$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9b6a3237-e836-39e6-b42c-b801c5491145.roa File: 9b6a3237-e836-39e6-b42c-b801c5491145.roa (raw, json) Hash identifier: eAjDw5uKzasVcFlI1z1Z9Qp7XMXjvqs+itMfyGK/Qx4= Subject key identifier: 0F:0C:46:A4:53:4B:22:74:F0:4A:73:0B:0C:60:5E:80:AD:CF:D8:97 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D52434D75091176E9FA255FC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9b6a3237-e836-39e6-b42c-b801c5491145.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 13335 IP address blocks: 172.64.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:4d:75:09:11:76:e9:fa:25:5f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=f7d3e6cb-1a6a-4a97-9da9-8888fe24f579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:c0:b5:66:98:7d:a1:60:cd:29:88:20:c2:d2: 8b:34:de:74:ae:51:ac:1b:14:26:f6:44:5a:6e:5c: 2e:8f:92:53:bc:9b:27:97:db:bf:a2:88:8e:c4:bb: 95:59:7e:bb:34:46:35:a7:91:07:25:44:dd:93:0d: e0:a1:95:40:62:9a:0e:82:5e:41:c8:4a:45:d3:e2: 01:21:21:00:ed:af:54:f3:f2:47:09:5d:c5:ba:96: 1d:a6:d4:b7:1b:44:a6:6a:44:9f:f8:db:50:48:1b: 9b:1a:3f:40:d3:04:62:f2:19:1f:50:6b:7a:02:ff: bb:49:4a:3d:12:2f:78:36:bb:d5:9f:8a:da:ad:9d: ff:13:8d:cf:5c:92:49:f5:ef:7c:4e:b9:92:ea:36: 6f:5c:3c:fb:1d:1b:54:62:bb:d0:8c:f9:3f:44:ae: 82:a2:22:6e:1b:32:77:75:f6:bf:8e:b5:44:0d:ff: 28:bf:de:33:5d:6e:79:4b:10:55:cf:c2:a9:cf:f4: 94:dc:b5:32:f7:09:6e:72:1e:a6:e1:6d:b3:8c:e1: 81:37:d3:67:13:6f:30:5e:a0:63:7e:f7:79:08:85: 93:b9:f1:e7:c6:3b:fa:36:6f:fe:fc:d3:90:c9:f3: c6:e2:1c:76:15:8b:57:58:5e:00:f6:32:7e:e3:8c: 42:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:0C:46:A4:53:4B:22:74:F0:4A:73:0B:0C:60:5E:80:AD:CF:D8:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9b6a3237-e836-39e6-b42c-b801c5491145.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:17:04:da:36:e4:5d:2f:12:7b:eb:94:a9:76:91:6e:ed:a4: 0c:93:48:d4:82:a6:19:8a:e6:0d:35:b4:12:df:2a:03:f3:73: a5:68:21:96:d5:e7:35:07:9f:72:c0:e1:45:49:40:e6:47:51: be:e5:0e:f8:f0:02:29:5d:93:51:b8:57:75:cd:41:06:82:45: 6a:97:36:27:c4:d4:aa:d9:50:66:93:f5:fe:c2:d2:d4:b9:74: b6:cd:db:8e:fc:1e:c7:13:c0:b8:d7:70:47:81:1f:9d:be:83: 68:d1:cc:0b:7f:95:22:d0:a4:9d:9c:b3:82:26:86:df:46:94: 34:83:95:dc:a6:9d:8f:f0:00:47:28:b4:e1:d9:e7:a2:89:e8: 7c:06:c9:fd:5a:3a:d9:1a:b0:0b:52:07:6b:6b:3b:89:06:60: 8f:2c:98:71:9a:70:4c:03:fa:ae:f6:39:cd:d2:af:c9:7e:b0: 49:cc:19:d5:8e:4a:c2:d8:b1:e8:6f:54:e0:17:39:78:1d:5d: 5c:1d:fd:78:d5:ca:9f:88:10:41:6e:68:67:cf:22:48:53:7f: e9:ba:99:0d:5d:82:99:bc:c5:27:04:4b:e0:99:2d:25:ec:f1: 35:a5:64:c0:00:e4:ef:b4:91:13:05:80:af:72:72:69:c2:be: 82:48:75:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ011CRF26folX8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk ZjdkM2U2Y2ItMWE2YS00YTk3LTlkYTktODg4OGZlMjRmNTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+8C1Zph9oWDNKYggwtKLNN50rlGsGxQm9kRa blwuj5JTvJsnl9u/ooiOxLuVWX67NEY1p5EHJUTdkw3goZVAYpoOgl5ByEpF0+IB ISEA7a9U8/JHCV3FupYdptS3G0SmakSf+NtQSBubGj9A0wRi8hkfUGt6Av+7SUo9 Ei94NrvVn4rarZ3/E43PXJJJ9e98TrmS6jZvXDz7HRtUYrvQjPk/RK6CoiJuGzJ3 dfa/jrVEDf8ov94zXW55SxBVz8Kpz/SU3LUy9wluch6m4W2zjOGBN9NnE28wXqBj fvd5CIWTufHnxjv6Nm/+/NOQyfPG4hx2FYtXWF4A9jJ+44xCGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA8MRqRTSyJ08EpzCwxgXoCtz9iXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOWI2YTMyMzctZTgzNi0z OWU2LWI0MmMtYjgwMWM1NDkxMTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEDJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQXBNo25F0vEnvrlKl2kW7tpAyTSNSCphmK5g01tBLfKgPzc6VoIZbV 5zUHn3LA4UVJQOZHUb7lDvjwAildk1G4V3XNQQaCRWqXNifE1KrZUGaT9f7C0tS5 dLbN2478HscTwLjXcEeBH52+g2jRzAt/lSLQpJ2cs4Imht9GlDSDldymnY/wAEco tOHZ56KJ6HwGyf1aOtkasAtSB2trO4kGYI8smHGacEwD+q72Oc3Sr8l+sEnMGdWO SsLYsehvVOAXOXgdXVwd/XjVyp+IEEFuaGfPIkhTf+m6mQ1dgpm8xScES+CZLSXs 8TWlZMAA5O+0kRMFgK9ycmnCvoJIdRU= -----END CERTIFICATE-----Generated at Fri Apr 17 19:02:28 2026 by rpki-client