$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cf0d9002-718f-4388-938e-78b114810669/b0e2021f-b986-3370-8090-cfadf0d3d92c.roa File: b0e2021f-b986-3370-8090-cfadf0d3d92c.roa (raw, json) Hash identifier: ilBhohFGk3YzNigcMFMFrcGH2+YLL1kJYEiRIFtkkSE= Subject key identifier: D0:C0:7A:F0:96:85:71:29:19:DA:24:05:14:E5:0C:59:F0:39:92:1E Certificate issuer: /CN=cf0d9002-718f-4388-938e-78b114810669 Certificate serial: 010D0C9F4328584EE352ECFEA8BE1D9F50275800 Authority key identifier: A2:55:CC:58:88:E2:FF:72:0B:34:B5:6D:51:62:4D:50:93:68:C1:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cf0d9002-718f-4388-938e-78b114810669.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cf0d9002-718f-4388-938e-78b114810669/b0e2021f-b986-3370-8090-cfadf0d3d92c.roa Signing time: Wed 19 Aug 2026 11:04:06 +0000 ROA not before: Wed 19 Aug 2026 11:04:06 +0000 ROA not after: Tue 17 Nov 2026 12:04:06 +0000 asID: 22693 IP address blocks: 163.153.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cf0d9002-718f-4388-938e-78b114810669/cf0d9002-718f-4388-938e-78b114810669.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cf0d9002-718f-4388-938e-78b114810669/cf0d9002-718f-4388-938e-78b114810669.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cf0d9002-718f-4388-938e-78b114810669.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e3:52:ec:fe:a8:be:1d:9f:50:27:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0d9002-718f-4388-938e-78b114810669 Validity Not Before: Aug 19 11:04:06 2026 GMT Not After : Nov 17 12:04:06 2026 GMT Subject: CN=5af96f41-5a63-45d7-afbd-01cb65046ba1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:05:e9:db:bd:f1:87:4d:92:37:e8:b3:e6:8f: c6:c2:e1:52:27:10:41:51:46:6f:14:00:61:d8:36: 5c:da:a7:3c:8b:6a:18:54:9c:8e:93:d0:d4:79:a2: a7:77:9a:d2:3e:1e:0b:c4:f8:3c:11:36:18:f4:24: 40:d6:36:d6:f5:c8:de:93:cc:b7:94:b9:65:b9:7a: e1:19:e0:59:63:23:7a:d9:1c:8a:cf:8b:3a:63:5d: 4b:fc:db:9b:b4:d4:73:da:ec:e4:37:83:77:ba:b1: 91:3f:7c:77:ac:62:01:9e:59:db:25:a8:08:ff:55: 49:09:95:8e:e6:d0:5c:f5:64:8d:5a:8e:1b:c4:a4: 45:42:f1:ed:bf:b4:d0:27:08:b6:82:29:fb:06:64: 48:5b:30:8c:b0:81:37:aa:6c:50:09:ff:5f:8b:05: 4b:fe:de:22:3f:4a:57:77:6f:b2:62:fe:af:c8:1f: fb:d2:59:ab:1d:e1:92:a4:1d:79:cd:37:65:12:6e: 1f:1f:33:8c:0a:a1:8a:a9:ea:b8:cc:f4:ca:aa:d4: f3:ce:ed:4a:ba:dc:6f:a9:25:8c:d0:09:b1:90:da: c6:3d:84:d2:fe:34:c4:a3:1a:9b:a4:e2:5d:75:09: 16:d0:a3:ca:56:21:82:f7:55:df:85:00:6a:95:e4: fe:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C0:7A:F0:96:85:71:29:19:DA:24:05:14:E5:0C:59:F0:39:92:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cf0d9002-718f-4388-938e-78b114810669/b0e2021f-b986-3370-8090-cfadf0d3d92c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cf0d9002-718f-4388-938e-78b114810669/cf0d9002-718f-4388-938e-78b114810669.crl X509v3 Authority Key Identifier: keyid:A2:55:CC:58:88:E2:FF:72:0B:34:B5:6D:51:62:4D:50:93:68:C1:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cf0d9002-718f-4388-938e-78b114810669.cer sbgp-ipAddrBlock: critical IPv4: 163.153.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:4b:f0:83:14:61:13:e7:fe:85:f0:92:97:54:12:3f:3c:ca: fd:8a:5b:8a:c2:67:f0:de:12:9c:17:22:5e:cb:0b:a5:00:49: e2:3d:e5:c6:44:5e:6d:e8:e5:6f:13:f4:62:29:69:58:84:3a: aa:93:f9:c8:01:9f:69:e3:da:2e:07:72:6e:ef:ab:35:9d:09: 1d:69:6a:dc:b7:db:7e:cd:ff:27:31:42:28:cb:eb:a5:a7:70: f9:1b:ad:48:8e:78:a5:cc:d0:39:30:e0:53:6c:13:c1:6a:34: 19:ad:9b:63:42:51:99:19:9d:82:79:f8:a4:e9:d2:8b:e5:bb: 75:31:9f:d8:4a:07:2b:da:f1:6f:3c:af:6c:70:8c:a7:e3:6b: 4f:97:e6:d4:e2:d3:29:22:8a:c2:e7:bc:f5:9c:d8:59:49:56: e4:c7:b2:1c:7b:a2:f6:80:d4:ad:20:df:c6:9d:c1:d9:ac:6c: 99:ba:ed:63:11:b1:19:ec:3f:59:8d:68:d4:0f:55:f4:92:86: 2e:42:e5:11:03:c5:19:5c:ea:7c:f8:b6:10:d5:b0:35:45:52: 2b:4f:f3:14:77:08:35:d8:70:8e:2d:3a:c0:57:38:54:d8:d4: b7:13:39:1d:2c:cd:0a:ca:b5:0a:a0:61:9e:38:e3:d3:d8:60: 96:71:8a:07 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE7jUuz+qL4dn1AnWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwZDkwMDItNzE4Zi00Mzg4LTkzOGUtNzhiMTE0ODEw NjY5MB4XDTI2MDgxOTExMDQwNloXDTI2MTExNzEyMDQwNlowLzEtMCsGA1UEAxMk NWFmOTZmNDEtNWE2My00NWQ3LWFmYmQtMDFjYjY1MDQ2YmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwXp273xh02SN+iz5o/GwuFSJxBBUUZvFABh 2DZc2qc8i2oYVJyOk9DUeaKnd5rSPh4LxPg8ETYY9CRA1jbW9cjek8y3lLlluXrh GeBZYyN62RyKz4s6Y11L/NubtNRz2uzkN4N3urGRP3x3rGIBnlnbJagI/1VJCZWO 5tBc9WSNWo4bxKRFQvHtv7TQJwi2gin7BmRIWzCMsIE3qmxQCf9fiwVL/t4iP0pX d2+yYv6vyB/70lmrHeGSpB15zTdlEm4fHzOMCqGKqeq4zPTKqtTzzu1KutxvqSWM 0AmxkNrGPYTS/jTEoxqbpOJddQkW0KPKViGC91XfhQBqleT+jwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNDAevCWhXEpGdokBRTlDFnwOZIeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jZjBk OTAwMi03MThmLTQzODgtOTM4ZS03OGIxMTQ4MTA2NjkvYjBlMjAyMWYtYjk4Ni0z MzcwLTgwOTAtY2ZhZGYwZDNkOTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvY2YwZDkwMDItNzE4Zi00Mzg4LTkz OGUtNzhiMTE0ODEwNjY5L2NmMGQ5MDAyLTcxOGYtNDM4OC05MzhlLTc4YjExNDgx MDY2OS5jcmwwHwYDVR0jBBgwFoAUolXMWIji/3ILNLVtUWJNUJNowVswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jZjBkOTAwMi03MThmLTQzODgtOTM4ZS03OGIx MTQ4MTA2NjkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAo5kwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAS0vwgxRhE+f+hfCSl1QSPzzK/YpbisJn8N4SnBciXssLpQBJ4j3lxkRe bejlbxP0YilpWIQ6qpP5yAGfaePaLgdybu+rNZ0JHWlq3Lfbfs3/JzFCKMvrpadw +RutSI54pczQOTDgU2wTwWo0Ga2bY0JRmRmdgnn4pOnSi+W7dTGf2EoHK9rxbzyv bHCMp+NrT5fm1OLTKSKKwue89ZzYWUlW5MeyHHui9oDUrSDfxp3B2axsmbrtYxGx Gew/WY1o1A9V9JKGLkLlEQPFGVzqfPi2ENWwNUVSK0/zFHcINdhwji06wFc4VNjU txM5HSzNCsq1CqBhnjjj09hglnGKBw== -----END CERTIFICATE-----Generated at Thu Aug 27 06:24:13 2026 by rpki-client