$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/cfe80c02-4451-3852-8f1d-f10baf942eac.roa File: cfe80c02-4451-3852-8f1d-f10baf942eac.roa (raw, json) Hash identifier: jiTN/FErtBBMA24scijJXLG0oWFtL8RpALyGxX1k3tI= Subject key identifier: F3:F2:35:82:CB:B4:8D:90:CB:2E:4C:B4:B9:56:21:D8:27:21:56:AF Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584ECBD1C581629FB8882293DF80 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/cfe80c02-4451-3852-8f1d-f10baf942eac.roa Signing time: Tue 11 Aug 2026 01:00:11 +0000 ROA not before: Tue 11 Aug 2026 01:00:11 +0000 ROA not after: Mon 09 Nov 2026 02:00:11 +0000 asID: 2914 IP address blocks: 170.130.154.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Aug 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cb:d1:c5:81:62:9f:b8:88:22:93:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Aug 11 01:00:11 2026 GMT Not After : Nov 9 02:00:11 2026 GMT Subject: CN=4c94d75d-468f-42df-b831-d7e59c3c09b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b6:82:7b:e1:0c:20:a8:96:d4:86:7d:2c:a3: 5a:f3:52:91:ca:9d:c0:18:2d:9f:67:cd:59:6a:c1: 4a:98:93:33:7e:69:6d:c8:6d:fb:4f:2d:8b:72:38: c7:6b:73:0c:d3:10:d3:73:06:77:34:f8:61:69:8b: f8:a5:7f:28:5a:a6:e6:ff:75:29:cc:04:b0:0f:dc: 4f:09:d3:b6:73:1f:08:00:71:42:9f:ab:ca:d8:ca: c3:6d:91:70:80:f0:df:cb:5c:88:9a:6f:bd:d6:14: c1:86:34:49:b6:b2:f4:95:1e:46:78:d0:d7:45:bb: 42:3e:8e:3c:0f:02:80:82:f8:91:e6:77:0e:fe:5c: 17:f2:ab:f0:d5:ce:51:2d:6c:2e:ba:26:a8:21:80: 4a:37:3d:85:1d:1d:2b:51:0e:01:85:db:00:42:43: 0c:52:7b:2c:97:29:34:c4:9e:42:49:ed:6f:4f:29: 89:d3:e7:ca:8a:b7:13:79:71:31:31:5f:cd:ce:a2: 86:5b:aa:6e:03:8f:d9:af:54:f6:e0:19:b8:4b:07: 16:3a:19:39:13:50:fd:ab:c8:6f:b9:21:93:94:c2: 44:ca:82:08:dc:2a:d5:26:ca:7e:a5:03:56:7f:a0: 87:96:d6:ec:63:6e:8c:c4:8a:05:e9:92:f2:61:13: a2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:F2:35:82:CB:B4:8D:90:CB:2E:4C:B4:B9:56:21:D8:27:21:56:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/cfe80c02-4451-3852-8f1d-f10baf942eac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 170.130.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:28:28:b3:52:dd:af:25:12:e8:74:8b:b1:e8:12:cd:3a:cf: b7:8a:c0:ab:bc:9e:87:2f:a7:f1:8a:8e:df:b2:c2:64:16:02: c6:1e:4a:2d:15:39:dc:68:97:ab:62:80:81:49:f1:7e:0c:d5: 69:13:00:47:13:c0:b6:d0:36:18:c4:01:9a:13:a4:24:cd:af: 88:e4:82:e3:ac:3c:0c:e9:0e:7e:ca:0f:72:07:23:cc:ad:5f: a9:fe:e2:7a:e2:09:e1:43:2b:d7:88:09:c6:ec:c9:f4:05:13: 48:68:dc:47:1e:28:42:11:a9:e8:e4:1d:48:fc:2c:09:d4:fc: 71:7b:1a:ad:e0:63:3e:4e:83:13:d4:70:4c:32:9f:09:65:69: b6:96:b5:82:fc:69:e3:76:c7:a5:39:22:75:66:8b:1a:9b:85: b1:af:d7:bd:1a:a2:fd:03:f1:28:a2:09:da:e2:35:a2:a1:74: ea:a8:83:12:98:00:50:c3:b3:4e:2d:e3:b3:77:76:2c:5f:b9: 6f:54:8a:c0:f0:d8:57:62:bc:64:0d:10:0f:82:49:b5:17:ad: 37:4b:eb:9e:c7:12:af:a2:91:3a:04:dd:b9:98:87:ff:b5:2b: 21:70:00:e5:73:6f:1b:72:d8:27:80:8c:69:0d:42:3a:d5:bd: a3:d0:40:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7L0cWBYp+4iCKT34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk NGM5NGQ3NWQtNDY4Zi00MmRmLWI4MzEtZDdlNTljM2MwOWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxraCe+EMIKiW1IZ9LKNa81KRyp3AGC2fZ81Z asFKmJMzfmltyG37Ty2LcjjHa3MM0xDTcwZ3NPhhaYv4pX8oWqbm/3UpzASwD9xP CdO2cx8IAHFCn6vK2MrDbZFwgPDfy1yImm+91hTBhjRJtrL0lR5GeNDXRbtCPo48 DwKAgviR5ncO/lwX8qvw1c5RLWwuuiaoIYBKNz2FHR0rUQ4BhdsAQkMMUnsslyk0 xJ5CSe1vTymJ0+fKircTeXExMV/NzqKGW6puA4/Zr1T24Bm4SwcWOhk5E1D9q8hv uSGTlMJEyoII3CrVJsp+pQNWf6CHltbsY26MxIoF6ZLyYROiCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPPyNYLLtI2Qyy5MtLlWIdgnIVavMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvY2ZlODBjMDItNDQ1MS0z ODUyLThmMWQtZjEwYmFmOTQyZWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqoKaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkoKLNS3a8lEuh0i7HoEs06z7eKwKu8nocvp/GKjt+ywmQWAsYeSi0V Odxol6tigIFJ8X4M1WkTAEcTwLbQNhjEAZoTpCTNr4jkguOsPAzpDn7KD3IHI8yt X6n+4nriCeFDK9eICcbsyfQFE0ho3EceKEIRqejkHUj8LAnU/HF7Gq3gYz5OgxPU cEwynwllabaWtYL8aeN2x6U5InVmixqbhbGv170aov0D8SiiCdriNaKhdOqogxKY AFDDs04t47N3dixfuW9UisDw2FdivGQNEA+CSbUXrTdL657HEq+ikToE3bmYh/+1 KyFwAOVzbxty2CeAjGkNQjrVvaPQQOE= -----END CERTIFICATE-----Generated at Sat Aug 29 05:53:55 2026 by rpki-client