$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/d534cf0f-6f7c-3b0f-b274-0e1bd736d45f.roa File: d534cf0f-6f7c-3b0f-b274-0e1bd736d45f.roa (raw, json) Hash identifier: CbdhIbRi0KVKtx9KL3DlPa7bv5WYWFhkqCFMcnl4MuE= Subject key identifier: 39:36:88:12:15:14:21:34:51:C1:D6:CC:8A:C9:52:10:92:6A:FB:57 Certificate issuer: /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Certificate serial: 010D0C9F4328584D55BA3A89418D87EE1C425EE0 Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/d534cf0f-6f7c-3b0f-b274-0e1bd736d45f.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 25649 IP address blocks: 172.110.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:3a:89:41:8d:87:ee:1c:42:5e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=c8368d8c-e89d-4d75-b205-51134084ad57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:19:ce:ae:d7:13:10:e9:d2:57:ce:b8:5e:c2: 2b:27:f7:10:45:82:ef:d5:01:d0:bc:d3:37:fb:4f: 5b:84:da:f1:a2:5d:a4:04:e0:a5:41:e9:5a:a6:1e: 9a:2e:8c:01:77:f6:11:f2:70:c9:82:1a:df:0f:51: 04:4f:06:11:be:ac:0c:2d:18:88:ef:bc:5b:05:91: f5:92:51:84:cb:de:2a:cf:92:e5:6d:a5:b8:d2:b8: f9:b9:72:62:86:c7:07:0d:46:8e:ce:b2:5b:94:45: 74:eb:a9:70:df:c1:83:bf:ec:39:a5:c5:7d:b3:45: b4:01:ab:75:20:09:da:fe:9d:71:b1:e6:f3:28:52: 32:73:22:43:92:10:d1:a0:65:81:60:e1:45:45:06: 0f:ee:98:3c:07:6c:0b:35:e2:4a:a1:11:05:df:18: 1f:fa:0a:a0:f2:5a:07:40:af:1d:ee:34:2a:d5:5b: dd:20:54:39:ad:a3:4c:1b:86:30:5a:aa:13:7e:fb: dc:5e:c4:fe:a6:a7:72:01:84:41:09:82:b7:5a:f8: 87:64:00:1f:e9:84:bd:77:76:c6:c8:e6:57:62:24: 29:9c:cd:80:52:10:34:fe:b8:39:de:36:eb:99:34: a8:77:27:45:79:00:26:ef:76:7f:07:61:71:70:2d: 7b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:36:88:12:15:14:21:34:51:C1:D6:CC:8A:C9:52:10:92:6A:FB:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/d534cf0f-6f7c-3b0f-b274-0e1bd736d45f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl X509v3 Authority Key Identifier: keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer sbgp-ipAddrBlock: critical IPv4: 172.110.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:c2:25:ef:8b:41:cb:db:59:c1:4d:c7:d7:73:18:70:63:76: f4:ae:3f:8c:e8:a2:40:a6:ae:d2:ee:e7:1d:50:78:fe:6e:f3: 4d:ad:d6:13:c8:04:eb:fe:13:99:d5:20:72:f1:41:6a:b8:72: 42:7a:cf:cd:44:3e:75:eb:ee:ca:dc:99:b4:51:19:85:a4:63: 5e:05:91:ee:bb:9b:b7:56:e8:8d:ec:07:51:83:eb:ec:94:ba: 69:a0:a9:88:5a:78:f2:c9:68:5c:2c:56:f7:2e:40:f4:30:45: be:e3:ae:dc:0f:94:65:62:6f:76:f0:c8:2d:8a:4e:40:1b:11: 05:e1:2d:7e:53:e4:3d:42:04:70:4d:16:04:a8:94:8e:47:da: 87:43:97:d4:36:60:49:a8:09:a0:16:50:50:4b:f5:6e:ff:75: 24:5f:b8:c7:f0:9d:e4:2b:6f:32:55:69:50:e4:2c:3d:d3:2a: 72:3c:7a:e2:f4:ab:e2:2b:a9:51:0f:d0:b2:9d:91:f7:27:d9: b2:e3:7c:b1:bf:9d:d1:54:83:2f:e0:f9:5d:91:9d:d7:71:06: 49:f5:6b:98:c7:60:12:7f:c9:c9:1c:00:f5:51:9e:de:60:f8: 27:c7:f7:6a:39:63:a2:ba:b8:94:c2:e5:5b:70:10:59:ab:fe: fe:41:05:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VujqJQY2H7hxCXuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYwY2Y2ZmYtNmY2OS00MWI0LWFhNjctMjZkMGFiYTAy ZThlMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk YzgzNjhkOGMtZTg5ZC00ZDc1LWIyMDUtNTExMzQwODRhZDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhnOrtcTEOnSV864XsIrJ/cQRYLv1QHQvNM3 +09bhNrxol2kBOClQelaph6aLowBd/YR8nDJghrfD1EETwYRvqwMLRiI77xbBZH1 klGEy94qz5LlbaW40rj5uXJihscHDUaOzrJblEV066lw38GDv+w5pcV9s0W0Aat1 IAna/p1xsebzKFIycyJDkhDRoGWBYOFFRQYP7pg8B2wLNeJKoREF3xgf+gqg8loH QK8d7jQq1VvdIFQ5raNMG4YwWqoTfvvcXsT+pqdyAYRBCYK3WviHZAAf6YS9d3bG yOZXYiQpnM2AUhA0/rg53jbrmTSodydFeQAm73Z/B2FxcC17jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDk2iBIVFCE0UcHWzIrJUhCSavtXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBj ZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJhMDJlOGUvZDUzNGNmMGYtNmY3Yy0z YjBmLWIyNzQtMGUxYmQ3MzZkNDVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYwY2Y2ZmYtNmY2OS00MWI0LWFh NjctMjZkMGFiYTAyZThlL2RmMGNmNmZmLTZmNjktNDFiNC1hYTY3LTI2ZDBhYmEw MmU4ZS5jcmwwHwYDVR0jBBgwFoAU/GAffSctPt57SUZisgIHLGcDogIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQw YWJhMDJlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrG7wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrCJe+LQcvbWcFNx9dzGHBjdvSuP4zookCmrtLu5x1QeP5u802t1hPI BOv+E5nVIHLxQWq4ckJ6z81EPnXr7srcmbRRGYWkY14Fke67m7dW6I3sB1GD6+yU ummgqYhaePLJaFwsVvcuQPQwRb7jrtwPlGVib3bwyC2KTkAbEQXhLX5T5D1CBHBN FgSolI5H2odDl9Q2YEmoCaAWUFBL9W7/dSRfuMfwneQrbzJVaVDkLD3TKnI8euL0 q+IrqVEP0LKdkfcn2bLjfLG/ndFUgy/g+V2RnddxBkn1a5jHYBJ/yckcAPVRnt5g +CfH92o5Y6K6uJTC5VtwEFmr/v5BBak= -----END CERTIFICATE-----Generated at Thu Apr 9 03:40:18 2026 by rpki-client