$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/42994a69-182c-326f-b80c-adb381440cc9.roa File: 42994a69-182c-326f-b80c-adb381440cc9.roa (raw, json) Hash identifier: X1K7u461iFnjgSAiwK5czyvfOjrDziROOWhHDuDMiOk= Subject key identifier: 28:15:D2:4E:71:04:D6:02:20:E4:B4:45:D6:0A:B8:5C:B4:5C:33:33 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584C9106EF29040E5F36C77F7200 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/42994a69-182c-326f-b80c-adb381440cc9.roa Signing time: Sun 18 Jan 2026 14:00:39 +0000 ROA not before: Sun 18 Jan 2026 14:00:39 +0000 ROA not after: Sat 18 Apr 2026 13:00:39 +0000 asID: 13335 IP address blocks: 172.70.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:91:06:ef:29:04:0e:5f:36:c7:7f:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jan 18 14:00:39 2026 GMT Not After : Apr 18 13:00:39 2026 GMT Subject: CN=5320b9f7-3575-4946-826d-e97a5bfd068b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:05:cd:8f:6f:8f:b8:a6:e6:70:9e:66:7c:24: 85:9c:e1:68:de:a2:da:bb:aa:73:c3:d7:b4:40:dd: b7:2c:2b:cb:78:57:68:65:ca:50:e4:7c:f3:ef:d1: da:24:07:0d:20:5a:28:bf:11:e6:cd:db:86:f4:3c: 15:ac:99:5a:5b:d1:e8:d7:a0:7e:63:ab:02:aa:1c: 64:38:1c:a9:77:5a:38:a7:43:61:1f:7e:5b:f0:6f: ef:d5:10:ea:e3:16:cd:68:39:ba:8f:ef:29:f3:4f: 5a:9a:13:30:ce:d1:9d:dd:3c:de:49:a9:af:9d:d3: db:9e:97:c1:3f:67:60:b1:2f:98:94:58:d7:aa:a4: 3f:54:82:16:c7:95:46:17:bf:e9:5f:f5:f4:07:9b: af:46:ef:c8:2f:95:5e:65:04:d6:8f:90:91:55:97: de:9c:58:ac:22:c8:50:15:0c:83:e2:45:88:e8:dc: 0a:a5:66:07:8a:ea:ea:b4:52:3c:90:91:5c:d5:f5: 97:86:df:75:64:da:19:8d:f8:39:e3:07:df:d6:16: 06:b2:1b:e9:6a:f3:fd:8d:e5:2e:ab:0e:13:d1:e7: c3:8f:a4:4c:e2:86:a9:f1:cb:ff:a2:68:da:d9:98: fd:ec:bb:a5:3e:66:24:43:46:dd:94:d1:a4:52:da: f1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:15:D2:4E:71:04:D6:02:20:E4:B4:45:D6:0A:B8:5C:B4:5C:33:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/42994a69-182c-326f-b80c-adb381440cc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:1e:67:ac:ee:de:1a:94:7b:14:60:db:60:c4:10:d2:52:83: 55:31:19:66:4d:aa:00:61:d1:1b:68:bf:2e:22:b2:5c:fb:c0: f5:ee:3f:fd:d0:0c:3f:f8:92:1a:74:8f:35:89:f3:b4:ad:dd: 2b:bf:0b:48:7c:03:75:58:e0:67:01:1f:47:3a:58:1e:89:a1: c3:c8:6a:2d:f8:f9:87:bc:6b:76:6f:52:2c:a6:38:ee:c3:2c: 02:cc:05:cd:86:18:d0:5b:b5:a7:27:76:06:81:01:5a:68:32: f1:a5:01:5a:00:93:32:bb:13:a2:8a:4e:45:7f:8c:1e:a6:e5: c0:9b:2e:fe:6b:f6:cb:d5:9b:7a:c9:aa:d2:1f:58:f6:48:c5: 37:66:1b:13:9e:dc:1a:14:c1:74:0c:84:e6:c3:27:87:56:68: 9a:b4:ad:61:bb:78:1a:bc:eb:86:06:52:e0:55:ec:b0:4e:2c: 56:a0:13:84:4f:95:31:ae:fe:83:e7:9c:d5:63:7e:a5:cf:02: 93:63:a5:7f:82:d9:a0:d9:89:b4:2b:8d:2b:28:a4:32:8e:c8: 7b:7c:91:cb:60:22:1f:95:34:26:ab:7a:e1:5f:17:e8:bc:50: 15:a7:cc:da:e3:a4:51:15:c8:03:f8:18:7f:32:ef:37:84:17: 38:9e:a0:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyRBu8pBA5fNsd/cgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDExODE0MDAzOVoXDTI2MDQxODEzMDAzOVowLzEtMCsGA1UEAxMk NTMyMGI5ZjctMzU3NS00OTQ2LTgyNmQtZTk3YTViZmQwNjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAXNj2+PuKbmcJ5mfCSFnOFo3qLau6pzw9e0 QN23LCvLeFdoZcpQ5Hzz79HaJAcNIFoovxHmzduG9DwVrJlaW9Ho16B+Y6sCqhxk OBypd1o4p0NhH35b8G/v1RDq4xbNaDm6j+8p809amhMwztGd3TzeSamvndPbnpfB P2dgsS+YlFjXqqQ/VIIWx5VGF7/pX/X0B5uvRu/IL5VeZQTWj5CRVZfenFisIshQ FQyD4kWI6NwKpWYHiurqtFI8kJFc1fWXht91ZNoZjfg54wff1hYGshvpavP9jeUu qw4T0efDj6RM4oap8cv/omja2Zj97LulPmYkQ0bdlNGkUtrxeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgV0k5xBNYCIOS0RdYKuFy0XDMzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDI5OTRhNjktMTgyYy0z MjZmLWI4MGMtYWRiMzgxNDQwY2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQeZ6zu3hqUexRg22DEENJSg1UxGWZNqgBh0Rtovy4islz7wPXuP/3Q DD/4khp0jzWJ87St3Su/C0h8A3VY4GcBH0c6WB6JocPIai34+Ye8a3ZvUiymOO7D LALMBc2GGNBbtacndgaBAVpoMvGlAVoAkzK7E6KKTkV/jB6m5cCbLv5r9svVm3rJ qtIfWPZIxTdmGxOe3BoUwXQMhObDJ4dWaJq0rWG7eBq864YGUuBV7LBOLFagE4RP lTGu/oPnnNVjfqXPApNjpX+C2aDZibQrjSsopDKOyHt8kctgIh+VNCareuFfF+i8 UBWnzNrjpFEVyAP4GH8y7zeEFzieoBo= -----END CERTIFICATE-----Generated at Mon Mar 2 14:15:58 2026 by rpki-client