$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a9ced301-e764-35f6-abb8-f3cbf23e84fc.roa File: a9ced301-e764-35f6-abb8-f3cbf23e84fc.roa (raw, json) Hash identifier: qoAA6yvbOn23Exvh4cHo1OaJQKA6BbkG6M+mgrfinwI= Subject key identifier: CA:35:28:DF:C9:35:E0:EF:56:9F:4F:97:74:F7:F4:38:96:D4:5A:E1 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D27AA225A3789B07A940D2000 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a9ced301-e764-35f6-abb8-f3cbf23e84fc.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 13335 IP address blocks: 172.64.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:22:5a:37:89:b0:7a:94:0d:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=a7d952a3-5e54-4f86-8f8b-6b8cee46b99d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f9:63:dd:70:0f:f0:54:95:24:91:b6:f7:cf: 36:6b:d9:6c:ff:4f:5b:78:d5:fe:7d:0a:ab:b1:55: 31:e6:21:ad:bb:3a:f5:6e:60:a5:45:a5:51:7a:c9: 33:62:ed:06:1d:31:b3:d3:d8:a0:c7:40:e4:5c:23: 1e:17:57:3a:b2:29:0c:f9:5d:d4:de:cd:94:d1:8a: 1a:f6:76:0b:72:25:fa:47:31:4c:d0:d9:63:ed:ab: 13:97:6b:b6:8e:37:67:8b:a4:37:b3:22:f2:58:87: a3:d8:a3:7b:2d:df:65:fb:0f:6b:4d:ef:fa:d2:de: a9:31:0f:ef:79:cc:fe:77:4b:59:42:76:5c:09:29: 47:54:e8:db:85:21:f6:82:d7:33:df:f3:cb:19:bb: 32:fd:4a:cb:e0:bb:14:22:18:9f:90:b7:4c:06:cf: 10:02:1d:87:7e:a7:11:ef:7f:e4:e3:2d:51:57:f2: 81:c1:d3:42:c2:eb:6c:3c:a5:7c:1e:17:8c:5f:1d: 68:76:b3:ca:d9:0a:30:1f:47:59:e5:14:fc:c7:44: f2:68:06:ac:48:70:49:6b:cd:75:27:49:e9:1b:81: e7:36:5a:3e:06:cb:4b:10:a0:dd:bf:45:28:57:00: 44:21:43:d7:b2:a2:f6:4d:d2:ba:c3:d3:66:b2:f9: 2a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:35:28:DF:C9:35:E0:EF:56:9F:4F:97:74:F7:F4:38:96:D4:5A:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a9ced301-e764-35f6-abb8-f3cbf23e84fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:f6:24:4b:97:99:43:d2:08:fe:5c:7d:7a:5b:80:1f:e6:3d: 12:c5:f1:35:0a:6c:28:c3:1c:5d:4f:a9:76:7f:02:15:94:5b: d1:49:fc:b6:33:4d:ad:40:1d:05:1a:58:8e:08:cd:66:62:8c: 48:31:55:33:75:ca:1b:d2:0f:3c:86:56:d9:a3:75:3a:1e:c7: 70:0d:ad:d6:09:51:86:8d:46:ef:1f:13:92:d1:92:b7:ca:85: c4:e9:f1:49:7a:f6:58:fb:aa:3f:18:f0:02:53:d3:ff:cd:39: 4d:91:7c:5f:d7:92:4c:dd:24:0d:48:b6:5f:cb:48:16:2f:60: 03:ea:bb:89:0c:03:db:04:2b:7a:40:05:cc:4d:a9:27:f6:e4: 0e:09:62:b3:aa:63:89:a9:d6:08:6a:22:c4:97:af:97:b5:e6: 43:0b:31:ef:65:63:33:4c:44:75:59:25:ba:16:1e:01:68:4d: f0:b7:67:97:41:97:7b:9d:8d:8a:8b:35:d1:7e:75:ee:97:bc: a7:cc:98:70:08:82:2d:86:ff:af:4c:21:f8:eb:78:55:57:b3: 0a:08:61:b5:cf:f5:88:2b:27:f9:f9:70:8b:28:e7:e8:06:37: a7:2e:67:91:bd:c5:29:02:c9:5f:02:69:c3:0c:04:69:87:3d: 35:0b:ec:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqiJaN4mwepQNIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk YTdkOTUyYTMtNWU1NC00Zjg2LThmOGItNmI4Y2VlNDZiOTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvlj3XAP8FSVJJG29882a9ls/09beNX+fQqr sVUx5iGtuzr1bmClRaVReskzYu0GHTGz09igx0DkXCMeF1c6sikM+V3U3s2U0Yoa 9nYLciX6RzFM0Nlj7asTl2u2jjdni6Q3syLyWIej2KN7Ld9l+w9rTe/60t6pMQ/v ecz+d0tZQnZcCSlHVOjbhSH2gtcz3/PLGbsy/UrL4LsUIhifkLdMBs8QAh2HfqcR 73/k4y1RV/KBwdNCwutsPKV8HheMXx1odrPK2QowH0dZ5RT8x0TyaAasSHBJa811 J0npG4HnNlo+BstLEKDdv0UoVwBEIUPXsqL2TdK6w9NmsvkqsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMo1KN/JNeDvVp9Pl3T39DiW1FrhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTljZWQzMDEtZTc2NC0z NWY2LWFiYjgtZjNjYmYyM2U4NGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEDBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/2JEuXmUPSCP5cfXpbgB/mPRLF8TUKbCjDHF1PqXZ/AhWUW9FJ/LYz Ta1AHQUaWI4IzWZijEgxVTN1yhvSDzyGVtmjdToex3ANrdYJUYaNRu8fE5LRkrfK hcTp8Ul69lj7qj8Y8AJT0//NOU2RfF/XkkzdJA1Itl/LSBYvYAPqu4kMA9sEK3pA BcxNqSf25A4JYrOqY4mp1ghqIsSXr5e15kMLMe9lYzNMRHVZJboWHgFoTfC3Z5dB l3udjYqLNdF+de6XvKfMmHAIgi2G/69MIfjreFVXswoIYbXP9YgrJ/n5cIso5+gG N6cuZ5G9xSkCyV8CacMMBGmHPTUL7CU= -----END CERTIFICATE-----Generated at Thu Mar 26 15:49:40 2026 by rpki-client