$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/09b40ee3-ef3f-33a0-87a1-010a6b9d12a3.roa File: 09b40ee3-ef3f-33a0-87a1-010a6b9d12a3.roa (raw, json) Hash identifier: zrfAiYDwlLBxkNNWLJAmMF2dmhQcxlQnwHQNVr0bo80= Subject key identifier: 8D:A5:10:66:FE:56:F0:A0:4C:8C:14:3D:31:30:8B:20:D7:AC:B8:A9 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D71A51519D69649D6FD3393A0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/09b40ee3-ef3f-33a0-87a1-010a6b9d12a3.roa Signing time: Thu 09 Apr 2026 01:00:23 +0000 ROA not before: Thu 09 Apr 2026 01:00:23 +0000 ROA not after: Wed 08 Jul 2026 01:00:23 +0000 asID: 13335 IP address blocks: 172.70.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:a5:15:19:d6:96:49:d6:fd:33:93:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 9 01:00:23 2026 GMT Not After : Jul 8 01:00:23 2026 GMT Subject: CN=3cec6129-daca-4ebf-877f-87bdbd1ac324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:94:3b:c3:c7:c2:dc:ee:f3:c1:89:86:1e:48: 54:24:51:90:d5:58:aa:41:84:63:30:76:6b:be:18: ce:c4:8b:b3:9a:05:fa:f4:8b:ab:fc:b4:91:c0:b3: 8d:2d:e6:ec:30:27:50:0d:85:85:6e:53:a3:97:35: ce:92:00:55:37:59:7b:4f:6f:35:16:67:5f:99:d8: f1:87:64:fb:76:74:c9:57:7d:90:6e:89:e6:b9:a1: c2:13:0e:38:08:7c:f5:64:a1:b9:9c:68:c6:cc:0c: 70:3f:5a:99:38:ac:32:25:3c:42:8f:66:7c:51:27: a5:b0:98:ba:d5:2b:de:59:04:fa:ec:d9:22:d3:52: 78:47:a8:b7:78:0b:d2:90:b8:fb:cf:df:ca:08:db: 65:b6:9b:0d:9b:3e:11:be:b0:16:e8:24:d5:b1:28: 68:81:3a:33:ec:15:99:3c:ea:0a:03:7a:87:b3:87: 0a:71:6a:a2:7c:58:ad:c5:e8:22:15:9a:7d:17:f8: 58:09:3f:f1:af:d5:fc:19:6b:28:05:fe:ea:7b:57: 8d:9e:74:d5:a8:4d:f1:08:67:92:ef:0c:94:cc:46: 93:d4:51:8f:75:46:02:2f:fb:45:d3:a2:d5:fe:57: 37:83:e5:b0:5b:4b:47:2e:ce:50:fa:cf:3c:b0:7e: d0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:A5:10:66:FE:56:F0:A0:4C:8C:14:3D:31:30:8B:20:D7:AC:B8:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/09b40ee3-ef3f-33a0-87a1-010a6b9d12a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:2c:de:5b:1b:86:c6:0e:d8:14:65:ef:1d:18:32:d1:eb:e9: 0b:af:6c:48:b5:c6:dd:48:9d:eb:45:d2:a7:de:70:a9:e9:db: 13:5f:27:94:38:00:18:45:f9:4b:93:b0:e9:c7:31:8d:2a:da: 97:80:65:08:3a:27:80:66:b4:91:b1:57:4f:b1:e6:85:f7:43: 87:e8:27:7b:a9:45:67:8a:a1:e6:e8:1a:fc:b6:8b:ed:68:ad: c6:f0:37:b0:48:38:db:18:72:67:c7:b0:c9:e4:04:59:52:d0: f4:eb:a0:f6:62:d5:b8:af:12:7c:b4:6a:6d:a6:53:57:ab:03: 0f:31:cb:98:5a:c5:fd:49:aa:41:63:c3:c1:9d:87:a6:c1:0d: a3:af:15:3c:fa:62:11:7f:39:f9:80:3d:d3:f9:60:4f:9d:f1: d2:1a:6a:96:2d:c9:9f:0e:ae:e5:a5:38:da:d2:aa:20:e9:b8: c9:c3:fd:41:c8:85:6d:e8:8b:7f:c9:65:75:e7:99:50:b0:70: 90:04:4e:8f:0a:75:ce:f8:44:e2:1d:96:1b:2d:20:97:5b:5c: 44:bc:4e:13:88:e8:eb:bd:f4:16:d4:e3:8a:bd:df:cd:a2:85: d4:92:56:65:6b:23:36:1d:fc:42:79:d4:44:ed:8c:2c:a0:f8: fb:36:64:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xpRUZ1pZJ1v0zk6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwOTAxMDAyM1oXDTI2MDcwODAxMDAyM1owLzEtMCsGA1UEAxMk M2NlYzYxMjktZGFjYS00ZWJmLTg3N2YtODdiZGJkMWFjMzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZQ7w8fC3O7zwYmGHkhUJFGQ1ViqQYRjMHZr vhjOxIuzmgX69Iur/LSRwLONLebsMCdQDYWFblOjlzXOkgBVN1l7T281Fmdfmdjx h2T7dnTJV32QbonmuaHCEw44CHz1ZKG5nGjGzAxwP1qZOKwyJTxCj2Z8USelsJi6 1SveWQT67Nki01J4R6i3eAvSkLj7z9/KCNtltpsNmz4RvrAW6CTVsShogToz7BWZ POoKA3qHs4cKcWqifFitxegiFZp9F/hYCT/xr9X8GWsoBf7qe1eNnnTVqE3xCGeS 7wyUzEaT1FGPdUYCL/tF06LV/lc3g+WwW0tHLs5Q+s88sH7Q3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2lEGb+VvCgTIwUPTEwiyDXrLipMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDliNDBlZTMtZWYzZi0z M2EwLTg3YTEtMDEwYTZiOWQxMmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEb9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMs3lsbhsYO2BRl7x0YMtHr6QuvbEi1xt1InetF0qfecKnp2xNfJ5Q4 ABhF+UuTsOnHMY0q2peAZQg6J4BmtJGxV0+x5oX3Q4foJ3upRWeKoeboGvy2i+1o rcbwN7BIONsYcmfHsMnkBFlS0PTroPZi1bivEny0am2mU1erAw8xy5haxf1JqkFj w8Gdh6bBDaOvFTz6YhF/OfmAPdP5YE+d8dIaapYtyZ8OruWlONrSqiDpuMnD/UHI hW3oi3/JZXXnmVCwcJAETo8Kdc74ROIdlhstIJdbXES8ThOI6Ou99BbU44q9382i hdSSVmVrIzYd/EJ51ETtjCyg+Ps2ZDI= -----END CERTIFICATE-----Generated at Fri Apr 17 17:11:02 2026 by rpki-client