$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/60ff95bb-0dc1-3f73-89a4-b5aa627067b6.roa File: 60ff95bb-0dc1-3f73-89a4-b5aa627067b6.roa (raw, json) Hash identifier: GYxeFOV3Avkoq0Xt52MG/250XMBQRtgXUzUr2G/ZVJg= Subject key identifier: A3:DF:97:63:7F:47:8E:7B:ED:A3:B0:E5:A0:9E:87:DE:C3:E7:B8:ED Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584CF6ECDEBFB76D2D8F9BD80500 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/60ff95bb-0dc1-3f73-89a4-b5aa627067b6.roa Signing time: Tue 24 Feb 2026 02:00:31 +0000 ROA not before: Tue 24 Feb 2026 02:00:31 +0000 ROA not after: Mon 25 May 2026 01:00:31 +0000 asID: 13335 IP address blocks: 172.66.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f6:ec:de:bf:b7:6d:2d:8f:9b:d8:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 24 02:00:31 2026 GMT Not After : May 25 01:00:31 2026 GMT Subject: CN=3d2fa115-9c93-4bad-b2d7-db7922250b01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:14:8b:13:2a:35:8d:a5:af:d6:25:fe:5b:05: 6d:b3:06:e7:90:ff:82:ad:72:31:6d:41:b4:0c:9b: e3:6a:b3:82:e2:c2:2c:c6:3c:5c:35:73:a6:c9:65: a7:cd:d1:8e:de:3e:3d:82:50:50:37:b5:7c:31:06: b5:29:2c:ad:b7:de:5f:d2:02:5b:78:d1:d2:48:70: 05:1e:98:c8:c7:dc:68:5b:39:ec:c8:83:e9:50:d4: 60:33:6b:fd:ed:68:f9:9f:ab:b4:e4:41:24:1e:a6: 2c:c4:64:8b:82:58:d7:49:2d:9c:9c:41:f3:e8:06: 42:84:6d:d9:ec:60:6a:c0:9d:aa:5c:02:f2:c6:d3: ad:ee:a7:0a:d1:62:6c:cc:3b:b0:f6:2b:01:4f:e0: 00:ad:69:50:f0:6f:81:5e:92:5f:7e:36:18:3b:06: 05:51:84:41:48:58:98:32:84:9d:7c:1e:2d:22:99: 10:cc:15:7b:42:e9:96:f2:b6:49:48:d9:ad:91:14: 2a:da:1c:04:d8:72:20:92:ab:0b:b9:40:60:a2:aa: b5:68:f7:c2:8d:0f:5a:2f:f2:62:df:da:65:80:08: 2b:27:b3:3e:c5:3a:9e:2c:c1:be:a9:53:28:10:04: 11:71:a4:64:af:e9:83:e0:1b:0f:12:38:76:65:c4: f1:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:DF:97:63:7F:47:8E:7B:ED:A3:B0:E5:A0:9E:87:DE:C3:E7:B8:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/60ff95bb-0dc1-3f73-89a4-b5aa627067b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.66.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:ae:d8:f0:a2:11:8f:7f:17:64:d3:a6:96:ef:a7:1f:be:cd: ce:bf:ef:49:44:5d:37:b5:04:d7:02:e0:0b:d2:20:20:a2:00: 2a:4a:67:32:0e:ed:8c:95:d1:d4:df:5f:6b:0b:2f:c9:c4:63: 75:36:07:aa:62:98:b1:c2:14:ed:31:e7:3f:18:9d:12:e2:30: 44:06:b5:1e:9b:87:a3:0e:1e:11:a9:53:d2:4e:31:19:dd:f3: b4:12:d6:5b:fb:fe:82:75:92:9e:ee:dd:31:87:fb:06:5d:22: 9e:03:3d:58:09:41:6d:f0:5d:df:03:4d:e8:b9:52:ca:f3:cb: 8e:07:90:0e:e5:cb:87:52:77:72:66:d4:4a:16:eb:5b:00:e5: f7:60:26:1e:4f:4c:52:15:fc:e3:a5:70:79:da:5a:4d:3a:8b: d2:d3:7d:6d:d5:25:e5:4c:a6:e5:f3:e9:da:30:e9:f3:b0:44: 96:23:02:5b:07:03:35:3a:42:d0:0b:6e:cb:b8:6f:09:2d:2b: e3:bd:36:93:05:0d:fc:d2:ce:b4:f1:65:39:e0:5b:63:de:dc: 1d:62:4c:b4:ac:04:d3:5d:42:76:94:f5:0e:fb:77:99:48:35: a7:51:14:25:c3:ca:cd:7b:6c:fa:cf:c3:7d:2c:83:c8:08:9b: 3e:78:cc:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz27N6/t20tj5vYBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDIyNDAyMDAzMVoXDTI2MDUyNTAxMDAzMVowLzEtMCsGA1UEAxMk M2QyZmExMTUtOWM5My00YmFkLWIyZDctZGI3OTIyMjUwYjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhSLEyo1jaWv1iX+WwVtswbnkP+CrXIxbUG0 DJvjarOC4sIsxjxcNXOmyWWnzdGO3j49glBQN7V8MQa1KSytt95f0gJbeNHSSHAF HpjIx9xoWznsyIPpUNRgM2v97Wj5n6u05EEkHqYsxGSLgljXSS2cnEHz6AZChG3Z 7GBqwJ2qXALyxtOt7qcK0WJszDuw9isBT+AArWlQ8G+BXpJffjYYOwYFUYRBSFiY MoSdfB4tIpkQzBV7QumW8rZJSNmtkRQq2hwE2HIgkqsLuUBgoqq1aPfCjQ9aL/Ji 39plgAgrJ7M+xTqeLMG+qVMoEAQRcaRkr+mD4BsPEjh2ZcTxcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKPfl2N/R4577aOw5aCeh97D57jtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjBmZjk1YmItMGRjMS0z ZjczLTg5YTQtYjVhYTYyNzA2N2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEIfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGeu2PCiEY9/F2TTppbvpx++zc6/70lEXTe1BNcC4AvSICCiACpKZzIO 7YyV0dTfX2sLL8nEY3U2B6pimLHCFO0x5z8YnRLiMEQGtR6bh6MOHhGpU9JOMRnd 87QS1lv7/oJ1kp7u3TGH+wZdIp4DPVgJQW3wXd8DTei5Usrzy44HkA7ly4dSd3Jm 1EoW61sA5fdgJh5PTFIV/OOlcHnaWk06i9LTfW3VJeVMpuXz6dow6fOwRJYjAlsH AzU6QtALbsu4bwktK+O9NpMFDfzSzrTxZTngW2Pe3B1iTLSsBNNdQnaU9Q77d5lI NadRFCXDys17bPrPw30sg8gImz54zGM= -----END CERTIFICATE-----Generated at Mon Mar 2 15:15:27 2026 by rpki-client