$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b1eec918-4b64-3e32-92e6-60cf50d4e8b2.roa File: b1eec918-4b64-3e32-92e6-60cf50d4e8b2.roa (raw, json) Hash identifier: AaDi7A/I3sltAS7DUMyao2oJ7jqMLSmgNbCN/hQtPuI= Subject key identifier: CD:D6:78:F8:AE:3F:C9:87:2B:1F:86:16:73:B0:A3:98:79:E5:4B:D0 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D703FF1E66153976AA19D1B40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b1eec918-4b64-3e32-92e6-60cf50d4e8b2.roa Signing time: Wed 08 Apr 2026 13:00:33 +0000 ROA not before: Wed 08 Apr 2026 13:00:33 +0000 ROA not after: Tue 07 Jul 2026 13:00:33 +0000 asID: 13335 IP address blocks: 172.69.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:3f:f1:e6:61:53:97:6a:a1:9d:1b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 8 13:00:33 2026 GMT Not After : Jul 7 13:00:33 2026 GMT Subject: CN=bf9c5a2b-37b3-48fd-8efe-409cc3e507a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b3:4c:75:2a:2d:43:01:a4:37:e5:af:35:03: 5c:46:51:6b:ce:5c:5b:01:7c:3b:92:66:2c:1c:7a: 1c:b8:4a:c9:91:c0:46:30:31:f3:b1:fc:a7:a9:ad: 62:d3:01:96:1e:2e:f9:22:4b:40:92:fd:e1:07:f2: 91:92:86:04:b2:6d:52:10:4c:8f:6b:16:9f:fa:f9: 42:fb:9d:17:57:65:6e:cf:fd:d4:58:6f:4a:22:39: fb:8f:6c:a2:7f:1e:ab:6d:41:20:67:d1:99:2f:45: 42:c3:ac:01:70:e7:b7:fe:78:43:0a:49:a7:b8:02: af:0d:b0:9d:f4:8c:fc:71:a9:0b:3a:44:74:87:bb: 38:f8:04:7b:50:c8:9f:38:c8:8e:31:9a:0a:5b:12: d1:87:62:2b:d9:7b:d0:93:07:c9:57:56:df:9c:d9: a6:19:49:ec:e8:1f:ba:38:b9:15:e7:52:6f:57:1c: e3:fb:39:7e:04:b8:12:b3:a4:d4:9d:06:3f:a5:c5: 92:a5:51:c5:14:8f:85:1a:27:2f:9f:6b:cb:3f:6a: 8a:36:a0:ed:ca:87:05:2f:e3:4d:77:a5:ad:f8:27: d3:e6:80:f5:04:75:15:4c:4b:9f:e5:10:51:c4:7d: 5f:1e:de:9f:b4:43:5a:e9:d4:35:eb:1d:c3:9c:93: a8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:D6:78:F8:AE:3F:C9:87:2B:1F:86:16:73:B0:A3:98:79:E5:4B:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b1eec918-4b64-3e32-92e6-60cf50d4e8b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:b2:f3:76:94:bd:83:b2:6d:ac:5b:e8:d1:71:c3:06:bd:e2: 69:c2:9e:2c:54:d0:0f:8d:21:d7:1a:26:b8:17:c8:50:99:12: 67:1e:d7:d4:2f:b3:df:a3:f7:6a:bc:0b:8b:0e:30:2d:af:95: 61:af:b4:58:6b:d4:75:68:aa:46:83:15:cd:43:01:c9:d1:51: 71:fb:fc:c5:fc:e7:51:ec:9e:d8:c8:02:73:95:ea:b7:bb:09: 7d:1d:ec:d9:c9:c1:dc:57:c3:f8:0b:65:ba:6a:f1:f0:fa:b5: a3:0f:b0:d4:af:fc:12:d0:5a:fe:79:76:ce:f2:c8:a7:88:62: c0:f8:37:80:a4:6c:fc:48:86:70:48:c8:9d:bb:0d:09:27:61: ab:19:9d:ee:b1:20:eb:c2:cf:83:be:c8:ee:f9:ff:3c:cd:88: 3f:40:f5:92:3a:a8:67:6c:0c:5e:c0:10:b6:78:d5:66:b8:38: ae:3c:a9:d6:90:00:72:da:fb:cb:00:b7:8c:0e:de:ba:b4:18: 4f:7c:ed:d0:f8:df:a7:a9:58:d2:35:ad:24:6b:97:78:44:e3: 39:3b:21:a6:4d:39:8b:54:32:a6:5a:44:17:11:aa:db:f6:00: 96:f9:66:09:3a:11:05:03:69:01:de:ef:28:0f:d4:a9:6f:3f: a8:2b:2d:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1wP/HmYVOXaqGdG0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk YmY5YzVhMmItMzdiMy00OGZkLThlZmUtNDA5Y2MzZTUwN2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7NMdSotQwGkN+WvNQNcRlFrzlxbAXw7kmYs HHocuErJkcBGMDHzsfynqa1i0wGWHi75IktAkv3hB/KRkoYEsm1SEEyPaxaf+vlC +50XV2Vuz/3UWG9KIjn7j2yifx6rbUEgZ9GZL0VCw6wBcOe3/nhDCkmnuAKvDbCd 9Iz8cakLOkR0h7s4+AR7UMifOMiOMZoKWxLRh2Ir2XvQkwfJV1bfnNmmGUns6B+6 OLkV51JvVxzj+zl+BLgSs6TUnQY/pcWSpVHFFI+FGicvn2vLP2qKNqDtyocFL+NN d6Wt+CfT5oD1BHUVTEuf5RBRxH1fHt6ftENa6dQ16x3DnJOoBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM3WePiuP8mHKx+GFnOwo5h55UvQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjFlZWM5MTgtNGI2NC0z ZTMyLTkyZTYtNjBjZjUwZDRlOGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCy83aUvYOybaxb6NFxwwa94mnCnixU0A+NIdcaJrgXyFCZEmce19Qv s9+j92q8C4sOMC2vlWGvtFhr1HVoqkaDFc1DAcnRUXH7/MX851HsntjIAnOV6re7 CX0d7NnJwdxXw/gLZbpq8fD6taMPsNSv/BLQWv55ds7yyKeIYsD4N4CkbPxIhnBI yJ27DQknYasZne6xIOvCz4O+yO75/zzNiD9A9ZI6qGdsDF7AELZ41Wa4OK48qdaQ AHLa+8sAt4wO3rq0GE987dD436epWNI1rSRrl3hE4zk7IaZNOYtUMqZaRBcRqtv2 AJb5Zgk6EQUDaQHe7ygP1KlvP6grLYA= -----END CERTIFICATE-----Generated at Fri Apr 17 15:29:48 2026 by rpki-client