$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bc3b621e-4e71-308f-8d0d-669f43765301.roa File: bc3b621e-4e71-308f-8d0d-669f43765301.roa (raw, json) Hash identifier: yTJuabUsemix7Hfxj4gSf3NSFnjDL20wjMmo4EGQCf0= Subject key identifier: F5:EC:4D:E8:26:CF:69:83:22:A5:31:C0:AD:9C:5F:13:BF:DA:87:92 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D6C0FD583780F0DE4C770A580 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bc3b621e-4e71-308f-8d0d-669f43765301.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 13335 IP address blocks: 172.69.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:d5:83:78:0f:0d:e4:c7:70:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=932301e4-d52c-4830-8317-7df5b964333f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:5f:6d:1a:a7:0f:b8:49:af:10:b6:20:ef:66: 20:ec:10:f0:5b:82:48:8b:65:59:6e:77:85:d7:61: 2c:2d:62:f0:4f:31:bf:1d:30:e2:fe:f1:af:d3:b9: 19:fe:d7:07:32:0f:29:b9:94:2e:69:a2:af:5b:f5: ac:d3:2b:80:69:ca:f2:e7:8b:bc:4a:f9:42:a2:62: 51:62:72:4b:47:03:57:db:82:5c:d6:56:b0:59:22: e9:82:67:db:38:10:9e:c2:a7:0b:d2:f7:e9:de:4e: 9d:8a:9b:d6:72:84:29:14:34:1c:9c:ac:a8:2a:2e: 44:b0:41:ad:be:ad:2a:fa:df:53:a0:19:32:6e:45: 5f:bd:76:c3:b5:79:27:20:c2:50:cf:5c:7d:c3:be: 03:6d:b2:29:69:65:d3:b5:03:04:d3:4b:f8:58:8c: ec:5c:f2:21:e0:db:73:79:f6:df:d0:05:5b:d1:14: c4:88:2f:24:7a:c5:db:7f:2f:6c:1a:6e:64:d7:35: af:69:19:e3:91:74:f4:f1:54:55:a3:3b:6f:24:48: e0:96:53:c8:ab:ad:d6:45:c0:7f:51:1e:c9:fa:bf: 0c:fa:01:cf:84:a4:91:82:fc:21:15:13:d6:e9:af: 72:55:25:f9:df:91:c3:88:67:56:83:18:47:f9:aa: ab:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:EC:4D:E8:26:CF:69:83:22:A5:31:C0:AD:9C:5F:13:BF:DA:87:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bc3b621e-4e71-308f-8d0d-669f43765301.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:14:93:7f:bc:48:08:b9:fe:e7:68:87:d5:df:72:3d:ee:22: cd:33:db:d5:0a:11:bf:07:34:bf:16:92:e5:99:3a:51:d7:00: 42:4b:8a:14:07:43:1f:8e:d8:61:a9:6b:78:bd:40:f0:08:f0: 41:0f:c4:d0:47:42:a4:19:cd:9b:c0:7e:c2:7a:22:1c:b4:02: 79:30:6c:36:0f:24:5a:30:e1:bc:0c:cf:46:5f:3a:61:50:e0: 01:98:9c:e6:f6:30:55:ac:5e:af:7a:c9:d8:e1:ee:f7:65:c6: 8c:49:e9:ca:64:6a:0c:a9:40:ec:0f:a6:5c:5d:db:31:90:5e: 55:b4:ea:c3:06:41:31:26:6d:c4:db:4d:d0:4e:86:b7:8c:eb: 12:bc:76:86:a2:cc:e4:47:63:a8:5c:0b:d6:5b:0d:e2:89:86: 70:70:25:e3:12:dd:35:38:a4:78:dc:c1:6d:27:6c:1d:d5:83: 84:7b:ff:3f:b2:03:e9:f2:ce:78:bc:ed:3f:24:0c:2f:b1:7f: f6:da:96:a2:28:f1:51:85:1b:d7:94:aa:aa:ff:c1:75:25:58: 84:86:14:59:00:a5:a9:0e:2a:72:cb:8f:99:77:79:25:6b:25: 6d:ec:82:f3:c1:54:2b:a3:a2:d3:4a:05:e8:4f:a6:96:5f:88: de:ea:44:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1sD9WDeA8N5MdwpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk OTMyMzAxZTQtZDUyYy00ODMwLTgzMTctN2RmNWI5NjQzMzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg19tGqcPuEmvELYg72Yg7BDwW4JIi2VZbneF 12EsLWLwTzG/HTDi/vGv07kZ/tcHMg8puZQuaaKvW/Ws0yuAacry54u8SvlComJR YnJLRwNX24Jc1lawWSLpgmfbOBCewqcL0vfp3k6dipvWcoQpFDQcnKyoKi5EsEGt vq0q+t9ToBkybkVfvXbDtXknIMJQz1x9w74DbbIpaWXTtQME00v4WIzsXPIh4Ntz efbf0AVb0RTEiC8kesXbfy9sGm5k1zWvaRnjkXT08VRVoztvJEjgllPIq63WRcB/ UR7J+r8M+gHPhKSRgvwhFRPW6a9yVSX535HDiGdWgxhH+aqrmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPXsTegmz2mDIqUxwK2cXxO/2oeSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYmMzYjYyMWUtNGU3MS0z MDhmLThkMGQtNjY5ZjQzNzY1MzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEVrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkUk3+8SAi5/udoh9Xfcj3uIs0z29UKEb8HNL8WkuWZOlHXAEJLihQH Qx+O2GGpa3i9QPAI8EEPxNBHQqQZzZvAfsJ6Ihy0AnkwbDYPJFow4bwMz0ZfOmFQ 4AGYnOb2MFWsXq96ydjh7vdlxoxJ6cpkagypQOwPplxd2zGQXlW06sMGQTEmbcTb TdBOhreM6xK8doaizORHY6hcC9ZbDeKJhnBwJeMS3TU4pHjcwW0nbB3Vg4R7/z+y A+nyzni87T8kDC+xf/balqIo8VGFG9eUqqr/wXUlWISGFFkApakOKnLLj5l3eSVr JW3sgvPBVCujotNKBehPppZfiN7qRN8= -----END CERTIFICATE-----Generated at Fri Apr 17 04:04:14 2026 by rpki-client