$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/67617060-7bb3-34c1-8134-7b3a831bad53.roa File: 67617060-7bb3-34c1-8134-7b3a831bad53.roa (raw, json) Hash identifier: /DsSIGcjWvtBSgH4pooYsdwzhj2QNHXwelryYXtbm8U= Subject key identifier: D8:AC:A3:CB:25:77:C3:6D:11:80:C9:F1:0A:05:31:BA:47:51:C0:0B Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D0EA7EC2E0368412ABD1C98C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/67617060-7bb3-34c1-8134-7b3a831bad53.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 13335 IP address blocks: 172.64.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:ec:2e:03:68:41:2a:bd:1c:98:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=ec90dd13-212a-4f61-a4c4-023f180642b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9e:51:98:5b:b9:d8:ae:5a:98:2f:94:c7:be: bc:a7:64:34:1c:0c:90:48:76:6b:d4:0e:53:f4:2f: a1:78:64:e5:08:16:f9:d9:27:1f:18:c8:7a:74:cb: 06:ec:07:ea:54:45:9e:ec:74:9f:f7:8a:a2:a2:b2: e9:ca:31:fe:28:2b:d1:12:cb:6f:0c:6b:0d:85:47: b5:ee:24:b2:c9:9a:6a:f6:8d:ac:80:37:cf:b7:cc: c3:6b:4f:c8:02:ba:7e:2d:6f:ac:4f:fe:ef:05:5a: e4:64:6f:b7:9e:ce:ba:18:4e:ad:22:f9:8a:3d:de: b4:30:c3:63:ba:9e:dc:1e:00:bd:6e:c9:17:39:f6: 4e:d8:b3:01:e5:a0:7e:91:ab:29:92:e8:a5:a0:45: 7c:7c:21:40:a2:70:2f:8d:37:f4:4c:f0:af:2c:4b: ac:71:9e:2a:7b:bd:26:d0:76:4e:a3:2d:67:3b:2c: a2:5e:d4:2d:56:af:90:6d:42:7e:bd:1e:94:39:2d: ab:e6:6c:c2:01:24:81:54:ac:7a:c3:fc:ae:ba:63: 3b:2d:35:66:18:45:99:3f:e6:9f:b0:39:02:20:c6: b0:e7:2e:f7:ea:14:dc:61:78:f6:ab:a4:9e:bd:d2: 2a:1e:bd:d2:aa:25:af:66:9d:c7:79:8f:6a:27:f8: 51:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:AC:A3:CB:25:77:C3:6D:11:80:C9:F1:0A:05:31:BA:47:51:C0:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/67617060-7bb3-34c1-8134-7b3a831bad53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:4a:d8:36:42:1c:c3:d5:6d:b6:d6:58:95:a8:b0:96:92:ec: 54:2c:6b:ad:1d:76:30:f7:84:31:ec:79:e1:29:c2:e9:db:6f: 2c:34:03:4c:49:d9:bf:4a:d6:18:e1:06:6d:42:fc:aa:d1:19: 08:37:c7:80:5c:5c:56:1d:8e:66:c2:3d:95:80:c6:7f:d0:0f: cf:d8:38:67:0e:b9:82:d4:19:f9:00:3f:5f:87:8c:df:9d:53: cb:f6:4b:ff:bd:c0:dd:4c:13:1d:8f:f3:6f:91:5e:b8:19:2f: 71:ac:d6:98:c5:df:9e:ca:a6:69:8c:be:9e:dc:07:42:3a:c2: c4:6a:8a:5a:7b:84:05:ce:09:13:81:ff:ce:df:da:0e:d8:28: e9:ac:fb:b0:44:85:4d:f7:49:af:2c:28:9f:c6:08:10:a9:55: b6:70:b0:87:b1:bf:6d:a2:a0:f6:0f:21:ea:1f:fd:0d:a4:3e: fe:6f:2e:9e:a8:6e:9f:50:37:82:6f:4e:d3:5a:d4:7d:91:07: c5:3b:0c:da:f0:54:cd:8c:5f:7e:e9:3c:ec:b1:f4:f3:2e:b6: 4c:fe:48:db:2d:28:ca:58:83:48:90:56:61:84:a8:82:d7:d2: 41:de:7c:40:42:c4:56:2f:42:2e:57:89:4c:9f:1b:48:83:f2: c5:be:f5:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Op+wuA2hBKr0cmMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk ZWM5MGRkMTMtMjEyYS00ZjYxLWE0YzQtMDIzZjE4MDY0MmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJ5RmFu52K5amC+Ux768p2Q0HAyQSHZr1A5T 9C+heGTlCBb52ScfGMh6dMsG7AfqVEWe7HSf94qiorLpyjH+KCvREstvDGsNhUe1 7iSyyZpq9o2sgDfPt8zDa0/IArp+LW+sT/7vBVrkZG+3ns66GE6tIvmKPd60MMNj up7cHgC9bskXOfZO2LMB5aB+kaspkuiloEV8fCFAonAvjTf0TPCvLEuscZ4qe70m 0HZOoy1nOyyiXtQtVq+QbUJ+vR6UOS2r5mzCASSBVKx6w/yuumM7LTVmGEWZP+af sDkCIMaw5y736hTcYXj2q6SevdIqHr3SqiWvZp3HeY9qJ/hRQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNiso8sld8NtEYDJ8QoFMbpHUcALMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjc2MTcwNjAtN2JiMy0z NGMxLTgxMzQtN2IzYTgzMWJhZDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEDZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1K2DZCHMPVbbbWWJWosJaS7FQsa60ddjD3hDHseeEpwunbbyw0A0xJ 2b9K1hjhBm1C/KrRGQg3x4BcXFYdjmbCPZWAxn/QD8/YOGcOuYLUGfkAP1+HjN+d U8v2S/+9wN1MEx2P82+RXrgZL3Gs1pjF357KpmmMvp7cB0I6wsRqilp7hAXOCROB /87f2g7YKOms+7BEhU33Sa8sKJ/GCBCpVbZwsIexv22ioPYPIeof/Q2kPv5vLp6o bp9QN4JvTtNa1H2RB8U7DNrwVM2MX37pPOyx9PMutkz+SNstKMpYg0iQVmGEqILX 0kHefEBCxFYvQi5XiUyfG0iD8sW+9Ro= -----END CERTIFICATE-----Generated at Fri Mar 27 07:05:00 2026 by rpki-client