$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1045f952-b7b5-39dd-931b-cf68a2b4720a.roa File: 1045f952-b7b5-39dd-931b-cf68a2b4720a.roa (raw, json) Hash identifier: sC/di2BcaihhAOWmLhyU7U3HIEwPAYsvL9AFVqOJ/Mc= Subject key identifier: 81:BC:4C:17:3D:F4:AC:3C:55:6F:4C:DE:FF:94:2F:9C:AA:F9:E8:5C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584CAE5EC125D66705F319295680 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1045f952-b7b5-39dd-931b-cf68a2b4720a.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 13335 IP address blocks: 172.64.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:c1:25:d6:67:05:f3:19:29:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=54c1cf4d-2877-4c1b-bda6-34d2ba441b1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:89:31:01:dd:d5:e8:2b:82:83:d8:60:bc:48: 70:43:0f:e5:38:a6:eb:ab:7b:a1:aa:3d:6d:03:8a: 5e:f5:bb:48:57:6a:f4:a2:bf:96:db:41:a6:82:98: 6a:d7:fc:91:87:e7:c2:b5:52:d1:b5:fb:94:4c:c2: 4d:d8:d8:d1:dc:75:8b:27:ce:ce:77:97:2e:33:ca: dc:42:c0:dd:fd:53:7a:90:90:dc:59:cb:c3:ee:79: c2:16:0d:0d:9d:6a:3f:de:ed:97:c7:5e:b0:3b:c2: d9:1e:8e:c5:a6:bf:6d:89:79:58:9e:da:e3:68:86: 25:ba:61:a1:5f:18:7a:47:bd:fa:91:4f:ea:11:4e: ea:3e:ea:77:13:1e:f6:b1:e5:be:7e:7c:eb:64:b0: cc:b9:9a:79:70:10:b0:5f:2c:e0:78:44:5c:2b:70: ee:7f:8c:62:f8:1c:6e:7e:71:62:51:93:45:e1:69: 7c:7a:f9:88:9e:a7:5a:67:ea:95:fd:1f:28:e1:64: f8:10:98:c3:b3:a8:91:56:a2:51:32:7f:83:e7:20: b6:35:75:5b:d4:21:51:18:bc:c4:7b:9f:85:0d:3c: d1:70:24:c1:33:00:a2:ef:cd:cb:9e:ff:9d:3f:0e: 5a:61:9e:bf:ed:fc:68:50:fa:4a:dd:9b:a0:f4:00: 63:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:BC:4C:17:3D:F4:AC:3C:55:6F:4C:DE:FF:94:2F:9C:AA:F9:E8:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1045f952-b7b5-39dd-931b-cf68a2b4720a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:7b:9a:c0:9e:d1:b7:58:86:73:0e:c4:2f:5f:fd:61:51:e5: ae:1f:d9:71:c2:bb:9a:92:aa:8a:14:00:ac:0c:ff:50:e6:a0: 77:74:18:dc:9d:46:13:b7:e5:d2:d7:15:8e:eb:11:26:88:06: 6c:c9:05:24:b4:04:e6:c7:ee:67:f6:65:6e:ca:4c:81:c6:c2: 04:a6:f1:d0:87:8f:3d:cd:f7:30:c3:61:db:d1:0b:c5:d1:18: c1:79:26:c3:b3:97:a2:55:8d:86:f2:ca:48:74:9c:45:f0:31: 95:6b:06:85:e0:f1:7a:59:f3:a8:a6:52:e5:14:34:23:57:52: 56:c0:88:c6:81:f7:62:86:87:41:11:97:44:d7:0a:48:c0:79: 39:bb:80:dc:da:21:4e:e3:1d:6c:95:57:ff:f3:09:ab:de:1b: f0:a8:98:db:79:e5:53:3c:55:53:d0:3c:92:22:a6:a2:99:74: 66:5d:5b:e1:e5:cd:9a:4c:ee:43:97:15:e8:99:6a:eb:5a:4e: c6:1d:5b:03:6d:5b:8a:00:d0:e1:44:07:da:50:c0:82:e6:cc: 4b:73:6a:d7:86:56:0d:c4:dd:ec:b8:7b:e5:75:b5:ce:ea:9b: d6:0c:1d:b4:2c:c4:da:6c:f9:bc:a1:14:33:95:04:52:20:37: c5:8b:b9:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXsEl1mcF8xkpVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NTRjMWNmNGQtMjg3Ny00YzFiLWJkYTYtMzRkMmJhNDQxYjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYkxAd3V6CuCg9hgvEhwQw/lOKbrq3uhqj1t A4pe9btIV2r0or+W20Gmgphq1/yRh+fCtVLRtfuUTMJN2NjR3HWLJ87Od5cuM8rc QsDd/VN6kJDcWcvD7nnCFg0NnWo/3u2Xx16wO8LZHo7Fpr9tiXlYntrjaIYlumGh Xxh6R736kU/qEU7qPup3Ex72seW+fnzrZLDMuZp5cBCwXyzgeERcK3Duf4xi+Bxu fnFiUZNF4Wl8evmInqdaZ+qV/R8o4WT4EJjDs6iRVqJRMn+D5yC2NXVb1CFRGLzE e5+FDTzRcCTBMwCi783Lnv+dPw5aYZ6/7fxoUPpK3Zug9ABjSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIG8TBc99Kw8VW9M3v+UL5yq+ehcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTA0NWY5NTItYjdiNS0z OWRkLTkzMWItY2Y2OGEyYjQ3MjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrEBkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZ7msCe0bdYhnMOxC9f/WFR5a4f2XHCu5qSqooUAKwM/1DmoHd0GNyd RhO35dLXFY7rESaIBmzJBSS0BObH7mf2ZW7KTIHGwgSm8dCHjz3N9zDDYdvRC8XR GMF5JsOzl6JVjYbyykh0nEXwMZVrBoXg8XpZ86imUuUUNCNXUlbAiMaB92KGh0ER l0TXCkjAeTm7gNzaIU7jHWyVV//zCaveG/ComNt55VM8VVPQPJIipqKZdGZdW+Hl zZpM7kOXFeiZautaTsYdWwNtW4oA0OFEB9pQwILmzEtzateGVg3E3ey4e+V1tc7q m9YMHbQsxNps+byhFDOVBFIgN8WLuX8= -----END CERTIFICATE-----Generated at Mon Mar 2 17:09:06 2026 by rpki-client