$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d32b9cee-2308-34b2-81fd-82382a38464a.roa File: d32b9cee-2308-34b2-81fd-82382a38464a.roa (raw, json) Hash identifier: XRHQF8KQTBImxpjGgrVSGFJrb1XIq8ac9s1YTxkxFl4= Subject key identifier: AC:50:0D:74:E0:D6:36:8A:71:A0:09:D6:51:2F:AC:DF:14:32:4E:A4 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584DCC606F6C87FBD90062FE1300 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d32b9cee-2308-34b2-81fd-82382a38464a.roa Signing time: Mon 11 May 2026 13:00:31 +0000 ROA not before: Mon 11 May 2026 13:00:31 +0000 ROA not after: Sun 09 Aug 2026 13:00:31 +0000 asID: 14789 IP address blocks: 172.69.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cc:60:6f:6c:87:fb:d9:00:62:fe:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 11 13:00:31 2026 GMT Not After : Aug 9 13:00:31 2026 GMT Subject: CN=ba9231ff-50ab-4ad7-98ec-06bf24cc808f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:69:5a:87:2c:ff:29:85:4e:b0:3e:80:07:51: db:cc:62:34:52:ce:12:32:ff:14:db:c2:7c:73:4c: 23:16:57:59:39:6f:51:2e:1f:87:12:1b:96:52:96: ab:55:a5:16:4f:d7:28:e3:1e:f3:68:e9:d3:f8:8f: 4c:02:49:24:fd:63:3c:12:b0:60:89:a3:a6:25:81: 36:71:e8:9b:1e:61:a7:49:44:be:5e:bb:ad:65:44: c9:cb:cd:a3:9d:ad:35:be:1a:f6:00:e3:81:27:32: 37:31:8b:ac:28:a6:02:d9:7b:b6:10:e6:e0:a7:47: 00:3d:17:bd:da:5a:a9:21:ca:81:7d:f6:d2:c5:3f: d9:26:2e:62:48:98:dd:ac:09:b6:64:71:4e:99:44: 34:14:5b:20:41:cf:03:2f:ab:c4:0a:4b:35:ad:d4: 59:7a:b8:ff:02:af:f3:c3:d1:0d:64:5c:b0:15:d2: 65:c2:2c:00:63:24:39:f3:35:07:86:30:56:b2:7f: 6f:32:2c:6f:32:eb:d5:89:ee:1d:e5:65:38:9b:77: 7b:f8:92:0d:19:e3:03:b3:14:c8:dd:a3:4a:ab:42: 42:04:b0:c4:6b:17:30:dd:dd:90:f6:e1:aa:00:52: b3:60:ab:66:96:12:51:37:12:19:0a:fe:9d:0e:9a: 25:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:50:0D:74:E0:D6:36:8A:71:A0:09:D6:51:2F:AC:DF:14:32:4E:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d32b9cee-2308-34b2-81fd-82382a38464a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:7b:a4:34:2c:7e:4c:dd:77:4d:2e:0b:d6:6f:a8:39:78:d7: ca:05:30:e1:fd:ed:58:29:bc:7e:2c:da:e9:b0:94:9c:4a:7e: 4e:78:58:02:14:57:b8:e4:b4:40:e2:c0:e0:21:a6:b1:d9:41: c5:b6:76:76:85:ed:a2:25:ac:19:11:62:af:3f:c7:84:1a:0b: d2:ed:74:29:2e:34:9d:34:61:6e:7b:b3:c8:54:fc:c3:cf:a3: cd:4f:21:6c:f6:9e:5e:0c:c2:80:51:a7:17:59:f6:2b:0e:1a: d8:e5:ed:20:91:ac:b7:f0:ac:6e:53:04:9c:14:7a:8f:53:58: c7:a9:d8:b7:12:c5:cc:b9:7d:6f:2f:76:0b:f3:96:db:a2:57: fc:27:bf:30:81:21:af:a1:52:bf:b1:c2:8f:fb:c3:f5:63:44: f0:ae:bb:09:91:e9:0c:d1:c1:02:7a:fa:20:21:9e:4d:c6:b8: 5b:58:f9:ab:3e:26:74:5a:64:72:6d:0f:9c:d2:2d:19:c4:58: 34:50:00:e2:9a:ef:74:31:46:04:15:6e:62:9e:87:55:3a:93: 1e:23:5b:da:a1:04:39:fe:6b:ae:8d:9c:dc:7b:d6:64:9d:31: cd:52:8c:f1:53:f2:6e:f7:a6:49:9a:a9:ff:74:86:98:e4:37: 37:1f:15:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3MYG9sh/vZAGL+EwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDUxMTEzMDAzMVoXDTI2MDgwOTEzMDAzMVowLzEtMCsGA1UEAxMk YmE5MjMxZmYtNTBhYi00YWQ3LTk4ZWMtMDZiZjI0Y2M4MDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGlahyz/KYVOsD6AB1HbzGI0Us4SMv8U28J8 c0wjFldZOW9RLh+HEhuWUparVaUWT9co4x7zaOnT+I9MAkkk/WM8ErBgiaOmJYE2 ceibHmGnSUS+XrutZUTJy82jna01vhr2AOOBJzI3MYusKKYC2Xu2EObgp0cAPRe9 2lqpIcqBffbSxT/ZJi5iSJjdrAm2ZHFOmUQ0FFsgQc8DL6vECks1rdRZerj/Aq/z w9ENZFywFdJlwiwAYyQ58zUHhjBWsn9vMixvMuvVie4d5WU4m3d7+JINGeMDsxTI 3aNKq0JCBLDEaxcw3d2Q9uGqAFKzYKtmlhJRNxIZCv6dDpolAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKxQDXTg1jaKcaAJ1lEvrN8UMk6kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDMyYjljZWUtMjMwOC0z NGIyLTgxZmQtODIzODJhMzg0NjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEUkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADl7pDQsfkzdd00uC9ZvqDl418oFMOH97VgpvH4s2umwlJxKfk54WAIU V7jktEDiwOAhprHZQcW2dnaF7aIlrBkRYq8/x4QaC9LtdCkuNJ00YW57s8hU/MPP o81PIWz2nl4MwoBRpxdZ9isOGtjl7SCRrLfwrG5TBJwUeo9TWMep2LcSxcy5fW8v dgvzltuiV/wnvzCBIa+hUr+xwo/7w/VjRPCuuwmR6QzRwQJ6+iAhnk3GuFtY+as+ JnRaZHJtD5zSLRnEWDRQAOKa73QxRgQVbmKeh1U6kx4jW9qhBDn+a66NnNx71mSd Mc1SjPFT8m73pkmaqf90hpjkNzcfFZg= -----END CERTIFICATE-----Generated at Wed May 13 12:54:56 2026 by rpki-client