$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/31b1d398-7ab4-37bf-bdff-4ec06cf7d145.roa File: 31b1d398-7ab4-37bf-bdff-4ec06cf7d145.roa (raw, json) Hash identifier: y0Bvkku/dVDMP1Ths6sYsZSXEtXpy/KRkRKbiin5lVs= Subject key identifier: 82:58:82:FC:89:DF:28:BE:DD:CD:E5:6A:7C:CD:C0:C1:35:F4:6A:E0 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D8EF992020FAC971E70021900 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/31b1d398-7ab4-37bf-bdff-4ec06cf7d145.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 13335 IP address blocks: 172.64.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f9:92:02:0f:ac:97:1e:70:02:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=159c576b-0dea-4a37-bc51-4dd33bba532a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cc:73:23:2f:f2:c6:d3:b1:7e:6d:b2:bc:52: 08:83:9d:4b:8f:88:9e:8e:00:77:dd:f9:9c:f4:a3: 49:60:30:f9:6f:33:ae:c5:48:ae:66:ea:77:e0:4a: 69:b5:7c:1e:dc:5a:42:17:24:92:95:68:9c:ea:36: 39:56:e4:a4:f7:3f:12:0a:5b:65:64:09:06:ac:bf: 31:6b:6d:f6:58:d9:5f:72:09:8c:7c:d3:f9:63:e4: 0a:3a:1d:fa:5f:c2:26:a1:c1:79:3f:3e:12:52:01: 49:aa:90:e4:f5:13:2b:15:38:64:29:b5:b8:b2:c9: 70:ff:62:a4:f5:87:10:26:0f:1f:0b:c7:b2:22:00: e4:04:81:c6:ec:9a:57:c1:7b:c5:e2:99:69:5c:09: af:8d:6e:82:a3:95:e4:b6:85:79:5d:e7:f4:22:1b: 12:ce:ab:3b:c9:f8:f2:c1:29:c4:1c:84:9b:55:99: bf:93:83:cf:34:fc:17:e4:b5:6a:3e:57:1a:7d:7c: b4:12:71:ef:9b:d4:41:e0:10:ff:56:e2:df:57:6c: 80:4a:7d:2f:6e:70:de:2c:57:c4:58:9a:18:f8:9a: 84:b7:61:c5:71:20:76:18:49:10:16:ad:0d:95:66: 99:03:ed:26:03:99:94:1f:ba:43:1c:5d:9d:7b:0f: c1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:58:82:FC:89:DF:28:BE:DD:CD:E5:6A:7C:CD:C0:C1:35:F4:6A:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/31b1d398-7ab4-37bf-bdff-4ec06cf7d145.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:97:04:93:03:e9:b3:b4:8e:cb:fc:64:57:06:5c:73:f9:00: b9:65:75:6e:bd:da:f6:c1:3f:1d:f2:bd:82:d6:37:c7:e3:72: 52:74:4a:96:19:12:0d:b2:f9:52:92:9b:2d:06:27:6d:58:3c: ae:ef:9b:d1:7d:d0:62:ee:76:9e:d4:f9:b6:82:60:3f:4f:46: f5:a1:09:e7:ad:1a:86:5e:c1:8f:e4:f4:45:63:17:5d:e5:3f: 8f:73:55:29:04:48:bc:31:77:2b:b6:ad:99:1d:15:f2:d7:26: 0c:b6:5c:eb:93:81:e8:b6:0e:e7:c2:ef:72:10:cd:a2:e6:b1: 4f:4a:36:2d:1c:75:95:f3:69:84:27:c7:76:58:3c:0c:bd:41: a7:0f:ad:f6:e8:00:85:40:f0:bd:f6:6c:72:29:b3:cb:ae:0f: ed:b4:ca:ea:51:f1:a1:d2:5b:e4:f9:9f:a9:db:d9:d5:87:59: 60:0c:c7:9d:3d:35:92:8b:9b:6d:90:92:3d:39:bb:8f:b7:c6: 33:6b:01:f5:c4:98:97:49:17:80:78:06:37:66:dc:97:36:10: b3:75:c9:4c:71:71:49:30:14:25:20:53:b1:4b:e9:46:8e:60: d0:86:23:ad:86:4e:ad:72:1a:53:7d:a0:5f:1e:48:dc:62:79: 65:2c:30:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O+ZICD6yXHnACGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MTU5YzU3NmItMGRlYS00YTM3LWJjNTEtNGRkMzNiYmE1MzJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMxzIy/yxtOxfm2yvFIIg51Lj4iejgB33fmc 9KNJYDD5bzOuxUiuZup34EpptXwe3FpCFySSlWic6jY5VuSk9z8SCltlZAkGrL8x a232WNlfcgmMfNP5Y+QKOh36X8ImocF5Pz4SUgFJqpDk9RMrFThkKbW4sslw/2Kk 9YcQJg8fC8eyIgDkBIHG7JpXwXvF4plpXAmvjW6Co5XktoV5Xef0IhsSzqs7yfjy wSnEHISbVZm/k4PPNPwX5LVqPlcafXy0EnHvm9RB4BD/VuLfV2yASn0vbnDeLFfE WJoY+JqEt2HFcSB2GEkQFq0NlWaZA+0mA5mUH7pDHF2dew/B9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIJYgvyJ3yi+3c3lanzNwME19GrgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzFiMWQzOTgtN2FiNC0z N2JmLWJkZmYtNGVjMDZjZjdkMTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEDRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6XBJMD6bO0jsv8ZFcGXHP5ALlldW692vbBPx3yvYLWN8fjclJ0SpYZ Eg2y+VKSmy0GJ21YPK7vm9F90GLudp7U+baCYD9PRvWhCeetGoZewY/k9EVjF13l P49zVSkESLwxdyu2rZkdFfLXJgy2XOuTgei2DufC73IQzaLmsU9KNi0cdZXzaYQn x3ZYPAy9QacPrfboAIVA8L32bHIps8uuD+20yupR8aHSW+T5n6nb2dWHWWAMx509 NZKLm22Qkj05u4+3xjNrAfXEmJdJF4B4Bjdm3Jc2ELN1yUxxcUkwFCUgU7FL6UaO YNCGI62GTq1yGlN9oF8eSNxieWUsMK0= -----END CERTIFICATE-----Generated at Wed May 13 10:55:59 2026 by rpki-client