$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/85365389-d6f8-3ee3-b7a7-baf47cd7043e.roa File: 85365389-d6f8-3ee3-b7a7-baf47cd7043e.roa (raw, json) Hash identifier: twbdn5wwbQIT7dLlIPGktyoVWwYkWqmP6T0MPr6aFIc= Subject key identifier: 06:1C:D9:B5:09:0E:D3:4B:E9:D3:92:05:E3:4D:FB:4F:5B:54:0B:81 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584C9106FF499EC45D94A0F35C94 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/85365389-d6f8-3ee3-b7a7-baf47cd7043e.roa Signing time: Sun 18 Jan 2026 14:00:39 +0000 ROA not before: Sun 18 Jan 2026 14:00:39 +0000 ROA not after: Sat 18 Apr 2026 13:00:39 +0000 asID: 13335 IP address blocks: 172.70.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:91:06:ff:49:9e:c4:5d:94:a0:f3:5c:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jan 18 14:00:39 2026 GMT Not After : Apr 18 13:00:39 2026 GMT Subject: CN=0f8ac137-c123-45ec-80e2-e435f4e598a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d6:b4:12:2e:c2:1b:5f:86:61:96:7f:d6:88: 78:0b:eb:ab:23:e6:be:ed:fd:2a:2a:2d:ca:ea:0d: 00:86:46:f7:e7:92:10:9b:ce:18:e5:0e:44:f5:26: ef:e8:67:63:24:7c:e0:b3:29:d1:dd:9e:5c:c1:1f: 41:ef:19:26:9a:1b:2f:eb:74:6c:32:b9:b2:0f:43: 22:29:5c:8f:b5:02:3c:a6:70:61:6a:71:32:1b:8f: 85:59:62:ec:fa:83:56:7d:1f:60:07:9a:9a:95:01: 34:50:9e:da:09:58:2f:77:4b:cc:a8:cb:61:d1:45: 93:22:bc:73:3b:51:68:95:d7:c6:fd:1e:42:4a:57: d5:f6:47:a6:d3:42:ce:52:65:69:52:d0:87:46:ed: d7:c3:c9:73:f2:58:f7:b0:f2:7a:07:3e:69:fb:ad: c0:0c:7c:44:fc:af:9f:0f:30:0b:77:7f:93:3f:2d: 12:eb:be:ad:ff:c8:b7:12:25:9a:af:63:98:bd:a8: 64:ab:23:55:90:16:fa:77:e0:da:a8:08:10:9d:8c: 43:db:18:0f:3f:9f:3f:a6:1f:36:eb:e1:b9:39:56: 11:1f:8d:09:e3:85:f3:e0:f2:e8:f2:ee:60:f5:b7: 67:fa:06:ea:18:1d:21:6b:5b:2c:82:04:31:31:6b: 52:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:1C:D9:B5:09:0E:D3:4B:E9:D3:92:05:E3:4D:FB:4F:5B:54:0B:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/85365389-d6f8-3ee3-b7a7-baf47cd7043e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:26:f9:77:2b:51:57:e4:37:6e:35:3c:a8:da:48:1a:a4:19: bd:f3:e4:80:96:9f:24:14:85:24:5f:1f:f7:e4:d7:69:9b:15: aa:19:40:37:6f:67:d2:98:7b:2e:9a:f0:94:a4:ab:9d:20:7a: 35:df:f0:2c:45:31:c3:f2:9f:40:85:b5:a9:21:c1:bf:c0:15: 6a:1f:1a:1a:af:39:5b:21:4a:50:b6:fb:97:57:84:3a:f8:c3: 48:1a:23:55:3e:b1:9e:88:b5:8b:ae:09:0c:c9:cf:db:6b:84: 13:2e:20:d7:3c:52:72:bd:60:b1:b6:82:ab:a0:3f:c9:29:48: b6:6e:8c:ee:6b:47:a5:94:e6:4f:00:a3:43:1e:69:4a:5e:3a: 71:98:a0:87:aa:82:9d:90:f4:95:95:b0:1b:20:42:7d:15:07: cb:b6:82:62:33:f3:a8:da:de:02:2f:35:3d:90:b7:d5:50:12: b0:ec:71:f5:82:00:46:12:97:81:bd:10:01:1e:06:2a:5e:89: 93:19:00:a5:bb:84:ed:14:d8:2a:02:94:10:65:03:8c:dd:b0: 7a:df:d3:31:23:fb:0c:4e:dd:3f:83:40:b4:14:5f:e5:b3:04: 07:c5:4a:83:4f:f3:72:ec:5c:7f:97:67:2c:48:5c:3e:45:87: 88:62:58:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyRBv9JnsRdlKDzXJQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDExODE0MDAzOVoXDTI2MDQxODEzMDAzOVowLzEtMCsGA1UEAxMk MGY4YWMxMzctYzEyMy00NWVjLTgwZTItZTQzNWY0ZTU5OGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArta0Ei7CG1+GYZZ/1oh4C+urI+a+7f0qKi3K 6g0Ahkb355IQm84Y5Q5E9Sbv6GdjJHzgsynR3Z5cwR9B7xkmmhsv63RsMrmyD0Mi KVyPtQI8pnBhanEyG4+FWWLs+oNWfR9gB5qalQE0UJ7aCVgvd0vMqMth0UWTIrxz O1FoldfG/R5CSlfV9kem00LOUmVpUtCHRu3Xw8lz8lj3sPJ6Bz5p+63ADHxE/K+f DzALd3+TPy0S676t/8i3EiWar2OYvahkqyNVkBb6d+DaqAgQnYxD2xgPP58/ph82 6+G5OVYRH40J44Xz4PLo8u5g9bdn+gbqGB0ha1ssggQxMWtSFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAYc2bUJDtNL6dOSBeNN+09bVAuBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODUzNjUzODktZDZmOC0z ZWUzLWI3YTctYmFmNDdjZDcwNDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEb3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK8m+XcrUVfkN241PKjaSBqkGb3z5ICWnyQUhSRfH/fk12mbFaoZQDdv Z9KYey6a8JSkq50gejXf8CxFMcPyn0CFtakhwb/AFWofGhqvOVshSlC2+5dXhDr4 w0gaI1U+sZ6ItYuuCQzJz9trhBMuINc8UnK9YLG2gqugP8kpSLZujO5rR6WU5k8A o0MeaUpeOnGYoIeqgp2Q9JWVsBsgQn0VB8u2gmIz86ja3gIvNT2Qt9VQErDscfWC AEYSl4G9EAEeBipeiZMZAKW7hO0U2CoClBBlA4zdsHrf0zEj+wxO3T+DQLQUX+Wz BAfFSoNP83LsXH+XZyxIXD5Fh4hiWGY= -----END CERTIFICATE-----Generated at Sun Mar 1 19:13:12 2026 by rpki-client