$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0da6d8fd-8256-3417-8ced-8017e077244e.roa File: 0da6d8fd-8256-3417-8ced-8017e077244e.roa (raw, json) Hash identifier: Deputk8tvFQ47PBVIohsO3fs8UUnV2OzJewvNlhH2FM= Subject key identifier: A5:7F:BC:D6:1B:A3:BA:8F:0F:1D:A4:58:4C:A8:1A:BE:83:A4:D6:14 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D67DFEDEA021EA088696D3280 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0da6d8fd-8256-3417-8ced-8017e077244e.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 13335 IP address blocks: 172.71.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:ed:ea:02:1e:a0:88:69:6d:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=fa0d930c-58d8-4be4-a28d-985082beddab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d1:14:1d:e6:78:11:bf:11:c1:ca:a5:54:4e: d0:c1:c1:3d:19:45:e6:76:df:7f:10:c0:93:19:7f: cd:ed:6b:21:80:2f:ca:37:55:b5:b2:69:48:9f:12: 93:c8:7a:f8:62:b0:46:1a:f7:bb:21:64:86:dd:7b: d5:b2:da:e5:d1:42:c2:47:3c:d2:6c:48:21:94:ab: 02:90:9d:24:f8:54:e9:98:3f:26:d4:a1:13:c0:47: 96:f9:ce:37:84:9f:bf:8e:31:04:5f:cf:5a:b3:41: e1:1c:63:c6:53:41:41:54:bd:1d:d4:23:0c:70:7b: 5c:1c:4e:75:4b:33:f9:f7:19:bf:e1:4c:f3:3d:06: 39:24:3a:c9:a6:27:45:c0:b2:ab:9d:c1:11:ad:34: 67:f6:2c:e8:da:91:7b:46:df:10:f6:98:10:cc:b8: 17:21:75:de:3e:b1:7d:c6:bb:cb:44:2f:7b:e8:24: 26:1b:dc:7a:83:63:c5:0e:aa:86:a8:62:db:59:06: c7:57:15:6c:29:23:8e:98:6f:7b:0f:1e:f5:4a:88: e4:e9:64:2a:9e:06:74:65:8b:a2:2e:39:b7:a9:53: a8:6b:db:63:d4:43:4f:17:4f:6a:4d:2e:6d:bf:95: f1:1f:50:0e:a3:88:74:f2:2d:93:99:00:f9:3b:3b: 17:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:7F:BC:D6:1B:A3:BA:8F:0F:1D:A4:58:4C:A8:1A:BE:83:A4:D6:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0da6d8fd-8256-3417-8ced-8017e077244e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:d2:f4:f6:26:49:8b:60:b1:cf:61:ac:92:30:c3:70:57:c8: 3d:b2:74:07:72:07:d7:eb:cc:83:bf:90:62:56:d4:8e:74:d2: 5d:27:5f:58:62:69:85:f6:f8:64:19:d0:4a:c3:5d:f8:39:78: ea:71:f5:9a:46:3f:ed:e6:b1:97:e4:33:fb:15:e4:50:59:88: f1:3a:64:46:02:68:00:71:65:88:45:d7:50:a8:88:15:e9:75: 24:cf:e4:ca:d1:93:7a:a0:fd:ab:d4:6e:2a:16:29:76:66:82: d7:14:e6:43:17:cf:87:35:98:f3:b7:bc:55:20:7d:8d:d3:2d: 48:5f:40:1b:69:41:4c:83:80:6f:a9:bf:22:d6:eb:56:87:1c: a4:36:11:2c:e2:ba:5e:2c:27:36:2d:56:9b:d6:4a:68:54:44: b7:3b:bf:39:35:85:c5:78:52:02:97:a3:e4:f4:10:4f:6f:53: 20:a0:a8:ac:04:84:a7:b6:cc:8e:d5:36:ee:b4:f0:3f:36:8a: 4f:6e:97:ee:02:10:1c:52:22:19:c3:25:1c:32:b1:1a:b0:2c: 53:fd:e6:d1:cf:b8:d0:20:c7:9a:30:af:03:cc:fa:39:0b:b2: 48:fa:35:38:b2:ed:c5:42:9a:60:1e:4a:eb:96:35:e6:ad:dd: 1a:be:cf:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n3+3qAh6giGltMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk ZmEwZDkzMGMtNThkOC00YmU0LWEyOGQtOTg1MDgyYmVkZGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49EUHeZ4Eb8RwcqlVE7QwcE9GUXmdt9/EMCT GX/N7WshgC/KN1W1smlInxKTyHr4YrBGGve7IWSG3XvVstrl0ULCRzzSbEghlKsC kJ0k+FTpmD8m1KETwEeW+c43hJ+/jjEEX89as0HhHGPGU0FBVL0d1CMMcHtcHE51 SzP59xm/4UzzPQY5JDrJpidFwLKrncERrTRn9izo2pF7Rt8Q9pgQzLgXIXXePrF9 xrvLRC976CQmG9x6g2PFDqqGqGLbWQbHVxVsKSOOmG97Dx71Sojk6WQqngZ0ZYui Ljm3qVOoa9tj1ENPF09qTS5tv5XxH1AOo4h08i2TmQD5OzsXHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKV/vNYbo7qPDx2kWEyoGr6DpNYUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMGRhNmQ4ZmQtODI1Ni0z NDE3LThjZWQtODAxN2UwNzcyNDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEenMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELS9PYmSYtgsc9hrJIww3BXyD2ydAdyB9frzIO/kGJW1I500l0nX1hi aYX2+GQZ0ErDXfg5eOpx9ZpGP+3msZfkM/sV5FBZiPE6ZEYCaABxZYhF11CoiBXp dSTP5MrRk3qg/avUbioWKXZmgtcU5kMXz4c1mPO3vFUgfY3TLUhfQBtpQUyDgG+p vyLW61aHHKQ2ESziul4sJzYtVpvWSmhURLc7vzk1hcV4UgKXo+T0EE9vUyCgqKwE hKe2zI7VNu608D82ik9ul+4CEBxSIhnDJRwysRqwLFP95tHPuNAgx5owrwPM+jkL skj6NTiy7cVCmmAeSuuWNeat3Rq+z5A= -----END CERTIFICATE-----Generated at Fri Apr 17 18:32:42 2026 by rpki-client