$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/28d12d25-0cad-361f-8f0f-356a2eeca825.roa File: 28d12d25-0cad-361f-8f0f-356a2eeca825.roa (raw, json) Hash identifier: 2TY3Q+4FY1MmWEHVMlvISrZnhaRdrcgmfVBAeoQvCIE= Subject key identifier: 49:B4:39:46:FC:25:0D:0A:83:F3:C5:C3:C4:FC:41:2F:64:7B:83:50 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D67DFEBE89DEA1022BDB599E0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/28d12d25-0cad-361f-8f0f-356a2eeca825.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 13335 IP address blocks: 172.71.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:eb:e8:9d:ea:10:22:bd:b5:99:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=f1a8cf1b-b8d4-4cc1-858b-00a27163f35e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:85:3f:c3:3c:de:a0:20:99:bc:96:27:12:04: 31:7c:97:25:63:8a:0d:a1:50:63:23:47:cf:e2:f3: ba:50:98:b6:29:4c:b9:42:b7:af:e5:cc:36:41:02: cc:a2:2e:7f:a7:e4:ec:c6:ff:13:4c:11:0f:43:c8: 16:3c:a5:98:c8:e0:d5:75:fa:b1:8c:35:9a:51:d8: f0:ed:18:04:2b:7b:df:a0:d4:da:cd:e3:b6:6e:1b: dd:4c:c0:f4:f2:41:46:53:1d:3d:81:3b:70:fa:fd: 2e:e6:9c:50:a9:b3:db:e9:dd:6f:98:8a:32:84:88: db:6f:27:b4:4b:46:ae:55:5f:8d:ba:8c:c2:2e:8b: c0:de:9f:06:08:3c:7e:91:6f:1d:25:d6:2b:2e:da: e7:35:10:2d:a4:b4:c3:ba:10:0c:c5:e4:38:3e:74: 71:e0:f7:f2:82:4f:bb:8c:4f:28:af:52:59:c5:b4: 88:2d:04:03:c5:61:e4:97:3a:57:29:50:13:33:08: 6e:6c:6c:15:f9:09:af:9b:0a:ef:ad:cb:98:f8:7e: 6f:51:07:c2:ec:51:e4:30:32:77:c1:ac:08:b3:61: 91:a7:79:80:ea:fc:41:5e:7c:e4:97:71:1f:e9:b1: 89:db:91:70:bf:d6:b0:14:b8:8c:13:72:44:19:54: 17:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B4:39:46:FC:25:0D:0A:83:F3:C5:C3:C4:FC:41:2F:64:7B:83:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/28d12d25-0cad-361f-8f0f-356a2eeca825.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:ce:11:48:c9:ce:7e:e7:49:bb:7f:93:b0:c3:11:8c:e5:70: fc:d5:b9:a9:5f:7a:f5:c8:9a:53:6b:2e:8f:e4:05:3d:f4:18: 9e:3e:ad:be:2f:c3:12:b2:73:22:25:39:d7:9b:ad:f4:3a:00: f6:52:d0:e4:6c:12:dc:ec:bf:0a:9d:e6:71:d1:cc:19:e9:97: 49:42:7d:77:cb:1b:68:3b:f9:60:b4:96:d2:01:0c:8c:c0:e4: 0d:82:73:ea:43:4a:66:f3:d9:48:8e:98:c8:6b:49:25:cf:20: 4b:b3:6e:49:4d:21:3b:0f:eb:88:80:20:d2:91:e2:8a:f0:8c: 9e:45:7b:c7:de:a9:67:a2:2b:6b:5f:1f:ae:6e:f3:fa:27:2f: b1:4f:d7:96:66:65:80:14:bd:5f:56:10:2e:5d:ac:80:01:bf: e3:47:0d:40:72:69:1f:be:3f:ac:9e:62:85:88:72:2a:ab:5b: b9:d4:d1:ae:c6:f0:8f:e1:82:bc:82:8c:e8:3a:9a:c8:9f:3d: 2e:6c:9f:ff:53:0f:89:f0:ca:1c:dc:4e:75:75:a4:d0:a7:8e: 1d:d2:a5:28:05:a5:d7:a8:8c:56:7a:ed:14:f3:3d:42:4d:33: a3:b1:61:8f:89:7a:97:89:e4:7f:56:52:17:88:80:10:ad:22: 03:13:82:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n3+voneoQIr21meAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk ZjFhOGNmMWItYjhkNC00Y2MxLTg1OGItMDBhMjcxNjNmMzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloU/wzzeoCCZvJYnEgQxfJclY4oNoVBjI0fP 4vO6UJi2KUy5Qrev5cw2QQLMoi5/p+Tsxv8TTBEPQ8gWPKWYyODVdfqxjDWaUdjw 7RgEK3vfoNTazeO2bhvdTMD08kFGUx09gTtw+v0u5pxQqbPb6d1vmIoyhIjbbye0 S0auVV+NuozCLovA3p8GCDx+kW8dJdYrLtrnNRAtpLTDuhAMxeQ4PnRx4Pfygk+7 jE8or1JZxbSILQQDxWHklzpXKVATMwhubGwV+QmvmwrvrcuY+H5vUQfC7FHkMDJ3 wawIs2GRp3mA6vxBXnzkl3Ef6bGJ25Fwv9awFLiME3JEGVQXMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEm0OUb8JQ0Kg/PFw8T8QS9ke4NQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjhkMTJkMjUtMGNhZC0z NjFmLThmMGYtMzU2YTJlZWNhODI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEdsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3OEUjJzn7nSbt/k7DDEYzlcPzVualfevXImlNrLo/kBT30GJ4+rb4v wxKycyIlOdebrfQ6APZS0ORsEtzsvwqd5nHRzBnpl0lCfXfLG2g7+WC0ltIBDIzA 5A2Cc+pDSmbz2UiOmMhrSSXPIEuzbklNITsP64iAINKR4orwjJ5Fe8feqWeiK2tf H65u8/onL7FP15ZmZYAUvV9WEC5drIABv+NHDUByaR++P6yeYoWIciqrW7nU0a7G 8I/hgryCjOg6msifPS5sn/9TD4nwyhzcTnV1pNCnjh3SpSgFpdeojFZ67RTzPUJN M6OxYY+JepeJ5H9WUheIgBCtIgMTgtI= -----END CERTIFICATE-----Generated at Fri Apr 17 19:43:58 2026 by rpki-client