$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de745e80-c199-39e4-9ca1-a6949cf03008.roa File: de745e80-c199-39e4-9ca1-a6949cf03008.roa (raw, json) Hash identifier: oQ70JvdobeXaH0xIBm1eXWFLZnEd3a+s52v7zBDPiK8= Subject key identifier: 2F:33:90:97:DE:20:A6:86:3B:D9:FD:14:F5:54:5E:8D:2A:50:3B:F5 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D300A1EEEDEDE66CEBEFD2F00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de745e80-c199-39e4-9ca1-a6949cf03008.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 14789 IP address blocks: 172.70.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:1e:ee:de:de:66:ce:be:fd:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=4f702068-f04a-49d0-a67d-86190178b61c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d3:21:9e:f6:62:77:9d:f5:f2:e4:1e:d1:30: 25:73:8b:de:a0:5c:6b:28:3f:5b:a2:54:28:34:52: 10:98:b2:8b:cd:86:f5:30:f7:56:16:17:07:c6:29: 05:ad:38:24:4e:ce:c3:2a:dc:ba:9c:72:53:9f:ab: ff:53:b9:17:31:94:5d:fb:ca:bf:3d:02:eb:f9:07: de:fb:b0:09:32:29:4b:a1:1f:71:1e:6d:10:6b:67: 9e:26:7c:80:e4:0b:6b:c9:a3:db:0e:a8:bd:4a:e2: 64:21:53:1a:1c:a8:d6:d9:87:8a:8b:3e:80:3f:94: 07:d5:06:b2:a5:f0:61:2d:44:82:d2:19:3b:93:db: 78:d5:38:96:76:f7:14:5e:e6:39:b9:76:8b:52:28: eb:18:bd:7b:2f:c2:08:7c:1d:e4:f7:bf:2d:86:35: 81:8d:47:c2:0f:15:c7:ef:2c:1b:59:f5:dc:4e:fa: 8b:e0:71:27:99:21:13:22:58:c2:e9:98:12:57:fb: 73:84:57:f9:51:ce:74:44:1f:74:34:ff:5d:f0:bb: e3:f7:8c:c1:80:17:84:aa:90:93:f9:3e:15:61:61: 4d:5c:9f:c2:0e:94:e8:2e:9d:51:91:39:1d:26:da: 70:5c:a7:ba:a3:a7:a8:15:34:94:27:24:ae:c7:d4: b5:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:33:90:97:DE:20:A6:86:3B:D9:FD:14:F5:54:5E:8D:2A:50:3B:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de745e80-c199-39e4-9ca1-a6949cf03008.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:bc:9a:1b:da:ca:93:e9:27:73:57:0a:9f:d8:b2:88:13:29: 0d:6c:9a:40:8c:84:91:4c:f4:b1:74:2e:12:28:39:a5:5e:b4: f4:19:00:27:65:47:ad:ee:57:d7:91:44:fc:c1:19:15:45:ce: 16:5e:e3:f5:65:45:4b:58:f4:2e:48:dc:fb:95:60:4e:1a:a4: b9:46:5e:69:cd:51:90:0a:c0:f5:c9:8a:24:83:f4:ca:97:d3: 55:af:7b:32:0c:bf:fa:06:69:96:3d:18:b1:44:fe:11:8b:63: 4e:a2:1b:34:4d:6b:22:ab:84:20:9e:cf:27:4c:05:cd:47:67: 38:37:4f:8f:ae:d8:9b:c0:c8:ba:4e:d2:3e:e6:e8:b8:53:52: 8b:59:2f:f4:95:2d:3d:d3:97:8a:01:5e:11:47:e4:ac:6c:e6: 59:c9:9d:92:a9:14:7f:6a:fc:c4:bf:d0:9e:7f:58:c2:b1:06: 6b:37:73:55:4e:bc:72:ae:22:2c:e8:78:24:ba:95:d6:4d:99: e9:1e:68:25:58:82:3e:69:44:7e:22:ce:ad:f4:84:93:30:18: e0:fe:97:d5:7c:7f:3a:0b:97:77:c0:01:be:43:51:aa:34:a7: 5c:54:09:cf:8a:a7:91:c4:80:c8:5b:28:24:c4:c1:e9:ce:56: bf:27:ce:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCh7u3t5mzr79LwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NGY3MDIwNjgtZjA0YS00OWQwLWE2N2QtODYxOTAxNzhiNjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndMhnvZid5318uQe0TAlc4veoFxrKD9bolQo NFIQmLKLzYb1MPdWFhcHxikFrTgkTs7DKty6nHJTn6v/U7kXMZRd+8q/PQLr+Qfe +7AJMilLoR9xHm0Qa2eeJnyA5AtryaPbDqi9SuJkIVMaHKjW2YeKiz6AP5QH1Qay pfBhLUSC0hk7k9t41TiWdvcUXuY5uXaLUijrGL17L8IIfB3k978thjWBjUfCDxXH 7ywbWfXcTvqL4HEnmSETIljC6ZgSV/tzhFf5Uc50RB90NP9d8Lvj94zBgBeEqpCT +T4VYWFNXJ/CDpToLp1RkTkdJtpwXKe6o6eoFTSUJySux9S1iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC8zkJfeIKaGO9n9FPVUXo0qUDv1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGU3NDVlODAtYzE5OS0z OWU0LTljYTEtYTY5NDljZjAzMDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEZ0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGi8mhvaypPpJ3NXCp/YsogTKQ1smkCMhJFM9LF0LhIoOaVetPQZACdl R63uV9eRRPzBGRVFzhZe4/VlRUtY9C5I3PuVYE4apLlGXmnNUZAKwPXJiiSD9MqX 01WvezIMv/oGaZY9GLFE/hGLY06iGzRNayKrhCCezydMBc1HZzg3T4+u2JvAyLpO 0j7m6LhTUotZL/SVLT3Tl4oBXhFH5Kxs5lnJnZKpFH9q/MS/0J5/WMKxBms3c1VO vHKuIizoeCS6ldZNmekeaCVYgj5pRH4izq30hJMwGOD+l9V8fzoLl3fAAb5DUao0 p1xUCc+Kp5HEgMhbKCTEwenOVr8nzlE= -----END CERTIFICATE-----Generated at Tue Mar 24 16:49:45 2026 by rpki-client