$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/25d792c1-b715-3a27-bacc-040c1e66113b.roa File: 25d792c1-b715-3a27-bacc-040c1e66113b.roa (raw, json) Hash identifier: BqmzVuERLIZgReaSW/5UXJd6M7CTOI2/IBhJSjOu2bU= Subject key identifier: FB:9F:F5:78:07:C9:4D:5A:7D:BA:17:06:86:1A:15:75:76:FB:66:4A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D71A517EFBAE6BA8A70DF2A40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/25d792c1-b715-3a27-bacc-040c1e66113b.roa Signing time: Thu 09 Apr 2026 01:00:23 +0000 ROA not before: Thu 09 Apr 2026 01:00:23 +0000 ROA not after: Wed 08 Jul 2026 01:00:23 +0000 asID: 13335 IP address blocks: 172.71.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:a5:17:ef:ba:e6:ba:8a:70:df:2a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 9 01:00:23 2026 GMT Not After : Jul 8 01:00:23 2026 GMT Subject: CN=8de98c27-2811-40d9-9cde-df247ff339b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e5:dc:2c:c8:f7:06:c3:02:49:26:ae:38:00: 87:ec:75:b0:01:a8:31:da:2a:2c:7f:25:3d:71:78: 4b:1b:56:4a:5a:7b:50:33:33:76:51:d8:6a:80:b0: a3:a3:e8:ab:77:cd:80:9b:f6:0b:01:75:ca:59:b1: 44:55:f3:5b:cf:eb:8a:28:75:4e:6b:53:f4:de:27: a3:10:68:a0:69:43:6b:16:d5:4a:17:68:12:d7:f1: 64:8a:84:2a:21:5b:06:92:c5:8e:10:5c:c1:25:ad: aa:96:e6:01:38:34:23:62:d0:8f:55:af:aa:29:be: 50:6d:be:c2:25:74:a4:36:8d:fe:57:1c:af:aa:c1: 1d:f5:61:07:7e:67:fb:2a:ce:1c:e1:08:75:8d:f9: 27:74:f1:d8:b2:5f:0a:56:61:12:14:80:d3:10:eb: 65:47:22:24:4e:3d:e3:d5:86:b4:79:72:41:8a:f4: 52:c7:37:0f:65:b7:af:1c:a5:c2:ca:5b:ba:59:c4: af:cd:c6:1f:94:b5:3e:6c:b6:8b:0e:94:a9:75:fd: ed:af:a3:64:ea:d1:24:3d:68:eb:4a:cf:c8:ae:87: 59:53:c8:03:9b:16:d9:a7:84:4f:e9:f9:d5:37:db: 89:ea:ac:e6:31:b5:bb:fb:05:c2:94:eb:21:82:74: a2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:9F:F5:78:07:C9:4D:5A:7D:BA:17:06:86:1A:15:75:76:FB:66:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/25d792c1-b715-3a27-bacc-040c1e66113b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:b8:1e:c6:7e:73:cf:aa:de:4b:5e:35:e4:ea:6f:e3:f7:ac: b8:3a:bc:a0:d4:e9:dd:66:a5:87:d2:77:c4:32:8c:9f:1c:9c: b6:92:9d:6a:06:0b:7c:1f:91:4f:68:83:a0:91:0e:4f:14:eb: 2f:1d:07:df:d7:b8:bb:da:d0:5f:a1:22:7b:aa:ce:f5:d1:12: d4:15:cd:f7:b9:73:63:00:01:49:00:3d:04:af:27:06:0c:97: 0c:81:8e:82:e7:7b:2e:fb:77:16:1b:c5:44:63:69:05:3c:78: 87:72:b7:c4:bb:46:92:c1:bc:b1:d1:49:14:12:e8:e8:9d:4f: 05:8c:fc:16:b5:f4:d1:1e:e6:64:b4:ce:58:35:ea:12:b3:28: bc:ad:5c:a7:16:69:b3:39:9e:33:16:8d:a2:65:93:56:ef:eb: e8:11:b6:6b:f2:35:8d:32:03:50:7a:bd:e7:be:7e:74:51:6d: e6:f6:c4:3d:56:33:9b:97:c4:ab:f6:4e:90:80:5b:6f:fd:ee: 93:6a:16:28:42:a4:98:87:ea:6b:f4:86:81:a7:77:05:1f:8e: 54:2d:d5:f8:6f:13:e5:73:50:c4:53:b6:6f:82:5e:75:f6:87: 77:1b:65:b1:4d:d5:35:63:cc:a8:0b:ff:f6:47:91:4d:b6:1e: a0:cf:a6:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xpRfvuua6inDfKkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwOTAxMDAyM1oXDTI2MDcwODAxMDAyM1owLzEtMCsGA1UEAxMk OGRlOThjMjctMjgxMS00MGQ5LTljZGUtZGYyNDdmZjMzOWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeXcLMj3BsMCSSauOACH7HWwAagx2iosfyU9 cXhLG1ZKWntQMzN2UdhqgLCjo+ird82Am/YLAXXKWbFEVfNbz+uKKHVOa1P03iej EGigaUNrFtVKF2gS1/FkioQqIVsGksWOEFzBJa2qluYBODQjYtCPVa+qKb5Qbb7C JXSkNo3+VxyvqsEd9WEHfmf7Ks4c4Qh1jfkndPHYsl8KVmESFIDTEOtlRyIkTj3j 1Ya0eXJBivRSxzcPZbevHKXCylu6WcSvzcYflLU+bLaLDpSpdf3tr6Nk6tEkPWjr Ss/IrodZU8gDmxbZp4RP6fnVN9uJ6qzmMbW7+wXClOshgnSiqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPuf9XgHyU1afboXBoYaFXV2+2ZKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjVkNzkyYzEtYjcxNS0z YTI3LWJhY2MtMDQwYzFlNjYxMTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF24HsZ+c8+q3kteNeTqb+P3rLg6vKDU6d1mpYfSd8QyjJ8cnLaSnWoG C3wfkU9og6CRDk8U6y8dB9/XuLva0F+hInuqzvXREtQVzfe5c2MAAUkAPQSvJwYM lwyBjoLney77dxYbxURjaQU8eIdyt8S7RpLBvLHRSRQS6OidTwWM/Ba19NEe5mS0 zlg16hKzKLytXKcWabM5njMWjaJlk1bv6+gRtmvyNY0yA1B6vee+fnRRbeb2xD1W M5uXxKv2TpCAW2/97pNqFihCpJiH6mv0hoGndwUfjlQt1fhvE+VzUMRTtm+CXnX2 h3cbZbFN1TVjzKgL//ZHkU22HqDPpp4= -----END CERTIFICATE-----Generated at Fri Apr 17 19:46:08 2026 by rpki-client