$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a9524676-d9ff-31c1-a3b3-a6ffd5faade0.roa File: a9524676-d9ff-31c1-a3b3-a6ffd5faade0.roa (raw, json) Hash identifier: hBU7m9c8qhUjfhhf3G3mDAyqAGXcxMFnKmc43Cu/eeA= Subject key identifier: 99:97:98:14:5D:74:CB:08:AB:73:9E:9F:04:EC:2D:A7:5D:EF:10:45 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D67DFD5B30CBB41188F2AA808 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a9524676-d9ff-31c1-a3b3-a6ffd5faade0.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 13335 IP address blocks: 172.64.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:d5:b3:0c:bb:41:18:8f:2a:a8:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=c6c1211f-a498-4e30-b454-338440030210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:be:54:da:da:62:ba:f1:d8:b0:84:7f:21:db: 03:95:4f:c0:98:33:1b:85:04:74:c9:7f:c1:6f:da: 87:01:cd:7f:ec:c0:61:5c:c7:77:39:a1:65:b0:36: 72:6c:4f:de:e6:96:a6:b9:d2:03:3a:60:f8:18:2d: ab:0f:55:11:22:ab:1f:0f:81:51:e6:5d:96:5b:e1: c8:9a:7f:92:aa:5a:a7:1b:cc:64:0a:3d:4e:fb:2d: 72:89:7b:62:89:1c:f2:29:a0:71:75:d5:09:b3:97: 87:8f:52:a7:13:69:74:8d:02:e9:c5:28:6f:fe:63: 5c:d7:a3:90:2d:c9:eb:3b:de:1a:b6:8b:8d:78:0b: 7a:d0:59:25:d6:3d:fb:af:42:24:ec:07:da:f4:cb: 79:40:68:97:85:0d:24:18:da:2c:65:f3:c3:fe:df: 16:6a:a5:e3:64:3a:09:89:9a:59:db:1a:ee:63:8a: 6f:51:04:3b:21:b4:93:69:db:39:ac:3a:f3:fa:92: 8b:80:ca:ae:0e:ad:66:43:72:cf:98:ac:ec:22:26: 97:f8:c3:0d:ec:b7:87:49:3c:da:22:4c:41:fb:7b: d7:45:0d:89:93:b5:13:7b:e4:86:ed:78:97:f0:a6: 69:06:60:d6:ef:06:eb:00:0d:b7:95:ea:a3:56:0c: c2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:97:98:14:5D:74:CB:08:AB:73:9E:9F:04:EC:2D:A7:5D:EF:10:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a9524676-d9ff-31c1-a3b3-a6ffd5faade0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:4b:6e:3c:b5:75:e9:e3:5a:80:16:7e:fe:c5:d9:12:a4:74: 73:49:a9:88:d0:82:2b:2c:cf:1c:4b:02:ec:96:a7:14:db:e0: b0:3b:bb:67:ea:b5:12:b9:e2:e7:40:ee:da:78:62:8b:b5:05: 04:dc:8d:0c:ab:6d:a8:98:f9:86:00:81:d9:ad:ba:dd:84:3c: be:5a:56:68:1f:3e:86:fb:cb:7d:c5:28:52:4f:6d:19:c2:80: 3b:f3:1e:11:d4:b3:5c:f5:d3:6f:f7:dc:a7:cc:cb:ca:69:24: 0e:0b:42:ea:47:f3:f7:9b:ff:97:35:6e:4b:0d:9d:fc:7c:72: 4b:ae:50:d0:f0:f2:1e:b5:03:53:ee:09:fa:63:68:1d:8c:fa: 2c:1e:e5:da:84:a1:c5:4e:d2:68:d7:68:79:6b:f7:e5:61:8b: 5c:8b:05:9a:d8:e0:00:c2:91:72:a4:a0:df:0b:2e:c0:0e:6b: 3b:f9:5f:e3:8d:dc:fd:0f:25:38:38:76:b0:cb:f2:45:2d:7a: 24:d3:96:06:31:82:f7:29:05:b2:67:90:64:d6:d5:df:6f:4b: 13:4c:b0:10:29:e4:f9:3a:63:25:ff:21:3d:39:09:ba:23:13: 75:70:7b:1a:15:f1:1f:0c:16:61:58:25:2d:31:dd:cc:0f:42: 24:48:13:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n39WzDLtBGI8qqAgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk YzZjMTIxMWYtYTQ5OC00ZTMwLWI0NTQtMzM4NDQwMDMwMjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh75U2tpiuvHYsIR/IdsDlU/AmDMbhQR0yX/B b9qHAc1/7MBhXMd3OaFlsDZybE/e5pamudIDOmD4GC2rD1URIqsfD4FR5l2WW+HI mn+SqlqnG8xkCj1O+y1yiXtiiRzyKaBxddUJs5eHj1KnE2l0jQLpxShv/mNc16OQ LcnrO94atouNeAt60Fkl1j37r0Ik7Afa9Mt5QGiXhQ0kGNosZfPD/t8WaqXjZDoJ iZpZ2xruY4pvUQQ7IbSTads5rDrz+pKLgMquDq1mQ3LPmKzsIiaX+MMN7LeHSTza IkxB+3vXRQ2Jk7UTe+SG7XiX8KZpBmDW7wbrAA23leqjVgzCYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmXmBRddMsIq3OenwTsLadd7xBFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTk1MjQ2NzYtZDlmZi0z MWMxLWEzYjMtYTZmZmQ1ZmFhZGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArECaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMhLbjy1denjWoAWfv7F2RKkdHNJqYjQgisszxxLAuyWpxTb4LA7u2fq tRK54udA7tp4You1BQTcjQyrbaiY+YYAgdmtut2EPL5aVmgfPob7y33FKFJPbRnC gDvzHhHUs1z102/33KfMy8ppJA4LQupH8/eb/5c1bksNnfx8ckuuUNDw8h61A1Pu CfpjaB2M+iwe5dqEocVO0mjXaHlr9+Vhi1yLBZrY4ADCkXKkoN8LLsAOazv5X+ON 3P0PJTg4drDL8kUteiTTlgYxgvcpBbJnkGTW1d9vSxNMsBAp5Pk6YyX/IT05Cboj E3VwexoV8R8MFmFYJS0x3cwPQiRIE9k= -----END CERTIFICATE-----Generated at Fri Apr 17 14:36:53 2026 by rpki-client