$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a3a7d12c-9866-37bb-9e05-5f79097187db.roa File: a3a7d12c-9866-37bb-9e05-5f79097187db.roa (raw, json) Hash identifier: 7bCSgo+lwZewmSOKvPDminzJGykXr1vQK9ACISdts5A= Subject key identifier: 86:2D:94:56:30:F1:F1:9D:DF:57:74:C4:E3:23:95:64:3C:DE:16:A5 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D67DFDE8AE668468F5FDAF180 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a3a7d12c-9866-37bb-9e05-5f79097187db.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 13335 IP address blocks: 172.69.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:de:8a:e6:68:46:8f:5f:da:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=42b6b028-d1c1-4449-998b-23754ec6c656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a0:23:11:b3:d1:e2:61:14:c3:e2:6f:0a:fa: 10:18:91:78:5f:b3:a1:3f:11:57:5e:44:ad:30:23: 38:70:b8:4f:ea:64:06:77:5f:6c:ee:08:d4:c9:d8: 7d:53:c4:f6:02:4f:f7:2d:47:6d:72:79:19:72:12: f8:09:4a:e3:05:dd:18:7d:a3:03:15:bb:2e:77:63: 5b:cb:eb:0c:94:cb:a3:13:5e:65:17:e7:24:f8:45: 0f:32:5d:1f:57:52:2e:62:01:bc:a7:34:ab:59:74: 57:f4:4d:cf:55:ff:10:65:06:8d:31:4b:ff:4f:d8: 38:79:90:c3:68:76:73:c9:ee:c9:14:a8:69:51:9b: 37:93:59:76:1c:9a:11:ce:3d:2c:9f:11:64:23:d6: 82:7c:b2:db:d6:44:05:00:3c:bb:7f:6e:cd:ec:9c: 36:1f:06:20:07:62:fc:e5:20:0d:05:e9:54:43:13: 8b:10:b2:55:f2:f1:28:52:8e:25:73:02:fc:ea:33: 2b:7f:99:92:60:79:00:3d:0f:66:6e:13:03:70:13: 78:e6:d7:15:03:66:9d:56:3a:34:93:5d:d2:26:42: b8:91:48:79:7c:4d:de:fa:ee:9f:30:ad:58:01:f8: 85:25:45:fe:96:51:3a:a1:84:15:9a:ad:8c:a8:96: 12:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:2D:94:56:30:F1:F1:9D:DF:57:74:C4:E3:23:95:64:3C:DE:16:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a3a7d12c-9866-37bb-9e05-5f79097187db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:34:64:47:8d:fe:74:87:69:69:89:d9:38:87:ba:56:25:7a: a7:b0:60:cb:01:3b:1b:41:ed:bb:78:28:0c:73:a4:89:86:57: f6:21:15:e0:0b:1a:c6:e8:bd:e5:76:64:d7:03:7e:3a:46:85: 37:a4:8f:44:c7:46:9a:74:24:c3:69:ed:a8:ac:87:7f:1f:7e: ea:53:8f:85:b3:81:2d:69:07:d9:c8:7e:2d:08:cd:aa:be:7f: 54:5f:57:4f:4b:fa:9d:c5:2f:06:29:42:94:05:12:bc:a7:86: 91:62:1c:b1:af:a8:39:c1:1e:f9:a4:3b:c1:ca:90:8c:ca:fa: 0c:1f:67:6f:88:d7:b7:b0:60:d8:61:7d:b0:ef:13:7b:d1:88: 94:da:dc:91:d0:da:51:ee:b2:e7:8f:cb:0b:77:49:6c:a5:7b: 19:6c:23:7d:1d:c3:0f:56:b5:40:f6:58:ec:59:2a:12:7a:4c: 17:c9:4c:fc:1c:38:99:80:ee:b1:18:45:b7:ef:2c:f6:7b:5d: 20:5b:3e:7f:44:a2:d0:85:b9:32:99:63:4f:69:0f:10:d3:64: 98:0a:6a:d4:46:f2:dd:16:39:ab:ff:11:72:f6:3f:5f:bb:46: a8:12:c7:d4:ca:72:a5:4c:0b:89:34:37:2d:01:50:bb:93:55: d1:25:cf:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n396K5mhGj1/a8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk NDJiNmIwMjgtZDFjMS00NDQ5LTk5OGItMjM3NTRlYzZjNjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaAjEbPR4mEUw+JvCvoQGJF4X7OhPxFXXkSt MCM4cLhP6mQGd19s7gjUydh9U8T2Ak/3LUdtcnkZchL4CUrjBd0YfaMDFbsud2Nb y+sMlMujE15lF+ck+EUPMl0fV1IuYgG8pzSrWXRX9E3PVf8QZQaNMUv/T9g4eZDD aHZzye7JFKhpUZs3k1l2HJoRzj0snxFkI9aCfLLb1kQFADy7f27N7Jw2HwYgB2L8 5SANBelUQxOLELJV8vEoUo4lcwL86jMrf5mSYHkAPQ9mbhMDcBN45tcVA2adVjo0 k13SJkK4kUh5fE3e+u6fMK1YAfiFJUX+llE6oYQVmq2MqJYSbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYtlFYw8fGd31d0xOMjlWQ83halMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTNhN2QxMmMtOTg2Ni0z N2JiLTllMDUtNWY3OTA5NzE4N2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEXPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABA0ZEeN/nSHaWmJ2TiHulYleqewYMsBOxtB7bt4KAxzpImGV/YhFeAL GsboveV2ZNcDfjpGhTekj0THRpp0JMNp7aish38ffupTj4WzgS1pB9nIfi0Izaq+ f1RfV09L+p3FLwYpQpQFErynhpFiHLGvqDnBHvmkO8HKkIzK+gwfZ2+I17ewYNhh fbDvE3vRiJTa3JHQ2lHusuePywt3SWylexlsI30dww9WtUD2WOxZKhJ6TBfJTPwc OJmA7rEYRbfvLPZ7XSBbPn9EotCFuTKZY09pDxDTZJgKatRG8t0WOav/EXL2P1+7 RqgSx9TKcqVMC4k0Ny0BULuTVdElz8I= -----END CERTIFICATE-----Generated at Fri Apr 17 17:16:47 2026 by rpki-client