$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fc10c1ec-902d-39c3-b430-358ba6fc3e11.roa File: fc10c1ec-902d-39c3-b430-358ba6fc3e11.roa (raw, json) Hash identifier: qK1unG7rBoKB4jT4AGfJx/59K+VooQ/VtUUz56PS6k8= Subject key identifier: 12:0E:CC:DA:A5:E5:F9:20:36:03:1B:10:CF:F6:E1:56:8B:56:ED:37 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D6C0FD73A8621959B02088760 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fc10c1ec-902d-39c3-b430-358ba6fc3e11.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 13335 IP address blocks: 172.69.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:d7:3a:86:21:95:9b:02:08:87:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=505a145f-8df7-47b7-b973-627657870779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:09:32:79:67:9d:12:a3:dc:4c:dc:c4:0b:7e: 8c:27:a3:a9:c8:7c:66:51:00:41:6e:0c:c3:de:27: 66:9c:1d:51:99:c8:06:a2:54:0f:72:0e:21:7c:b4: 0f:90:2c:c0:2c:3e:10:7a:da:57:11:0d:03:28:4e: 97:28:d7:b6:7c:9a:ed:ef:8f:0d:f4:44:52:4e:ca: f5:51:10:5c:68:24:fe:3d:05:c5:46:6d:1f:92:fb: 86:9d:90:75:ef:8f:9a:b7:bf:c3:5c:e5:1a:1b:ae: 59:fb:b4:85:58:84:d2:d7:97:39:57:6b:1a:b4:36: 0a:03:ca:99:68:fd:8c:ca:ff:4a:ea:e2:eb:c7:cf: 71:0e:f8:d9:b5:fe:fe:3b:da:8a:13:c2:a5:fd:28: f3:58:7c:bb:cf:27:d6:81:7f:9d:38:57:f0:7a:a3: 64:8a:32:58:39:9e:17:bc:16:d2:72:4e:84:b6:e4: 73:f7:d2:63:6b:ae:c1:8d:cf:3e:89:f9:c0:ff:c1: 02:16:0c:c0:ac:53:c5:65:29:6c:78:36:07:2e:1b: 13:5c:f2:8e:46:b2:bb:51:02:65:0e:c7:75:16:7e: c6:32:b3:ac:f8:a3:0b:e3:79:55:06:79:c4:5e:a0: dd:51:7d:bc:3b:76:5c:97:b8:bc:ef:83:d8:51:79: 5c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:0E:CC:DA:A5:E5:F9:20:36:03:1B:10:CF:F6:E1:56:8B:56:ED:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fc10c1ec-902d-39c3-b430-358ba6fc3e11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:f2:24:c2:04:85:ce:b8:fe:bf:37:20:8f:cc:33:76:a7:31: 61:c7:8d:71:ea:27:d0:22:7c:b4:a8:21:51:68:8d:16:4c:8f: 04:ae:71:7f:31:49:92:a7:e7:8c:dc:4f:a3:0e:71:6b:b4:e5: a5:f7:bc:d7:34:2a:7c:62:45:d9:98:80:e3:81:44:3e:8e:e6: 78:05:33:9e:36:d5:d5:20:60:58:ab:8f:53:d2:9f:37:5a:54: 8a:3f:27:1c:bb:f5:66:2a:d4:10:09:13:40:14:35:92:80:78: 1b:09:0d:1f:ac:ea:2e:22:cd:67:fa:53:51:61:08:a9:27:50: 55:2f:03:99:ab:85:5c:c6:6e:a5:43:b5:b4:32:f2:0e:8f:0d: 9e:99:7c:61:2b:fb:df:b3:31:e8:87:e7:35:ae:bf:f1:ab:e4: 59:7e:47:06:d4:90:4f:be:d4:1e:c6:06:d7:2d:e7:c9:23:88: 98:9a:17:c7:93:20:d6:71:b3:21:07:46:fd:9a:b0:46:0b:28: 2b:f4:f3:62:da:0f:76:63:ff:98:39:e9:f5:cf:56:ba:61:a9: 51:af:9c:1b:2e:57:7b:95:e7:88:97:82:62:0f:63:78:51:c2: c3:c3:31:bb:3b:a9:cd:a5:9e:f0:f1:21:b8:36:5e:9b:4e:1a: 4a:66:cd:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1sD9c6hiGVmwIIh2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk NTA1YTE0NWYtOGRmNy00N2I3LWI5NzMtNjI3NjU3ODcwNzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5gkyeWedEqPcTNzEC36MJ6OpyHxmUQBBbgzD 3idmnB1RmcgGolQPcg4hfLQPkCzALD4QetpXEQ0DKE6XKNe2fJrt748N9ERSTsr1 URBcaCT+PQXFRm0fkvuGnZB174+at7/DXOUaG65Z+7SFWITS15c5V2satDYKA8qZ aP2Myv9K6uLrx89xDvjZtf7+O9qKE8Kl/SjzWHy7zyfWgX+dOFfweqNkijJYOZ4X vBbSck6EtuRz99Jja67Bjc8+ifnA/8ECFgzArFPFZSlseDYHLhsTXPKORrK7UQJl Dsd1Fn7GMrOs+KML43lVBnnEXqDdUX28O3Zcl7i874PYUXlcSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBIOzNql5fkgNgMbEM/24VaLVu03MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZmMxMGMxZWMtOTAyZC0z OWMzLWI0MzAtMzU4YmE2ZmMzZTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEXEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzyJMIEhc64/r83II/MM3anMWHHjXHqJ9AifLSoIVFojRZMjwSucX8x SZKn54zcT6MOcWu05aX3vNc0KnxiRdmYgOOBRD6O5ngFM5421dUgYFirj1PSnzda VIo/Jxy79WYq1BAJE0AUNZKAeBsJDR+s6i4izWf6U1FhCKknUFUvA5mrhVzGbqVD tbQy8g6PDZ6ZfGEr+9+zMeiH5zWuv/Gr5Fl+RwbUkE++1B7GBtct58kjiJiaF8eT INZxsyEHRv2asEYLKCv082LaD3Zj/5g56fXPVrphqVGvnBsuV3uV54iXgmIPY3hR wsPDMbs7qc2lnvDxIbg2XptOGkpmzX4= -----END CERTIFICATE-----Generated at Fri Apr 17 19:11:08 2026 by rpki-client