$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fde91086-adf5-3f2a-b4a1-0fcdff51dc7d.roa File: fde91086-adf5-3f2a-b4a1-0fcdff51dc7d.roa (raw, json) Hash identifier: 1FAABp26d+vmG8K62k9p5Ogyyy6INCSo8kyq7QWSDMY= Subject key identifier: 0C:F4:98:D5:7C:09:B1:3E:B7:0B:ED:48:72:25:1B:B7:44:84:04:0B Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D316F634A01FFA62C1C0B06C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fde91086-adf5-3f2a-b4a1-0fcdff51dc7d.roa Signing time: Tue 17 Mar 2026 01:00:32 +0000 ROA not before: Tue 17 Mar 2026 01:00:32 +0000 ROA not after: Mon 15 Jun 2026 01:00:32 +0000 asID: 14789 IP address blocks: 172.69.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:31:6f:63:4a:01:ff:a6:2c:1c:0b:06:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 17 01:00:32 2026 GMT Not After : Jun 15 01:00:32 2026 GMT Subject: CN=5813e220-d396-46a5-b6f4-a6403d2c4daf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f5:87:94:31:c7:bf:a1:1c:70:4e:bb:14:40: 74:f5:48:13:ac:65:e8:a6:e8:bd:49:06:d6:0d:36: bc:11:a8:26:c6:1c:f1:5d:45:9e:51:50:4c:3f:c9: f9:a4:63:b6:1c:0f:c3:16:3b:c1:ba:1b:4a:37:d7: f8:d6:ed:ee:b0:e2:1e:db:da:90:a9:e4:9a:bc:c4: 89:a9:fa:20:a0:c6:17:ea:6a:81:b8:dc:68:42:8c: 24:28:9c:1d:de:4f:55:85:aa:8c:00:32:cb:13:ff: ba:b3:3f:ef:88:e8:5b:ae:d7:02:9d:2c:94:f6:fa: ff:d3:ee:54:9b:9f:ba:29:92:bc:cc:15:9f:30:08: 15:59:97:6f:26:87:39:5c:94:5b:c3:a7:44:f8:77: d1:a2:62:df:d6:ab:97:4d:9c:32:c5:6b:cb:a8:11: d9:d2:ea:a7:d5:41:5a:d5:93:28:bc:9b:46:11:88: f8:9a:f5:eb:60:90:a7:97:63:8a:86:de:49:f7:2c: 59:03:35:c6:1b:e0:d1:a1:05:3a:fb:46:9c:e6:fc: c8:7c:99:25:a7:0c:2c:68:2e:30:9e:15:7c:d8:6c: 3c:39:f8:de:7e:a4:2e:d0:cd:77:25:52:22:58:0f: 8d:7a:24:c1:20:43:80:55:79:d1:da:70:fa:37:f9: 9c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:F4:98:D5:7C:09:B1:3E:B7:0B:ED:48:72:25:1B:B7:44:84:04:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fde91086-adf5-3f2a-b4a1-0fcdff51dc7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:20:31:7f:62:5b:45:ac:4c:78:a3:57:b8:0d:5f:98:18:d8: c1:4a:bd:22:c9:8b:84:d0:24:5b:5c:bf:48:6c:79:09:6e:a7: c9:78:52:f3:d1:b9:6b:ad:c6:7b:7a:23:1c:c7:09:8c:7c:d5: a9:47:9e:09:b1:ea:34:aa:c5:71:5f:06:90:d0:5a:5c:13:4f: 3e:df:02:1f:df:f4:d7:df:5c:42:c1:27:74:c2:db:61:ba:42: a1:3c:ee:5d:1b:41:1a:64:20:10:56:a0:0a:32:eb:52:8c:86: fe:e5:7e:eb:15:84:11:7b:26:35:a1:e7:5d:05:18:5c:10:d4: e0:8f:ee:5a:7d:dc:f5:bc:a4:82:2f:61:c7:78:82:f3:c4:f3: b7:ba:1c:b6:de:96:4b:14:98:b5:b1:7f:0a:12:05:1c:07:02: 91:e4:18:77:8f:a8:a0:1c:53:08:c7:9a:e9:c7:8c:4e:e8:e8: 67:33:3d:bb:37:aa:9c:1c:35:a8:f6:c5:05:9e:86:e2:d5:76: fd:73:ed:d4:08:ec:70:c3:f7:f5:71:83:15:a4:48:d7:f3:3a: 41:97:82:75:46:cd:27:ea:7a:88:21:45:9a:99:25:9c:15:0d: 64:e5:46:4c:37:f6:18:c1:08:d2:f4:58:54:c6:52:86:66:46: 1f:b6:60:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0xb2NKAf+mLBwLBsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDMxNzAxMDAzMloXDTI2MDYxNTAxMDAzMlowLzEtMCsGA1UEAxMk NTgxM2UyMjAtZDM5Ni00NmE1LWI2ZjQtYTY0MDNkMmM0ZGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvWHlDHHv6EccE67FEB09UgTrGXopui9SQbW DTa8EagmxhzxXUWeUVBMP8n5pGO2HA/DFjvBuhtKN9f41u3usOIe29qQqeSavMSJ qfogoMYX6mqBuNxoQowkKJwd3k9VhaqMADLLE/+6sz/viOhbrtcCnSyU9vr/0+5U m5+6KZK8zBWfMAgVWZdvJoc5XJRbw6dE+HfRomLf1quXTZwyxWvLqBHZ0uqn1UFa 1ZMovJtGEYj4mvXrYJCnl2OKht5J9yxZAzXGG+DRoQU6+0ac5vzIfJklpwwsaC4w nhV82Gw8OfjefqQu0M13JVIiWA+NeiTBIEOAVXnR2nD6N/mcQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAz0mNV8CbE+twvtSHIlG7dEhAQLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZmRlOTEwODYtYWRmNS0z ZjJhLWI0YTEtMGZjZGZmNTFkYzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEVOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkgMX9iW0WsTHijV7gNX5gY2MFKvSLJi4TQJFtcv0hseQlup8l4UvPR uWutxnt6IxzHCYx81alHngmx6jSqxXFfBpDQWlwTTz7fAh/f9NffXELBJ3TC22G6 QqE87l0bQRpkIBBWoAoy61KMhv7lfusVhBF7JjWh510FGFwQ1OCP7lp93PW8pIIv Ycd4gvPE87e6HLbelksUmLWxfwoSBRwHApHkGHePqKAcUwjHmunHjE7o6GczPbs3 qpwcNaj2xQWehuLVdv1z7dQI7HDD9/VxgxWkSNfzOkGXgnVGzSfqeoghRZqZJZwV DWTlRkw39hjBCNL0WFTGUoZmRh+2YAA= -----END CERTIFICATE-----Generated at Tue Mar 24 16:47:19 2026 by rpki-client