$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9d4167b2-3a07-3cfe-88e4-6a304cba9a13.roa File: 9d4167b2-3a07-3cfe-88e4-6a304cba9a13.roa (raw, json) Hash identifier: ubxAut7cHz8hMeQh7/Go6m27iYc+nuaeF+HKVfQHUeU= Subject key identifier: AE:33:55:73:77:E7:18:4A:3C:B4:09:71:DE:E5:F1:93:11:55:92:99 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D6C0FC85221876B735BF89490 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9d4167b2-3a07-3cfe-88e4-6a304cba9a13.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 13335 IP address blocks: 172.69.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:c8:52:21:87:6b:73:5b:f8:94:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=ec3e41cd-b686-4bc4-9ddd-e92dc9d07ec9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0a:26:2d:73:43:8f:bf:1f:a2:82:43:4f:6b: 2b:e1:fa:a7:26:66:fa:b6:1d:0e:27:b5:b3:7a:23: 2d:fc:64:89:80:2f:66:e4:60:97:94:5e:c5:54:ab: 62:e6:51:de:30:07:78:95:a8:16:8a:9e:e9:c9:a4: 2c:27:d3:08:6d:6e:c2:42:a9:7c:4f:f2:8a:3b:5f: 8b:d6:04:2a:75:8e:eb:70:01:3c:d8:2e:34:d5:82: 8c:c6:bd:3f:a4:93:dd:e7:8f:78:3c:72:1f:d3:78: bb:8a:78:a9:e3:00:63:ee:4e:70:00:7d:ba:cb:35: 5c:b2:b8:e6:5b:55:be:98:1a:be:23:a0:49:9e:74: 27:f9:28:9d:58:19:38:26:ee:c5:db:7e:6e:cd:e2: bd:83:34:c5:6b:e5:2f:9b:7e:f2:85:fc:c5:61:c2: 51:63:30:d8:e4:d7:1d:70:39:7e:ca:40:c8:92:7e: 98:e4:b7:a5:62:e8:2a:2d:c4:3c:53:15:4b:26:51: 92:98:04:de:0f:31:66:50:66:3b:c4:67:6e:65:22: 7a:45:f1:bb:5b:16:1e:53:06:28:87:be:4c:e7:19: 2c:01:1b:80:ba:09:ea:4b:69:95:e3:dd:01:71:9d: 2b:b6:ba:97:09:90:b3:1c:50:91:e6:e2:be:1e:5e: 05:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:33:55:73:77:E7:18:4A:3C:B4:09:71:DE:E5:F1:93:11:55:92:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9d4167b2-3a07-3cfe-88e4-6a304cba9a13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:34:af:55:a8:16:8b:6e:be:f5:7c:07:ff:53:f5:e2:66:eb: a0:4a:7e:d2:b5:78:fa:5d:ac:bc:ca:ec:af:17:db:b2:51:79: 65:d6:24:dd:b9:76:29:d8:96:24:96:f8:5d:5a:c0:ac:9a:61: 22:4b:b0:8c:18:f0:30:7c:64:11:66:bc:67:db:2d:06:1b:a7: cd:e3:c3:a0:a6:86:55:d8:d2:ec:15:1b:e9:88:8e:bb:7a:23: a6:57:62:1f:cc:9e:d3:31:3e:20:c2:69:59:57:d5:d8:6a:52: d5:93:12:a5:f2:30:a2:7a:13:91:8a:db:4d:1e:15:37:78:79: 3e:09:80:85:2a:e4:b8:95:8e:d1:8e:ab:14:20:ce:51:9b:9c: d1:af:54:8b:63:a4:e7:60:0c:ca:28:ad:c7:5f:fd:77:81:6d: 7f:8b:9f:50:75:04:73:15:07:ff:8c:98:96:02:da:c4:d5:7c: de:97:35:2f:c3:2f:8b:9b:fe:5b:5f:d4:43:e6:62:cf:34:b7: f2:c8:f1:59:9d:40:60:07:37:d7:eb:2d:18:b0:f2:6c:ea:87: 58:5c:8e:58:91:f3:f0:ab:52:17:06:b3:66:d9:2d:a7:b4:5b: 88:04:af:fe:b0:28:21:53:c9:9f:3f:33:32:c4:7b:bc:20:f2: 8f:89:3c:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1sD8hSIYdrc1v4lJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk ZWMzZTQxY2QtYjY4Ni00YmM0LTlkZGQtZTkyZGM5ZDA3ZWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQomLXNDj78fooJDT2sr4fqnJmb6th0OJ7Wz eiMt/GSJgC9m5GCXlF7FVKti5lHeMAd4lagWip7pyaQsJ9MIbW7CQql8T/KKO1+L 1gQqdY7rcAE82C401YKMxr0/pJPd5494PHIf03i7inip4wBj7k5wAH26yzVcsrjm W1W+mBq+I6BJnnQn+SidWBk4Ju7F235uzeK9gzTFa+Uvm37yhfzFYcJRYzDY5Ncd cDl+ykDIkn6Y5LelYugqLcQ8UxVLJlGSmATeDzFmUGY7xGduZSJ6RfG7WxYeUwYo h75M5xksARuAugnqS2mV490BcZ0rtrqXCZCzHFCR5uK+Hl4FiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4zVXN35xhKPLQJcd7l8ZMRVZKZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOWQ0MTY3YjItM2EwNy0z Y2ZlLTg4ZTQtNmEzMDRjYmE5YTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEW5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJI0r1WoFotuvvV8B/9T9eJm66BKftK1ePpdrLzK7K8X27JReWXWJN25 dinYliSW+F1awKyaYSJLsIwY8DB8ZBFmvGfbLQYbp83jw6CmhlXY0uwVG+mIjrt6 I6ZXYh/MntMxPiDCaVlX1dhqUtWTEqXyMKJ6E5GK200eFTd4eT4JgIUq5LiVjtGO qxQgzlGbnNGvVItjpOdgDMoorcdf/XeBbX+Ln1B1BHMVB/+MmJYC2sTVfN6XNS/D L4ub/ltf1EPmYs80t/LI8VmdQGAHN9frLRiw8mzqh1hcjliR8/CrUhcGs2bZLae0 W4gEr/6wKCFTyZ8/MzLEe7wg8o+JPGA= -----END CERTIFICATE-----Generated at Fri Apr 17 17:18:50 2026 by rpki-client