b:ba:9e:f8:d4:79:56:67:ec:15:ed:55:87:5b: 58:49:35:3a:02:68:f0:ee:87:39:06:9b:fc:87:6d: dd:34:16:85:09:d9:b3:da:ee:bb:f8:a1:a8:3b:98: 7c:27:a2:d3:74:94:f6:ed:6e:46:10:71:ab:ac:25: bb:68:f0:35:e2:bf:36:0a:a3:af:f2:76:72:a2:31: af:33:cd:0b:37:0c:f5:e6:b7:30:81:4a:3c:4d:4d: 87:0e:99:60:c8:d5:64:bf:cb:6b:b3:6b:75:d5:11: 8f:41:dd:6c:29:71:fb:bb:7a:5e:16:af:d0:f0:87: 28:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:64:A3:3C:C5:9C:98:59:78:C8:74:79:44:22:FE:DB:D4:47:C1:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf1b758d-53cd-4b34-8f1e-86f4156d959a/cf3ac50c-dea7-3183-83e5-bec20ee35a81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf1b758d-53cd-4b34-8f1e-86f4156d959a/cf1b758d-53cd-4b34-8f1e-86f4156d959a.crl X509v3 Authority Key Identifier: keyid:B5:55:E2:75:50:CD:19:41:A0:96:47:44:29:A2:9D:B9:1A:F7:81:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf1b758d-53cd-4b34-8f1e-86f4156d959a.cer sbgp-ipAddrBlock: critical IPv4: 167.234.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:e9:c5:bf:ec:4d:70:4a:20:f7:c4:82:8e:61:90:6c:fe:6d: 56:f5:f5:00:eb:10:e7:9d:79:e9:22:43:9e:7e:7e:0c:9a:29: 2b:7d:e3:e2:93:84:df:21:eb:b1:af:7f:05:81:b2:14:d6:ae: 20:14:5a:e5:dc:52:04:dd:ac:19:94:b2:3b:67:1c:9a:d0:f8: 6d:14:ac:38:fc:d7:a8:34:eb:44:cb:af:b7:08:42:8b:7c:be: 18:4b:a4:cf:42:6b:c7:da:de:fb:34:9d:19:5c:11:40:58:05: ec:25:eb:18:13:27:d1:ac:ce:6f:03:a1:7a:d4:94:eb:70:10: 9e:e0:6f:55:23:b8:c1:b0:d9:bb:b8:13:19:07:dd:ff:f7:fc: ee:35:33:22:58:59:10:cc:be:28:5a:0e:21:2f:60:55:f4:fc: f6:03:43:e2:d9:95:ba:9c:c9:e5:94:50:c7:4b:d8:d0:39:7d: 28:92:f0:b3:00:26:ca:ce:6b:37:76:7f:d1:07:3c:f3:3e:b5: 99:56:ea:7f:47:d1:57:86:09:6e:06:ab:df:5a:d4:00:a9:37: 77:6c:2f:2d:b9:c4:df:ee:ab:f1:28:f9:e3:e6:31:0e:c7:0a: 2c:a2:06:46:57:9b:32:4e:e3:e5:0c:c4:2d:88:a6:e1:87:5c: 67:9b:e4:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEys8cCP763DWVblFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YxYjc1OGQtNTNjZC00YjM0LThmMWUtODZmNDE1NmQ5 NTlhMB4XDTI2MDEyODE0MDAzNloXDTI2MDQyODEzMDAzNlowLzEtMCsGA1UEAxMk YTQ1NzMwM2YtMjEyOS00MThlLWEyNjEtNDdjYTQ0ODg4NmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZr6z4lt4pm6V5qGfjRJfn1DHg9IbeJsAqYP +5Dr76V40oQbAO2oDp7hTqb4go9iPdWy99Y6mI2MDRyVrSVyAOqFdeAwiyAJUvhg PNnsHQSNsmYbzNok7goHzmVeECwRskXIFz638Ns+kyhm2/BPY5Y/aNWVVkTGYdfM Ux93b3Bz+HYurJLfW7qe+NR5VmfsFe1Vh1tYSTU6Amjw7oc5Bpv8h23dNBaFCdmz 2u67+KGoO5h8J6LTdJT27W5GEHGrrCW7aPA14r82CqOv8nZyojGvM80LNwz15rcw gUo8TU2HDplgyNVkv8trs2t11RGPQd1sKXH7u3peFq/Q8IcoJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOZkozzFnJhZeMh0eUQi/tvUR8GNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jZjFi NzU4ZC01M2NkLTRiMzQtOGYxZS04NmY0MTU2ZDk1OWEvY2YzYWM1MGMtZGVhNy0z MTgzLTgzZTUtYmVjMjBlZTM1YTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvY2YxYjc1OGQtNTNjZC00YjM0LThm MWUtODZmNDE1NmQ5NTlhL2NmMWI3NThkLTUzY2QtNGIzNC04ZjFlLTg2ZjQxNTZk OTU5YS5jcmwwHwYDVR0jBBgwFoAUtVXidVDNGUGglkdEKaKduRr3gRgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jZjFiNzU4ZC01M2NkLTRiMzQtOGYxZS04NmY0 MTU2ZDk1OWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEp+pQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrpxb/sTXBKIPfEgo5hkGz+bVb19QDrEOedeekiQ55+fgyaKSt94+KT hN8h67GvfwWBshTWriAUWuXcUgTdrBmUsjtnHJrQ+G0UrDj816g060TLr7cIQot8 vhhLpM9Ca8fa3vs0nRlcEUBYBewl6xgTJ9Gszm8DoXrUlOtwEJ7gb1UjuMGw2bu4 ExkH3f/3/O41MyJYWRDMvihaDiEvYFX0/PYDQ+LZlbqcyeWUUMdL2NA5fSiS8LMA JsrOazd2f9EHPPM+tZlW6n9H0VeGCW4Gq99a1ACpN3dsLy25xN/uq/Eo+ePmMQ7H CiyiBkZXmzJO4+UMxC2IpuGHXGeb5JU= -----END CERTIFICATE-----Generated at Sat Feb 21 09:33:44 2026 by rpki-client