$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ae9e1a0a-a915-3ecb-a55d-7d1a820c119e.roa File: ae9e1a0a-a915-3ecb-a55d-7d1a820c119e.roa (raw, json) Hash identifier: N2qE7wsnNvjbQ1KWrROMLD8nV3HJiGmQvoTy30QWlSo= Subject key identifier: 40:98:94:AE:1F:FC:B0:96:E7:AF:A0:A7:00:2D:9F:12:99:EA:8A:6B Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584C9106FE740F496C9F628D0D80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ae9e1a0a-a915-3ecb-a55d-7d1a820c119e.roa Signing time: Sun 18 Jan 2026 14:00:39 +0000 ROA not before: Sun 18 Jan 2026 14:00:39 +0000 ROA not after: Sat 18 Apr 2026 13:00:39 +0000 asID: 13335 IP address blocks: 172.70.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:91:06:fe:74:0f:49:6c:9f:62:8d:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jan 18 14:00:39 2026 GMT Not After : Apr 18 13:00:39 2026 GMT Subject: CN=da7b6641-40f4-494c-965a-7f5cccc62cb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:4f:58:0f:0e:63:45:b5:ab:ee:80:31:cd:78: ff:52:7a:b9:d7:42:09:48:4c:1b:87:52:08:9a:a6: 0b:a8:97:0e:ad:5b:c5:e7:b1:0d:00:f4:68:16:8b: 99:dd:c6:93:44:03:bb:86:8e:9c:1e:4b:a9:df:64: e7:ac:e8:de:99:81:90:af:1c:74:3d:16:47:91:2e: f7:44:12:3d:f5:87:8e:ed:40:c3:bc:e3:67:5b:f6: 89:31:07:0b:40:52:81:28:d0:c8:b2:9c:8d:70:8c: 29:2b:d4:97:a1:3e:08:f5:5a:a1:11:61:a7:6c:c4: eb:b8:6b:6a:c5:4a:34:49:b4:4e:03:bf:42:94:b5: 57:5b:9b:98:41:08:76:44:f0:c4:d0:a1:90:cb:12: 49:61:b5:8d:4b:86:4c:d9:de:78:bb:12:8b:7d:c8: ea:25:06:7f:66:fb:ef:3b:c7:0a:19:2d:b5:ad:0c: 19:29:d8:cf:5d:67:0f:80:1a:1b:56:12:2e:dd:0f: a5:aa:b2:90:d1:a6:dc:30:64:f3:16:1d:c3:27:98: 3f:54:72:41:ae:63:70:3b:ff:7a:54:2d:03:74:c5: c6:7c:ed:11:74:a3:df:23:7d:44:46:9c:d9:11:b3: 9d:73:34:1a:f7:3f:f0:71:05:f1:a7:3c:94:94:48: 21:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:98:94:AE:1F:FC:B0:96:E7:AF:A0:A7:00:2D:9F:12:99:EA:8A:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ae9e1a0a-a915-3ecb-a55d-7d1a820c119e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:f0:12:06:36:4e:3b:93:e1:3a:3e:c8:ee:34:a2:99:40:c3: 01:8e:6c:88:bc:79:39:fe:74:e7:3f:c5:78:e0:50:a5:36:f5: 1e:d5:4d:f9:42:10:22:96:71:29:6a:7c:e2:31:3f:2c:11:11: 78:c6:8a:eb:09:e8:db:02:ed:43:71:e0:86:98:29:7a:0c:13: 57:48:db:44:69:dc:71:e6:5c:74:3b:a5:3f:ca:89:34:98:f9: 23:be:8c:68:af:9b:56:cf:3c:e9:45:4b:81:3b:9a:bb:aa:bc: 67:2b:e3:9d:f3:0c:84:9d:86:97:a9:5e:bc:09:a0:7f:47:89: e0:61:a4:55:d9:6c:1b:84:ac:39:3c:34:64:70:b5:e6:63:24: c9:a0:5e:be:f4:b1:2e:bd:23:89:2f:30:24:a5:ed:62:74:b1: 7e:ac:a0:80:50:b5:ae:49:e9:14:23:3f:63:9e:c2:f1:d0:a1: 1c:d2:53:2e:9f:ec:7c:56:fc:be:c5:69:97:be:a6:c8:bb:f3: d9:88:2a:d1:47:3b:1b:97:e1:ee:22:07:60:57:4f:22:4a:16: 1c:47:e8:f0:2d:7c:69:68:21:db:66:42:9e:36:36:d9:98:fc: ac:63:2c:d5:b4:26:c6:1a:d7:1b:be:7b:07:e0:27:f8:89:ba: ab:38:45:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyRBv50D0lsn2KNDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDExODE0MDAzOVoXDTI2MDQxODEzMDAzOVowLzEtMCsGA1UEAxMk ZGE3YjY2NDEtNDBmNC00OTRjLTk2NWEtN2Y1Y2NjYzYyY2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkE9YDw5jRbWr7oAxzXj/Unq510IJSEwbh1II mqYLqJcOrVvF57ENAPRoFouZ3caTRAO7ho6cHkup32TnrOjemYGQrxx0PRZHkS73 RBI99YeO7UDDvONnW/aJMQcLQFKBKNDIspyNcIwpK9SXoT4I9VqhEWGnbMTruGtq xUo0SbROA79ClLVXW5uYQQh2RPDE0KGQyxJJYbWNS4ZM2d54uxKLfcjqJQZ/Zvvv O8cKGS21rQwZKdjPXWcPgBobVhIu3Q+lqrKQ0abcMGTzFh3DJ5g/VHJBrmNwO/96 VC0DdMXGfO0RdKPfI31ERpzZEbOdczQa9z/wcQXxpzyUlEghgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFECYlK4f/LCW56+gpwAtnxKZ6oprMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWU5ZTFhMGEtYTkxNS0z ZWNiLWE1NWQtN2QxYTgyMGMxMTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMfwEgY2TjuT4To+yO40oplAwwGObIi8eTn+dOc/xXjgUKU29R7VTflC ECKWcSlqfOIxPywREXjGiusJ6NsC7UNx4IaYKXoME1dI20Rp3HHmXHQ7pT/KiTSY +SO+jGivm1bPPOlFS4E7mruqvGcr453zDISdhpepXrwJoH9HieBhpFXZbBuErDk8 NGRwteZjJMmgXr70sS69I4kvMCSl7WJ0sX6soIBQta5J6RQjP2OewvHQoRzSUy6f 7HxW/L7FaZe+psi789mIKtFHOxuX4e4iB2BXTyJKFhxH6PAtfGloIdtmQp42NtmY /KxjLNW0JsYa1xu+ewfgJ/iJuqs4RRk= -----END CERTIFICATE-----Generated at Mon Mar 2 10:25:37 2026 by rpki-client