$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1ef5db62-95be-3b03-9523-9fdf9a49aca4.roa File: 1ef5db62-95be-3b03-9523-9fdf9a49aca4.roa (raw, json) Hash identifier: omauhCHKa79+2HI6lQGsfdWUq51BrOTPTSHfo+DKiws= Subject key identifier: F3:81:CA:76:45:F6:E1:E6:F5:76:17:3F:0C:10:25:07:9D:77:61:A5 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D6AAA95FBB68F944D3D528728 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1ef5db62-95be-3b03-9523-9fdf9a49aca4.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 13335 IP address blocks: 172.64.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:95:fb:b6:8f:94:4d:3d:52:87:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=947a5de2-7bc6-4a0f-ab7d-7b245b125cd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:67:89:65:ac:85:be:c7:16:10:7e:42:20:43: 34:14:61:26:3b:70:92:52:dd:d6:0b:c4:cb:1b:0a: 4e:bb:5a:31:b2:97:f1:27:d5:a7:45:c3:95:0a:2c: 6e:f8:a7:a8:8c:fb:4b:f5:7c:35:95:c8:89:c5:a3: 51:32:b1:27:36:39:39:76:6d:9f:f6:f2:dc:8b:eb: f6:f9:ba:44:08:93:74:1a:5d:8c:1d:f0:0a:a3:6c: 02:96:77:d7:80:9c:93:52:09:df:4c:08:2b:d1:c9: b7:c1:22:78:29:6f:41:e2:3a:58:f0:27:42:54:e7: b7:73:3a:a1:c3:13:a7:fb:6a:b5:50:27:66:6f:a7: 95:76:b6:45:1b:1f:17:6b:63:72:da:d8:fe:4c:bc: 18:c4:79:f1:0e:1e:fe:78:ac:3c:ef:15:1e:ac:bf: d8:c6:76:0c:ef:19:d0:d3:12:4c:01:ce:6a:39:6d: 98:a9:1d:82:1e:87:f5:22:5b:68:c3:bc:d1:89:a0: 77:a8:ee:e9:7e:6b:32:85:8e:9a:b9:fc:cc:ee:62: 17:7b:a1:b6:44:75:f4:8b:4a:f3:63:18:96:ea:08: f9:f2:03:f9:a6:c5:3d:aa:8d:63:72:e0:7a:85:e6: b0:2e:ed:a8:e3:25:3c:7a:97:76:8e:27:7a:61:29: 6b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:81:CA:76:45:F6:E1:E6:F5:76:17:3F:0C:10:25:07:9D:77:61:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1ef5db62-95be-3b03-9523-9fdf9a49aca4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:a9:31:43:f7:be:64:60:2b:4c:32:67:95:8f:1d:ea:c0:e2: 50:51:d7:47:6c:9f:3a:2b:15:a4:f9:6e:75:83:18:54:4a:cc: 16:98:a7:40:cc:99:45:46:3e:72:a6:55:c8:51:b7:e1:23:a7: 13:61:db:5e:04:e2:bc:4d:55:33:43:52:eb:e9:83:12:66:fa: d4:4e:e8:54:d5:58:56:9d:82:9c:81:c6:f3:de:1b:6f:02:d9: b7:21:47:d6:13:cf:df:e4:31:dc:4e:bf:3a:2f:b9:fb:c2:1c: 87:43:be:44:47:4a:af:a8:ab:09:fd:cc:1d:b7:37:3f:74:8d: d5:82:f6:56:a8:0c:d4:c2:e2:20:78:8b:dc:49:10:69:f2:69: 69:fd:ed:c5:3c:6a:26:c1:49:8c:93:b2:e0:b5:62:c6:0b:ee: e3:5f:19:a5:ea:cc:a9:ba:3b:0f:cc:9b:f2:54:c0:a0:83:c8: 08:3e:ba:e1:c6:9d:2e:d7:f9:65:03:0c:d2:ad:ee:2f:3e:15: 95:31:7a:10:11:1a:47:66:d7:3d:f9:ec:7a:5b:63:a1:8a:7c: 90:c4:51:5e:35:64:d3:1c:8b:4a:66:ec:b6:7e:69:c4:d2:e8: 46:55:41:5a:a5:58:db:fb:fc:2f:c7:3a:40:5a:b8:ee:2d:61: 65:dd:bf:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqpX7to+UTT1ShygwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk OTQ3YTVkZTItN2JjNi00YTBmLWFiN2QtN2IyNDViMTI1Y2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmeJZayFvscWEH5CIEM0FGEmO3CSUt3WC8TL GwpOu1oxspfxJ9WnRcOVCixu+KeojPtL9Xw1lciJxaNRMrEnNjk5dm2f9vLci+v2 +bpECJN0Gl2MHfAKo2wClnfXgJyTUgnfTAgr0cm3wSJ4KW9B4jpY8CdCVOe3czqh wxOn+2q1UCdmb6eVdrZFGx8Xa2Ny2tj+TLwYxHnxDh7+eKw87xUerL/YxnYM7xnQ 0xJMAc5qOW2YqR2CHof1Iltow7zRiaB3qO7pfmsyhY6aufzM7mIXe6G2RHX0i0rz YxiW6gj58gP5psU9qo1jcuB6heawLu2o4yU8epd2jid6YSlrvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPOBynZF9uHm9XYXPwwQJQedd2GlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMWVmNWRiNjItOTViZS0z YjAzLTk1MjMtOWZkZjlhNDlhY2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErECgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOpMUP3vmRgK0wyZ5WPHerA4lBR10dsnzorFaT5bnWDGFRKzBaYp0DM mUVGPnKmVchRt+EjpxNh214E4rxNVTNDUuvpgxJm+tRO6FTVWFadgpyBxvPeG28C 2bchR9YTz9/kMdxOvzovufvCHIdDvkRHSq+oqwn9zB23Nz90jdWC9laoDNTC4iB4 i9xJEGnyaWn97cU8aibBSYyTsuC1YsYL7uNfGaXqzKm6Ow/Mm/JUwKCDyAg+uuHG nS7X+WUDDNKt7i8+FZUxehARGkdm1z357HpbY6GKfJDEUV41ZNMci0pm7LZ+acTS 6EZVQVqlWNv7/C/HOkBauO4tYWXdv1Q= -----END CERTIFICATE-----Generated at Fri Apr 17 18:34:05 2026 by rpki-client