$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0a6b807d-d6ac-366d-aa15-b3c708146430.roa File: 0a6b807d-d6ac-366d-aa15-b3c708146430.roa (raw, json) Hash identifier: oc86doqDnQbYaxxaAAAZuEQ6xwFE4YwADoCNH0CnbIw= Subject key identifier: AA:40:74:A8:62:4E:69:A2:0B:33:2A:2A:A4:D1:2D:DC:EF:BD:A3:06 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D2A74DAEBFAAD09BFE80DC560 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0a6b807d-d6ac-366d-aa15-b3c708146430.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 13335 IP address blocks: 172.64.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:da:eb:fa:ad:09:bf:e8:0d:c5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=cba5fe45-81eb-4cb9-af20-513fd195b655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:82:bd:36:ed:86:32:5c:b5:10:a8:1b:d7:07: ea:18:15:8e:7e:23:e2:6f:c1:17:02:16:32:2f:ff: 6d:ac:c1:62:83:3c:2c:81:84:dd:11:50:d8:b6:90: 2f:8c:87:2c:d8:fc:17:a0:0d:19:54:4b:ad:f5:1a: 03:a5:fb:57:f5:64:83:a3:b5:e6:9c:bd:93:2c:8a: cd:bf:40:a7:38:82:ce:ef:b0:16:5f:a2:65:7e:12: 92:67:b2:18:ae:65:2b:eb:b1:3d:12:b6:64:6c:9a: 96:6f:2a:61:01:d8:30:9a:f1:f6:4d:cc:0d:6e:fe: 3a:3d:01:a4:01:d7:95:42:b4:c6:f1:b7:37:9e:ee: 55:1d:31:9f:03:c1:6e:5e:a6:1b:9d:9a:1a:55:c8: cd:de:ee:7c:55:d8:b3:d1:4a:27:37:a6:68:5d:fa: c8:28:48:96:08:c7:d8:c7:72:90:bb:3f:ff:90:65: 1d:80:b6:86:81:54:a0:59:eb:74:6f:2b:e4:70:bf: 25:a4:ff:97:39:fa:ad:99:f5:ee:2c:d9:ef:46:40: b5:e0:37:90:8c:58:d7:2e:e6:bb:9b:dd:ba:c3:d8: 14:75:d3:1f:08:82:1d:9d:71:3b:07:35:ab:8c:99: 5c:a0:c1:98:e3:6e:89:06:db:93:e9:5f:60:7e:12: 07:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:40:74:A8:62:4E:69:A2:0B:33:2A:2A:A4:D1:2D:DC:EF:BD:A3:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0a6b807d-d6ac-366d-aa15-b3c708146430.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:cf:c8:35:a1:a5:f9:c1:24:ea:44:cd:a8:6f:9a:50:00:8e: d4:e6:49:45:4e:de:72:d2:20:b2:ff:27:4c:f6:8c:56:b7:1b: c7:df:af:9b:e3:6a:d2:cb:43:2c:9c:ef:65:0c:08:28:6c:fe: 3c:f2:cc:89:b4:5c:74:60:ef:f8:94:53:37:6d:04:bb:09:9d: a9:48:74:bd:0c:07:bf:b6:81:d4:9c:65:cd:e1:8e:e4:7c:0b: e4:d9:5e:65:ae:af:45:6a:76:29:8d:c7:a4:d0:44:4e:df:fa: e5:5a:2a:f7:01:1c:ac:ea:91:49:83:a1:82:34:6b:7d:1d:97: 4a:8a:f4:64:b5:62:95:97:ff:32:66:96:63:e5:b5:c1:5e:49: b2:e0:bd:2b:8a:8b:a2:b7:19:c2:bf:66:5c:c3:18:83:7e:b6: 15:de:52:05:53:2b:68:92:09:82:72:cc:e7:6c:14:60:6b:67: 5a:e6:11:3d:09:f5:16:11:f4:2b:e7:2a:a6:39:de:8c:90:cf: a1:11:02:b6:49:ca:4e:b9:b7:31:fb:af:eb:40:80:ef:56:57: df:11:0f:b1:6c:51:30:76:6e:d5:52:76:4f:e7:90:d4:63:d8: cd:36:2b:12:aa:3f:00:4e:de:f6:92:d7:9b:3b:eb:81:f9:5b: c2:d4:8d:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdNrr+q0Jv+gNxWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk Y2JhNWZlNDUtODFlYi00Y2I5LWFmMjAtNTEzZmQxOTViNjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYK9Nu2GMly1EKgb1wfqGBWOfiPib8EXAhYy L/9trMFigzwsgYTdEVDYtpAvjIcs2PwXoA0ZVEut9RoDpftX9WSDo7XmnL2TLIrN v0CnOILO77AWX6JlfhKSZ7IYrmUr67E9ErZkbJqWbyphAdgwmvH2TcwNbv46PQGk AdeVQrTG8bc3nu5VHTGfA8FuXqYbnZoaVcjN3u58Vdiz0UonN6ZoXfrIKEiWCMfY x3KQuz//kGUdgLaGgVSgWet0byvkcL8lpP+XOfqtmfXuLNnvRkC14DeQjFjXLua7 m926w9gUddMfCIIdnXE7BzWrjJlcoMGY426JBtuT6V9gfhIHuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKpAdKhiTmmiCzMqKqTRLdzvvaMGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMGE2YjgwN2QtZDZhYy0z NjZkLWFhMTUtYjNjNzA4MTQ2NDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEDCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/PyDWhpfnBJOpEzahvmlAAjtTmSUVO3nLSILL/J0z2jFa3G8ffr5vj atLLQyyc72UMCChs/jzyzIm0XHRg7/iUUzdtBLsJnalIdL0MB7+2gdScZc3hjuR8 C+TZXmWur0VqdimNx6TQRE7f+uVaKvcBHKzqkUmDoYI0a30dl0qK9GS1YpWX/zJm lmPltcFeSbLgvSuKi6K3GcK/ZlzDGIN+thXeUgVTK2iSCYJyzOdsFGBrZ1rmET0J 9RYR9CvnKqY53oyQz6ERArZJyk65tzH7r+tAgO9WV98RD7FsUTB2btVSdk/nkNRj 2M02KxKqPwBO3vaS15s764H5W8LUjQY= -----END CERTIFICATE-----Generated at Thu Mar 26 21:03:34 2026 by rpki-client