$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/dfb735f8-bbda-39f3-a3c2-137b2ab2bb33.roa File: dfb735f8-bbda-39f3-a3c2-137b2ab2bb33.roa (raw, json) Hash identifier: ATbw9ztD+YiA6EJyk1XJtLTN8+NTCE1nOucmrUS4APk= Subject key identifier: 91:DF:1D:17:29:B0:E7:C3:CC:FB:11:0A:C1:94:20:43:56:25:3A:85 Certificate issuer: /CN=cfaf95f1-8d08-4887-ae22-544a0d2b316c Certificate serial: 010D0C9F4328584D5243C8043B32E0600E7F1E40 Authority key identifier: 2D:D9:CA:7C:7A:E2:52:26:6C:E0:19:ED:92:9B:62:91:6A:2A:31:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/dfb735f8-bbda-39f3-a3c2-137b2ab2bb33.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 12195 IP address blocks: 192.234.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/cfaf95f1-8d08-4887-ae22-544a0d2b316c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/cfaf95f1-8d08-4887-ae22-544a0d2b316c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:c8:04:3b:32:e0:60:0e:7f:1e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfaf95f1-8d08-4887-ae22-544a0d2b316c Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=4db63cca-4af2-4d7a-8624-707235711b30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ba:1d:e7:c9:5b:5f:36:03:8b:29:a4:da:bc: f8:dc:e5:8b:c1:d3:f8:84:52:0c:48:6b:8e:91:e8: cb:1d:85:c2:50:0d:47:37:a0:2d:16:bc:1b:9d:bf: 39:98:46:30:6f:a5:d2:cd:de:d9:f1:bf:d0:22:d8: 51:71:48:5c:8f:17:a5:2e:10:ab:49:1b:31:3c:fc: b6:f8:10:7c:28:7a:b0:fd:8b:a0:91:90:7c:4b:29: a8:4b:20:d0:ac:59:01:35:91:dc:fb:b5:98:02:83: 5a:e3:32:99:4f:7c:b3:39:4d:c7:2e:d8:78:f5:cf: 0a:f3:3f:6e:68:13:d6:7d:1d:c2:30:e8:55:a6:3e: 84:5d:8e:92:2a:df:9e:66:79:63:00:12:df:73:03: 6f:48:ae:76:b8:71:3a:68:99:2f:6a:38:c5:77:1b: 90:20:af:71:8e:66:b5:b9:66:a6:02:f8:64:c7:cf: 0c:7e:d0:18:08:f0:cf:78:98:c8:3e:fe:de:54:18: 55:cd:31:ad:f7:2c:3a:e3:ac:db:90:56:78:b1:75: 77:68:2b:63:b8:a0:8d:32:1d:c1:40:d7:88:51:6d: 8f:87:c2:b9:a9:7d:78:4d:7a:0a:26:a5:24:42:b1: 4f:d0:fc:a4:29:67:b0:55:ef:b9:17:ce:7e:79:be: 9a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:DF:1D:17:29:B0:E7:C3:CC:FB:11:0A:C1:94:20:43:56:25:3A:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/dfb735f8-bbda-39f3-a3c2-137b2ab2bb33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/cfaf95f1-8d08-4887-ae22-544a0d2b316c.crl X509v3 Authority Key Identifier: keyid:2D:D9:CA:7C:7A:E2:52:26:6C:E0:19:ED:92:9B:62:91:6A:2A:31:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c.cer sbgp-ipAddrBlock: critical IPv4: 192.234.50.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:9d:93:bb:93:ae:99:10:bb:28:97:7a:5f:3a:c8:c5:85:76: 5e:4c:c8:26:d3:f6:30:2f:6c:fc:7a:5f:91:f3:9c:d1:32:9b: d6:05:83:bf:ef:02:01:7f:75:bd:1d:87:61:6f:6b:6c:00:d2: 0c:29:41:c9:5e:cc:b2:60:81:cf:9a:64:88:c6:ae:8a:01:2b: 9d:13:70:6f:f1:cc:24:47:16:6d:ab:aa:85:ef:a1:cc:53:7e: 26:16:7d:a3:29:d9:31:fd:fc:3e:25:30:54:dd:5a:c9:33:c7: a3:4a:26:69:57:18:23:a1:9e:56:cf:6a:bc:ee:ca:cf:82:f0: 44:47:8b:7c:7e:eb:a4:b8:0b:f8:c0:4d:8e:5c:08:3e:23:80: b2:00:a3:16:76:20:ba:a6:a1:a6:1b:e2:63:c9:42:66:c8:1e: 70:ce:44:f5:ca:9c:65:13:cb:3e:e7:66:3d:d6:cf:7d:b5:15: 89:3b:5b:a3:f4:85:42:26:c1:0d:3c:b0:d2:0e:3e:2b:15:a6: 30:dc:9e:5a:c3:99:24:d5:0a:36:66:ca:fb:16:01:eb:65:98: b1:bc:2d:75:c7:bb:af:bc:9b:ef:cd:1e:a8:f3:40:4f:24:94: a1:08:48:c2:c2:ef:2e:35:1d:fa:07:38:f7:c2:7e:7f:4c:07: 4d:6a:b7:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ8gEOzLgYA5/HkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZhZjk1ZjEtOGQwOC00ODg3LWFlMjItNTQ0YTBkMmIz MTZjMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk NGRiNjNjY2EtNGFmMi00ZDdhLTg2MjQtNzA3MjM1NzExYjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLod58lbXzYDiymk2rz43OWLwdP4hFIMSGuO kejLHYXCUA1HN6AtFrwbnb85mEYwb6XSzd7Z8b/QIthRcUhcjxelLhCrSRsxPPy2 +BB8KHqw/YugkZB8SymoSyDQrFkBNZHc+7WYAoNa4zKZT3yzOU3HLth49c8K8z9u aBPWfR3CMOhVpj6EXY6SKt+eZnljABLfcwNvSK52uHE6aJkvajjFdxuQIK9xjma1 uWamAvhkx88MftAYCPDPeJjIPv7eVBhVzTGt9yw646zbkFZ4sXV3aCtjuKCNMh3B QNeIUW2Ph8K5qX14TXoKJqUkQrFP0PykKWewVe+5F85+eb6aAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJHfHRcpsOfDzPsRCsGUIENWJTqFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jZmFm OTVmMS04ZDA4LTQ4ODctYWUyMi01NDRhMGQyYjMxNmMvZGZiNzM1ZjgtYmJkYS0z OWYzLWEzYzItMTM3YjJhYjJiYjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvY2ZhZjk1ZjEtOGQwOC00ODg3LWFl MjItNTQ0YTBkMmIzMTZjL2NmYWY5NWYxLThkMDgtNDg4Ny1hZTIyLTU0NGEwZDJi MzE2Yy5jcmwwHwYDVR0jBBgwFoAULdnKfHriUiZs4BntkptikWoqMUkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jZmFmOTVmMS04ZDA4LTQ4ODctYWUyMi01NDRh MGQyYjMxNmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOoyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmdk7uTrpkQuyiXel86yMWFdl5MyCbT9jAvbPx6X5HznNEym9YFg7/v AgF/db0dh2Fva2wA0gwpQclezLJggc+aZIjGrooBK50TcG/xzCRHFm2rqoXvocxT fiYWfaMp2TH9/D4lMFTdWskzx6NKJmlXGCOhnlbParzuys+C8ERHi3x+66S4C/jA TY5cCD4jgLIAoxZ2ILqmoaYb4mPJQmbIHnDORPXKnGUTyz7nZj3Wz321FYk7W6P0 hUImwQ08sNIOPisVpjDcnlrDmSTVCjZmyvsWAetlmLG8LXXHu6+8m+/NHqjzQE8k lKEISMLC7y41HfoHOPfCfn9MB01qt1k= -----END CERTIFICATE-----Generated at Mon Apr 13 12:08:00 2026 by rpki-client