$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/24829d14-985d-3bf3-bc5c-2f773de283d5.roa File: 24829d14-985d-3bf3-bc5c-2f773de283d5.roa (raw, json) Hash identifier: PyKLSWlUnaBH6AM32R6Om2THpukibs/UJ8Fwi+iyA44= Subject key identifier: 15:5D:7C:64:2A:5F:8C:82:D8:CA:E2:78:D6:F4:B7:23:B9:8C:9B:E5 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D6AAA97429D90EF968F9DB100 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/24829d14-985d-3bf3-bc5c-2f773de283d5.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 13335 IP address blocks: 172.67.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:97:42:9d:90:ef:96:8f:9d:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=8b779ecd-9aff-4b93-8434-5a5dd16dcb71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:47:02:28:02:50:6e:78:c4:24:81:92:86:33: 7f:ec:d4:aa:1e:74:ce:78:a2:10:90:de:85:10:47: a7:0a:ef:30:74:36:f8:a3:9b:51:02:f7:1e:69:a3: 42:32:e8:0d:f5:f9:f1:57:cf:81:6e:f5:23:47:2a: 8f:e3:a4:04:a2:65:46:2f:00:b8:85:e6:97:80:52: 77:4f:2c:a8:6c:f1:64:23:5e:c0:99:fd:00:2d:27: 11:10:a2:02:c2:0b:ff:d9:e6:82:05:c2:62:0b:52: 70:d6:27:6e:9e:c6:36:7c:45:40:66:c1:69:0c:99: f4:45:73:5a:5c:99:31:94:22:d7:0e:7a:83:52:bc: 48:fb:f0:0d:be:58:ae:5d:f5:0d:a0:73:1b:dc:33: 75:5c:73:b7:07:88:a4:e8:26:a3:b3:a7:27:60:af: f8:43:6e:61:a6:1d:d0:c4:2a:08:4d:b2:46:17:09: b1:1a:28:81:dd:25:06:43:7c:a6:0e:cf:af:6d:6c: 12:57:a9:92:c5:24:60:7c:e7:8c:2e:5f:cb:b6:40: 0b:28:24:99:2b:62:9b:07:54:c6:0c:b2:67:2d:b7: 91:a7:d0:5c:c7:ff:c0:de:bc:25:29:ee:6e:da:cb: 58:33:51:ad:7f:75:4d:cd:e3:84:d5:b3:66:96:44: a5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:5D:7C:64:2A:5F:8C:82:D8:CA:E2:78:D6:F4:B7:23:B9:8C:9B:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/24829d14-985d-3bf3-bc5c-2f773de283d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.67.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:57:46:03:69:a8:d2:63:10:60:ce:43:ef:f1:b6:28:4f:d4: df:3d:ea:f2:2b:4e:ba:4c:cd:81:9f:87:cd:8d:29:69:65:9b: 20:97:e8:a1:26:30:f4:1e:58:3e:f4:0b:7f:89:51:5c:27:f4: f9:9c:35:9a:ad:6c:e7:2a:38:94:b1:a1:31:31:a2:a3:2c:72: 63:80:d7:6d:4a:b2:c3:67:2c:4d:19:46:a6:30:2e:11:cb:81: 6a:12:13:5d:06:41:25:fb:57:40:28:71:89:fb:9c:a5:f8:a4: d0:77:a1:8e:b7:78:a2:9b:02:75:33:52:85:a1:80:93:ac:ca: 6e:05:c9:4a:33:9e:cc:b2:af:7f:06:7c:f6:9c:fa:5f:3f:24: 90:99:cc:a2:66:d0:f2:45:d5:97:5d:6c:58:a8:db:db:91:6b: b0:0e:5e:a4:90:db:17:bc:c1:5a:47:0f:ea:fa:5b:69:29:ce: cd:ea:f5:dc:8a:a0:b7:39:ad:81:c2:38:9b:d1:0c:9f:4b:74: 7b:a0:d7:bd:b1:02:9f:72:94:93:3c:e7:33:63:ae:c1:9e:6f: f6:13:e9:ed:ba:a0:c5:9a:62:27:4c:02:dc:2d:45:e1:8c:5f: 58:5c:75:56:b1:e7:e4:b1:f6:b1:86:d2:5f:cf:44:6e:d0:ab: e9:83:0c:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqpdCnZDvlo+dsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk OGI3NzllY2QtOWFmZi00YjkzLTg0MzQtNWE1ZGQxNmRjYjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkcCKAJQbnjEJIGShjN/7NSqHnTOeKIQkN6F EEenCu8wdDb4o5tRAvceaaNCMugN9fnxV8+BbvUjRyqP46QEomVGLwC4heaXgFJ3 TyyobPFkI17Amf0ALScREKICwgv/2eaCBcJiC1Jw1idunsY2fEVAZsFpDJn0RXNa XJkxlCLXDnqDUrxI+/ANvliuXfUNoHMb3DN1XHO3B4ik6Cajs6cnYK/4Q25hph3Q xCoITbJGFwmxGiiB3SUGQ3ymDs+vbWwSV6mSxSRgfOeMLl/LtkALKCSZK2KbB1TG DLJnLbeRp9Bcx//A3rwlKe5u2stYM1Gtf3VNzeOE1bNmlkSltQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBVdfGQqX4yC2MrieNb0tyO5jJvlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjQ4MjlkMTQtOTg1ZC0z YmYzLWJjNWMtMmY3NzNkZTI4M2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErEOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJNXRgNpqNJjEGDOQ+/xtihP1N896vIrTrpMzYGfh82NKWllmyCX6KEm MPQeWD70C3+JUVwn9PmcNZqtbOcqOJSxoTExoqMscmOA121KssNnLE0ZRqYwLhHL gWoSE10GQSX7V0AocYn7nKX4pNB3oY63eKKbAnUzUoWhgJOsym4FyUoznsyyr38G fPac+l8/JJCZzKJm0PJF1ZddbFio29uRa7AOXqSQ2xe8wVpHD+r6W2kpzs3q9dyK oLc5rYHCOJvRDJ9LdHug172xAp9ylJM85zNjrsGeb/YT6e26oMWaYidMAtwtReGM X1hcdVax5+Sx9rGG0l/PRG7Qq+mDDGw= -----END CERTIFICATE-----Generated at Fri Apr 17 19:28:45 2026 by rpki-client