$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f8fa47a4-8c16-3e6a-a2da-d0f6abf2da31.roa File: f8fa47a4-8c16-3e6a-a2da-d0f6abf2da31.roa (raw, json) Hash identifier: f/r+lhb0ttEej28jtXRCCc1jZlQRd6WUZ25YQzdF27g= Subject key identifier: 57:0D:1F:9D:22:68:4A:13:81:AC:98:BD:80:FF:45:BB:83:7D:66:32 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D6AAA9671637973369CDDAD00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f8fa47a4-8c16-3e6a-a2da-d0f6abf2da31.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 13335 IP address blocks: 172.65.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:96:71:63:79:73:36:9c:dd:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=b186aa61-0998-41e0-8234-2350814168c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c9:a1:36:59:da:57:8f:4b:ad:17:34:10:df: d6:f2:27:0a:23:a0:7d:97:21:56:73:c6:4e:bd:a7: 6b:99:d1:13:ff:e7:8f:2b:51:f7:3c:d2:ba:60:8c: 54:a6:f6:07:42:7a:a5:52:60:5f:4c:38:2b:9b:0d: 24:67:50:33:fc:7c:de:f2:f7:52:b3:5b:37:8f:04: 43:93:2a:af:86:76:e2:1d:36:85:11:fc:4b:f0:f1: 60:f7:9d:d4:d4:02:83:b8:e2:7b:92:1f:c5:a4:9e: 17:49:e2:44:c9:f9:37:1e:31:ff:81:7c:2f:76:36: 79:9f:87:3f:53:34:6b:de:66:15:ff:62:3f:4c:58: 39:d0:a7:e1:fa:bd:cb:c2:8a:5c:b2:20:1a:ff:51: b6:b3:eb:8f:e7:06:9e:3f:e9:68:71:d1:c1:b4:05: 7f:66:d2:2a:22:35:0e:8b:d0:7a:71:78:7c:83:84: 5d:7c:ee:10:9d:5e:4f:6c:3c:52:96:c2:52:cf:9c: 78:26:9c:7e:28:21:bd:e7:5a:5c:9b:38:a1:de:87: a5:54:3c:36:96:3d:37:f2:6b:38:64:e8:d0:ce:5b: 6a:93:f9:a2:54:85:22:5b:48:aa:12:49:49:45:17: fb:4a:4a:c5:d3:84:ed:91:99:fc:3b:7e:89:d5:2d: 23:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:0D:1F:9D:22:68:4A:13:81:AC:98:BD:80:FF:45:BB:83:7D:66:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f8fa47a4-8c16-3e6a-a2da-d0f6abf2da31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.65.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:0c:5f:a5:3c:9c:02:f4:c2:ef:9d:b7:8c:2d:cc:27:f2:2d: 3c:c5:87:2d:05:03:00:8e:0c:60:25:98:12:17:fb:ab:1c:19: 2d:82:09:dc:fa:63:9b:6d:83:cf:83:45:62:1d:f0:36:75:3e: 13:ff:a5:e1:41:cd:40:6f:ea:89:72:75:88:c2:e0:05:d3:d1: 22:b4:97:8c:cf:46:da:e2:07:30:5b:ab:1c:ac:57:98:24:e9: 1c:dc:7e:40:e5:59:c2:f8:f2:a4:7e:b4:67:a5:b8:bc:a6:ad: 87:cc:0d:96:74:99:49:71:78:da:2b:10:04:4f:87:d1:c3:da: 72:d2:22:4c:cb:51:0f:ae:11:71:14:d0:76:db:d3:d5:12:73: ce:ad:86:54:fc:87:a3:7b:04:0f:81:b0:6a:b1:c9:54:4b:44: 98:ca:ba:88:a0:8f:fa:97:0e:c2:d9:85:33:d2:c6:99:b7:3f: a6:46:4d:2f:32:87:b0:aa:6f:0e:79:82:1e:6d:a5:c2:76:5e: d3:81:e5:89:da:f8:33:26:3f:b5:de:9e:2a:94:99:5b:6e:0d: 3e:4d:2b:ea:36:53:80:c3:04:7c:9a:5d:70:95:83:03:d1:a3: c9:dd:4d:c5:63:7b:53:37:56:dc:8e:ca:d1:3b:cd:99:33:4b: 23:40:0f:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqpZxY3lzNpzdrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk YjE4NmFhNjEtMDk5OC00MWUwLTgyMzQtMjM1MDgxNDE2OGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcmhNlnaV49LrRc0EN/W8icKI6B9lyFWc8ZO vadrmdET/+ePK1H3PNK6YIxUpvYHQnqlUmBfTDgrmw0kZ1Az/Hze8vdSs1s3jwRD kyqvhnbiHTaFEfxL8PFg953U1AKDuOJ7kh/FpJ4XSeJEyfk3HjH/gXwvdjZ5n4c/ UzRr3mYV/2I/TFg50Kfh+r3LwopcsiAa/1G2s+uP5waeP+locdHBtAV/ZtIqIjUO i9B6cXh8g4RdfO4QnV5PbDxSlsJSz5x4Jpx+KCG951pcmzih3oelVDw2lj038ms4 ZOjQzltqk/miVIUiW0iqEklJRRf7SkrF04TtkZn8O36J1S0jWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFcNH50iaEoTgayYvYD/RbuDfWYyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjhmYTQ3YTQtOGMxNi0z ZTZhLWEyZGEtZDBmNmFiZjJkYTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErEEQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkMX6U8nAL0wu+dt4wtzCfyLTzFhy0FAwCODGAlmBIX+6scGS2CCdz6 Y5ttg8+DRWId8DZ1PhP/peFBzUBv6olydYjC4AXT0SK0l4zPRtriBzBbqxysV5gk 6RzcfkDlWcL48qR+tGeluLymrYfMDZZ0mUlxeNorEARPh9HD2nLSIkzLUQ+uEXEU 0Hbb09USc86thlT8h6N7BA+BsGqxyVRLRJjKuoigj/qXDsLZhTPSxpm3P6ZGTS8y h7Cqbw55gh5tpcJ2XtOB5Yna+DMmP7XeniqUmVtuDT5NK+o2U4DDBHyaXXCVgwPR o8ndTcVje1M3VtyOytE7zZkzSyNADwM= -----END CERTIFICATE-----Generated at Fri Apr 17 11:30:23 2026 by rpki-client