$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1f5cbb1b-84cc-3055-bfad-80e64f5dbec1.roa File: 1f5cbb1b-84cc-3055-bfad-80e64f5dbec1.roa (raw, json) Hash identifier: gOEJSi7L3uTQ2DLduk7qyP2T9vdsn2RMrl2v6x7eXjY= Subject key identifier: 2F:2B:86:0C:D6:B9:36:77:50:66:4D:13:62:DC:C0:E2:DA:09:75:CB Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584DDBBB201C49674D1F2A5912C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1f5cbb1b-84cc-3055-bfad-80e64f5dbec1.roa Signing time: Sun 17 May 2026 01:00:24 +0000 ROA not before: Sun 17 May 2026 01:00:24 +0000 ROA not after: Sat 15 Aug 2026 01:00:24 +0000 asID: 14789 IP address blocks: 172.70.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:db:bb:20:1c:49:67:4d:1f:2a:59:12:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 17 01:00:24 2026 GMT Not After : Aug 15 01:00:24 2026 GMT Subject: CN=bfd87256-cfef-48fc-bb80-678e7ad93d5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:5f:be:91:0a:86:88:b3:b3:a1:d8:f3:15:fd: bd:a4:7f:97:f9:7b:49:b0:53:7f:fe:59:88:76:0f: 4b:f9:46:27:4a:fc:09:a1:d3:d0:de:cf:a3:61:e7: 6d:25:95:2f:11:c8:a6:b8:32:b7:d7:92:54:32:92: 12:2a:19:09:2d:0d:82:23:e4:ee:47:b6:e5:00:05: 0d:15:37:95:92:25:81:65:f4:4d:9a:02:17:ed:49: ef:f7:5f:28:06:90:24:6c:f8:8c:25:4c:e3:2f:32: 9a:7b:79:fa:4f:6c:b5:1b:c5:59:1b:cc:1f:f4:d9: a0:77:86:99:ec:21:10:f4:52:49:60:a5:24:2e:03: 82:f8:64:16:4c:f1:fa:ba:4a:4a:a6:7c:e7:89:67: a1:7c:55:f1:ac:03:5f:21:bb:29:18:1d:86:b1:55: 46:de:a4:50:89:95:a3:32:d5:e3:0d:97:77:a1:6d: df:37:72:f9:f7:9a:50:22:e0:45:fa:3b:34:1f:8e: 6c:20:e5:30:ee:8f:2b:aa:5c:45:3f:54:12:75:14: 8d:e1:74:ad:ff:ff:2c:d4:aa:d6:14:a1:48:dd:1b: e0:65:54:8f:ca:bc:f4:01:d7:c4:6f:81:2d:99:ad: bb:07:0b:ab:01:2a:93:de:55:67:09:6e:f7:29:9c: 41:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:2B:86:0C:D6:B9:36:77:50:66:4D:13:62:DC:C0:E2:DA:09:75:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1f5cbb1b-84cc-3055-bfad-80e64f5dbec1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:2c:78:85:45:c0:9d:7d:79:2b:a7:61:ac:ea:42:12:93:83: b9:8a:4e:e2:d7:f9:8f:69:23:94:43:88:57:40:70:49:be:fd: 14:a4:f1:df:a6:9e:e8:6e:b7:b2:55:da:d7:af:a4:09:22:e7: 10:2b:30:c8:fd:35:48:26:d8:b6:b7:60:47:7b:4c:f1:48:d9: 28:8b:ab:92:a8:66:c2:e6:4e:6b:76:41:b5:a3:06:e8:b6:e7: 7e:fc:ba:cb:f6:ca:89:d6:ec:78:5c:d0:9e:5f:1f:b3:05:00: 66:b1:4c:b7:1b:6f:46:ba:ac:27:c6:b7:71:97:8a:f8:e7:fd: 26:9b:5a:d8:83:a9:77:78:97:47:40:3a:e5:49:1b:51:bf:e9: 22:42:03:d9:23:20:05:c6:f4:3b:63:4e:cc:42:81:91:38:dc: 38:7c:24:51:c3:2c:86:a6:2f:e1:6a:2a:ef:cd:60:64:7b:38: c5:ef:e1:7f:64:b5:89:87:2d:ea:2e:89:24:36:c0:f7:a9:c3: 0e:94:1c:fb:3c:b0:75:6e:73:17:09:15:88:b5:d9:cf:08:f8: c0:66:5a:aa:cb:72:05:a8:a1:eb:49:44:d4:97:9e:40:cb:70: b8:cb:35:f5:77:87:7c:1c:25:2d:b0:36:75:a7:37:ca:2e:7c: 4e:4d:1d:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3buyAcSWdNHypZEsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDUxNzAxMDAyNFoXDTI2MDgxNTAxMDAyNFowLzEtMCsGA1UEAxMk YmZkODcyNTYtY2ZlZi00OGZjLWJiODAtNjc4ZTdhZDkzZDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1++kQqGiLOzodjzFf29pH+X+XtJsFN//lmI dg9L+UYnSvwJodPQ3s+jYedtJZUvEcimuDK315JUMpISKhkJLQ2CI+TuR7blAAUN FTeVkiWBZfRNmgIX7Unv918oBpAkbPiMJUzjLzKae3n6T2y1G8VZG8wf9Nmgd4aZ 7CEQ9FJJYKUkLgOC+GQWTPH6ukpKpnzniWehfFXxrANfIbspGB2GsVVG3qRQiZWj MtXjDZd3oW3fN3L595pQIuBF+js0H45sIOUw7o8rqlxFP1QSdRSN4XSt//8s1KrW FKFI3RvgZVSPyrz0AdfEb4Etma27BwurASqT3lVnCW73KZxB/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC8rhgzWuTZ3UGZNE2LcwOLaCXXLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMWY1Y2JiMWItODRjYy0z MDU1LWJmYWQtODBlNjRmNWRiZWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALgseIVFwJ19eSunYazqQhKTg7mKTuLX+Y9pI5RDiFdAcEm+/RSk8d+m nuhut7JV2tevpAki5xArMMj9NUgm2La3YEd7TPFI2SiLq5KoZsLmTmt2QbWjBui2 5378usv2yonW7Hhc0J5fH7MFAGaxTLcbb0a6rCfGt3GXivjn/SabWtiDqXd4l0dA OuVJG1G/6SJCA9kjIAXG9DtjTsxCgZE43Dh8JFHDLIamL+FqKu/NYGR7OMXv4X9k tYmHLeouiSQ2wPepww6UHPs8sHVucxcJFYi12c8I+MBmWqrLcgWooetJRNSXnkDL cLjLNfV3h3wcJS2wNnWnN8oufE5NHcM= -----END CERTIFICATE-----Generated at Sat Jun 13 19:39:47 2026 by rpki-client