$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647/a54a8459-0e0e-3ac7-a09c-54965f63560e.roa File: a54a8459-0e0e-3ac7-a09c-54965f63560e.roa (raw, json) Hash identifier: jKac08XPxNkQ10nBb/PYKhYLa6uqEfcjbuqXyYZX7WY= Subject key identifier: 9C:A8:30:0F:FA:4A:08:B2:C9:A4:3C:9B:4F:11:42:7B:D9:80:1C:4C Certificate issuer: /CN=cfba3e15-3fe1-4634-8e3b-838e9f2ae647 Certificate serial: 010D0C9F4328584EB8475D08C6AA01EF08653F80 Authority key identifier: 17:8A:2C:4A:22:5C:75:BB:7A:7B:F4:B0:8E:30:51:B7:20:11:35:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647/a54a8459-0e0e-3ac7-a09c-54965f63560e.roa Signing time: Tue 04 Aug 2026 01:00:12 +0000 ROA not before: Tue 04 Aug 2026 01:00:12 +0000 ROA not after: Mon 02 Nov 2026 02:00:12 +0000 asID: 30562 IP address blocks: 168.100.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647/cfba3e15-3fe1-4634-8e3b-838e9f2ae647.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647/cfba3e15-3fe1-4634-8e3b-838e9f2ae647.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b8:47:5d:08:c6:aa:01:ef:08:65:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfba3e15-3fe1-4634-8e3b-838e9f2ae647 Validity Not Before: Aug 4 01:00:12 2026 GMT Not After : Nov 2 02:00:12 2026 GMT Subject: CN=837e3b1d-f95a-4703-afe0-08f3c8a7e222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:8a:c5:22:89:ab:58:f3:4b:41:50:a9:8b:b9: 6b:f4:02:9c:d2:09:07:72:e5:ce:46:5b:1d:f2:70: ff:0e:4c:35:18:00:53:76:7b:a2:14:33:cd:2a:74: 74:7c:ee:69:49:d8:8a:59:c6:2b:1e:43:11:6e:fc: a6:39:5d:37:0a:f1:da:fa:2d:f1:67:e1:21:1c:4b: 08:0b:90:af:e8:21:26:74:64:c9:7c:41:51:24:5a: d9:35:61:55:ab:05:17:95:0d:84:85:91:11:5d:d9: 94:61:7e:8a:8c:ef:84:20:4f:87:41:23:88:8a:81: ad:5f:b6:9d:ac:8f:09:29:7c:09:47:19:ea:aa:3b: 33:aa:3a:44:20:d8:f5:5b:07:8b:be:af:38:33:98: ed:8d:b1:c9:db:b5:82:94:30:99:30:cf:9b:88:78: 4c:24:ac:68:72:d8:e7:b2:8e:89:c3:4f:4b:2d:84: 1f:d9:61:56:66:32:4f:a9:8b:f8:fa:08:26:55:ba: 98:a8:ab:90:1a:c4:56:3e:44:75:18:00:db:be:83: c5:b5:f5:42:b7:e1:ed:c0:a1:70:79:e7:8c:d1:2e: b1:bc:bb:d6:99:4f:44:67:5f:17:3a:6f:69:2b:74: 40:8d:55:0c:1e:53:a3:de:5a:89:63:e7:34:c8:5f: e3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:A8:30:0F:FA:4A:08:B2:C9:A4:3C:9B:4F:11:42:7B:D9:80:1C:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647/a54a8459-0e0e-3ac7-a09c-54965f63560e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647/cfba3e15-3fe1-4634-8e3b-838e9f2ae647.crl X509v3 Authority Key Identifier: keyid:17:8A:2C:4A:22:5C:75:BB:7A:7B:F4:B0:8E:30:51:B7:20:11:35:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647.cer sbgp-ipAddrBlock: critical IPv4: 168.100.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:4e:b0:4a:f6:7d:30:f5:33:9c:4a:c6:eb:c1:3a:18:30:04: 37:85:b0:c5:1f:a3:29:ad:2e:1b:02:25:97:f8:3d:44:42:f0: cf:02:99:81:f6:de:3c:65:39:a4:64:8a:35:66:4b:d2:64:e8: 70:e0:71:36:5d:f3:91:df:15:12:b7:81:b8:f8:8d:55:7b:bf: 8e:8b:32:e5:51:a4:79:9e:b2:45:58:cc:87:ee:46:27:c1:f2: 9e:23:5c:12:87:b9:e4:fd:aa:32:8c:09:21:b4:e5:92:da:41: 84:25:0e:97:9c:dc:4b:45:dc:2f:c5:72:8d:ca:4c:c3:e7:e6: 74:75:ed:71:8e:cd:2c:9a:93:72:2d:e7:b4:44:a2:36:04:2a: e4:39:1b:7a:0b:2d:24:42:f9:21:bf:3c:e8:8b:75:1a:94:96: 4c:a6:25:0f:35:b1:eb:13:46:f7:62:ba:38:7c:3c:72:68:c2: 1d:6e:8b:0f:95:91:1b:5c:46:ea:32:b9:4a:72:86:b3:14:2b: 58:18:33:d2:13:94:ed:10:1c:43:6b:59:b0:37:55:48:22:71: 0d:66:17:04:2b:18:43:30:57:39:c9:c8:8d:74:d5:0d:50:64: 23:4f:7a:3b:7a:80:ec:47:03:f8:01:4d:e4:68:5d:46:9d:7a: 08:4f:94:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE64R10IxqoB7whlP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZiYTNlMTUtM2ZlMS00NjM0LThlM2ItODM4ZTlmMmFl NjQ3MB4XDTI2MDgwNDAxMDAxMloXDTI2MTEwMjAyMDAxMlowLzEtMCsGA1UEAxMk ODM3ZTNiMWQtZjk1YS00NzAzLWFmZTAtMDhmM2M4YTdlMjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7IrFIomrWPNLQVCpi7lr9AKc0gkHcuXORlsd 8nD/Dkw1GABTdnuiFDPNKnR0fO5pSdiKWcYrHkMRbvymOV03CvHa+i3xZ+EhHEsI C5Cv6CEmdGTJfEFRJFrZNWFVqwUXlQ2EhZERXdmUYX6KjO+EIE+HQSOIioGtX7ad rI8JKXwJRxnqqjszqjpEINj1WweLvq84M5jtjbHJ27WClDCZMM+biHhMJKxoctjn so6Jw09LLYQf2WFWZjJPqYv4+ggmVbqYqKuQGsRWPkR1GADbvoPFtfVCt+HtwKFw eeeM0S6xvLvWmU9EZ18XOm9pK3RAjVUMHlOj3lqJY+c0yF/jNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJyoMA/6SgiyyaQ8m08RQnvZgBxMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZmJh M2UxNS0zZmUxLTQ2MzQtOGUzYi04MzhlOWYyYWU2NDcvYTU0YTg0NTktMGUwZS0z YWM3LWEwOWMtNTQ5NjVmNjM1NjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2ZiYTNlMTUtM2ZlMS00NjM0LThl M2ItODM4ZTlmMmFlNjQ3L2NmYmEzZTE1LTNmZTEtNDYzNC04ZTNiLTgzOGU5ZjJh ZTY0Ny5jcmwwHwYDVR0jBBgwFoAUF4osSiJcdbt6e/SwjjBRtyARNSowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZmJhM2UxNS0zZmUxLTQ2MzQtOGUzYi04Mzhl OWYyYWU2NDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqGSrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZOsEr2fTD1M5xKxuvBOhgwBDeFsMUfoymtLhsCJZf4PURC8M8CmYH2 3jxlOaRkijVmS9Jk6HDgcTZd85HfFRK3gbj4jVV7v46LMuVRpHmeskVYzIfuRifB 8p4jXBKHueT9qjKMCSG05ZLaQYQlDpec3EtF3C/Fco3KTMPn5nR17XGOzSyak3It 57REojYEKuQ5G3oLLSRC+SG/POiLdRqUlkymJQ81sesTRvdiujh8PHJowh1uiw+V kRtcRuoyuUpyhrMUK1gYM9ITlO0QHENrWbA3VUgicQ1mFwQrGEMwVznJyI101Q1Q ZCNPejt6gOxHA/gBTeRoXUadeghPlPE= -----END CERTIFICATE-----Generated at Fri Aug 21 22:01:03 2026 by rpki-client