$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/cef6eb0b-724e-322b-aeee-15e582a0c54c.roa File: cef6eb0b-724e-322b-aeee-15e582a0c54c.roa (raw, json) Hash identifier: tPssOkXSRqOrFIGNFywpgN+3FSIMptPQ1E5Q5Cxv3Sk= Subject key identifier: C8:2E:57:CA:4C:87:7A:C1:CC:C2:C3:B7:9B:BF:52:3C:D1:94:0D:2A Certificate issuer: /CN=7daa4589-66d8-4675-8538-e075ba80ecd3 Certificate serial: 010D0C9F4328584E2F045C41101911AF00FD9C00 Authority key identifier: BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/cef6eb0b-724e-322b-aeee-15e582a0c54c.roa Signing time: Mon 15 Jun 2026 21:00:12 +0000 ROA not before: Mon 15 Jun 2026 21:00:12 +0000 ROA not after: Sun 13 Sep 2026 21:00:12 +0000 asID: 20115 IP address blocks: 170.39.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2f:04:5c:41:10:19:11:af:00:fd:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7daa4589-66d8-4675-8538-e075ba80ecd3 Validity Not Before: Jun 15 21:00:12 2026 GMT Not After : Sep 13 21:00:12 2026 GMT Subject: CN=1cf1ab7b-46fe-48d5-8f46-10759c3c77be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:da:e3:33:a4:9e:bf:2c:83:49:f2:db:89:d5: dd:51:30:ad:4d:8e:8c:e9:32:7d:dc:ce:ec:f0:bf: bd:6f:cb:ed:4e:12:c8:b6:36:c5:21:c1:ee:63:bd: 28:48:cd:22:2e:13:55:66:f2:7e:bf:bf:1d:d8:5c: 7f:e5:20:2b:11:c5:64:53:5e:4c:31:c6:f7:7d:2d: f6:03:95:52:56:4d:15:7a:b2:16:36:17:92:5e:53: 11:80:9b:25:33:df:e6:41:cb:e1:fc:a3:f3:56:36: 23:ff:97:1d:f8:73:75:0f:37:b5:91:c8:5c:98:28: 7e:ea:16:0f:12:e4:d3:98:a1:d2:bf:f2:ca:25:34: 56:52:b0:8d:45:dd:43:d2:b1:db:36:38:e2:f7:06: 36:7d:86:93:35:f7:3f:35:da:47:b8:2b:a2:5d:6a: 5c:24:28:78:36:52:8b:2f:c6:a4:a3:68:47:77:33: 89:47:6a:ae:e3:18:fa:73:e3:c5:1f:94:6a:ee:1f: d1:11:4a:06:0b:71:7c:14:76:e5:e1:97:5d:fd:da: a4:53:0e:dc:61:45:fd:c3:e3:19:15:e9:b8:66:24: 88:90:60:4c:da:80:39:40:9d:af:b5:66:db:5c:c0: 0f:8f:13:5d:c2:f2:f4:59:98:d4:5d:8b:93:33:44: a4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:2E:57:CA:4C:87:7A:C1:CC:C2:C3:B7:9B:BF:52:3C:D1:94:0D:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/cef6eb0b-724e-322b-aeee-15e582a0c54c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.crl X509v3 Authority Key Identifier: keyid:BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer sbgp-ipAddrBlock: critical IPv4: 170.39.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:7f:37:3c:68:54:8b:3b:2a:b3:c1:59:54:c5:35:54:1f:01: 9b:fb:d0:fb:4a:1e:5b:d9:fb:23:dc:c9:18:b3:9e:c8:de:0d: 72:14:85:22:b5:1c:b3:11:a6:d8:bd:73:df:b5:5b:52:44:b7: aa:a1:da:49:fd:7f:ce:51:e4:cb:75:39:e2:5c:d1:58:43:d2: b4:68:d8:41:4c:5b:4d:34:df:dc:48:13:db:87:bb:54:be:5e: 62:9c:58:3c:27:fb:fe:9d:ca:09:c5:3b:18:4e:6f:82:56:67: e0:08:41:49:ba:a4:dd:02:79:48:96:bf:35:1a:39:00:32:af: c4:a0:f9:e9:33:f4:0d:b5:41:de:f9:28:30:c4:8b:b5:3c:11: 2a:be:97:9e:eb:85:d1:04:89:3c:49:85:fb:88:38:f1:ea:f5: 3d:54:c4:71:42:71:fc:86:de:7a:94:18:8f:8d:1a:af:42:ea: 2b:0d:4a:89:d8:3a:6f:82:b2:7e:34:96:aa:df:96:53:03:77: c5:01:ba:21:92:6f:b9:d5:67:71:c0:5a:c4:0c:95:57:ef:9f: ff:4b:26:72:aa:b6:f8:af:87:f4:1e:64:7b:10:b2:01:98:65: 14:a0:59:a9:25:15:af:f2:28:ac:5d:39:e2:8b:45:98:3d:86: d5:02:c9:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4vBFxBEBkRrwD9nAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2RhYTQ1ODktNjZkOC00Njc1LTg1MzgtZTA3NWJhODBl Y2QzMB4XDTI2MDYxNTIxMDAxMloXDTI2MDkxMzIxMDAxMlowLzEtMCsGA1UEAxMk MWNmMWFiN2ItNDZmZS00OGQ1LThmNDYtMTA3NTljM2M3N2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNrjM6SevyyDSfLbidXdUTCtTY6M6TJ93M7s 8L+9b8vtThLItjbFIcHuY70oSM0iLhNVZvJ+v78d2Fx/5SArEcVkU15MMcb3fS32 A5VSVk0VerIWNheSXlMRgJslM9/mQcvh/KPzVjYj/5cd+HN1Dze1kchcmCh+6hYP EuTTmKHSv/LKJTRWUrCNRd1D0rHbNjji9wY2fYaTNfc/NdpHuCuiXWpcJCh4NlKL L8ako2hHdzOJR2qu4xj6c+PFH5Rq7h/REUoGC3F8FHbl4Zdd/dqkUw7cYUX9w+MZ Fem4ZiSIkGBM2oA5QJ2vtWbbXMAPjxNdwvL0WZjUXYuTM0SkbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMguV8pMh3rBzMLDt5u/UjzRlA0qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZGFh NDU4OS02NmQ4LTQ2NzUtODUzOC1lMDc1YmE4MGVjZDMvY2VmNmViMGItNzI0ZS0z MjJiLWFlZWUtMTVlNTgyYTBjNTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2RhYTQ1ODktNjZkOC00Njc1LTg1 MzgtZTA3NWJhODBlY2QzLzdkYWE0NTg5LTY2ZDgtNDY3NS04NTM4LWUwNzViYTgw ZWNkMy5jcmwwHwYDVR0jBBgwFoAUv9T+9wqpQOy4VAn0Nps0P4ZaCgIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83ZGFhNDU4OS02NmQ4LTQ2NzUtODUzOC1lMDc1 YmE4MGVjZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqiemMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5/NzxoVIs7KrPBWVTFNVQfAZv70PtKHlvZ+yPcyRiznsjeDXIUhSK1 HLMRpti9c9+1W1JEt6qh2kn9f85R5Mt1OeJc0VhD0rRo2EFMW00039xIE9uHu1S+ XmKcWDwn+/6dygnFOxhOb4JWZ+AIQUm6pN0CeUiWvzUaOQAyr8Sg+ekz9A21Qd75 KDDEi7U8ESq+l57rhdEEiTxJhfuIOPHq9T1UxHFCcfyG3nqUGI+NGq9C6isNSonY Om+Csn40lqrfllMDd8UBuiGSb7nVZ3HAWsQMlVfvn/9LJnKqtvivh/QeZHsQsgGY ZRSgWaklFa/yKKxdOeKLRZg9htUCyQY= -----END CERTIFICATE-----Generated at Sat Jul 18 02:25:30 2026 by rpki-client