$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eb8df8fd-63da-3e17-aeff-36bc2c5b2e73.roa File: eb8df8fd-63da-3e17-aeff-36bc2c5b2e73.roa (raw, json) Hash identifier: jtRv/+zpGneNxd6vm8dvw5ZTUazBzwzR7TfLkqUW8so= Subject key identifier: 62:5D:8F:94:3A:07:E3:CA:7F:03:94:F1:42:C3:FB:B9:6D:90:49:AE Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D55BA37255EA1B7FCBFF5DF80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eb8df8fd-63da-3e17-aeff-36bc2c5b2e73.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 13335 IP address blocks: 172.64.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:37:25:5e:a1:b7:fc:bf:f5:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=5d5613ee-8381-4bfb-b949-dd35fd6beb5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c0:cc:83:2a:9b:20:39:24:08:e4:92:cd:a5: 56:8b:90:27:b0:77:4b:d7:43:e2:20:52:a7:f0:0f: d0:08:7d:ae:b4:e5:ca:70:5e:70:d6:6a:80:d7:c6: 91:c0:85:8f:f0:28:e1:5c:dc:a7:71:6b:0c:86:d2: 70:24:9d:9d:60:19:33:21:cd:36:64:d4:bb:8d:cf: 8b:95:81:63:50:1f:8d:db:23:40:6c:4a:da:7f:e3: e7:05:b1:65:9d:2a:9b:a0:e2:a7:e3:fc:48:80:8d: 85:d8:36:9a:cd:b2:b5:96:d9:d2:a8:bd:99:93:42: 04:83:0f:e8:32:7e:5b:4f:ed:ad:55:2a:58:2b:38: 2c:e9:05:74:73:79:23:cb:79:38:29:3b:36:3f:74: 68:32:b6:37:23:31:c1:db:ad:50:d5:9b:1a:78:dc: fc:4f:6a:84:96:43:12:82:30:51:d3:4e:10:e6:b0: 0f:d8:f6:2a:9f:f6:40:4e:0a:19:17:10:b0:9e:f9: 6f:df:48:6a:54:a6:87:84:4a:ce:86:87:de:f0:d7: f0:06:98:02:aa:51:e0:33:2d:f4:a3:75:e8:46:37: 0f:f4:3f:ef:95:01:07:ed:d9:5c:c6:8f:fc:36:6d: e1:dd:c8:4b:4a:de:61:78:5b:73:59:5c:cc:f4:f7: b6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:5D:8F:94:3A:07:E3:CA:7F:03:94:F1:42:C3:FB:B9:6D:90:49:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eb8df8fd-63da-3e17-aeff-36bc2c5b2e73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:f0:8c:75:38:95:cc:e8:79:a8:9e:5f:1e:ca:29:cb:28:39: 76:2f:45:bd:91:51:ca:d4:53:38:0e:c3:86:e1:a0:fc:f8:ef: 56:d3:0c:bb:35:cc:1f:4c:11:9a:db:dc:bd:66:9c:77:c6:a1: b3:ce:90:5c:8b:3f:22:6c:90:aa:25:ec:35:52:6a:5e:22:95: b3:8f:8d:07:7e:16:68:21:a5:52:10:01:fa:58:16:ef:d7:5d: 6e:e0:0c:03:d5:3b:13:52:1e:47:b5:4c:2e:c6:e2:1b:33:7c: 86:fe:93:76:4d:bd:63:1f:0b:9a:56:ab:d0:96:26:b7:09:fb: aa:51:f5:a4:05:b7:ae:9c:3c:26:52:93:ce:ec:24:52:92:04: 70:bf:5e:50:9c:1c:23:da:57:c5:3f:6d:86:d5:94:b8:39:35: 2a:59:52:63:d3:59:51:97:92:8f:46:3c:02:69:b6:0d:9f:8c: 21:bd:6f:f7:74:be:b8:be:1b:b7:c1:1c:3f:89:b5:1b:5a:2f: 21:fc:24:18:ac:26:2f:d6:ba:84:be:e4:ec:64:20:f7:b8:6c: 81:ac:10:3b:96:c1:c6:01:1b:a4:e7:ca:f9:bb:fc:21:b1:58: fe:de:53:5a:08:ca:38:a0:4b:e0:4e:ee:b5:5a:de:ec:c7:11: e7:8a:b8:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VujclXqG3/L/134AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk NWQ1NjEzZWUtODM4MS00YmZiLWI5NDktZGQzNWZkNmJlYjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcDMgyqbIDkkCOSSzaVWi5AnsHdL10PiIFKn 8A/QCH2utOXKcF5w1mqA18aRwIWP8CjhXNyncWsMhtJwJJ2dYBkzIc02ZNS7jc+L lYFjUB+N2yNAbEraf+PnBbFlnSqboOKn4/xIgI2F2DaazbK1ltnSqL2Zk0IEgw/o Mn5bT+2tVSpYKzgs6QV0c3kjy3k4KTs2P3RoMrY3IzHB261Q1ZsaeNz8T2qElkMS gjBR004Q5rAP2PYqn/ZATgoZFxCwnvlv30hqVKaHhErOhofe8NfwBpgCqlHgMy30 o3XoRjcP9D/vlQEH7dlcxo/8Nm3h3chLSt5heFtzWVzM9Pe2lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGJdj5Q6B+PKfwOU8ULD+7ltkEmuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZWI4ZGY4ZmQtNjNkYS0z ZTE3LWFlZmYtMzZiYzJjNWIyZTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEDeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXwjHU4lczoeaieXx7KKcsoOXYvRb2RUcrUUzgOw4bhoPz471bTDLs1 zB9MEZrb3L1mnHfGobPOkFyLPyJskKol7DVSal4ilbOPjQd+FmghpVIQAfpYFu/X XW7gDAPVOxNSHke1TC7G4hszfIb+k3ZNvWMfC5pWq9CWJrcJ+6pR9aQFt66cPCZS k87sJFKSBHC/XlCcHCPaV8U/bYbVlLg5NSpZUmPTWVGXko9GPAJptg2fjCG9b/d0 vri+G7fBHD+JtRtaLyH8JBisJi/WuoS+5OxkIPe4bIGsEDuWwcYBG6Tnyvm7/CGx WP7eU1oIyjigS+BO7rVa3uzHEeeKuKM= -----END CERTIFICATE-----Generated at Fri Apr 17 11:39:12 2026 by rpki-client