$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8f653e3c-cac0-3d85-89a7-6d038bb6a1e3.roa File: 8f653e3c-cac0-3d85-89a7-6d038bb6a1e3.roa (raw, json) Hash identifier: bOKf4ixuS+2QDApazDpfWRjbYPLfeWR79stlL5LJ52Y= Subject key identifier: CD:46:74:64:DA:5D:EC:D0:EC:C2:4A:BD:A0:5B:52:4C:27:9E:6E:66 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D0C5FA00A2BEF0EF07E8B8580 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8f653e3c-cac0-3d85-89a7-6d038bb6a1e3.roa Signing time: Tue 03 Mar 2026 18:23:57 +0000 ROA not before: Tue 03 Mar 2026 18:23:57 +0000 ROA not after: Mon 01 Jun 2026 17:23:57 +0000 asID: 14789 IP address blocks: 172.69.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0c:5f:a0:0a:2b:ef:0e:f0:7e:8b:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 3 18:23:57 2026 GMT Not After : Jun 1 17:23:57 2026 GMT Subject: CN=501970cb-aff3-42f9-8bc6-cfc92abb485d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:be:b4:0b:45:27:d8:29:6f:9b:24:ae:33:53: 1a:7c:21:32:17:be:99:75:8b:bc:a1:f7:80:a9:76: d0:c8:35:5e:46:27:1c:17:7e:04:f6:8e:fb:c3:b1: e2:b6:6a:8f:5e:5a:83:e7:c3:4e:61:1b:5e:f7:f5: 70:41:d0:88:63:c3:c9:5e:d9:0b:dc:94:d0:8f:fc: f2:03:dc:7a:3a:f5:eb:36:a5:3c:71:c1:55:98:ca: 07:c8:75:f8:01:72:17:59:d7:c7:1a:8b:7c:40:48: 80:67:72:f1:99:5a:c5:eb:38:d5:99:f5:3d:f6:a9: 05:89:90:26:ee:6d:fe:fa:e1:ad:ba:42:46:df:c8: 12:97:d9:5c:d5:9c:fc:53:17:14:23:2b:7e:d1:25: bb:c6:22:90:9c:b2:af:37:df:36:fa:17:b0:2c:8d: 8d:9e:b8:da:8a:c9:1d:05:f0:ad:56:33:df:37:ea: 17:85:d5:0e:29:0c:79:f3:75:6b:5a:f2:d0:19:17: 90:1b:06:84:c4:aa:33:69:f9:66:e1:3f:09:b4:22: 5c:7a:ec:71:6c:9c:ae:ea:3e:85:d4:b2:e5:64:2a: 32:02:79:af:73:dc:7d:d6:e4:d3:d7:e6:bf:c7:ed: f7:fa:c8:84:56:80:21:37:87:a8:71:3a:81:fd:e0: 75:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:46:74:64:DA:5D:EC:D0:EC:C2:4A:BD:A0:5B:52:4C:27:9E:6E:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8f653e3c-cac0-3d85-89a7-6d038bb6a1e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:60:bb:14:75:db:77:95:21:36:e3:9a:c8:fe:2f:2d:5d:60: ad:a2:6a:cf:5e:28:d4:e4:ae:92:54:2d:97:67:c2:19:ce:4b: 99:3e:62:b6:24:8d:29:e0:76:c3:5a:f9:b7:bd:24:8e:e7:17: de:4e:9b:02:b3:f2:64:0c:2d:e2:6c:14:c3:37:58:a2:17:2b: 66:cb:7b:1a:79:7f:6d:68:d5:c0:8d:dc:60:b1:3c:d7:6d:cc: da:52:21:e0:1d:0f:99:45:e6:aa:7a:21:ee:62:b2:16:ff:80: a6:a0:b7:30:43:84:5e:9c:8f:8e:4d:40:21:e4:21:ed:5d:33: 2d:d8:6c:ba:f2:a6:47:d0:0b:3b:93:df:e7:80:e7:94:be:5e: c6:a8:d9:e4:98:9c:8a:4a:03:49:ab:d6:62:88:af:6a:36:29: 41:f5:cb:19:1d:56:2a:03:d8:df:6f:81:bd:c7:f7:34:32:f4: 9c:c3:84:a5:d0:67:a2:c9:64:67:9e:ad:bd:c3:90:35:2d:d9: d5:ec:bb:48:3d:ba:44:d2:e7:1b:df:75:36:c1:2a:0e:ba:cb: 3c:da:ec:65:1e:d7:a4:fa:45:68:94:6e:d2:76:9f:e6:2e:34: 30:66:d9:6b:ef:e1:30:f0:6d:54:88:2d:ad:3b:69:0a:23:ec: 67:5d:c7:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0MX6AKK+8O8H6LhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDMwMzE4MjM1N1oXDTI2MDYwMTE3MjM1N1owLzEtMCsGA1UEAxMk NTAxOTcwY2ItYWZmMy00MmY5LThiYzYtY2ZjOTJhYmI0ODVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1b60C0Un2ClvmySuM1MafCEyF76ZdYu8ofeA qXbQyDVeRiccF34E9o77w7HitmqPXlqD58NOYRte9/VwQdCIY8PJXtkL3JTQj/zy A9x6OvXrNqU8ccFVmMoHyHX4AXIXWdfHGot8QEiAZ3LxmVrF6zjVmfU99qkFiZAm 7m3++uGtukJG38gSl9lc1Zz8UxcUIyt+0SW7xiKQnLKvN982+hewLI2Nnrjaiskd BfCtVjPfN+oXhdUOKQx583VrWvLQGReQGwaExKozaflm4T8JtCJceuxxbJyu6j6F 1LLlZCoyAnmvc9x91uTT1+a/x+33+siEVoAhN4eocTqB/eB1hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1GdGTaXezQ7MJKvaBbUkwnnm5mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOGY2NTNlM2MtY2FjMC0z ZDg1LTg5YTctNmQwMzhiYjZhMWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEXHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFguxR123eVITbjmsj+Ly1dYK2ias9eKNTkrpJULZdnwhnOS5k+YrYk jSngdsNa+be9JI7nF95OmwKz8mQMLeJsFMM3WKIXK2bLexp5f21o1cCN3GCxPNdt zNpSIeAdD5lF5qp6Ie5ishb/gKagtzBDhF6cj45NQCHkIe1dMy3YbLrypkfQCzuT 3+eA55S+Xsao2eSYnIpKA0mr1mKIr2o2KUH1yxkdVioD2N9vgb3H9zQy9JzDhKXQ Z6LJZGeerb3DkDUt2dXsu0g9ukTS5xvfdTbBKg66yzza7GUe16T6RWiUbtJ2n+Yu NDBm2Wvv4TDwbVSILa07aQoj7Gddx00= -----END CERTIFICATE-----Generated at Tue Mar 24 16:46:51 2026 by rpki-client