$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f5ac54be-2040-3cab-af2e-8862f31ee9ee.roa File: f5ac54be-2040-3cab-af2e-8862f31ee9ee.roa (raw, json) Hash identifier: Iiw79qDS9zKA7QfRfGrpuiG0qMJZE3fz11HUpbIwAnY= Subject key identifier: 06:39:87:C1:49:17:1A:D4:07:9F:20:46:A8:88:C2:38:1A:3B:59:7A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D6AAAA1E489C071ADBC913A80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f5ac54be-2040-3cab-af2e-8862f31ee9ee.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 13335 IP address blocks: 172.64.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:a1:e4:89:c0:71:ad:bc:91:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=2db450f9-f5d8-4600-80b2-a870f428db73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:79:b8:af:26:29:1d:b5:2f:fa:a3:6a:29:0d: 72:58:be:bd:54:6f:29:b7:46:e7:05:66:57:38:34: 84:87:fe:b0:54:45:8e:86:92:9b:c1:86:e7:92:47: df:2b:fa:52:81:40:34:cd:db:58:93:08:42:43:5d: 83:da:a1:7e:08:cb:31:b1:0f:bf:ef:23:f7:c7:d5: 6c:54:99:fd:1d:0e:e1:25:45:44:b7:71:1a:0d:21: 2a:eb:d0:2b:9f:c5:f2:c2:c9:8d:90:97:10:a8:cb: 7e:42:31:32:b8:a5:bd:8c:13:3a:a4:42:11:0f:61: 09:c8:52:86:6d:fe:8f:5a:1f:e7:d7:93:b8:1f:d9: 5f:4f:34:4f:3d:0e:18:f2:92:1d:85:df:f7:82:58: c7:68:74:0d:70:aa:3a:76:90:c1:a9:cd:50:35:38: e3:58:e8:87:27:ef:b1:6c:0a:ac:7b:9a:b1:3a:9d: cf:11:07:d2:88:7b:db:88:52:71:6c:75:20:10:52: 73:25:12:16:d4:4a:47:3a:2d:22:7e:1b:f4:b6:8a: 52:e5:89:db:69:15:60:05:d6:92:4b:74:28:bc:0b: de:1f:45:ea:ec:99:bb:a5:8d:cd:24:3e:45:6c:88: 36:a9:b4:ea:a4:91:e2:62:dd:b1:06:2c:61:1a:ba: 7a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:39:87:C1:49:17:1A:D4:07:9F:20:46:A8:88:C2:38:1A:3B:59:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f5ac54be-2040-3cab-af2e-8862f31ee9ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:ad:c6:63:51:47:3d:74:cd:8a:ac:0b:de:8f:57:a1:59:11: 96:04:86:ad:8e:e8:4b:4e:2c:c5:52:17:4c:ed:d2:d1:c6:af: 26:c5:d1:4f:89:f9:8c:8c:0b:8c:9e:2f:28:fa:1d:b4:3f:af: 04:9b:ea:9c:87:bd:90:1d:01:d5:1d:99:62:88:73:58:0f:39: 40:3f:6e:1e:6e:4f:f5:78:7c:e8:4a:7b:6b:76:de:59:fa:53: 1d:52:64:2b:3e:9b:8c:bf:13:4e:33:f0:da:26:1f:d7:ab:e6: ce:71:fe:ea:98:54:3d:82:18:9f:0e:47:c9:b8:a3:4d:75:f6: 1b:ff:8d:92:10:77:4d:4f:fa:51:a9:ea:32:64:58:47:13:45: 85:00:64:1d:f6:a8:70:e4:f5:98:18:1c:e2:d4:63:81:28:2e: 3f:ea:8f:6e:e9:5f:e2:8f:d7:98:f5:a1:c2:43:83:e6:a8:2f: 07:ba:4f:25:49:f1:95:7c:0c:65:7d:aa:44:e8:d9:45:c8:46: e8:aa:17:cd:02:75:59:64:12:49:fb:a1:e9:fe:7b:f9:d5:c2: a5:9f:cf:d6:ce:9f:7a:8d:81:f9:f9:90:f5:f8:a7:34:44:b8: 91:00:1e:ca:42:35:88:c9:4a:70:e3:49:05:f8:e4:ee:da:e7: db:b2:8a:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqqHkicBxrbyROoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk MmRiNDUwZjktZjVkOC00NjAwLTgwYjItYTg3MGY0MjhkYjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXm4ryYpHbUv+qNqKQ1yWL69VG8pt0bnBWZX ODSEh/6wVEWOhpKbwYbnkkffK/pSgUA0zdtYkwhCQ12D2qF+CMsxsQ+/7yP3x9Vs VJn9HQ7hJUVEt3EaDSEq69Arn8XywsmNkJcQqMt+QjEyuKW9jBM6pEIRD2EJyFKG bf6PWh/n15O4H9lfTzRPPQ4Y8pIdhd/3gljHaHQNcKo6dpDBqc1QNTjjWOiHJ++x bAqse5qxOp3PEQfSiHvbiFJxbHUgEFJzJRIW1EpHOi0ifhv0topS5YnbaRVgBdaS S3QovAveH0Xq7Jm7pY3NJD5FbIg2qbTqpJHiYt2xBixhGrp68QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAY5h8FJFxrUB58gRqiIwjgaO1l6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjVhYzU0YmUtMjA0MC0z Y2FiLWFmMmUtODg2MmYzMWVlOWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErEAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAytxmNRRz10zYqsC96PV6FZEZYEhq2O6EtOLMVSF0zt0tHGrybF0U+J +YyMC4yeLyj6HbQ/rwSb6pyHvZAdAdUdmWKIc1gPOUA/bh5uT/V4fOhKe2t23ln6 Ux1SZCs+m4y/E04z8NomH9er5s5x/uqYVD2CGJ8OR8m4o0119hv/jZIQd01P+lGp 6jJkWEcTRYUAZB32qHDk9ZgYHOLUY4EoLj/qj27pX+KP15j1ocJDg+aoLwe6TyVJ 8ZV8DGV9qkTo2UXIRuiqF80CdVlkEkn7oen+e/nVwqWfz9bOn3qNgfn5kPX4pzRE uJEAHspCNYjJSnDjSQX45O7a59uyimQ= -----END CERTIFICATE-----Generated at Fri Apr 17 19:05:19 2026 by rpki-client