$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2ba06f41-8b98-359e-acef-7ae6a0f1f1c6.roa File: 2ba06f41-8b98-359e-acef-7ae6a0f1f1c6.roa (raw, json) Hash identifier: WgDfDSwoDNdD3IsEEOqkaPFFQnz4SFqiCclx/ic96fs= Subject key identifier: 1C:9C:94:E1:79:60:95:29:99:A4:24:01:A8:49:F6:65:D1:2C:18:74 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584CCA41D7FA706B15C6915C6800 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2ba06f41-8b98-359e-acef-7ae6a0f1f1c6.roa Signing time: Sun 08 Feb 2026 02:00:32 +0000 ROA not before: Sun 08 Feb 2026 02:00:32 +0000 ROA not after: Sat 09 May 2026 01:00:32 +0000 asID: 13335 IP address blocks: 172.64.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ca:41:d7:fa:70:6b:15:c6:91:5c:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 8 02:00:32 2026 GMT Not After : May 9 01:00:32 2026 GMT Subject: CN=cb40405b-7110-47c4-ad2d-32289b0ef549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:69:60:8b:5e:33:d5:84:e2:ca:24:a7:b2:9f: 69:70:c8:63:7b:c9:0b:4e:de:bd:00:4e:35:a4:bb: 4b:01:0a:48:6a:59:80:1e:00:17:c5:ff:3d:60:ca: bb:3c:11:d3:c2:41:07:b9:98:df:62:33:ed:c6:01: 57:57:56:0a:eb:ce:40:04:3d:c6:35:51:00:ed:4f: e7:3e:81:f1:06:ef:4e:64:58:5c:bc:38:86:d6:41: f5:31:a3:23:5b:77:9c:85:ce:49:69:b1:3c:01:2a: 96:37:d9:ba:80:14:bd:69:06:ea:77:43:ab:b0:4f: 8a:d5:b0:43:61:a9:40:49:92:af:47:bf:7b:48:36: d9:9c:23:56:5a:80:d7:9d:0f:78:9c:e6:02:74:d8: 08:27:ca:ef:49:76:57:31:da:38:45:93:5a:bc:f1: 00:ba:6b:44:95:61:2c:2f:86:8f:c3:f9:2d:77:37: a0:e3:fd:1f:ed:fe:11:6c:0d:d5:09:ef:87:e9:dc: 9a:9b:bf:99:c1:3c:8f:2e:e9:6a:71:95:be:a0:99: e7:ef:8c:e0:81:0b:ba:57:3f:a5:59:5e:b9:2b:42: 1b:bb:2a:f6:f6:6c:94:ab:b0:fc:19:e3:99:84:5b: 67:a1:5c:59:da:fc:56:3a:5f:7f:8b:e4:50:f1:a7: 05:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:9C:94:E1:79:60:95:29:99:A4:24:01:A8:49:F6:65:D1:2C:18:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2ba06f41-8b98-359e-acef-7ae6a0f1f1c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:90:3d:e2:f5:80:54:79:e4:56:4f:83:da:41:88:9c:11:ba: 99:59:ab:64:ce:f1:8a:fe:d4:c3:f6:58:b2:e6:67:36:02:89: 0a:4d:45:5c:fe:41:93:d1:bf:9e:01:e8:d8:8c:bb:aa:02:59: 5c:77:e4:f9:ec:c5:80:f8:d5:22:1d:93:da:63:31:4c:15:58: 8b:14:61:00:ef:16:e6:09:03:18:f9:b0:cc:70:df:76:ab:9e: e7:9a:13:2c:07:4a:a7:cd:37:42:93:a4:83:d7:6d:d7:30:15: a4:23:2c:0d:d2:fd:77:d4:50:1d:86:67:49:df:d6:af:f2:15: ff:8d:e5:1e:e3:1d:77:15:ab:05:f0:a2:aa:2f:f6:c1:c7:90: fa:5f:37:5a:c8:a4:7f:ef:d2:f5:f4:79:bb:6a:70:48:e1:95: a5:55:0d:50:4f:85:24:b8:17:53:48:e2:35:13:1a:10:75:5c: e4:aa:40:ca:2e:d5:59:af:9e:6a:78:d6:70:02:5c:0c:38:b0: 4a:e0:78:78:30:7c:20:38:c6:ce:13:78:7a:33:a3:78:b6:88: b8:0b:75:84:df:bc:b0:43:50:d1:da:f4:e7:1f:9f:5a:a6:b7: 97:d5:0b:1e:00:e6:64:f6:0e:79:40:e6:57:6f:2f:1c:f0:32: d5:d1:3f:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzKQdf6cGsVxpFcaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDIwODAyMDAzMloXDTI2MDUwOTAxMDAzMlowLzEtMCsGA1UEAxMk Y2I0MDQwNWItNzExMC00N2M0LWFkMmQtMzIyODliMGVmNTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2lgi14z1YTiyiSnsp9pcMhje8kLTt69AE41 pLtLAQpIalmAHgAXxf89YMq7PBHTwkEHuZjfYjPtxgFXV1YK685ABD3GNVEA7U/n PoHxBu9OZFhcvDiG1kH1MaMjW3echc5JabE8ASqWN9m6gBS9aQbqd0OrsE+K1bBD YalASZKvR797SDbZnCNWWoDXnQ94nOYCdNgIJ8rvSXZXMdo4RZNavPEAumtElWEs L4aPw/ktdzeg4/0f7f4RbA3VCe+H6dyam7+ZwTyPLulqcZW+oJnn74zggQu6Vz+l WV65K0Ibuyr29myUq7D8GeOZhFtnoVxZ2vxWOl9/i+RQ8acFowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFByclOF5YJUpmaQkAahJ9mXRLBh0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmJhMDZmNDEtOGI5OC0z NTllLWFjZWYtN2FlNmEwZjFmMWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEC4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGQPeL1gFR55FZPg9pBiJwRuplZq2TO8Yr+1MP2WLLmZzYCiQpNRVz+ QZPRv54B6NiMu6oCWVx35PnsxYD41SIdk9pjMUwVWIsUYQDvFuYJAxj5sMxw33ar nueaEywHSqfNN0KTpIPXbdcwFaQjLA3S/XfUUB2GZ0nf1q/yFf+N5R7jHXcVqwXw oqov9sHHkPpfN1rIpH/v0vX0ebtqcEjhlaVVDVBPhSS4F1NI4jUTGhB1XOSqQMou 1Vmvnmp41nACXAw4sErgeHgwfCA4xs4TeHozo3i2iLgLdYTfvLBDUNHa9Ocfn1qm t5fVCx4A5mT2DnlA5ldvLxzwMtXRP48= -----END CERTIFICATE-----Generated at Mon Mar 2 10:25:16 2026 by rpki-client