$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/dfb735f8-bbda-39f3-a3c2-137b2ab2bb33.roa File: dfb735f8-bbda-39f3-a3c2-137b2ab2bb33.roa (raw, json) Hash identifier: jZ5TqI8d4HwAlrFUv6jAYt1ywQaUjmorNeg9q+eyKbY= Subject key identifier: 3D:F6:F4:61:12:4D:D8:A5:E8:99:25:7E:C0:94:99:47:F3:31:50:E3 Certificate issuer: /CN=cfaf95f1-8d08-4887-ae22-544a0d2b316c Certificate serial: 010D0C9F4328584E31CF81BA89CF42F7B7768760 Authority key identifier: 2D:D9:CA:7C:7A:E2:52:26:6C:E0:19:ED:92:9B:62:91:6A:2A:31:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/dfb735f8-bbda-39f3-a3c2-137b2ab2bb33.roa Signing time: Tue 16 Jun 2026 21:00:12 +0000 ROA not before: Tue 16 Jun 2026 21:00:12 +0000 ROA not after: Mon 14 Sep 2026 21:00:12 +0000 asID: 12195 IP address blocks: 192.234.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/cfaf95f1-8d08-4887-ae22-544a0d2b316c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/cfaf95f1-8d08-4887-ae22-544a0d2b316c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:31:cf:81:ba:89:cf:42:f7:b7:76:87:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfaf95f1-8d08-4887-ae22-544a0d2b316c Validity Not Before: Jun 16 21:00:12 2026 GMT Not After : Sep 14 21:00:12 2026 GMT Subject: CN=2ace9452-d819-46f7-b9f0-1cc2c3e11089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:79:e7:a3:0f:9e:25:d7:04:a7:48:9f:d1:ce: 1e:8d:e8:f1:82:33:76:d5:20:9d:c3:ca:88:70:d8: 84:3c:df:2c:e0:30:cb:e9:b8:22:0c:f6:3b:ef:c3: 23:85:7a:90:ae:3f:e1:0e:ca:35:d9:67:e0:f8:9c: 80:07:37:46:0c:86:ae:db:62:d7:73:4e:11:c4:86: ce:74:63:e5:59:78:a7:66:c7:a9:b7:47:4e:72:6f: c8:b2:24:69:22:85:bb:db:b2:ea:df:45:11:1b:39: 08:db:ec:e5:3c:61:a8:f8:0c:41:f2:7b:a8:46:a7: 95:83:86:29:06:e5:eb:b7:57:e3:36:86:6d:55:19: be:41:dd:ad:a1:d4:5e:c4:27:fc:ff:9e:30:8c:12: 13:7b:ca:89:d7:5a:70:2a:4e:d9:c4:3e:a5:f8:af: b3:74:f7:ec:91:35:41:6a:67:70:97:04:fd:42:87: a8:93:39:d9:a0:a0:4c:74:81:e9:cb:8d:2f:19:d0: 52:f1:5a:9d:52:ea:1e:fc:49:7d:cc:39:46:50:b3: e7:e4:a6:0b:80:56:ba:39:bd:d0:6f:44:e0:12:1a: 7f:0c:91:7b:17:22:a5:d8:0f:01:4e:7f:01:e7:3a: 70:ff:45:bc:60:e2:99:19:cc:2e:ac:27:67:c8:5d: a8:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:F6:F4:61:12:4D:D8:A5:E8:99:25:7E:C0:94:99:47:F3:31:50:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/dfb735f8-bbda-39f3-a3c2-137b2ab2bb33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/cfaf95f1-8d08-4887-ae22-544a0d2b316c.crl X509v3 Authority Key Identifier: keyid:2D:D9:CA:7C:7A:E2:52:26:6C:E0:19:ED:92:9B:62:91:6A:2A:31:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c.cer sbgp-ipAddrBlock: critical IPv4: 192.234.50.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:4a:7a:ff:bd:d9:a8:85:ce:e1:52:14:11:e7:27:1b:32:8f: c7:cd:ea:7d:40:77:ef:61:6c:c6:29:05:e3:d0:d0:92:55:59: 8a:e5:57:a4:88:86:ca:d7:92:38:15:2b:9d:13:df:11:a8:79: dc:5f:06:65:55:2e:0c:a8:82:12:7b:af:06:b3:e2:da:d6:e8: cf:99:e5:a9:be:a2:d6:bf:41:ae:75:f4:e7:42:d2:98:fa:a4: 63:73:94:1c:da:c4:72:87:44:3f:bf:87:7b:b1:62:fb:69:b7: 99:8b:af:2b:5d:bf:34:95:af:86:a3:f0:ac:0e:a4:1b:f0:22: 6a:bb:00:75:3d:ea:cb:16:04:39:5d:f5:b1:14:29:90:20:35: 86:28:8e:32:d2:15:40:69:db:c4:af:97:cd:be:af:e6:c4:d1: f8:cd:35:a6:67:de:44:b8:0f:f4:1b:12:6b:80:28:6c:5f:cf: 80:b7:ec:f2:74:9d:30:22:95:40:50:8e:6e:3f:04:94:02:33: df:51:e2:14:e5:ca:74:33:3b:5a:3c:e3:43:7b:05:f6:5d:fb: d0:13:78:50:07:a5:19:62:88:c5:2f:4a:a4:30:10:07:2e:13: 91:f5:f0:d9:48:c0:39:be:b0:93:58:d2:d1:7d:e3:db:0f:1b: 8d:45:9a:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4xz4G6ic9C97d2h2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZhZjk1ZjEtOGQwOC00ODg3LWFlMjItNTQ0YTBkMmIz MTZjMB4XDTI2MDYxNjIxMDAxMloXDTI2MDkxNDIxMDAxMlowLzEtMCsGA1UEAxMk MmFjZTk0NTItZDgxOS00NmY3LWI5ZjAtMWNjMmMzZTExMDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnnnow+eJdcEp0if0c4ejejxgjN21SCdw8qI cNiEPN8s4DDL6bgiDPY778MjhXqQrj/hDso12Wfg+JyABzdGDIau22LXc04RxIbO dGPlWXinZsept0dOcm/IsiRpIoW727Lq30URGzkI2+zlPGGo+AxB8nuoRqeVg4Yp BuXrt1fjNoZtVRm+Qd2todRexCf8/54wjBITe8qJ11pwKk7ZxD6l+K+zdPfskTVB amdwlwT9QoeokznZoKBMdIHpy40vGdBS8VqdUuoe/El9zDlGULPn5KYLgFa6Ob3Q b0TgEhp/DJF7FyKl2A8BTn8B5zpw/0W8YOKZGcwurCdnyF2ocQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD329GESTdil6JklfsCUmUfzMVDjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jZmFm OTVmMS04ZDA4LTQ4ODctYWUyMi01NDRhMGQyYjMxNmMvZGZiNzM1ZjgtYmJkYS0z OWYzLWEzYzItMTM3YjJhYjJiYjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvY2ZhZjk1ZjEtOGQwOC00ODg3LWFl MjItNTQ0YTBkMmIzMTZjL2NmYWY5NWYxLThkMDgtNDg4Ny1hZTIyLTU0NGEwZDJi MzE2Yy5jcmwwHwYDVR0jBBgwFoAULdnKfHriUiZs4BntkptikWoqMUkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jZmFmOTVmMS04ZDA4LTQ4ODctYWUyMi01NDRh MGQyYjMxNmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOoyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9Kev+92aiFzuFSFBHnJxsyj8fN6n1Ad+9hbMYpBePQ0JJVWYrlV6SI hsrXkjgVK50T3xGoedxfBmVVLgyoghJ7rwaz4trW6M+Z5am+ota/Qa519OdC0pj6 pGNzlBzaxHKHRD+/h3uxYvtpt5mLrytdvzSVr4aj8KwOpBvwImq7AHU96ssWBDld 9bEUKZAgNYYojjLSFUBp28Svl82+r+bE0fjNNaZn3kS4D/QbEmuAKGxfz4C37PJ0 nTAilUBQjm4/BJQCM99R4hTlynQzO1o840N7BfZd+9ATeFAHpRliiMUvSqQwEAcu E5H18NlIwDm+sJNY0tF949sPG41FmmE= -----END CERTIFICATE-----Generated at Wed Jul 15 02:59:37 2026 by rpki-client