$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/265d5dbd-a80a-3361-af88-2f4dff963349.roa File: 265d5dbd-a80a-3361-af88-2f4dff963349.roa (raw, json) Hash identifier: 1Y6JEEsyyU7RQHQyI5Zc8Kt+XoYPhgId3B5Dy5I3Kls= Subject key identifier: A8:9E:E7:62:4B:FD:1A:3B:D3:59:E4:27:63:77:6A:62:38:69:C4:0A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D4706C5A87F6D6C1D0E590C40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/265d5dbd-a80a-3361-af88-2f4dff963349.roa Signing time: Tue 24 Mar 2026 18:37:37 +0000 ROA not before: Tue 24 Mar 2026 18:37:37 +0000 ROA not after: Mon 22 Jun 2026 18:37:37 +0000 asID: 14789 IP address blocks: 172.71.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:06:c5:a8:7f:6d:6c:1d:0e:59:0c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 24 18:37:37 2026 GMT Not After : Jun 22 18:37:37 2026 GMT Subject: CN=a2e79151-74e0-4a3e-837c-ebe9d2aefc88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d9:e2:2f:4a:24:c5:20:03:a7:31:19:da:1c: b4:26:95:96:d5:c2:52:9a:65:d1:85:9e:aa:c7:66: f0:e3:98:ed:ed:ee:63:66:77:f4:ac:2b:a0:ea:3d: 28:bc:f1:65:70:38:5f:47:3b:67:3f:9a:17:73:54: 50:cf:d6:5f:9b:b3:f4:be:3f:93:89:33:0a:d4:b1: fa:27:35:13:7f:ac:9e:0c:30:54:45:95:1f:d1:a5: ad:ed:0b:58:91:27:e0:3e:bb:da:d8:eb:ee:08:e1: 18:75:2b:ba:86:27:e8:fa:cf:e7:5c:c9:66:7d:22: 1c:e2:cf:da:60:40:5f:34:78:e6:09:d8:3a:40:e4: db:56:3a:be:28:05:fa:91:cc:be:0c:c3:64:fd:7b: 63:b5:b3:ef:57:77:b1:20:bc:82:09:dd:86:47:f8: ef:d2:2c:f5:80:c2:b9:c2:b9:33:28:fe:3e:55:bd: ff:5b:e4:42:f4:fb:9f:67:0a:bd:78:b6:30:7a:0b: a0:55:c5:67:cb:82:0e:d3:76:d4:d1:7a:9e:7c:c2: 9c:87:e2:d2:4e:f0:f0:c9:dc:66:58:4e:87:26:e0: eb:67:f5:7a:47:91:12:8a:d3:f1:e6:41:38:6f:61: 0b:c8:3a:c6:25:a8:3f:b0:70:42:e4:91:9b:ea:56: ef:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:9E:E7:62:4B:FD:1A:3B:D3:59:E4:27:63:77:6A:62:38:69:C4:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/265d5dbd-a80a-3361-af88-2f4dff963349.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:64:20:c1:44:57:27:60:ad:3e:21:e6:41:58:9d:a4:de:1d: 55:0e:f6:fb:cb:95:55:29:78:a3:91:ad:90:d2:48:87:1f:e4: f2:6b:66:e3:e8:af:b8:b6:86:72:c8:27:81:2b:65:dc:ee:00: df:d9:18:a7:ab:d8:84:43:10:e0:02:74:2e:11:f2:4b:82:45: a2:63:6c:cd:58:11:cd:07:ed:d8:cf:9e:4b:ec:f4:98:cd:42: 0d:5e:96:03:fa:03:1c:29:2c:e2:33:74:6b:7f:d1:cc:7a:26: 78:27:77:5e:d9:df:8b:45:21:52:ce:53:39:74:d9:74:93:2d: 97:42:2a:ed:4c:0f:7d:44:bf:b5:e1:4d:ae:9c:12:61:89:eb: 50:a7:2f:ab:7f:93:1f:d0:f8:1a:ec:1f:2e:ce:64:2d:e2:a3: 5c:aa:af:0e:4f:ae:f2:43:3d:45:8b:a7:40:aa:d4:7e:2e:5a: 5e:3b:44:5c:f7:19:9f:a2:da:b3:61:4b:cf:74:a5:0b:82:10: f8:e5:53:04:0b:d5:bd:8d:84:6f:a1:27:08:93:38:78:53:5d: eb:e0:01:4c:63:a2:ef:16:68:2a:19:9f:c1:44:0c:28:f7:ff: 10:f7:8c:d5:e2:7e:a9:7d:e8:aa:7e:c2:c6:22:13:d8:8a:13: 6b:87:6c:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HBsWof21sHQ5ZDEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDMyNDE4MzczN1oXDTI2MDYyMjE4MzczN1owLzEtMCsGA1UEAxMk YTJlNzkxNTEtNzRlMC00YTNlLTgzN2MtZWJlOWQyYWVmYzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9niL0okxSADpzEZ2hy0JpWW1cJSmmXRhZ6q x2bw45jt7e5jZnf0rCug6j0ovPFlcDhfRztnP5oXc1RQz9Zfm7P0vj+TiTMK1LH6 JzUTf6yeDDBURZUf0aWt7QtYkSfgPrva2OvuCOEYdSu6hifo+s/nXMlmfSIc4s/a YEBfNHjmCdg6QOTbVjq+KAX6kcy+DMNk/XtjtbPvV3exILyCCd2GR/jv0iz1gMK5 wrkzKP4+Vb3/W+RC9PufZwq9eLYwegugVcVny4IO03bU0XqefMKch+LSTvDwydxm WE6HJuDrZ/V6R5ESitPx5kE4b2ELyDrGJag/sHBC5JGb6lbvnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKie52JL/Ro701nkJ2N3amI4acQKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjY1ZDVkYmQtYTgwYS0z MzYxLWFmODgtMmY0ZGZmOTYzMzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEdWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBkIMFEVydgrT4h5kFYnaTeHVUO9vvLlVUpeKORrZDSSIcf5PJrZuPo r7i2hnLIJ4ErZdzuAN/ZGKer2IRDEOACdC4R8kuCRaJjbM1YEc0H7djPnkvs9JjN Qg1elgP6AxwpLOIzdGt/0cx6Jngnd17Z34tFIVLOUzl02XSTLZdCKu1MD31Ev7Xh Ta6cEmGJ61CnL6t/kx/Q+BrsHy7OZC3io1yqrw5PrvJDPUWLp0Cq1H4uWl47RFz3 GZ+i2rNhS890pQuCEPjlUwQL1b2NhG+hJwiTOHhTXevgAUxjou8WaCoZn8FEDCj3 /xD3jNXifql96Kp+wsYiE9iKE2uHbEQ= -----END CERTIFICATE-----Generated at Thu Mar 26 13:41:53 2026 by rpki-client