$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/357ba2a2-7d1d-32f0-a8bd-ee55a9ff505a.roa File: 357ba2a2-7d1d-32f0-a8bd-ee55a9ff505a.roa (raw, json) Hash identifier: rveLCE5qiVxk6/ZGyAWjjvexj4tBqRT/Swj+xnO4BMU= Subject key identifier: 90:A5:46:BB:19:B0:21:9B:58:D8:F2:4C:92:88:8E:06:22:04:0B:0A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D6AAA95F056F51268ED48C8E0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/357ba2a2-7d1d-32f0-a8bd-ee55a9ff505a.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 13335 IP address blocks: 172.64.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:95:f0:56:f5:12:68:ed:48:c8:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=5b36bc86-892d-4cd9-9c2b-ddf0feced6e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:12:7c:ff:84:76:37:1a:f5:40:aa:01:69:0b: 8b:2d:7f:57:58:d6:56:4e:f9:25:31:70:c9:9d:e1: 1d:93:49:77:6d:73:9c:2e:1b:2e:a8:88:2a:ba:2c: 58:7f:9c:0d:64:97:a4:9f:dd:00:07:87:9e:61:18: 63:3a:80:40:41:ed:af:11:9c:b8:2e:c4:6d:d8:1a: 3e:2c:2b:08:f6:13:65:42:34:f7:05:96:a7:f6:00: 6d:c6:4e:4e:f6:ed:5f:37:4a:e1:32:17:c3:8d:b6: 9a:65:7e:99:47:b2:d9:d4:c0:63:3f:49:16:3f:9c: 21:dd:b6:50:7e:49:41:e4:ca:a8:1f:82:3c:c1:e1: be:49:91:51:29:41:27:44:4e:27:4d:ef:06:60:cf: 58:91:2d:93:dc:87:e9:6e:19:21:86:45:8d:56:c8: 7f:42:32:e9:84:8d:8f:ae:2c:05:b2:bf:52:f1:18: 61:97:11:bd:c3:8a:3e:7c:78:ca:0d:1f:9c:80:cf: 07:3d:21:5a:28:f5:7b:f0:c2:51:4d:b2:02:5a:8c: aa:51:80:e9:e4:ed:c2:9f:5b:5e:6b:4c:7d:55:5e: 89:26:d1:91:33:3b:43:2e:62:9f:05:f4:8c:05:51: 9d:03:5f:ef:d9:75:83:b3:6f:36:bd:43:f5:fe:62: 7f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A5:46:BB:19:B0:21:9B:58:D8:F2:4C:92:88:8E:06:22:04:0B:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/357ba2a2-7d1d-32f0-a8bd-ee55a9ff505a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:22:24:08:77:fe:94:3f:75:88:60:4b:97:77:62:cd:fc:38: 37:bf:f1:00:a9:26:9f:66:c9:12:d5:cd:a6:f6:bd:58:32:f1: b3:06:85:0b:bb:ac:63:20:39:60:d5:ba:71:d5:fe:0b:da:b2: ab:c8:88:fe:f1:c0:25:1d:d9:2b:6a:82:53:19:86:61:21:f5: 7f:53:6b:53:d4:94:24:0f:20:94:51:1a:1d:0f:d9:b8:2d:63: ce:9c:c4:8b:e5:e1:9b:04:2d:e0:74:46:34:af:a2:c9:09:77: ce:96:0e:c7:cf:79:0a:60:ea:e8:a6:48:3c:7d:bf:e0:2d:78: b6:95:d7:42:88:68:3e:1a:bb:50:34:18:4b:4f:3b:ad:e2:f6: 9a:2c:cd:ab:c0:c3:54:74:bf:af:5f:1e:19:97:d0:7b:67:1c: 01:87:ec:0d:0f:91:4a:d0:10:cd:fa:e2:be:ca:56:72:b7:a8: 94:7d:13:81:63:a9:95:58:7a:74:af:57:c5:36:24:79:64:dc: 94:9d:8f:7b:98:94:0f:d1:a8:8e:37:bd:de:8f:b0:13:2e:7e: 6c:da:a1:eb:80:cb:e0:f0:fe:03:80:4a:07:a3:fd:a9:23:9d: 11:45:89:34:63:8e:71:db:c7:19:b2:d5:c3:5e:aa:65:94:44: e4:2d:ef:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqpXwVvUSaO1IyOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk NWIzNmJjODYtODkyZC00Y2Q5LTljMmItZGRmMGZlY2VkNmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9hJ8/4R2Nxr1QKoBaQuLLX9XWNZWTvklMXDJ neEdk0l3bXOcLhsuqIgquixYf5wNZJekn90AB4eeYRhjOoBAQe2vEZy4LsRt2Bo+ LCsI9hNlQjT3BZan9gBtxk5O9u1fN0rhMhfDjbaaZX6ZR7LZ1MBjP0kWP5wh3bZQ fklB5MqoH4I8weG+SZFRKUEnRE4nTe8GYM9YkS2T3IfpbhkhhkWNVsh/QjLphI2P riwFsr9S8RhhlxG9w4o+fHjKDR+cgM8HPSFaKPV78MJRTbICWoyqUYDp5O3Cn1te a0x9VV6JJtGRMztDLmKfBfSMBVGdA1/v2XWDs282vUP1/mJ/jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJClRrsZsCGbWNjyTJKIjgYiBAsKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzU3YmEyYTItN2QxZC0z MmYwLWE4YmQtZWU1NWE5ZmY1MDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErECQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8iJAh3/pQ/dYhgS5d3Ys38ODe/8QCpJp9myRLVzab2vVgy8bMGhQu7 rGMgOWDVunHV/gvasqvIiP7xwCUd2StqglMZhmEh9X9Ta1PUlCQPIJRRGh0P2bgt Y86cxIvl4ZsELeB0RjSvoskJd86WDsfPeQpg6uimSDx9v+AteLaV10KIaD4au1A0 GEtPO63i9poszavAw1R0v69fHhmX0HtnHAGH7A0PkUrQEM364r7KVnK3qJR9E4Fj qZVYenSvV8U2JHlk3JSdj3uYlA/RqI43vd6PsBMufmzaoeuAy+Dw/gOASgej/akj nRFFiTRjjnHbxxmy1cNeqmWUROQt7yY= -----END CERTIFICATE-----Generated at Fri Apr 17 12:04:05 2026 by rpki-client