$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cd20c404-cc69-3bb9-b43b-40e5ec125ede.roa File: cd20c404-cc69-3bb9-b43b-40e5ec125ede.roa (raw, json) Hash identifier: Dmq4DZtYQlUWw+vULBdTccv/jZuO8D9g2nsUp8nhCFA= Subject key identifier: AF:E3:F5:E1:D7:43:DD:C7:F1:60:CB:37:30:A4:62:72:DF:E7:33:3C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D6C0FD41D17E5679A62AC23C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cd20c404-cc69-3bb9-b43b-40e5ec125ede.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 13335 IP address blocks: 172.69.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:d4:1d:17:e5:67:9a:62:ac:23:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=ae7935d0-09b9-45be-b9f4-86a5fa15e7d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fa:f3:d8:af:c8:ac:5a:da:e2:a3:1c:ee:86: fa:c9:b6:bc:3f:54:b6:c5:e9:9f:79:02:b9:8e:bd: 4f:6b:f0:41:aa:19:54:df:94:e2:68:e4:85:c8:29: de:d1:c7:34:a3:13:a1:be:fb:ea:6a:47:ac:05:e1: c1:3a:c2:ad:3e:79:49:7e:a5:9d:0a:cb:14:09:9f: e4:ff:8b:bd:0f:bb:a0:24:8e:4f:06:d1:14:b1:c2: 95:35:93:35:ee:56:41:c9:cb:71:f1:2e:8a:4e:6c: 87:d2:61:51:a5:99:04:bf:12:af:da:53:24:ea:d8: ed:5d:46:b2:b9:0c:54:c5:6c:37:41:68:10:89:62: a7:46:3c:61:6e:56:07:a2:00:58:c5:c8:a7:e4:06: cd:98:2e:18:69:be:67:4a:b2:44:10:6b:9b:5c:be: b4:1a:3a:ff:30:10:6d:75:e2:85:65:70:b2:b2:c8: 8d:f4:d9:f6:b3:7b:51:fa:94:c5:44:68:22:76:f8: 7c:25:59:12:51:2f:3a:ef:7b:e6:a0:93:90:6c:01: 28:fa:af:e7:87:fd:92:26:4c:aa:e2:5b:59:27:e6: 31:36:05:10:4c:1a:cc:f5:a8:92:5a:fd:e7:fb:57: f8:1c:88:96:7b:05:2e:cd:42:0b:29:d9:0c:28:ec: f8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E3:F5:E1:D7:43:DD:C7:F1:60:CB:37:30:A4:62:72:DF:E7:33:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cd20c404-cc69-3bb9-b43b-40e5ec125ede.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:b3:d6:98:ff:89:71:5d:65:c3:b6:b0:f1:af:61:c1:02:4f: fd:df:c3:93:8a:4d:de:5e:d7:7d:04:ab:18:e0:ed:5e:ae:df: d2:64:85:2c:a8:56:6a:61:d5:90:8a:cd:a2:b7:22:37:d5:ee: 9e:aa:18:3d:85:2e:b8:cf:f8:42:51:34:fa:8c:99:45:aa:65: 0e:9f:26:3b:98:29:1f:16:1f:45:c0:e5:91:51:86:ca:78:69: 09:05:27:8e:14:41:9a:e3:50:27:46:46:b1:9a:2b:11:34:4d: 13:37:be:75:99:fb:41:fa:fa:97:cb:e5:85:42:95:51:78:7b: b2:0e:fa:fe:1e:b2:ce:11:9c:6c:2d:05:f9:75:92:39:94:3e: b2:5c:72:34:9a:e8:3b:b3:96:49:bf:bb:ee:38:ea:92:60:ae: a7:b1:62:26:66:61:26:e4:58:64:0f:07:6e:fc:d1:06:35:79: b9:c1:db:d7:7b:e4:3f:be:e4:9c:54:99:48:21:4c:3f:9c:3d: c1:c7:39:d7:55:73:26:a2:38:6e:1f:38:1d:24:55:8d:05:15: 92:26:6d:a3:99:d9:4e:11:3b:39:a0:4b:20:11:66:a2:ad:46: a0:72:2d:a7:87:02:e6:bf:6b:0c:f4:54:f6:83:0a:21:90:79: 19:b5:01:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1sD9QdF+VnmmKsI8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk YWU3OTM1ZDAtMDliOS00NWJlLWI5ZjQtODZhNWZhMTVlN2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPrz2K/IrFra4qMc7ob6yba8P1S2xemfeQK5 jr1Pa/BBqhlU35TiaOSFyCne0cc0oxOhvvvqakesBeHBOsKtPnlJfqWdCssUCZ/k /4u9D7ugJI5PBtEUscKVNZM17lZByctx8S6KTmyH0mFRpZkEvxKv2lMk6tjtXUay uQxUxWw3QWgQiWKnRjxhblYHogBYxcin5AbNmC4Yab5nSrJEEGubXL60Gjr/MBBt deKFZXCyssiN9Nn2s3tR+pTFRGgidvh8JVkSUS8673vmoJOQbAEo+q/nh/2SJkyq 4ltZJ+YxNgUQTBrM9aiSWv3n+1f4HIiWewUuzUILKdkMKOz4SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK/j9eHXQ93H8WDLNzCkYnLf5zM8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2QyMGM0MDQtY2M2OS0z YmI5LWI0M2ItNDBlNWVjMTI1ZWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEUrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAiz1pj/iXFdZcO2sPGvYcECT/3fw5OKTd5e130Eqxjg7V6u39JkhSyo Vmph1ZCKzaK3IjfV7p6qGD2FLrjP+EJRNPqMmUWqZQ6fJjuYKR8WH0XA5ZFRhsp4 aQkFJ44UQZrjUCdGRrGaKxE0TRM3vnWZ+0H6+pfL5YVClVF4e7IO+v4ess4RnGwt Bfl1kjmUPrJccjSa6Duzlkm/u+446pJgrqexYiZmYSbkWGQPB2780QY1ebnB29d7 5D++5JxUmUghTD+cPcHHOddVcyaiOG4fOB0kVY0FFZImbaOZ2U4ROzmgSyARZqKt RqByLaeHAua/awz0VPaDCiGQeRm1AcU= -----END CERTIFICATE-----Generated at Fri Apr 17 19:58:30 2026 by rpki-client