$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7ba2fe23-a5d0-38b6-b7b3-e0b13fcba893.roa File: 7ba2fe23-a5d0-38b6-b7b3-e0b13fcba893.roa (raw, json) Hash identifier: 5cVvYj/FBNR7pnW4r+c9PR9DVLUzQJk33tvB2ugrxfI= Subject key identifier: BF:48:19:AA:E5:2D:3E:EC:84:67:C9:F8:D8:4C:62:6A:F1:0F:0E:03 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D143D6F3F8DB2233883C02F40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7ba2fe23-a5d0-38b6-b7b3-e0b13fcba893.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 14789 IP address blocks: 172.69.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:6f:3f:8d:b2:23:38:83:c0:2f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=d4a4c2a8-033a-4d1d-a2b0-8589810e3633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e1:ad:6e:29:6a:3a:24:13:70:97:b4:f0:47: f6:df:2a:76:b2:25:dd:95:2b:79:6a:6b:98:f1:b5: 7e:5e:0c:8e:69:cc:9a:8a:ae:8d:dd:9d:6f:8e:91: 14:5f:b6:a6:e0:e3:97:4f:6a:ec:5e:90:c2:86:a3: 78:a2:6a:80:34:cd:36:51:fb:9e:56:cb:c3:27:f0: 5c:13:2e:76:7e:36:aa:a1:e3:c9:44:43:18:d9:7d: ae:03:b3:e1:e2:9e:d6:b4:5f:91:04:47:16:a6:ec: 00:41:6c:d2:44:be:08:b6:84:04:28:f9:0e:2b:fb: 56:45:1a:43:81:17:b7:58:83:48:ec:45:16:ec:1c: 3f:ac:fc:d2:a3:c0:f4:4e:bf:4e:30:6f:76:a7:ef: 6b:46:87:90:2e:ef:92:3e:75:7a:34:e1:43:49:36: 79:1b:1d:0f:61:c1:1c:33:6d:4d:21:75:31:ca:51: 94:92:fd:c6:fb:ed:8b:4d:50:24:7e:8e:dc:03:a1: 3d:15:2d:78:84:ba:08:c9:d9:ec:63:32:22:84:8c: 1b:1e:6b:22:3f:df:58:ff:ca:3d:b0:a5:19:dd:6c: 3d:75:c4:51:0c:45:38:8c:72:b3:20:1e:5f:e6:e1: 1e:dd:a1:9b:e9:f3:e4:e4:0a:49:6b:66:d8:91:3d: 95:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:48:19:AA:E5:2D:3E:EC:84:67:C9:F8:D8:4C:62:6A:F1:0F:0E:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7ba2fe23-a5d0-38b6-b7b3-e0b13fcba893.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:e2:74:22:07:45:fc:84:6e:17:15:57:39:58:95:38:31:81: 6a:7e:8c:b0:fe:5c:bf:ba:f3:a0:04:e0:9d:00:d4:20:31:84: b0:fc:52:6c:8c:14:5f:a1:49:27:bb:20:f8:71:b4:fc:cc:b3: 60:b7:57:ca:ad:98:75:15:b8:92:0c:92:b1:1d:9b:18:47:28: b5:5f:b2:b0:ec:e5:4d:72:2c:49:4d:db:49:7f:ca:f4:01:ce: 6a:73:ac:fe:74:54:6c:87:07:c7:d5:48:7f:28:d4:9c:23:98: 2a:1b:9f:3a:01:1a:0f:39:d9:78:d0:fb:11:bb:6e:e8:b8:26: d2:8d:72:fe:51:65:cb:b6:4e:7e:b7:f8:52:ab:1f:17:c9:f4: 80:84:3c:0b:ab:a2:7d:b3:15:aa:bb:b8:e5:99:7f:73:4f:1f: 2c:02:61:1d:0b:f4:80:a3:3f:bb:23:36:e9:79:30:17:3b:07: 4f:24:38:1d:89:ee:54:40:1c:ed:df:5d:51:4c:14:7e:01:dc: 76:1b:e4:7b:df:2b:20:47:4b:e1:90:c5:d8:9e:c5:97:aa:e0: aa:67:c2:e5:39:ca:c6:bc:49:1d:1a:78:39:0c:18:3c:a6:af: 1a:bc:30:72:a5:c2:19:c7:2f:b4:97:29:03:90:d4:51:19:28: 75:de:08:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPW8/jbIjOIPAL0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk ZDRhNGMyYTgtMDMzYS00ZDFkLWEyYjAtODU4OTgxMGUzNjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuGtbilqOiQTcJe08Ef23yp2siXdlSt5amuY 8bV+XgyOacyaiq6N3Z1vjpEUX7am4OOXT2rsXpDChqN4omqANM02UfueVsvDJ/Bc Ey52fjaqoePJREMY2X2uA7Ph4p7WtF+RBEcWpuwAQWzSRL4ItoQEKPkOK/tWRRpD gRe3WINI7EUW7Bw/rPzSo8D0Tr9OMG92p+9rRoeQLu+SPnV6NOFDSTZ5Gx0PYcEc M21NIXUxylGUkv3G++2LTVAkfo7cA6E9FS14hLoIydnsYzIihIwbHmsiP99Y/8o9 sKUZ3Ww9dcRRDEU4jHKzIB5f5uEe3aGb6fPk5ApJa2bYkT2VRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL9IGarlLT7shGfJ+NhMYmrxDw4DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvN2JhMmZlMjMtYTVkMC0z OGI2LWI3YjMtZTBiMTNmY2JhODkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEUOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjidCIHRfyEbhcVVzlYlTgxgWp+jLD+XL+686AE4J0A1CAxhLD8UmyM FF+hSSe7IPhxtPzMs2C3V8qtmHUVuJIMkrEdmxhHKLVfsrDs5U1yLElN20l/yvQB zmpzrP50VGyHB8fVSH8o1JwjmCobnzoBGg852XjQ+xG7bui4JtKNcv5RZcu2Tn63 +FKrHxfJ9ICEPAuron2zFaq7uOWZf3NPHywCYR0L9ICjP7sjNul5MBc7B08kOB2J 7lRAHO3fXVFMFH4B3HYb5HvfKyBHS+GQxdiexZeq4KpnwuU5ysa8SR0aeDkMGDym rxq8MHKlwhnHL7SXKQOQ1FEZKHXeCKA= -----END CERTIFICATE-----Generated at Tue Mar 24 16:47:20 2026 by rpki-client