$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8b5d0a32-bf06-3862-b13f-422e3b704274.roa File: 8b5d0a32-bf06-3862-b13f-422e3b704274.roa (raw, json) Hash identifier: z7b8nnsFSOzACMOBtBrdUnJJY8MKhmX7mucQNTAWu9w= Subject key identifier: F2:45:68:D4:78:76:41:BD:09:CC:70:AF:9C:AC:25:09:AA:49:0E:05 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D6C0FC5E82344790EC3494AC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8b5d0a32-bf06-3862-b13f-422e3b704274.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 13335 IP address blocks: 172.69.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:c5:e8:23:44:79:0e:c3:49:4a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=f21f8d75-c448-4984-bd7e-7a994ff49eae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a4:5e:89:21:69:e0:9b:c1:9a:49:eb:a7:52: 2e:94:a6:52:d6:43:e9:29:09:5b:21:c1:57:53:df: 7f:a1:d6:1b:9b:77:88:b8:a0:3a:e2:da:fe:9d:f9: 8f:6c:ea:de:6a:87:4f:b1:59:18:ff:72:56:78:d6: 31:f6:c8:e1:de:78:01:9d:ef:bf:f2:db:1c:9d:de: 65:94:d9:78:b9:a4:ad:01:a9:7a:88:95:a1:98:ef: e8:4f:5f:28:9d:a5:4b:88:b2:f2:f1:95:ba:98:df: ce:df:61:3d:e0:82:69:ac:38:e9:01:ee:9b:1d:41: 35:2f:ac:24:88:a8:b2:e5:5f:1b:0f:ba:9f:0b:4e: 5b:ad:de:c5:46:c7:5e:95:35:32:c6:8d:28:88:42: aa:27:6f:13:ea:23:8a:ab:30:23:51:a1:4a:cb:40: e3:80:51:98:2b:0b:c0:bc:93:f5:fd:63:25:ae:34: a6:f4:d6:95:65:49:ab:89:56:93:3b:74:b1:00:8f: 03:33:8c:fe:17:31:03:f4:27:35:d9:a2:68:e8:e1: 85:e4:05:23:77:f9:9e:91:14:d7:d3:d1:cf:d0:e7: 28:d6:25:c6:48:1a:cc:70:3a:83:00:d5:18:34:c4: 9e:95:2d:7d:ec:37:29:ca:20:4a:60:7c:05:9c:81: ff:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:45:68:D4:78:76:41:BD:09:CC:70:AF:9C:AC:25:09:AA:49:0E:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8b5d0a32-bf06-3862-b13f-422e3b704274.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:e5:80:c5:cf:b8:c0:88:eb:d7:ab:94:18:45:93:c7:e4:62: 6c:19:d5:cf:32:31:8b:f3:12:ac:b6:bf:ca:98:c8:5e:6f:42: 82:ac:b5:44:5a:f6:35:a5:cc:be:2b:af:e6:cb:51:1e:f7:99: 2e:21:db:5a:db:1b:07:34:e4:51:82:07:3a:42:53:86:34:67: f2:4d:ca:9f:13:0f:93:fb:7b:19:37:a0:59:16:ec:2a:8e:6c: 93:dc:d3:a2:36:7f:44:a5:07:6f:6d:67:7e:1c:a0:89:79:54: 5e:9e:9c:f0:4c:bf:63:80:dd:83:e7:ce:1e:41:9f:68:ad:44: ca:c1:58:67:3b:1e:50:9b:9e:03:65:c1:c6:fa:dc:5e:19:ee: bb:2d:f2:80:10:31:f4:68:a4:37:23:a4:19:a9:7a:15:6c:3d: 29:bb:d6:40:db:9e:58:a7:df:b3:37:47:55:15:45:a1:d6:f6: 76:6a:d0:86:0e:6e:f5:0e:54:a4:a9:6b:75:1d:06:9a:29:7c: 88:f8:55:d8:62:a7:5d:83:6b:ea:6d:fd:aa:43:28:16:3c:ed: c0:15:14:b3:00:ee:2d:3c:eb:18:57:9b:5f:11:b2:84:6c:98: 3b:56:3c:87:1d:70:6c:92:60:80:ef:40:af:00:cc:41:4e:f5: 46:c0:1c:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1sD8XoI0R5DsNJSsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk ZjIxZjhkNzUtYzQ0OC00OTg0LWJkN2UtN2E5OTRmZjQ5ZWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKReiSFp4JvBmknrp1IulKZS1kPpKQlbIcFX U99/odYbm3eIuKA64tr+nfmPbOreaodPsVkY/3JWeNYx9sjh3ngBne+/8tscnd5l lNl4uaStAal6iJWhmO/oT18onaVLiLLy8ZW6mN/O32E94IJprDjpAe6bHUE1L6wk iKiy5V8bD7qfC05brd7FRsdelTUyxo0oiEKqJ28T6iOKqzAjUaFKy0DjgFGYKwvA vJP1/WMlrjSm9NaVZUmriVaTO3SxAI8DM4z+FzED9Cc12aJo6OGF5AUjd/mekRTX 09HP0Oco1iXGSBrMcDqDANUYNMSelS197DcpyiBKYHwFnIH/EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPJFaNR4dkG9Ccxwr5ysJQmqSQ4FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOGI1ZDBhMzItYmYwNi0z ODYyLWIxM2YtNDIyZTNiNzA0Mjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEVWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMTlgMXPuMCI69erlBhFk8fkYmwZ1c8yMYvzEqy2v8qYyF5vQoKstURa 9jWlzL4rr+bLUR73mS4h21rbGwc05FGCBzpCU4Y0Z/JNyp8TD5P7exk3oFkW7CqO bJPc06I2f0SlB29tZ34coIl5VF6enPBMv2OA3YPnzh5Bn2itRMrBWGc7HlCbngNl wcb63F4Z7rst8oAQMfRopDcjpBmpehVsPSm71kDbnlin37M3R1UVRaHW9nZq0IYO bvUOVKSpa3UdBpopfIj4Vdhip12Da+pt/apDKBY87cAVFLMA7i086xhXm18RsoRs mDtWPIcdcGySYIDvQK8AzEFO9UbAHOk= -----END CERTIFICATE-----Generated at Fri Apr 17 18:49:11 2026 by rpki-client