$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2af978aa-bda8-37a1-862a-d533e2940e37.roa File: 2af978aa-bda8-37a1-862a-d533e2940e37.roa (raw, json) Hash identifier: lQDNmq2ko7D9BR58s7XA/0TJglf6fSr9+eDGSyOEgr4= Subject key identifier: 66:4E:53:C8:08:95:FF:AE:DD:1C:25:AE:2B:E8:D3:53:4D:DC:1B:34 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584DA11AC60CC1CB425B63ACCCA0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2af978aa-bda8-37a1-862a-d533e2940e37.roa Signing time: Sun 26 Apr 2026 01:00:25 +0000 ROA not before: Sun 26 Apr 2026 01:00:25 +0000 ROA not after: Sat 25 Jul 2026 01:00:25 +0000 asID: 13335 IP address blocks: 172.69.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a1:1a:c6:0c:c1:cb:42:5b:63:ac:cc:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 26 01:00:25 2026 GMT Not After : Jul 25 01:00:25 2026 GMT Subject: CN=d0ceb083-676f-4866-9cc1-58f58fa2fc80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:ab:cd:4e:ef:7e:d8:64:c1:1c:8a:fd:9a:1a: 83:af:63:b6:f1:df:96:e3:dc:3c:42:ed:c8:e9:89: 85:9f:e3:d2:c4:b5:57:38:4f:c8:a8:10:99:a4:f7: da:e4:d9:46:9c:c6:2d:75:f3:48:49:e9:1f:99:f5: 05:c8:b8:49:f6:02:c5:04:b3:43:11:5d:60:52:6e: 92:0a:b2:05:34:c3:d5:1d:bb:76:bf:eb:3d:0e:17: 66:0c:c1:21:45:8c:4b:a6:8f:b5:5a:11:10:ab:70: b7:44:1b:30:72:22:57:6e:1f:22:4a:2a:89:8e:90: 5f:a5:26:a4:9a:f5:c2:90:7b:80:e5:80:63:63:17: 16:70:4f:e9:1e:21:6c:c7:18:e5:1a:1d:1f:de:68: 60:23:18:48:71:a5:60:a5:87:d3:b3:84:7f:43:72: 60:35:07:da:06:54:28:3c:f3:62:ce:1b:12:cb:8a: 05:fa:e1:36:7d:0e:e6:de:52:5c:e6:42:90:03:d9: 89:d1:0e:e3:84:fa:6d:ae:6a:37:26:7b:36:58:d2: 23:10:f2:f2:ed:a5:58:8f:c9:2c:0a:79:23:f8:78: 48:e3:3b:48:fc:53:a9:3d:21:95:b2:0a:b5:c8:de: 70:99:9f:5d:4c:42:e0:de:1b:eb:54:8d:2b:4e:61: b9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:4E:53:C8:08:95:FF:AE:DD:1C:25:AE:2B:E8:D3:53:4D:DC:1B:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2af978aa-bda8-37a1-862a-d533e2940e37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:1c:97:77:fb:6a:cd:e7:90:d6:c4:6f:29:ee:d0:6f:5a:b9: 3a:2e:44:bf:1d:d2:18:a9:1b:32:46:e1:92:80:bf:50:21:b0: 77:4b:ef:7d:08:c2:69:ad:23:34:29:a5:81:11:95:cb:26:cf: 73:0d:d8:42:9e:7c:bd:4f:36:11:89:db:9b:0e:49:f8:5a:17: 21:fd:d4:fb:15:7f:ac:ff:30:0f:48:9d:0e:97:a9:46:6d:95: ba:f4:18:c6:ce:13:6c:3f:d6:18:f7:09:6e:87:01:4e:7d:0c: b1:e6:26:2b:ec:9c:36:eb:fe:5a:be:73:c3:27:85:e0:1d:07: 40:ed:83:d3:7a:ff:0e:ee:bb:66:6c:83:bb:42:4f:77:56:4a: 85:de:b4:97:b9:0e:1f:43:a5:33:45:e1:b9:8c:6f:2e:3f:c8: b1:78:d7:c8:05:a0:57:f3:50:2c:dc:f6:b9:f6:dd:50:98:06: 39:41:13:1d:09:ad:e9:c8:1e:41:9a:24:73:39:60:54:fa:d3: 0e:c6:61:70:8e:4b:e9:72:c1:37:66:dc:fb:c7:cb:ea:4d:a4: f9:a1:54:83:db:72:7a:52:8e:30:12:c8:c4:da:2a:2b:94:ed: fc:54:5e:53:68:38:34:2f:a1:21:a6:72:56:5c:66:ab:c8:83: bb:b4:d1:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2hGsYMwctCW2OszKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQyNjAxMDAyNVoXDTI2MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk ZDBjZWIwODMtNjc2Zi00ODY2LTljYzEtNThmNThmYTJmYzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8qvNTu9+2GTBHIr9mhqDr2O28d+W49w8Qu3I 6YmFn+PSxLVXOE/IqBCZpPfa5NlGnMYtdfNISekfmfUFyLhJ9gLFBLNDEV1gUm6S CrIFNMPVHbt2v+s9DhdmDMEhRYxLpo+1WhEQq3C3RBswciJXbh8iSiqJjpBfpSak mvXCkHuA5YBjYxcWcE/pHiFsxxjlGh0f3mhgIxhIcaVgpYfTs4R/Q3JgNQfaBlQo PPNizhsSy4oF+uE2fQ7m3lJc5kKQA9mJ0Q7jhPptrmo3Jns2WNIjEPLy7aVYj8ks Cnkj+HhI4ztI/FOpPSGVsgq1yN5wmZ9dTELg3hvrVI0rTmG5SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZOU8gIlf+u3Rwlrivo01NN3Bs0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmFmOTc4YWEtYmRhOC0z N2ExLTg2MmEtZDUzM2UyOTQwZTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEX/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIcl3f7as3nkNbEbynu0G9auTouRL8d0hipGzJG4ZKAv1AhsHdL730I wmmtIzQppYERlcsmz3MN2EKefL1PNhGJ25sOSfhaFyH91PsVf6z/MA9InQ6XqUZt lbr0GMbOE2w/1hj3CW6HAU59DLHmJivsnDbr/lq+c8MnheAdB0Dtg9N6/w7uu2Zs g7tCT3dWSoXetJe5Dh9DpTNF4bmMby4/yLF418gFoFfzUCzc9rn23VCYBjlBEx0J renIHkGaJHM5YFT60w7GYXCOS+lywTdm3PvHy+pNpPmhVIPbcnpSjjASyMTaKiuU 7fxUXlNoODQvoSGmclZcZqvIg7u00e8= -----END CERTIFICATE-----Generated at Wed May 13 12:09:08 2026 by rpki-client