$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cef30f1e-3901-3da5-ad67-60c39887457b.roa File: cef30f1e-3901-3da5-ad67-60c39887457b.roa (raw, json) Hash identifier: i3DiDnXV/gKpFcNoAs3vY9f5KGnoSW0bcS8qzXWcfqw= Subject key identifier: AB:99:A1:92:56:5B:C4:0C:2C:03:ED:D2:DC:1E:BF:CD:F6:DB:25:87 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D5243C0F9C1AC526C4B9E7680 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cef30f1e-3901-3da5-ad67-60c39887457b.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 13335 IP address blocks: 172.64.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:c0:f9:c1:ac:52:6c:4b:9e:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=e98a1763-1e61-4f6c-b5d7-e0fbc97b1f51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:86:b8:c5:da:b6:c1:11:60:5a:f2:f6:71:83: 1f:98:11:07:05:db:98:1c:68:71:fe:9a:30:23:65: 9d:9f:d3:2c:73:9b:73:4a:e8:66:e9:0c:92:c7:f9: 4c:35:63:e7:69:f9:5f:b0:1f:c4:86:16:bb:cd:23: 8a:92:79:9b:eb:ad:11:db:37:67:e7:65:65:90:6b: 74:db:71:c7:37:80:ae:a6:95:b4:9a:98:7b:3c:63: 73:65:29:fe:ce:cf:19:8c:df:2d:15:61:95:92:fa: 55:48:74:7d:eb:71:6d:59:b9:0a:be:38:80:5c:ff: fe:f8:1e:4b:f9:20:7f:29:5e:a0:fc:98:03:a9:4b: fa:82:cf:d8:c9:56:46:27:1b:cc:e7:ed:eb:0b:83: c6:1b:0a:1d:65:f7:dc:65:e1:48:fa:34:4a:04:dd: c6:dd:f8:35:23:02:bd:c5:5a:2a:db:27:bd:d0:b4: d2:08:a7:e1:b5:c0:74:f9:38:c0:03:b8:f7:dc:eb: 7a:5b:e5:9f:5b:15:7b:45:fb:34:78:cc:f0:24:c0: 89:be:09:91:05:22:e0:f2:fe:b9:6d:bc:74:f1:cb: 43:56:07:6d:63:71:4f:16:8a:72:05:4f:f5:59:65: 5e:73:b1:ea:e4:80:d6:89:6e:b3:1b:13:ed:28:96: 6d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:99:A1:92:56:5B:C4:0C:2C:03:ED:D2:DC:1E:BF:CD:F6:DB:25:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cef30f1e-3901-3da5-ad67-60c39887457b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:ff:db:7b:32:a2:31:8b:aa:4a:65:4f:c3:07:56:d7:75:a1: 89:b8:c6:13:4a:5e:d9:e2:87:1d:04:37:9b:2d:65:f5:65:1d: e4:9d:b8:62:93:67:a3:e2:cf:1c:72:12:6f:ca:74:c8:af:43: 17:22:47:83:98:4c:04:c2:fd:ee:8f:03:7c:0c:5c:ae:45:ff: b6:08:8c:e1:86:38:b2:36:ec:45:ca:d1:d7:c0:61:e7:30:f1: 90:e3:34:83:5c:8f:8d:95:2c:e8:09:7e:57:52:49:e9:b4:3f: 62:3b:ae:e7:dd:da:c9:a5:18:9c:c2:dd:03:77:00:db:47:ab: 89:d0:a1:5f:f3:2f:d1:8a:f7:95:4f:dd:01:f0:f6:4c:90:c0: 3b:fa:b9:fb:d3:17:17:26:d6:a2:a7:d3:59:5f:a4:3c:cc:1c: f5:19:86:21:91:56:94:94:98:89:3a:d9:64:22:3f:1e:f9:bc: e4:2b:58:8a:84:d9:60:7c:6f:0d:42:f9:e4:14:62:46:a4:05: ed:db:86:77:7f:18:5a:1e:35:28:63:0a:6a:49:bf:6e:ee:43: f8:6a:66:b6:ce:10:6d:ff:59:71:10:5d:4c:68:29:1d:ac:9a: b2:02:bb:73:52:ba:be:52:38:89:2a:d5:45:0e:6b:9a:76:03: c5:dd:47:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ8D5waxSbEuedoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk ZTk4YTE3NjMtMWU2MS00ZjZjLWI1ZDctZTBmYmM5N2IxZjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIa4xdq2wRFgWvL2cYMfmBEHBduYHGhx/pow I2Wdn9Msc5tzSuhm6QySx/lMNWPnaflfsB/Ehha7zSOKknmb660R2zdn52VlkGt0 23HHN4CuppW0mph7PGNzZSn+zs8ZjN8tFWGVkvpVSHR963FtWbkKvjiAXP/++B5L +SB/KV6g/JgDqUv6gs/YyVZGJxvM5+3rC4PGGwodZffcZeFI+jRKBN3G3fg1IwK9 xVoq2ye90LTSCKfhtcB0+TjAA7j33Ot6W+WfWxV7Rfs0eMzwJMCJvgmRBSLg8v65 bbx08ctDVgdtY3FPFopyBU/1WWVec7Hq5IDWiW6zGxPtKJZtzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKuZoZJWW8QMLAPt0twev8322yWHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2VmMzBmMWUtMzkwMS0z ZGE1LWFkNjctNjBjMzk4ODc0NTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEDIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3/23syojGLqkplT8MHVtd1oYm4xhNKXtnihx0EN5stZfVlHeSduGKT Z6PizxxyEm/KdMivQxciR4OYTATC/e6PA3wMXK5F/7YIjOGGOLI27EXK0dfAYecw 8ZDjNINcj42VLOgJfldSSem0P2I7rufd2smlGJzC3QN3ANtHq4nQoV/zL9GK95VP 3QHw9kyQwDv6ufvTFxcm1qKn01lfpDzMHPUZhiGRVpSUmIk62WQiPx75vOQrWIqE 2WB8bw1C+eQUYkakBe3bhnd/GFoeNShjCmpJv27uQ/hqZrbOEG3/WXEQXUxoKR2s mrICu3NSur5SOIkq1UUOa5p2A8XdR7A= -----END CERTIFICATE-----Generated at Fri Apr 17 20:15:53 2026 by rpki-client