$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d59e955a-b36b-344b-81cd-7f5b4670c997.roa File: d59e955a-b36b-344b-81cd-7f5b4670c997.roa (raw, json) Hash identifier: Mdk780uOxAUWmjKJ+9QaZ8hqCCxeWSy8AFhYuPs57mo= Subject key identifier: 2D:C4:87:23:A0:C9:03:9B:21:C7:00:20:67:DE:CF:3A:49:6E:56:B5 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D6C0FD37D2E1915DAF7C46E80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d59e955a-b36b-344b-81cd-7f5b4670c997.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 13335 IP address blocks: 172.69.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:d3:7d:2e:19:15:da:f7:c4:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=ff311369-dd47-4f50-b00b-dd63e9ea9f9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:bc:c0:c6:fb:06:af:fa:95:de:8b:5a:30:1b: 85:c0:79:37:7a:37:c5:b0:24:d4:00:af:96:b9:ed: a8:9c:e4:6a:3d:f9:a3:b8:a5:03:56:20:54:56:05: ed:c1:39:13:00:2a:13:ac:a0:29:84:2f:eb:64:64: 45:0b:1e:f6:17:35:d8:a7:51:80:d8:b3:19:32:55: 92:02:96:12:c5:60:aa:32:9c:2c:ef:50:14:b8:fb: b9:b3:0c:d6:0e:45:e2:3e:4a:24:4b:d0:dd:26:92: 6c:37:33:20:33:d9:a7:57:c8:98:b4:9f:17:b7:90: 45:e8:bb:58:d8:8e:4f:5e:63:c5:f5:b8:08:16:1c: 7c:10:94:41:27:16:2c:97:53:9b:e2:6e:41:7a:02: 70:1a:66:d2:6c:81:43:62:97:ae:32:1d:1d:2c:f4: ac:0c:8f:2d:81:18:fd:cb:bc:8f:cc:c1:d9:cd:58: cd:05:45:00:b9:63:40:b0:e4:2d:50:2b:ad:ca:fb: 0a:71:38:ff:14:3f:27:02:36:5f:f1:40:ed:ec:b5: f4:f3:d0:61:0f:99:16:dd:eb:1e:12:69:52:33:b7: 7c:c8:11:6b:e8:9e:76:52:e8:a8:c9:09:d3:bb:e4: f7:e1:3c:73:b5:9c:be:f8:60:f2:f7:af:5c:a4:e0: f7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C4:87:23:A0:C9:03:9B:21:C7:00:20:67:DE:CF:3A:49:6E:56:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d59e955a-b36b-344b-81cd-7f5b4670c997.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:61:ed:17:92:cb:54:24:a9:ec:a1:ba:99:ed:2b:3c:8e:4a: fe:37:22:25:13:b5:2e:08:55:6e:5a:2f:76:c3:89:4a:5d:5c: 66:4e:f9:32:2b:b5:a5:ab:bc:a5:88:5a:e0:8b:a9:3d:28:b9: b0:2b:80:0a:ad:31:c3:2e:12:2d:38:4b:20:44:93:3e:b4:60: 85:ae:f6:36:2f:38:21:5c:95:6f:c7:0f:45:62:88:77:30:fe: 28:f2:69:cc:b0:a3:3e:0b:68:4e:a5:f2:8d:5c:c6:0d:ef:73: 7a:65:c6:1b:1c:30:64:52:05:b2:17:18:8d:07:95:dc:1d:0f: 94:2c:ec:c0:d4:5c:66:c0:82:f4:5a:e9:de:e5:a4:7f:8c:63: dd:52:7f:98:56:03:60:37:06:80:92:44:2b:c1:97:d7:21:90: dd:d9:7c:35:e4:3f:cd:3e:83:b0:d5:f2:90:be:0c:3f:fc:2c: 89:d8:e7:b1:68:fb:98:1c:59:7b:db:14:f2:ed:25:5b:e0:8e: 7a:3a:3a:26:8c:72:1b:cc:45:e8:aa:00:2c:e7:65:34:07:5f: 02:49:da:db:0f:e2:97:bb:79:e6:e1:2f:93:d4:4e:00:13:b5: 82:af:c7:7e:d2:ba:0f:90:8f:45:64:e7:72:32:7e:c6:9a:2e: e6:41:9c:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1sD9N9LhkV2vfEboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk ZmYzMTEzNjktZGQ0Ny00ZjUwLWIwMGItZGQ2M2U5ZWE5ZjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLzAxvsGr/qV3otaMBuFwHk3ejfFsCTUAK+W ue2onORqPfmjuKUDViBUVgXtwTkTACoTrKAphC/rZGRFCx72FzXYp1GA2LMZMlWS ApYSxWCqMpws71AUuPu5swzWDkXiPkokS9DdJpJsNzMgM9mnV8iYtJ8Xt5BF6LtY 2I5PXmPF9bgIFhx8EJRBJxYsl1Ob4m5BegJwGmbSbIFDYpeuMh0dLPSsDI8tgRj9 y7yPzMHZzVjNBUUAuWNAsOQtUCutyvsKcTj/FD8nAjZf8UDt7LX089BhD5kW3ese EmlSM7d8yBFr6J52UuioyQnTu+T34TxztZy++GDy969cpOD3LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3EhyOgyQObIccAIGfezzpJbla1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDU5ZTk1NWEtYjM2Yi0z NDRiLTgxY2QtN2Y1YjQ2NzBjOTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEUJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGth7ReSy1QkqeyhupntKzyOSv43IiUTtS4IVW5aL3bDiUpdXGZO+TIr taWrvKWIWuCLqT0oubArgAqtMcMuEi04SyBEkz60YIWu9jYvOCFclW/HD0ViiHcw /ijyacywoz4LaE6l8o1cxg3vc3plxhscMGRSBbIXGI0HldwdD5Qs7MDUXGbAgvRa 6d7lpH+MY91Sf5hWA2A3BoCSRCvBl9chkN3ZfDXkP80+g7DV8pC+DD/8LInY57Fo +5gcWXvbFPLtJVvgjno6OiaMchvMReiqACznZTQHXwJJ2tsP4pe7eebhL5PUTgAT tYKvx37Sug+Qj0Vk53IyfsaaLuZBnBE= -----END CERTIFICATE-----Generated at Fri Apr 17 18:46:54 2026 by rpki-client