$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eabca778-e819-34a1-812a-0dbced70f58c.roa File: eabca778-e819-34a1-812a-0dbced70f58c.roa (raw, json) Hash identifier: T/89zvHbQy/c650OcYA94cZsu935iWGtB17tFZ4PlfQ= Subject key identifier: BF:03:84:18:4C:03:0F:4B:8E:95:78:0B:7E:52:FF:CF:47:D2:D4:55 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584C9106FD38089B032E26F65680 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eabca778-e819-34a1-812a-0dbced70f58c.roa Signing time: Sun 18 Jan 2026 14:00:39 +0000 ROA not before: Sun 18 Jan 2026 14:00:39 +0000 ROA not after: Sat 18 Apr 2026 13:00:39 +0000 asID: 13335 IP address blocks: 172.70.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:91:06:fd:38:08:9b:03:2e:26:f6:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jan 18 14:00:39 2026 GMT Not After : Apr 18 13:00:39 2026 GMT Subject: CN=fc50fa0b-53c1-4351-98cc-f04b47a4bd78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d5:34:0b:20:65:77:9f:c0:ef:81:f6:1a:18: 30:ca:39:19:4d:90:85:9d:61:3f:ab:bb:2c:a3:70: ad:07:68:c8:52:fe:4a:5f:3d:eb:70:c0:08:1f:ec: de:35:41:08:43:83:33:f1:fb:97:e7:c1:d4:55:8f: cb:bf:60:6a:2f:8c:48:4b:8b:e1:f8:ee:9f:d8:66: d7:18:d1:fa:75:8f:6c:54:36:98:d4:2c:2b:f2:0f: fd:a5:c5:46:a9:60:ae:58:4d:1b:76:35:18:eb:f0: 13:bd:52:27:ea:c6:59:86:71:17:74:92:10:df:5b: 2b:06:d9:75:93:11:71:10:3f:73:27:16:f0:ec:b8: a6:16:cc:48:d7:43:fd:d1:c0:56:0a:2d:22:e8:ee: 9a:25:ec:69:5f:f7:91:c9:28:de:bf:1d:63:7b:7d: 35:65:83:c2:b6:1d:f5:a7:3a:03:86:20:7b:d3:a1: b2:1f:ab:81:ea:c8:b6:70:ae:7c:c7:18:2a:89:8b: d4:ac:bd:d3:c6:53:4e:46:d2:cc:51:7c:bc:15:4e: 85:e9:9b:db:ba:d6:a2:ab:12:14:c2:4b:73:aa:55: cc:94:06:16:61:82:d1:f2:a4:5c:14:ee:0a:ae:7b: bc:7b:9d:07:02:91:ce:f4:59:fb:50:60:ef:bb:92: fa:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:03:84:18:4C:03:0F:4B:8E:95:78:0B:7E:52:FF:CF:47:D2:D4:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eabca778-e819-34a1-812a-0dbced70f58c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:19:d0:e8:cd:1f:93:7b:d9:4f:d8:21:8b:d9:bf:b1:a9:79: 30:ff:74:e6:c6:4e:e9:0b:f1:d1:f0:27:a9:5f:35:e3:6a:24: 0b:b8:08:ca:09:92:ae:5e:a0:4e:23:11:da:06:f8:1d:dd:e8: 4c:c7:34:49:6c:55:e1:4b:04:de:b5:d5:58:7a:69:89:3a:d1: d2:47:a5:63:bb:2a:d5:25:7c:18:06:bd:a6:d2:f9:1f:67:91: a6:4a:84:f9:ec:37:d8:ce:99:cc:36:b2:6e:3b:98:0f:50:b7: 49:0f:31:05:d4:f0:54:7f:7e:c5:34:91:03:ca:49:1a:f9:1f: 30:f6:7b:b4:b5:6b:3a:54:d6:09:10:14:29:3e:60:ac:8e:ae: 54:93:b7:09:f2:ec:ee:0f:7f:f1:fd:c1:91:1c:00:0a:93:f7: 7c:2d:7b:0c:f4:73:bd:c6:74:e6:fa:49:0c:92:f1:d2:fe:16: ee:ba:7d:12:8d:4f:21:25:38:05:1f:f1:12:01:97:6f:e6:7e: d0:97:1a:5e:1f:d9:64:eb:ef:45:25:7c:4b:ce:52:1d:de:f5: a9:84:39:d5:94:70:29:76:f8:d9:14:c0:b1:1d:30:83:f6:43: 5b:e8:0e:37:6b:c4:d7:41:5f:c9:37:1d:26:93:34:bf:67:51: 1b:99:1e:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyRBv04CJsDLib2VoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDExODE0MDAzOVoXDTI2MDQxODEzMDAzOVowLzEtMCsGA1UEAxMk ZmM1MGZhMGItNTNjMS00MzUxLTk4Y2MtZjA0YjQ3YTRiZDc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNU0CyBld5/A74H2GhgwyjkZTZCFnWE/q7ss o3CtB2jIUv5KXz3rcMAIH+zeNUEIQ4Mz8fuX58HUVY/Lv2BqL4xIS4vh+O6f2GbX GNH6dY9sVDaY1Cwr8g/9pcVGqWCuWE0bdjUY6/ATvVIn6sZZhnEXdJIQ31srBtl1 kxFxED9zJxbw7LimFsxI10P90cBWCi0i6O6aJexpX/eRySjevx1je301ZYPCth31 pzoDhiB706GyH6uB6si2cK58xxgqiYvUrL3TxlNORtLMUXy8FU6F6ZvbutaiqxIU wktzqlXMlAYWYYLR8qRcFO4Krnu8e50HApHO9Fn7UGDvu5L6/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL8DhBhMAw9LjpV4C35S/89H0tRVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZWFiY2E3NzgtZTgxOS0z NGExLTgxMmEtMGRiY2VkNzBmNThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcZ0OjNH5N72U/YIYvZv7GpeTD/dObGTukL8dHwJ6lfNeNqJAu4CMoJ kq5eoE4jEdoG+B3d6EzHNElsVeFLBN611Vh6aYk60dJHpWO7KtUlfBgGvabS+R9n kaZKhPnsN9jOmcw2sm47mA9Qt0kPMQXU8FR/fsU0kQPKSRr5HzD2e7S1azpU1gkQ FCk+YKyOrlSTtwny7O4Pf/H9wZEcAAqT93wtewz0c73GdOb6SQyS8dL+Fu66fRKN TyElOAUf8RIBl2/mftCXGl4f2WTr70UlfEvOUh3e9amEOdWUcCl2+NkUwLEdMIP2 Q1voDjdrxNdBX8k3HSaTNL9nURuZHvA= -----END CERTIFICATE-----Generated at Sun Mar 1 23:24:35 2026 by rpki-client