$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5062bf67-b055-3a33-ae23-0625b8b4669f.roa File: 5062bf67-b055-3a33-ae23-0625b8b4669f.roa (raw, json) Hash identifier: jYXvwxFNih1RvRtR/PPg2MIrGvZY0wxt2Ebll7IKNok= Subject key identifier: 3E:E0:BA:3B:5B:A2:78:C7:90:E1:7F:42:80:08:3F:48:AA:DF:02:B8 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D4EBFA4CFAFD2D776CB2CAB80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5062bf67-b055-3a33-ae23-0625b8b4669f.roa Signing time: Fri 27 Mar 2026 13:00:40 +0000 ROA not before: Fri 27 Mar 2026 13:00:40 +0000 ROA not after: Thu 25 Jun 2026 13:00:40 +0000 asID: 13335 IP address blocks: 172.64.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4e:bf:a4:cf:af:d2:d7:76:cb:2c:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 27 13:00:40 2026 GMT Not After : Jun 25 13:00:40 2026 GMT Subject: CN=abb238a3-3b94-409a-9c94-1ad91a3e996c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:bd:c5:68:50:85:d6:21:4d:da:4c:c9:09:28: 85:90:6c:bb:4b:0f:68:53:75:2d:af:13:1e:4a:db: 79:b8:40:2d:3a:1b:47:80:39:79:fd:84:a0:72:17: 80:2d:a8:14:f8:c9:b9:ca:25:fe:5a:5f:ca:98:9d: 66:22:e8:7b:ed:e0:30:24:8f:b6:6d:23:9b:b6:96: 5d:1d:b4:01:6e:6a:e1:4f:79:32:4e:12:7d:87:39: 9c:c7:49:e0:55:73:58:22:55:19:31:b5:e7:31:74: c3:cf:d5:d6:ac:bd:a3:39:85:56:a8:e6:94:07:c5: f2:8a:f8:93:ef:07:b0:0c:ca:3b:7f:80:65:bd:6b: c3:d1:7f:f3:92:86:fc:26:fd:c1:db:ef:b3:86:42: 59:f5:e5:c0:d7:d3:2c:60:18:44:ed:c0:db:e7:91: 06:4d:8a:8e:51:27:da:02:3b:29:e6:4b:2c:24:da: 51:97:ad:62:50:e3:b6:58:30:9d:30:dd:1d:53:b4: ef:1e:27:08:a3:c5:11:eb:01:36:e1:50:43:3c:34: 7b:41:8b:bf:8e:a6:2b:e2:11:3b:e4:b3:6d:f1:9c: 6e:7e:28:a3:bc:22:3c:80:d7:e1:71:99:93:9c:6e: 3e:cb:80:59:1b:dd:6e:db:34:9e:46:2b:3c:de:5b: e4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:E0:BA:3B:5B:A2:78:C7:90:E1:7F:42:80:08:3F:48:AA:DF:02:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5062bf67-b055-3a33-ae23-0625b8b4669f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:c6:a1:64:50:c5:2d:49:d9:36:80:45:b4:5e:de:c4:5a:78: 6f:2f:15:b5:30:46:f7:8e:6a:d7:30:8a:c9:57:64:bb:f3:98: 54:90:8d:ff:e5:b6:3e:39:1f:7e:9c:d6:2c:96:15:cc:fd:09: e7:f2:ac:19:e9:47:69:4d:0e:50:25:47:47:60:54:c1:d8:a2: dd:3b:e5:7f:dd:ef:42:8a:f4:1b:58:cb:8d:ab:2d:2d:3b:d7: 5f:a6:95:ab:ff:56:6a:41:63:e3:00:a0:9b:fc:89:fa:7d:42: 12:eb:d1:e9:d5:d9:a9:61:7a:c7:c7:b7:c6:cd:75:77:1a:c6: cc:13:16:a5:1f:10:22:30:85:40:f9:bf:f2:35:3a:ae:a1:2e: dc:31:8d:e0:54:ae:68:d2:ee:2c:d9:e8:c0:49:cc:02:d4:f8: 87:c0:9f:e2:e7:39:40:68:42:55:32:c8:f4:0d:72:c4:08:89: 94:d8:9b:34:9f:a8:21:0e:90:22:85:7c:2a:07:46:84:27:99: 84:29:1c:35:0e:02:1b:f7:f9:02:cf:db:72:d4:fd:33:d8:e2: 16:62:0c:f0:09:60:93:9e:12:ef:6f:f3:15:ed:77:dc:b5:81: a2:b8:72:86:8a:58:3a:50:cd:6f:52:db:10:dd:90:ae:11:b3: 0b:95:a0:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ov6TPr9LXdsssq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDMyNzEzMDA0MFoXDTI2MDYyNTEzMDA0MFowLzEtMCsGA1UEAxMk YWJiMjM4YTMtM2I5NC00MDlhLTljOTQtMWFkOTFhM2U5OTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA273FaFCF1iFN2kzJCSiFkGy7Sw9oU3UtrxMe Stt5uEAtOhtHgDl5/YSgcheALagU+Mm5yiX+Wl/KmJ1mIuh77eAwJI+2bSObtpZd HbQBbmrhT3kyThJ9hzmcx0ngVXNYIlUZMbXnMXTDz9XWrL2jOYVWqOaUB8XyiviT 7wewDMo7f4BlvWvD0X/zkob8Jv3B2++zhkJZ9eXA19MsYBhE7cDb55EGTYqOUSfa Ajsp5kssJNpRl61iUOO2WDCdMN0dU7TvHicIo8UR6wE24VBDPDR7QYu/jqYr4hE7 5LNt8ZxufiijvCI8gNfhcZmTnG4+y4BZG91u2zSeRis83lvkRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD7gujtbonjHkOF/QoAIP0iq3wK4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNTA2MmJmNjctYjA1NS0z YTMzLWFlMjMtMDYyNWI4YjQ2NjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEDHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfGoWRQxS1J2TaARbRe3sRaeG8vFbUwRveOatcwislXZLvzmFSQjf/l tj45H36c1iyWFcz9CefyrBnpR2lNDlAlR0dgVMHYot075X/d70KK9BtYy42rLS07 11+mlav/VmpBY+MAoJv8ifp9QhLr0enV2alhesfHt8bNdXcaxswTFqUfECIwhUD5 v/I1Oq6hLtwxjeBUrmjS7izZ6MBJzALU+IfAn+LnOUBoQlUyyPQNcsQIiZTYmzSf qCEOkCKFfCoHRoQnmYQpHDUOAhv3+QLP23LU/TPY4hZiDPAJYJOeEu9v8xXtd9y1 gaK4coaKWDpQzW9S2xDdkK4RswuVoJo= -----END CERTIFICATE-----Generated at Fri Apr 17 19:46:16 2026 by rpki-client