$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b67e8b19-fcaa-3f06-a01c-ac1cf5df37e8.roa File: b67e8b19-fcaa-3f06-a01c-ac1cf5df37e8.roa (raw, json) Hash identifier: S3u7X10+xqQRPvBXP+vS3KZIVPxpFooSH6YdHZKL8/A= Subject key identifier: 90:D8:15:5E:6E:68:A1:00:37:33:B1:67:23:35:C0:21:8B:9F:15:FD Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D1F4A350874D825185BFCCA80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b67e8b19-fcaa-3f06-a01c-ac1cf5df37e8.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 14789 IP address blocks: 172.69.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:35:08:74:d8:25:18:5b:fc:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=41cfe765-c354-4271-b37e-a165848781ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4d:81:fe:b1:f6:41:d6:46:16:46:3d:b8:44: 14:22:c6:51:12:3d:3f:ae:af:0c:28:be:00:f6:85: 44:81:1e:db:ba:2a:f7:36:f2:ee:c9:cb:21:4c:28: 03:79:a8:62:f2:74:70:1d:55:1c:1d:81:30:a2:87: 16:a9:2f:b7:31:aa:6f:43:af:5b:1f:cf:fe:dd:34: 43:3d:43:5b:37:f1:c6:35:96:24:39:34:cd:ac:65: 0f:9d:8a:be:ec:37:01:36:e0:75:6f:09:b2:bb:dd: c5:05:74:10:dd:4f:db:ae:2f:80:7e:9e:04:9f:9f: 83:f0:3d:66:1a:3d:86:19:2a:cf:8c:64:62:56:9b: 23:6b:36:3d:99:98:8d:c5:75:70:56:3a:c4:b1:8d: 58:f2:10:0e:a7:ad:77:88:c1:a3:af:4f:2a:d0:64: 26:c0:73:aa:5a:ef:8e:1c:23:93:c4:5e:de:13:13: e0:76:68:60:25:26:52:4e:45:4a:47:80:9e:e5:40: 2a:6f:8f:1b:89:4a:18:f3:ae:bd:5d:a5:e9:f7:aa: fc:11:f9:13:3b:1a:46:6a:8b:c3:37:9d:d4:83:c3: 1f:c8:11:39:00:75:0b:1d:2e:a6:62:06:18:03:37: 39:5f:0c:cf:c2:e5:4b:12:70:6b:70:07:02:60:44: ed:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:D8:15:5E:6E:68:A1:00:37:33:B1:67:23:35:C0:21:8B:9F:15:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b67e8b19-fcaa-3f06-a01c-ac1cf5df37e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:18:34:19:7d:56:7d:39:05:bf:d9:12:aa:74:e7:8d:45:a8: f5:1a:69:aa:71:2b:f4:59:a4:6b:5d:ef:a6:fa:66:64:eb:af: 34:67:3b:83:d6:be:31:fe:65:63:04:34:1d:a5:fd:89:7e:97: 31:29:4e:60:be:a3:da:d0:7f:51:d2:d4:8a:95:ad:0b:ac:69: 7d:05:f0:61:4f:9b:42:03:f8:dc:b3:4b:29:9f:b5:0e:f6:dc: f2:ff:4c:bf:d6:b1:e3:f2:51:29:9a:6d:59:bd:01:50:15:11: d9:e7:f0:49:e7:3a:f4:cc:3b:42:cd:e4:02:3b:4f:a3:70:0c: 4e:4f:47:67:61:66:6b:09:80:8e:2e:43:47:3d:3b:91:f1:f0: 33:88:44:27:33:a1:cd:42:8b:5d:2f:3a:89:14:70:f9:2f:86: 54:18:6d:ea:aa:61:7f:c1:cf:bd:39:b3:2a:17:e9:0e:00:85: 80:92:65:dc:08:d0:5a:68:67:42:e3:69:af:bb:45:a6:b6:68: cb:8b:e4:17:cb:b2:d2:ea:a4:04:ee:2d:c8:07:3a:0b:7d:da: eb:03:00:47:98:d0:78:a5:0a:c1:b6:25:76:30:ef:49:ef:17: e5:d9:1b:ca:1c:b8:8b:f2:1c:fd:1b:3e:2b:76:04:39:27:67: 52:d5:3e:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSjUIdNglGFv8yoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk NDFjZmU3NjUtYzM1NC00MjcxLWIzN2UtYTE2NTg0ODc4MWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0U2B/rH2QdZGFkY9uEQUIsZREj0/rq8MKL4A 9oVEgR7buir3NvLuycshTCgDeahi8nRwHVUcHYEwoocWqS+3MapvQ69bH8/+3TRD PUNbN/HGNZYkOTTNrGUPnYq+7DcBNuB1bwmyu93FBXQQ3U/bri+Afp4En5+D8D1m Gj2GGSrPjGRiVpsjazY9mZiNxXVwVjrEsY1Y8hAOp613iMGjr08q0GQmwHOqWu+O HCOTxF7eExPgdmhgJSZSTkVKR4Ce5UAqb48biUoY8669XaXp96r8EfkTOxpGaovD N53Ug8MfyBE5AHULHS6mYgYYAzc5XwzPwuVLEnBrcAcCYETt3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJDYFV5uaKEANzOxZyM1wCGLnxX9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjY3ZThiMTktZmNhYS0z ZjA2LWEwMWMtYWMxY2Y1ZGYzN2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEXyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEsYNBl9Vn05Bb/ZEqp0541FqPUaaapxK/RZpGtd76b6ZmTrrzRnO4PW vjH+ZWMENB2l/Yl+lzEpTmC+o9rQf1HS1IqVrQusaX0F8GFPm0ID+NyzSymftQ72 3PL/TL/WsePyUSmabVm9AVAVEdnn8EnnOvTMO0LN5AI7T6NwDE5PR2dhZmsJgI4u Q0c9O5Hx8DOIRCczoc1Ci10vOokUcPkvhlQYbeqqYX/Bz705syoX6Q4AhYCSZdwI 0FpoZ0Ljaa+7Raa2aMuL5BfLstLqpATuLcgHOgt92usDAEeY0HilCsG2JXYw70nv F+XZG8ocuIvyHP0bPit2BDknZ1LVPtk= -----END CERTIFICATE-----Generated at Tue Mar 24 16:49:15 2026 by rpki-client