$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0a0ffe5e-acb3-3571-b5a0-b40abaa26eb8.roa File: 0a0ffe5e-acb3-3571-b5a0-b40abaa26eb8.roa (raw, json) Hash identifier: p8KCDJw8DPiASteoHarK49wSWb429RMV9fGJNSYXQkY= Subject key identifier: E0:EE:58:54:C9:F6:80:9B:E7:A7:A2:A5:09:C7:20:0A:13:A3:B4:EB Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D71A5150CD3C741D724B03920 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0a0ffe5e-acb3-3571-b5a0-b40abaa26eb8.roa Signing time: Thu 09 Apr 2026 01:00:23 +0000 ROA not before: Thu 09 Apr 2026 01:00:23 +0000 ROA not after: Wed 08 Jul 2026 01:00:23 +0000 asID: 13335 IP address blocks: 172.70.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:a5:15:0c:d3:c7:41:d7:24:b0:39:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 9 01:00:23 2026 GMT Not After : Jul 8 01:00:23 2026 GMT Subject: CN=75aed3c4-c840-49f6-884c-8b51e4993d76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ce:dd:ca:8e:f2:f4:6f:ec:c6:3d:d4:75:c1: 79:f1:63:21:10:96:f9:f5:70:85:d1:06:4a:9e:09: 0a:6a:84:b6:0e:18:7e:44:25:8c:f7:30:ac:99:96: 2b:48:99:e7:9e:91:67:b4:42:34:26:1d:a0:11:78: ce:e8:0d:9e:60:56:9f:98:61:bf:74:ad:40:77:4d: 8e:e6:9c:fa:ab:a6:05:a8:97:2f:99:b6:e5:5c:cb: 0a:7d:c4:97:6d:50:21:35:6d:3d:9c:ad:b2:e8:c7: 69:8d:6c:ee:55:8c:7f:e9:9b:ab:31:88:c2:3e:b6: a1:06:34:d7:35:d4:af:58:56:f8:15:6d:53:b4:6f: 74:3b:d9:2c:1d:8b:98:f9:0b:44:f2:68:7e:bb:dd: 8d:b1:2f:2f:99:37:22:01:73:86:63:e4:f8:66:62: ed:01:cc:83:d7:ee:7b:b5:8b:ac:4a:ba:df:b3:50: 63:4c:d7:f7:e0:ff:00:3b:e6:4f:e6:b4:e0:8b:c8: fb:1a:ef:d5:ac:aa:3e:ca:7d:b4:ed:e4:a4:29:94: 9f:42:a7:61:72:3f:8b:ef:7a:1b:c1:0e:52:d8:a0: 57:c3:fa:18:18:cf:8f:48:23:11:c7:52:10:cc:df: 43:18:bd:90:33:cf:da:d5:25:44:ab:94:93:5e:ce: ec:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:EE:58:54:C9:F6:80:9B:E7:A7:A2:A5:09:C7:20:0A:13:A3:B4:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0a0ffe5e-acb3-3571-b5a0-b40abaa26eb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:97:01:fb:8c:75:16:b6:f1:aa:9b:2f:7c:cf:81:31:15:b5: 78:fe:e5:85:9f:4b:94:5f:70:3c:0d:d5:98:04:5e:eb:4a:d7: 5e:32:a4:36:de:c0:58:bb:c4:8d:8b:70:e0:21:44:b8:6a:66: 2c:1f:32:a8:e1:0c:98:46:94:fd:24:17:29:57:95:b8:e2:79: 10:b4:30:b0:d2:49:b8:b3:b4:07:67:8d:ff:fc:61:83:3f:05: 03:c7:62:3b:24:e4:95:ab:1c:07:72:8d:2b:e1:f5:08:a0:a8: b9:53:c6:de:c0:81:56:35:9b:b2:34:a6:25:70:a0:2d:c4:bd: ab:4d:23:0a:7d:38:56:d4:2e:54:c7:ed:b9:35:ce:bd:67:d3: eb:1a:89:a9:db:2a:47:20:69:fc:9e:34:44:69:cf:11:37:0a: 98:e5:39:01:66:68:a2:4c:73:58:11:fc:fd:55:94:c4:27:a5: 7c:af:de:31:be:36:1e:65:58:35:16:98:d2:91:99:2b:3a:0d: 8f:7f:e2:fc:b9:e3:a8:ee:d8:b4:eb:d5:25:1f:cf:3a:20:ae: f7:48:ab:54:5e:37:2d:46:82:8a:3e:5f:01:e8:51:73:ac:e7: 1a:8c:69:96:ca:02:c7:7c:4c:9f:45:26:8f:38:96:53:6b:3f: c6:fa:f4:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xpRUM08dB1ySwOSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwOTAxMDAyM1oXDTI2MDcwODAxMDAyM1owLzEtMCsGA1UEAxMk NzVhZWQzYzQtYzg0MC00OWY2LTg4NGMtOGI1MWU0OTkzZDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqM7dyo7y9G/sxj3UdcF58WMhEJb59XCF0QZK ngkKaoS2Dhh+RCWM9zCsmZYrSJnnnpFntEI0Jh2gEXjO6A2eYFafmGG/dK1Ad02O 5pz6q6YFqJcvmbblXMsKfcSXbVAhNW09nK2y6MdpjWzuVYx/6ZurMYjCPrahBjTX NdSvWFb4FW1TtG90O9ksHYuY+QtE8mh+u92NsS8vmTciAXOGY+T4ZmLtAcyD1+57 tYusSrrfs1BjTNf34P8AO+ZP5rTgi8j7Gu/VrKo+yn207eSkKZSfQqdhcj+L73ob wQ5S2KBXw/oYGM+PSCMRx1IQzN9DGL2QM8/a1SVEq5STXs7s1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFODuWFTJ9oCb56eipQnHIAoTo7TrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMGEwZmZlNWUtYWNiMy0z NTcxLWI1YTAtYjQwYWJhYTI2ZWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEb8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKqXAfuMdRa28aqbL3zPgTEVtXj+5YWfS5RfcDwN1ZgEXutK114ypDbe wFi7xI2LcOAhRLhqZiwfMqjhDJhGlP0kFylXlbjieRC0MLDSSbiztAdnjf/8YYM/ BQPHYjsk5JWrHAdyjSvh9QigqLlTxt7AgVY1m7I0piVwoC3EvatNIwp9OFbULlTH 7bk1zr1n0+saianbKkcgafyeNERpzxE3CpjlOQFmaKJMc1gR/P1VlMQnpXyv3jG+ Nh5lWDUWmNKRmSs6DY9/4vy546ju2LTr1SUfzzogrvdIq1ReNy1Ggoo+XwHoUXOs 5xqMaZbKAsd8TJ9FJo84llNrP8b69A4= -----END CERTIFICATE-----Generated at Fri Apr 17 15:40:56 2026 by rpki-client