$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/4cd4e0e8-bad9-346d-9411-15c2f1ce24e9.roa File: 4cd4e0e8-bad9-346d-9411-15c2f1ce24e9.roa (raw, json) Hash identifier: gi43MjZkzd8Vr7YTLS3L/h/2l/arepSkalcj2NRu50U= Subject key identifier: A7:0B:0D:EE:95:6B:28:56:B4:95:39:43:73:24:36:48:2A:22:2D:C6 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584D20AF5821677855C172B32C00 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/4cd4e0e8-bad9-346d-9411-15c2f1ce24e9.roa Signing time: Wed 11 Mar 2026 01:00:32 +0000 ROA not before: Wed 11 Mar 2026 01:00:32 +0000 ROA not after: Tue 09 Jun 2026 01:00:32 +0000 asID: 213122 IP address blocks: 167.94.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:af:58:21:67:78:55:c1:72:b3:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Mar 11 01:00:32 2026 GMT Not After : Jun 9 01:00:32 2026 GMT Subject: CN=cb222318-98a4-429c-8d88-2bdb49fd593b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7b:67:6b:c0:fd:71:05:7f:b5:a2:1d:18:aa: d7:71:1f:1f:fb:02:29:3c:3e:60:ec:4d:ab:00:f8: 10:ef:4d:ff:da:c0:1e:b2:8a:e5:20:dd:7c:be:56: 4e:bb:fc:54:a7:61:98:09:ce:89:37:c3:e5:4e:e3: ff:3a:24:bf:39:97:5d:4b:43:d3:ca:64:d5:c3:4b: 00:c2:0e:5c:87:7d:aa:27:a5:7d:f2:0d:ec:58:fb: 53:ed:67:eb:0d:e1:41:0b:62:71:21:e5:54:8f:5e: 80:70:1a:79:53:82:c5:d0:38:5c:3e:be:9c:d2:82: 59:19:ab:b8:f3:cd:d6:e2:5b:0b:81:ee:7e:26:66: 0c:d2:2a:82:12:de:da:52:7a:8f:9e:04:d2:3b:d0: 70:03:d0:c2:96:75:68:18:bd:51:72:5a:c1:9e:ae: 17:0f:d6:77:0e:d9:b8:a4:a3:7a:dd:e8:1f:3f:68: 5a:b3:59:59:4d:52:be:b9:97:5a:ce:51:f4:49:0a: 70:67:ef:2e:bc:e3:3c:25:d0:29:d7:b3:79:4e:e1: 67:06:34:7b:ae:64:e7:48:bd:f5:db:88:46:a4:94: 40:c0:cf:ea:b6:1a:b7:27:70:3f:39:fb:2a:02:73: 32:72:52:51:2e:0a:bc:12:50:1a:fc:1b:d2:d4:f3: fe:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:0B:0D:EE:95:6B:28:56:B4:95:39:43:73:24:36:48:2A:22:2D:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/4cd4e0e8-bad9-346d-9411-15c2f1ce24e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 167.94.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:c9:d7:0b:63:3f:06:3f:8f:b9:fc:1a:16:8d:6f:00:b8:4e: 84:33:d1:4b:79:fe:5f:9e:6e:42:91:56:06:27:0c:e2:1f:b4: cf:85:de:c1:c9:21:12:fc:6e:b7:08:ef:b5:09:94:b6:0e:76: e2:3d:0a:b3:13:f9:17:a9:9a:e8:fe:48:f3:a6:78:50:39:6c: f5:63:c8:a8:20:63:6e:11:d1:3a:91:26:0b:f6:a1:5c:57:6a: 40:45:1c:04:58:a7:9b:b2:b6:61:2b:a1:26:30:15:26:fd:55: bb:ce:28:46:42:9a:01:c9:41:2b:15:42:ab:80:e5:99:46:9a: 07:20:5d:39:f1:31:41:42:ff:a1:b9:32:69:39:e6:9e:2b:46: 2e:0f:32:4a:d6:21:e8:d0:01:18:82:94:ea:d2:ad:52:96:9f: 33:af:af:e9:ba:07:8d:d7:74:68:89:11:e1:cb:ea:48:03:19: af:92:2e:4a:29:59:9f:51:b7:bf:b8:97:3a:8c:96:c3:36:7b: 63:c7:48:61:91:c4:9b:d8:49:d3:82:66:af:62:76:05:29:e7: 8b:d4:f7:a7:99:b5:02:fb:89:a0:a0:3d:dc:96:75:1f:52:55: c1:34:4f:67:51:b9:00:a4:5a:63:26:40:6d:d5:d7:f2:51:c8: 3c:2a:8a:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0gr1ghZ3hVwXKzLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk Y2IyMjIzMTgtOThhNC00MjljLThkODgtMmJkYjQ5ZmQ1OTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApntna8D9cQV/taIdGKrXcR8f+wIpPD5g7E2r APgQ703/2sAesorlIN18vlZOu/xUp2GYCc6JN8PlTuP/OiS/OZddS0PTymTVw0sA wg5ch32qJ6V98g3sWPtT7WfrDeFBC2JxIeVUj16AcBp5U4LF0DhcPr6c0oJZGau4 883W4lsLge5+JmYM0iqCEt7aUnqPngTSO9BwA9DClnVoGL1RclrBnq4XD9Z3Dtm4 pKN63egfP2has1lZTVK+uZdazlH0SQpwZ+8uvOM8JdAp17N5TuFnBjR7rmTnSL31 24hGpJRAwM/qthq3J3A/OfsqAnMyclJRLgq8ElAa/BvS1PP+DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKcLDe6VayhWtJU5Q3MkNkgqIi3GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvNGNkNGUwZTgtYmFkOS0z NDZkLTk0MTEtMTVjMmYxY2UyNGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp14vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfJ1wtjPwY/j7n8GhaNbwC4ToQz0Ut5/l+ebkKRVgYnDOIftM+F3sHJ IRL8brcI77UJlLYOduI9CrMT+Repmuj+SPOmeFA5bPVjyKggY24R0TqRJgv2oVxX akBFHARYp5uytmEroSYwFSb9VbvOKEZCmgHJQSsVQquA5ZlGmgcgXTnxMUFC/6G5 Mmk55p4rRi4PMkrWIejQARiClOrSrVKWnzOvr+m6B43XdGiJEeHL6kgDGa+SLkop WZ9Rt7+4lzqMlsM2e2PHSGGRxJvYSdOCZq9idgUp54vU96eZtQL7iaCgPdyWdR9S VcE0T2dRuQCkWmMmQG3V1/JRyDwqigo= -----END CERTIFICATE-----Generated at Fri Mar 13 13:32:06 2026 by rpki-client