$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c07aace-1927-30c1-b311-abd823477496.roa File: 9c07aace-1927-30c1-b311-abd823477496.roa (raw, json) Hash identifier: i/k4sPAvUcgzjmNHCUqPffgZZSysRDYimwsANV7OtYY= Subject key identifier: F9:C8:A8:DF:1A:D6:6B:6B:FE:D5:99:86:07:C5:33:41:78:F8:CD:4A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584C9106FD1805F0720F1E5FEE00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c07aace-1927-30c1-b311-abd823477496.roa Signing time: Sun 18 Jan 2026 14:00:39 +0000 ROA not before: Sun 18 Jan 2026 14:00:39 +0000 ROA not after: Sat 18 Apr 2026 13:00:39 +0000 asID: 13335 IP address blocks: 172.70.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:91:06:fd:18:05:f0:72:0f:1e:5f:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jan 18 14:00:39 2026 GMT Not After : Apr 18 13:00:39 2026 GMT Subject: CN=c3ab142f-a325-465d-a1d9-73d1667b25dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c1:36:cd:3f:d1:be:8a:e2:24:f5:93:81:92: a8:b7:42:a1:d6:92:a4:0a:f2:e1:34:5b:4a:e8:a0: ab:11:4c:18:c1:18:d1:e1:5d:3d:4d:86:3a:4d:fb: c6:ea:01:74:58:75:29:46:49:d1:b7:ff:5b:47:37: f9:6e:d9:5b:db:e7:a0:c1:dd:d5:01:61:4d:ef:89: 57:6a:b8:13:fd:31:33:0c:64:75:db:13:5e:8a:ad: 89:89:b6:0f:43:07:80:9b:85:40:cd:02:65:d5:e5: dc:d7:d3:4e:86:5a:4d:9c:ca:0a:01:59:19:6e:26: 10:95:c4:cf:ac:f0:9a:e4:df:02:49:55:8c:ff:e3: ce:f1:6a:57:83:7d:08:d6:2a:f2:ce:26:e9:93:40: a9:1f:63:55:88:39:6a:77:59:1c:1a:92:aa:e4:45: 85:ba:c0:0a:ea:f6:bb:22:12:8c:8e:8a:4a:1f:c0: 22:a0:f6:59:5a:c1:dc:0c:dc:4b:9c:a2:35:ca:aa: 46:ed:64:0b:e9:a6:ea:eb:d9:4a:07:1c:86:4a:92: cb:5f:b4:6f:7f:c0:8c:aa:6e:1d:98:43:63:18:d2: 2b:03:b2:51:89:fb:b5:68:ab:be:e6:62:c4:a6:77: e4:89:65:33:c5:82:d9:c6:e4:a0:9e:7a:a1:45:69: 95:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:C8:A8:DF:1A:D6:6B:6B:FE:D5:99:86:07:C5:33:41:78:F8:CD:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c07aace-1927-30c1-b311-abd823477496.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:a6:de:32:31:7d:d5:50:ff:ef:45:24:9b:fd:fd:39:27:66: 92:2d:e1:da:8d:50:97:50:18:90:3a:6c:fb:58:09:05:d7:75: 66:c8:35:92:61:68:ae:b7:b2:c8:6c:67:42:78:16:cd:fc:02: 48:82:20:26:72:55:22:c2:17:ea:83:cd:61:3a:7d:20:b7:4b: e7:18:45:c5:ec:8c:01:6a:a2:d6:29:c4:57:69:44:38:ce:9e: 47:4c:33:ed:b2:f3:ac:2b:d5:57:04:ed:ab:32:97:5e:f0:3e: 7c:4f:96:76:e6:49:7d:be:08:fb:7a:51:ed:db:e9:71:79:aa: 32:b7:ee:7b:53:f8:89:d5:4a:f4:4a:6d:d7:5c:a8:67:31:3a: 7e:3e:1f:ae:a7:23:dd:65:1f:5c:1a:b3:66:1a:39:40:cc:20: 29:21:89:1e:2e:10:bb:ca:f3:81:bc:d4:1d:63:e3:17:b7:80: 67:7b:37:79:f8:b4:2d:54:52:40:8b:74:b0:bd:00:14:3d:78: cc:af:05:35:59:c1:07:89:a9:c0:a2:96:8c:87:bf:a3:49:dc: 67:7b:b2:76:81:3a:72:a0:48:c2:50:14:ac:94:44:02:8f:59: 87:d4:89:10:0b:c3:a2:ce:0e:66:5f:81:82:a8:63:12:81:dc: 20:7c:cb:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyRBv0YBfByDx5f7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDExODE0MDAzOVoXDTI2MDQxODEzMDAzOVowLzEtMCsGA1UEAxMk YzNhYjE0MmYtYTMyNS00NjVkLWExZDktNzNkMTY2N2IyNWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsE2zT/RvoriJPWTgZKot0Kh1pKkCvLhNFtK 6KCrEUwYwRjR4V09TYY6TfvG6gF0WHUpRknRt/9bRzf5btlb2+egwd3VAWFN74lX argT/TEzDGR12xNeiq2JibYPQweAm4VAzQJl1eXc19NOhlpNnMoKAVkZbiYQlcTP rPCa5N8CSVWM/+PO8WpXg30I1iryzibpk0CpH2NViDlqd1kcGpKq5EWFusAK6va7 IhKMjopKH8AioPZZWsHcDNxLnKI1yqpG7WQL6abq69lKBxyGSpLLX7Rvf8CMqm4d mENjGNIrA7JRifu1aKu+5mLEpnfkiWUzxYLZxuSgnnqhRWmV4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPnIqN8a1mtr/tWZhgfFM0F4+M1KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOWMwN2FhY2UtMTkyNy0z MGMxLWIzMTEtYWJkODIzNDc3NDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEa5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmm3jIxfdVQ/+9FJJv9/TknZpIt4dqNUJdQGJA6bPtYCQXXdWbINZJh aK63sshsZ0J4Fs38AkiCICZyVSLCF+qDzWE6fSC3S+cYRcXsjAFqotYpxFdpRDjO nkdMM+2y86wr1VcE7asyl17wPnxPlnbmSX2+CPt6Ue3b6XF5qjK37ntT+InVSvRK bddcqGcxOn4+H66nI91lH1was2YaOUDMICkhiR4uELvK84G81B1j4xe3gGd7N3n4 tC1UUkCLdLC9ABQ9eMyvBTVZwQeJqcCiloyHv6NJ3Gd7snaBOnKgSMJQFKyURAKP WYfUiRALw6LODmZfgYKoYxKB3CB8y74= -----END CERTIFICATE-----Generated at Mon Mar 2 16:52:52 2026 by rpki-client