$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0d76467d-0d4d-3e2b-ad26-dd2ed8276f21.roa File: 0d76467d-0d4d-3e2b-ad26-dd2ed8276f21.roa (raw, json) Hash identifier: JG/OmeawacQ+fAVaGspTI/OCO6n1WI7ZA65k1Xjnbh0= Subject key identifier: 31:5F:7A:1A:6A:8A:EE:39:C5:55:2A:D5:58:97:97:0D:86:8A:59:45 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D71A521DBFFA18ADCAEFD2140 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0d76467d-0d4d-3e2b-ad26-dd2ed8276f21.roa Signing time: Thu 09 Apr 2026 01:00:23 +0000 ROA not before: Thu 09 Apr 2026 01:00:23 +0000 ROA not after: Wed 08 Jul 2026 01:00:23 +0000 asID: 13335 IP address blocks: 172.71.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:a5:21:db:ff:a1:8a:dc:ae:fd:21:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 9 01:00:23 2026 GMT Not After : Jul 8 01:00:23 2026 GMT Subject: CN=ced55bd8-18fe-4795-9d31-eea4c5dde04b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:5e:8e:5c:57:b9:17:81:02:b5:2e:09:76:40: 9c:81:04:d5:dd:03:e3:67:18:1a:44:c4:b1:4a:45: fb:a4:0c:be:52:c1:ea:e2:88:49:1c:04:0c:39:4d: ac:3e:b9:11:c2:66:aa:39:f3:30:8c:e0:86:d2:c4: 41:92:78:4b:0b:32:1f:80:2e:0e:88:2d:95:73:c1: 8d:15:9d:d7:d6:50:24:62:52:ec:a9:f7:61:9f:cb: 3a:8d:21:80:b8:b4:11:22:53:c2:de:f8:ca:71:b3: be:84:c0:69:d4:e4:16:b4:57:96:bc:f4:8d:b6:f7: 05:8d:9c:4a:4a:fe:46:da:9a:cb:c6:09:71:66:43: 86:6e:83:24:e1:40:32:1e:aa:f4:f8:b6:fa:2f:06: 5f:b3:50:b1:f1:1f:2b:42:e6:d3:c5:41:c6:c8:9b: 6a:04:9f:2f:fc:17:ff:01:29:23:fc:fc:8c:4a:ec: ef:67:04:9b:1e:58:c4:c6:99:13:3c:d4:d0:b4:e5: 08:5b:4f:b1:9e:54:15:31:6d:90:0b:3d:0a:27:75: 85:af:5a:09:8c:ca:ba:50:06:bb:a5:1d:97:81:b9: 20:85:3c:43:43:b3:36:b0:e9:d8:94:7a:a4:21:ca: 03:89:19:af:de:c5:f5:7f:97:aa:48:8b:1c:5e:59: 72:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:5F:7A:1A:6A:8A:EE:39:C5:55:2A:D5:58:97:97:0D:86:8A:59:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0d76467d-0d4d-3e2b-ad26-dd2ed8276f21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:c5:81:3c:05:61:59:2c:95:87:db:7b:a1:7e:05:77:9a:8b: 67:29:79:f3:ff:63:9d:31:62:b4:32:3e:5d:b6:c6:a2:ba:76: d4:af:48:35:fc:1c:89:bf:e4:63:f9:e2:b4:64:12:21:6c:a3: 37:d8:4d:a6:82:0e:d9:0c:3f:1c:2d:df:7e:e8:89:f3:bb:5d: 39:b2:16:c5:bb:9a:8d:49:fb:5a:54:9b:c1:98:11:8f:50:dc: 00:72:f6:90:41:f9:67:78:fb:1f:01:37:17:3c:ba:55:56:52: 19:06:a0:16:6f:55:7f:69:ee:bf:42:d9:c0:40:27:f8:1a:5f: ea:94:46:66:50:cc:7b:cf:29:4d:7c:5d:9a:48:26:a1:e2:93: b7:50:39:e5:39:82:98:04:15:87:db:9a:4b:a4:66:33:a1:01: e3:b0:7c:ed:09:89:1a:f1:ff:b5:a6:e7:20:1f:36:2b:de:6d: c7:c1:d6:92:0a:fb:49:8c:5b:62:f6:4a:93:1e:41:88:61:e7: 46:f7:f5:cb:fe:66:a5:ce:ce:10:04:eb:48:54:31:83:68:d1: 2b:a4:84:27:ae:cb:3e:0d:1e:14:66:f9:63:a8:2f:55:86:da: e3:d0:dc:25:d9:ff:fa:f8:6a:12:90:dc:9b:83:0e:5a:f1:c9: 36:89:2b:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xpSHb/6GK3K79IUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwOTAxMDAyM1oXDTI2MDcwODAxMDAyM1owLzEtMCsGA1UEAxMk Y2VkNTViZDgtMThmZS00Nzk1LTlkMzEtZWVhNGM1ZGRlMDRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7V6OXFe5F4ECtS4JdkCcgQTV3QPjZxgaRMSx SkX7pAy+UsHq4ohJHAQMOU2sPrkRwmaqOfMwjOCG0sRBknhLCzIfgC4OiC2Vc8GN FZ3X1lAkYlLsqfdhn8s6jSGAuLQRIlPC3vjKcbO+hMBp1OQWtFeWvPSNtvcFjZxK Sv5G2prLxglxZkOGboMk4UAyHqr0+Lb6LwZfs1Cx8R8rQubTxUHGyJtqBJ8v/Bf/ ASkj/PyMSuzvZwSbHljExpkTPNTQtOUIW0+xnlQVMW2QCz0KJ3WFr1oJjMq6UAa7 pR2XgbkghTxDQ7M2sOnYlHqkIcoDiRmv3sX1f5eqSIscXllyDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDFfehpqiu45xVUq1ViXlw2GillFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMGQ3NjQ2N2QtMGQ0ZC0z ZTJiLWFkMjYtZGQyZWQ4Mjc2ZjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzFgTwFYVkslYfbe6F+BXeai2cpefP/Y50xYrQyPl22xqK6dtSvSDX8 HIm/5GP54rRkEiFsozfYTaaCDtkMPxwt337oifO7XTmyFsW7mo1J+1pUm8GYEY9Q 3ABy9pBB+Wd4+x8BNxc8ulVWUhkGoBZvVX9p7r9C2cBAJ/gaX+qURmZQzHvPKU18 XZpIJqHik7dQOeU5gpgEFYfbmkukZjOhAeOwfO0JiRrx/7Wm5yAfNivebcfB1pIK +0mMW2L2SpMeQYhh50b39cv+ZqXOzhAE60hUMYNo0SukhCeuyz4NHhRm+WOoL1WG 2uPQ3CXZ//r4ahKQ3JuDDlrxyTaJK1Q= -----END CERTIFICATE-----Generated at Fri Apr 17 17:38:56 2026 by rpki-client