$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bf848636-49a1-3402-b530-30cd588d3624.roa File: bf848636-49a1-3402-b530-30cd588d3624.roa (raw, json) Hash identifier: X7ISVGVGkY2ulwqRxdneF8aOHjcil8IlPYWzpt/o6Es= Subject key identifier: 64:4C:D5:30:18:AE:64:3E:87:08:CB:8C:60:89:1E:45:A3:87:AE:06 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D0A77A0C38CD17FDF2130C600 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bf848636-49a1-3402-b530-30cd588d3624.roa Signing time: Tue 03 Mar 2026 02:00:32 +0000 ROA not before: Tue 03 Mar 2026 02:00:32 +0000 ROA not after: Mon 01 Jun 2026 01:00:32 +0000 asID: 13335 IP address blocks: 172.64.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0a:77:a0:c3:8c:d1:7f:df:21:30:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 3 02:00:32 2026 GMT Not After : Jun 1 01:00:32 2026 GMT Subject: CN=a84194f9-6c1b-4fb0-9661-f5d37b215186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b7:4f:7a:70:4a:4b:22:d5:2d:91:8d:3e:af: b0:54:4b:ba:b9:a8:b9:a3:f7:67:2f:9d:76:17:d9: d3:f4:32:b4:b3:ba:44:cd:2e:fb:05:fb:16:fa:58: d7:35:1f:7c:66:1c:2e:7a:45:01:cd:cd:d5:03:3c: e0:54:31:c5:1c:21:ab:36:cc:25:0b:cd:d8:17:d1: 55:6e:77:32:6e:97:f1:5a:c4:d9:d1:80:fc:82:b0: c0:1b:87:51:76:7a:0d:69:fe:e5:fa:d2:0a:b7:eb: 0f:62:db:b8:20:d2:2b:7f:54:66:4c:00:09:7c:be: e2:c2:36:79:f9:fd:a4:73:01:93:53:d9:3f:ef:47: ba:d9:48:d1:56:73:f8:e9:b6:e1:a3:f4:5c:ec:f6: a9:b3:a5:d7:dd:73:66:88:62:93:02:63:dc:e0:73: f9:cf:1d:c8:08:8b:a3:76:06:c0:56:89:34:46:d5: 28:cd:c5:3d:3b:a4:f3:a3:6a:56:a4:bd:ef:34:23: 53:4e:73:86:98:1a:36:43:80:e9:77:2f:f5:ca:d2: a0:96:a2:01:73:e9:7f:5f:5f:ac:9b:94:f3:ae:68: 51:44:36:41:15:da:65:72:ef:e3:55:44:56:e8:e8: 4d:a7:2d:e4:a2:72:6b:a6:20:da:7d:e3:30:87:b9: 5d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:4C:D5:30:18:AE:64:3E:87:08:CB:8C:60:89:1E:45:A3:87:AE:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bf848636-49a1-3402-b530-30cd588d3624.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:a2:02:4a:4b:22:dd:df:f6:35:d0:14:d1:9f:00:63:1d:eb: e5:f5:0a:f3:d3:71:63:24:02:fb:7e:34:b6:88:ba:6e:39:e1: 92:a5:79:49:5e:8b:f4:c9:0a:c7:fe:21:82:ef:27:69:e9:51: 69:ef:55:79:f8:88:3e:7b:5e:4c:b9:97:6b:c1:97:ec:a4:02: b3:bc:e8:8a:20:a1:b9:57:45:fe:3b:8f:4a:28:b7:0f:30:f4: 02:d2:5c:05:69:5e:df:9c:0e:dc:2d:2c:b4:2b:8a:77:ee:6e: d8:a3:81:7b:aa:f4:5e:78:5d:f1:a2:b8:0f:72:90:00:3c:02: f9:3d:1b:78:dc:ab:9f:7c:17:00:8d:e7:e5:3b:2a:a0:4f:2e: 26:c4:75:8b:fa:f0:79:78:75:36:9f:e5:bc:92:28:93:fd:9f: 35:4f:f5:77:93:29:5b:89:da:cd:f0:ea:b8:21:59:7d:20:d9: 5a:a4:5a:19:ba:1b:42:d8:35:45:de:00:c0:12:e7:7b:8d:4a: 5e:32:b3:c6:0e:9c:51:0c:9a:45:36:d3:ab:9d:96:21:2c:d4: bd:09:ca:df:5f:5b:c6:10:97:65:95:89:1d:5f:8a:30:b6:bd: 19:42:c9:48:94:4b:c8:be:02:06:aa:f5:27:08:ce:e5:70:52: ce:3a:47:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Kd6DDjNF/3yEwxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDMwMzAyMDAzMloXDTI2MDYwMTAxMDAzMlowLzEtMCsGA1UEAxMk YTg0MTk0ZjktNmMxYi00ZmIwLTk2NjEtZjVkMzdiMjE1MTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bdPenBKSyLVLZGNPq+wVEu6uai5o/dnL512 F9nT9DK0s7pEzS77BfsW+ljXNR98ZhwuekUBzc3VAzzgVDHFHCGrNswlC83YF9FV bncybpfxWsTZ0YD8grDAG4dRdnoNaf7l+tIKt+sPYtu4INIrf1RmTAAJfL7iwjZ5 +f2kcwGTU9k/70e62UjRVnP46bbho/Rc7Paps6XX3XNmiGKTAmPc4HP5zx3ICIuj dgbAVok0RtUozcU9O6Tzo2pWpL3vNCNTTnOGmBo2Q4Dpdy/1ytKglqIBc+l/X1+s m5TzrmhRRDZBFdplcu/jVURW6OhNpy3konJrpiDafeMwh7ldawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRM1TAYrmQ+hwjLjGCJHkWjh64GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYmY4NDg2MzYtNDlhMS0z NDAyLWI1MzAtMzBjZDU4OGQzNjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEDaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWiAkpLIt3f9jXQFNGfAGMd6+X1CvPTcWMkAvt+NLaIum454ZKleUle i/TJCsf+IYLvJ2npUWnvVXn4iD57Xky5l2vBl+ykArO86IogoblXRf47j0ootw8w 9ALSXAVpXt+cDtwtLLQrinfubtijgXuq9F54XfGiuA9ykAA8Avk9G3jcq598FwCN 5+U7KqBPLibEdYv68Hl4dTaf5bySKJP9nzVP9XeTKVuJ2s3w6rghWX0g2VqkWhm6 G0LYNUXeAMAS53uNSl4ys8YOnFEMmkU206udliEs1L0Jyt9fW8YQl2WViR1fijC2 vRlCyUiUS8i+Agaq9ScIzuVwUs46Rx8= -----END CERTIFICATE-----Generated at Wed Mar 4 16:10:06 2026 by rpki-client