$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/cef6eb0b-724e-322b-aeee-15e582a0c54c.roa File: cef6eb0b-724e-322b-aeee-15e582a0c54c.roa (raw, json) Hash identifier: n40ewvOJ8BRU+PAh4P45K+7R8LZgemZnbkYZLW6el+s= Subject key identifier: 04:FF:6E:2D:FC:01:DA:F4:18:1D:BE:27:0C:8D:88:A4:21:56:E6:AD Certificate issuer: /CN=7daa4589-66d8-4675-8538-e075ba80ecd3 Certificate serial: 010D0C9F4328584ED1672BC87D61FE78B1782B80 Authority key identifier: BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/cef6eb0b-724e-322b-aeee-15e582a0c54c.roa Signing time: Thu 13 Aug 2026 01:00:11 +0000 ROA not before: Thu 13 Aug 2026 01:00:11 +0000 ROA not after: Wed 11 Nov 2026 02:00:11 +0000 asID: 20115 IP address blocks: 170.39.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d1:67:2b:c8:7d:61:fe:78:b1:78:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7daa4589-66d8-4675-8538-e075ba80ecd3 Validity Not Before: Aug 13 01:00:11 2026 GMT Not After : Nov 11 02:00:11 2026 GMT Subject: CN=f7b3aecd-1f85-4b4d-9d39-5094c6f140bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e5:ba:8a:76:52:f6:58:cd:e9:50:79:9f:05: 6e:7b:ae:8c:44:6a:60:6a:07:f3:10:85:2f:32:7e: 8b:fd:97:60:32:b6:e0:af:5b:29:71:ac:aa:4e:a0: ba:2c:e6:de:b3:04:fc:8e:8a:6d:a1:8a:38:a4:05: d0:a1:af:bc:68:8c:d7:48:96:0f:af:7f:0a:16:53: 36:30:74:11:6d:ac:65:37:a5:71:a3:a2:57:30:0f: 02:d2:af:0f:f8:20:47:73:4d:d2:2c:ff:23:a7:73: 3f:61:04:2c:38:8e:cd:f8:2c:e4:15:73:d8:56:97: 77:da:26:69:94:db:36:3c:85:d8:27:89:9b:04:1a: cb:e0:8a:42:a7:1c:02:a9:19:b8:66:c0:e6:6b:50: dd:8e:5d:b4:67:e8:26:2e:87:ad:4b:4a:97:82:23: 31:6d:f6:96:a9:af:a3:bf:e6:13:e5:a2:8e:fd:f8: 9c:c1:13:24:0b:49:17:df:85:ad:0a:2e:01:bf:03: f2:07:36:6b:fd:0d:ea:9c:0a:9b:19:13:3b:73:54: e4:12:ff:71:19:f5:ab:ca:a2:8a:40:49:9c:d9:79: 4c:32:2a:30:09:b3:70:59:68:71:41:7a:0b:ca:0b: 4c:e3:a8:63:70:fe:59:8b:29:b5:37:72:60:b6:de: de:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:FF:6E:2D:FC:01:DA:F4:18:1D:BE:27:0C:8D:88:A4:21:56:E6:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/cef6eb0b-724e-322b-aeee-15e582a0c54c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.crl X509v3 Authority Key Identifier: keyid:BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer sbgp-ipAddrBlock: critical IPv4: 170.39.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:dd:38:7c:12:6a:29:85:0b:bf:0b:f5:98:3b:cf:9f:70:af: e3:25:2b:89:e9:ed:ea:48:fc:d0:fb:e5:b1:ad:53:9c:ad:30: fe:bb:5f:f1:bc:e6:c8:b7:5a:06:1b:82:3c:40:1e:9b:56:9a: c0:a4:91:eb:d9:15:23:4c:4f:4e:f5:85:d4:62:26:11:33:c3: 95:20:06:75:6c:96:49:43:40:29:d5:4c:12:36:01:63:96:07: 53:9f:07:88:54:e2:0f:b9:6a:e5:45:75:2d:5b:41:0e:85:2a: af:5c:39:44:cf:2b:89:7c:ca:62:0b:d5:68:da:93:74:40:ea: fe:11:e9:86:aa:9b:70:4c:86:09:c6:4e:a9:5b:09:41:36:71: b4:7d:63:85:fb:4e:a2:77:4d:22:66:c8:b7:4c:87:9d:bd:78: fb:67:97:77:e5:e3:d5:82:95:41:a1:1b:cb:fa:44:31:2e:95: 54:ef:02:47:c0:49:f0:87:8d:5d:dd:f3:27:47:fb:21:21:2d: cf:23:86:81:ec:ad:ce:9b:3d:71:9f:52:5f:44:da:e3:4e:0f: 72:bb:4f:82:3e:88:25:49:bc:7d:58:81:7e:78:aa:b7:63:70: e0:8b:9f:52:e8:b4:06:33:52:d6:c7:a0:80:96:ce:27:79:6f: fd:f7:ee:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7RZyvIfWH+eLF4K4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2RhYTQ1ODktNjZkOC00Njc1LTg1MzgtZTA3NWJhODBl Y2QzMB4XDTI2MDgxMzAxMDAxMVoXDTI2MTExMTAyMDAxMVowLzEtMCsGA1UEAxMk ZjdiM2FlY2QtMWY4NS00YjRkLTlkMzktNTA5NGM2ZjE0MGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouW6inZS9ljN6VB5nwVue66MRGpgagfzEIUv Mn6L/ZdgMrbgr1spcayqTqC6LObeswT8joptoYo4pAXQoa+8aIzXSJYPr38KFlM2 MHQRbaxlN6Vxo6JXMA8C0q8P+CBHc03SLP8jp3M/YQQsOI7N+CzkFXPYVpd32iZp lNs2PIXYJ4mbBBrL4IpCpxwCqRm4ZsDma1Ddjl20Z+gmLoetS0qXgiMxbfaWqa+j v+YT5aKO/ficwRMkC0kX34WtCi4BvwPyBzZr/Q3qnAqbGRM7c1TkEv9xGfWryqKK QEmc2XlMMiowCbNwWWhxQXoLygtM46hjcP5Ziym1N3Jgtt7ekwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAT/bi38Adr0GB2+JwyNiKQhVuatMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZGFh NDU4OS02NmQ4LTQ2NzUtODUzOC1lMDc1YmE4MGVjZDMvY2VmNmViMGItNzI0ZS0z MjJiLWFlZWUtMTVlNTgyYTBjNTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2RhYTQ1ODktNjZkOC00Njc1LTg1 MzgtZTA3NWJhODBlY2QzLzdkYWE0NTg5LTY2ZDgtNDY3NS04NTM4LWUwNzViYTgw ZWNkMy5jcmwwHwYDVR0jBBgwFoAUv9T+9wqpQOy4VAn0Nps0P4ZaCgIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83ZGFhNDU4OS02NmQ4LTQ2NzUtODUzOC1lMDc1 YmE4MGVjZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqiemMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATdOHwSaimFC78L9Zg7z59wr+MlK4np7epI/ND75bGtU5ytMP67X/G8 5si3WgYbgjxAHptWmsCkkevZFSNMT071hdRiJhEzw5UgBnVslklDQCnVTBI2AWOW B1OfB4hU4g+5auVFdS1bQQ6FKq9cOUTPK4l8ymIL1Wjak3RA6v4R6Yaqm3BMhgnG TqlbCUE2cbR9Y4X7TqJ3TSJmyLdMh529ePtnl3fl49WClUGhG8v6RDEulVTvAkfA SfCHjV3d8ydH+yEhLc8jhoHsrc6bPXGfUl9E2uNOD3K7T4I+iCVJvH1YgX54qrdj cOCLn1LotAYzUtbHoICWzid5b/337jo= -----END CERTIFICATE-----Generated at Tue Sep 1 03:34:34 2026 by rpki-client