$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/be29a7c2-b17a-3694-b0c8-37f26b7cb781.roa File: be29a7c2-b17a-3694-b0c8-37f26b7cb781.roa (raw, json) Hash identifier: HLufcll6uz4MwIJFAK14eSoGQNxDUh5yOQaFWm9oL4M= Subject key identifier: 0F:92:3B:24:1E:3B:15:96:D3:03:09:24:63:5C:9F:88:EE:94:12:F0 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584CFB1CE9434EC94BB7E57DA600 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/be29a7c2-b17a-3694-b0c8-37f26b7cb781.roa Signing time: Wed 25 Feb 2026 14:00:39 +0000 ROA not before: Wed 25 Feb 2026 14:00:39 +0000 ROA not after: Tue 26 May 2026 13:00:39 +0000 asID: 13335 IP address blocks: 172.64.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fb:1c:e9:43:4e:c9:4b:b7:e5:7d:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 25 14:00:39 2026 GMT Not After : May 26 13:00:39 2026 GMT Subject: CN=34b3a47c-7e10-4a9c-b3a7-b462c2c1cbb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:aa:e2:b8:44:4d:29:2c:54:75:f8:05:12:51: cf:86:17:1a:85:d9:d6:b3:90:1f:31:26:9b:00:e6: 93:dd:66:29:2b:15:0e:07:7c:e0:1d:45:fd:7f:5b: 96:a9:4c:99:d0:da:b8:9b:5b:2e:ad:a8:c2:5a:fa: 5d:ec:0a:62:f2:4a:7b:54:3f:91:e6:12:41:67:de: f7:08:0f:37:f5:32:17:d0:6c:d2:f4:22:56:fa:87: 66:cf:e9:dd:ee:f8:15:91:ec:16:b7:9c:fd:0b:a9: a5:f0:4a:59:48:6d:7d:d9:27:ff:dc:33:3b:f4:56: 3c:2e:dd:d5:3b:d9:74:96:bc:21:d9:f6:44:53:24: 36:3a:57:14:28:29:aa:c6:a5:1f:61:42:c0:3e:77: c7:d0:02:8c:db:f5:46:d3:58:d3:6c:fd:c0:fb:72: a7:17:e7:ee:b2:37:96:b6:63:b3:50:34:45:79:50: ae:4a:46:59:c9:c4:22:eb:67:da:53:a8:4e:b2:24: 2e:f2:44:9f:0c:5e:a3:80:2b:70:fd:ee:88:1b:f4: 5c:13:6c:83:cf:85:d0:65:8f:c8:57:d9:0d:00:a1: 16:7a:6c:bb:47:c6:b5:6d:87:6e:84:ef:32:81:69: be:0a:71:63:c5:3c:1e:61:83:a5:75:1d:af:78:6a: 6e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:92:3B:24:1E:3B:15:96:D3:03:09:24:63:5C:9F:88:EE:94:12:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/be29a7c2-b17a-3694-b0c8-37f26b7cb781.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:c5:70:fe:c2:02:6d:48:b2:95:3f:1f:37:bd:70:96:a9:0e: 2f:48:ba:21:93:e5:c3:8c:48:4e:cc:36:6c:1c:4b:6e:f6:2f: 5b:15:a7:22:88:9c:c2:e7:5f:91:f7:09:2c:d4:a8:0c:6f:3b: dc:71:c2:3d:d6:7f:01:66:c3:34:0d:75:79:a2:6c:9a:ab:3d: 98:83:10:6c:11:e9:63:db:45:62:a9:0f:ce:cf:31:8e:f2:d4: 41:7c:f7:10:58:f2:19:19:de:20:57:81:de:49:82:31:96:1b: 95:08:86:65:42:5f:16:c9:00:71:d0:6d:dc:1f:8b:85:92:3f: 70:a4:f2:f8:e3:b7:4e:6c:a3:0f:66:f5:52:2e:a9:95:0d:20: 89:b6:d4:f3:3d:5c:c7:91:ac:59:61:58:a4:be:dc:04:10:46: 8b:a1:1d:63:d6:c4:ce:39:46:fb:67:18:a5:56:e5:66:45:4d: 1f:86:77:98:8f:c5:dc:9b:13:1c:02:5e:ae:52:4c:08:ff:b7: c8:d1:b3:97:ce:e7:82:fa:5d:98:35:bf:4e:d6:e4:4e:07:bc: 7f:d9:a1:75:ed:51:16:1d:4d:5b:a8:9d:c9:90:81:bb:08:9d: d6:3c:c8:b3:c1:b5:fa:c8:83:fa:e9:7d:7b:32:4e:4b:31:63: 50:f2:c7:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz7HOlDTslLt+V9pgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDIyNTE0MDAzOVoXDTI2MDUyNjEzMDAzOVowLzEtMCsGA1UEAxMk MzRiM2E0N2MtN2UxMC00YTljLWIzYTctYjQ2MmMyYzFjYmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6riuERNKSxUdfgFElHPhhcahdnWs5AfMSab AOaT3WYpKxUOB3zgHUX9f1uWqUyZ0Nq4m1surajCWvpd7Api8kp7VD+R5hJBZ973 CA839TIX0GzS9CJW+odmz+nd7vgVkewWt5z9C6ml8EpZSG192Sf/3DM79FY8Lt3V O9l0lrwh2fZEUyQ2OlcUKCmqxqUfYULAPnfH0AKM2/VG01jTbP3A+3KnF+fusjeW tmOzUDRFeVCuSkZZycQi62faU6hOsiQu8kSfDF6jgCtw/e6IG/RcE2yDz4XQZY/I V9kNAKEWemy7R8a1bYduhO8ygWm+CnFjxTweYYOldR2veGpuQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA+SOyQeOxWW0wMJJGNcn4julBLwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYmUyOWE3YzItYjE3YS0z Njk0LWIwYzgtMzdmMjZiN2NiNzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDFcP7CAm1IspU/Hze9cJapDi9IuiGT5cOMSE7MNmwcS272L1sVpyKI nMLnX5H3CSzUqAxvO9xxwj3WfwFmwzQNdXmibJqrPZiDEGwR6WPbRWKpD87PMY7y 1EF89xBY8hkZ3iBXgd5JgjGWG5UIhmVCXxbJAHHQbdwfi4WSP3Ck8vjjt05sow9m 9VIuqZUNIIm21PM9XMeRrFlhWKS+3AQQRouhHWPWxM45RvtnGKVW5WZFTR+Gd5iP xdybExwCXq5STAj/t8jRs5fO54L6XZg1v07W5E4HvH/ZoXXtURYdTVuoncmQgbsI ndY8yLPBtfrIg/rpfXsyTksxY1Dyx1g= -----END CERTIFICATE-----Generated at Sun Mar 1 19:07:07 2026 by rpki-client