$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/cfefb2e0-07ae-3fe0-96eb-1c46ef1b7e9a.roa File: cfefb2e0-07ae-3fe0-96eb-1c46ef1b7e9a.roa (raw, json) Hash identifier: ymqy+oXSbMG1NcbMZXftW7Rdj69Z3q5+to2neBWSQ9Y= Subject key identifier: B1:AE:94:C4:20:28:C9:23:15:D5:C3:D6:F6:EE:90:F6:E4:DF:21:C5 Certificate issuer: /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Certificate serial: 010D0C9F4328584EA7989F6462CCE6917A972D00 Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/cfefb2e0-07ae-3fe0-96eb-1c46ef1b7e9a.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16740 IP address blocks: 167.254.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:9f:64:62:cc:e6:91:7a:97:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=e691ecbf-5170-4737-a482-39e3a6631709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:92:50:06:c5:27:cd:a7:2a:7f:60:0e:0a:2e: cd:58:b1:e7:c9:77:3f:bf:f3:3c:ad:0a:0b:de:18: a2:d4:a1:03:1f:e2:9e:42:5f:e8:7b:c4:ca:31:3d: a4:7a:d2:64:34:09:ff:38:3c:2a:89:7a:1a:2f:8b: 4a:ab:fb:e3:7d:e9:3a:4e:2d:2e:8f:bb:43:f9:90: 9d:3c:79:0f:ac:8e:a4:8d:35:7c:f1:6b:ce:70:3a: 17:90:2c:06:8f:fe:cb:77:48:50:1e:6f:97:dc:51: ec:3f:67:f3:e5:4c:f8:34:73:76:5d:10:ea:73:3b: 6d:0b:45:d1:38:d0:5a:47:6b:86:91:15:07:e8:f5: 5a:7f:84:41:51:95:e9:cc:73:41:d8:6a:52:51:ea: 9a:87:5b:9a:6e:88:c9:02:69:b9:6e:02:07:5a:0b: 94:1b:73:aa:fe:7c:53:c5:52:cc:6f:ad:82:e9:5c: 76:11:67:0e:63:bc:8b:bb:5f:76:78:a4:d9:64:e6: bd:75:5e:9f:40:0f:d1:ed:e3:01:3f:d8:83:f1:63: 71:1f:50:97:3e:c8:92:65:ba:49:42:0b:f2:b6:01: 95:12:0d:f4:56:e0:82:32:ff:fe:93:5c:cd:97:c0: 8d:e7:16:07:6b:66:d4:d3:c6:e4:57:41:38:01:fd: a7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:AE:94:C4:20:28:C9:23:15:D5:C3:D6:F6:EE:90:F6:E4:DF:21:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/cfefb2e0-07ae-3fe0-96eb-1c46ef1b7e9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl X509v3 Authority Key Identifier: keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer sbgp-ipAddrBlock: critical IPv4: 167.254.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:4a:af:3d:ae:37:b9:d3:e8:64:fe:c4:70:7b:6e:ee:30:8c: 0c:60:e1:d1:db:fa:fe:93:1f:a8:04:f2:dd:e2:d3:5b:36:bf: 18:cd:ad:1a:fa:00:0b:0d:f2:7e:1c:6e:b1:6e:3c:e9:15:5a: 42:f7:6f:36:c4:c8:89:aa:75:f4:33:fb:cb:72:eb:99:2b:69: 84:eb:43:5a:75:e9:ec:fe:f1:26:70:1c:a9:9a:65:d2:c0:dc: e7:2e:29:5c:1c:22:c3:4b:f4:80:0b:26:54:fb:6b:b9:7a:89: ad:c6:46:27:d3:bd:dd:94:f6:cd:bd:e2:b1:0f:ba:25:f7:9e: 7b:2a:9d:24:70:2d:7c:25:43:71:36:ba:1e:ae:84:da:2e:41: 3a:ee:88:d1:1c:38:46:72:32:04:b5:ae:fd:b5:a3:4c:d1:51: 5b:04:bc:84:37:e0:58:17:94:81:5a:37:73:e6:54:db:14:03: 91:57:8c:1f:e2:56:2e:65:bc:5e:b7:d7:b9:1e:26:21:74:03: 59:d9:ff:a1:36:a9:ad:52:9d:67:c1:e7:8f:d0:4c:58:c4:c3: 90:81:43:b1:62:f5:61:5c:05:45:eb:db:ef:46:76:d3:94:f1: 3b:51:25:eb:eb:71:b0:d5:9c:ee:d1:41:ad:5c:7f:ce:38:96: df:5b:8f:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmJ9kYszmkXqXLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiYTIyODQtOWQyNC00YjZmLWJjOTYtYWE0MDdkN2E0 MjZmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZTY5MWVjYmYtNTE3MC00NzM3LWE0ODItMzllM2E2NjMxNzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJJQBsUnzacqf2AOCi7NWLHnyXc/v/M8rQoL 3hii1KEDH+KeQl/oe8TKMT2ketJkNAn/ODwqiXoaL4tKq/vjfek6Ti0uj7tD+ZCd PHkPrI6kjTV88WvOcDoXkCwGj/7Ld0hQHm+X3FHsP2fz5Uz4NHN2XRDqczttC0XR ONBaR2uGkRUH6PVaf4RBUZXpzHNB2GpSUeqah1uabojJAmm5bgIHWguUG3Oq/nxT xVLMb62C6Vx2EWcOY7yLu192eKTZZOa9dV6fQA/R7eMBP9iD8WNxH1CXPsiSZbpJ QgvytgGVEg30VuCCMv/+k1zNl8CN5xYHa2bU08bkV0E4Af2nBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLGulMQgKMkjFdXD1vbukPbk3yHFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJh MjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQwN2Q3YTQyNmYvY2ZlZmIyZTAtMDdhZS0z ZmUwLTk2ZWItMWM0NmVmMWI3ZTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2FiYTIyODQtOWQyNC00YjZmLWJj OTYtYWE0MDdkN2E0MjZmLzNhYmEyMjg0LTlkMjQtNGI2Zi1iYzk2LWFhNDA3ZDdh NDI2Zi5jcmwwHwYDVR0jBBgwFoAUtb7uJaE62p6iUxluFYdDPmcLU1gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJhMjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQw N2Q3YTQyNmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/7cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMFKrz2uN7nT6GT+xHB7bu4wjAxg4dHb+v6TH6gE8t3i01s2vxjNrRr6 AAsN8n4cbrFuPOkVWkL3bzbEyImqdfQz+8ty65kraYTrQ1p16ez+8SZwHKmaZdLA 3OcuKVwcIsNL9IALJlT7a7l6ia3GRifTvd2U9s294rEPuiX3nnsqnSRwLXwlQ3E2 uh6uhNouQTruiNEcOEZyMgS1rv21o0zRUVsEvIQ34FgXlIFaN3PmVNsUA5FXjB/i Vi5lvF6317keJiF0A1nZ/6E2qa1SnWfB54/QTFjEw5CBQ7Fi9WFcBUXr2+9GdtOU 8TtRJevrcbDVnO7RQa1cf844lt9bjwc= -----END CERTIFICATE-----Generated at Sat Aug 15 04:42:04 2026 by rpki-client