$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2a425177-ae2d-3ba8-9603-0e6133ca0f04.roa File: 2a425177-ae2d-3ba8-9603-0e6133ca0f04.roa (raw, json) Hash identifier: WvgP9cjmhI91VRiFOLRG8IvecbrZ1CHuvnP40AVK+NM= Subject key identifier: 2C:ED:D8:24:DC:C6:A8:5E:27:7C:83:66:DC:BC:04:2E:BC:AD:EA:EB Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D71A51E1C82D73B65206EA080 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2a425177-ae2d-3ba8-9603-0e6133ca0f04.roa Signing time: Thu 09 Apr 2026 01:00:23 +0000 ROA not before: Thu 09 Apr 2026 01:00:23 +0000 ROA not after: Wed 08 Jul 2026 01:00:23 +0000 asID: 13335 IP address blocks: 172.70.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:a5:1e:1c:82:d7:3b:65:20:6e:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 9 01:00:23 2026 GMT Not After : Jul 8 01:00:23 2026 GMT Subject: CN=5ddb5d9a-352e-4dba-90bc-45dc8f660e59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:38:78:55:5c:27:3f:fa:cc:e9:91:27:01:ba: 53:b7:b2:c8:09:39:4a:0b:ee:8a:77:d9:b5:07:58: 08:b7:39:a6:db:6e:fe:fd:70:9a:6d:0b:9b:86:8c: 46:e9:41:98:ed:0d:56:47:bb:10:58:61:25:96:e4: 35:e4:2d:c8:42:b5:40:d0:b3:08:08:ed:b3:63:68: 69:f5:b9:3e:6d:4d:09:90:8b:c2:19:d7:26:fb:9b: 08:2b:3c:fd:1e:7e:6c:82:80:57:51:21:06:56:4d: 44:30:be:22:e8:1d:c5:67:60:14:d5:e6:12:42:63: 2c:e4:8f:b0:39:ae:36:2a:6e:4d:cf:27:2c:52:0e: fd:53:5a:2a:ee:ab:f5:75:46:4c:37:23:40:65:87: c5:a8:92:43:08:39:db:40:ad:ae:1f:7b:31:44:29: 2c:ff:5a:b0:5b:eb:58:b2:61:9f:e2:e8:9e:e8:67: 7f:ee:38:7c:bd:af:fa:10:8a:ec:29:0c:c4:c7:53: 38:78:b7:1c:f0:01:4f:de:12:9d:c1:96:b7:37:0b: 4d:3e:83:4e:75:d8:68:58:8e:a8:f9:76:7c:01:67: ab:a6:20:dc:cb:de:76:84:df:75:e0:d9:88:9c:5a: 83:56:eb:84:c4:f9:e5:16:aa:fb:f1:1b:3e:84:f7: a4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:ED:D8:24:DC:C6:A8:5E:27:7C:83:66:DC:BC:04:2E:BC:AD:EA:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2a425177-ae2d-3ba8-9603-0e6133ca0f04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:91:bb:21:92:84:dd:b7:e5:e9:ae:f2:43:97:2f:c8:41:00: f1:4f:79:49:6e:b6:c4:ef:75:f6:2d:18:38:1a:02:6c:52:ef: 70:eb:4d:21:b2:3a:5e:cf:cd:28:93:dc:ad:a1:3d:fe:61:2c: d6:d2:bf:f8:a2:7c:55:46:05:2c:f3:ab:f9:8f:42:04:c5:9f: 91:5b:fe:a9:d1:c8:87:10:1b:af:de:a4:0c:0c:d7:fe:49:2b: 80:d8:7f:36:d2:a6:bb:22:fe:8c:59:ef:2f:df:2e:b4:4c:18: 41:a8:0b:e4:69:05:87:70:0e:4b:0f:0f:76:cc:74:da:e3:cb: 78:cf:0d:af:bb:84:b0:5e:48:79:3e:0c:85:1b:f5:7b:da:26: fb:01:d9:8e:c3:d4:2b:59:ee:2d:5e:b9:98:91:f4:9b:d9:69: 09:25:37:4a:38:94:2b:9c:f6:6b:43:50:1f:f2:7b:77:a8:12: d6:17:21:7b:31:95:4f:96:28:e1:3c:33:6d:0a:be:02:e9:07: 57:7c:2d:5c:3e:f8:e5:f8:af:53:1c:5e:59:af:32:3e:0f:c7: 99:09:e8:c3:9c:03:9e:e5:c5:c6:d9:5b:ed:fd:a9:9d:33:18: 83:93:e1:6e:f0:f8:70:54:cb:23:24:df:11:64:0a:45:bc:16: 61:46:a9:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xpR4cgtc7ZSBuoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwOTAxMDAyM1oXDTI2MDcwODAxMDAyM1owLzEtMCsGA1UEAxMk NWRkYjVkOWEtMzUyZS00ZGJhLTkwYmMtNDVkYzhmNjYwZTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5jh4VVwnP/rM6ZEnAbpTt7LICTlKC+6Kd9m1 B1gItzmm227+/XCabQubhoxG6UGY7Q1WR7sQWGElluQ15C3IQrVA0LMICO2zY2hp 9bk+bU0JkIvCGdcm+5sIKzz9Hn5sgoBXUSEGVk1EML4i6B3FZ2AU1eYSQmMs5I+w Oa42Km5NzycsUg79U1oq7qv1dUZMNyNAZYfFqJJDCDnbQK2uH3sxRCks/1qwW+tY smGf4uie6Gd/7jh8va/6EIrsKQzEx1M4eLcc8AFP3hKdwZa3NwtNPoNOddhoWI6o +XZ8AWerpiDcy952hN914NmInFqDVuuExPnlFqr78Rs+hPekhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCzt2CTcxqheJ3yDZty8BC68rerrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmE0MjUxNzctYWUyZC0z YmE4LTk2MDMtMGU2MTMzY2EwZjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEaJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALKRuyGShN235emu8kOXL8hBAPFPeUlutsTvdfYtGDgaAmxS73DrTSGy Ol7PzSiT3K2hPf5hLNbSv/iifFVGBSzzq/mPQgTFn5Fb/qnRyIcQG6/epAwM1/5J K4DYfzbSprsi/oxZ7y/fLrRMGEGoC+RpBYdwDksPD3bMdNrjy3jPDa+7hLBeSHk+ DIUb9XvaJvsB2Y7D1CtZ7i1euZiR9JvZaQklN0o4lCuc9mtDUB/ye3eoEtYXIXsx lU+WKOE8M20KvgLpB1d8LVw++OX4r1McXlmvMj4Px5kJ6MOcA57lxcbZW+39qZ0z GIOT4W7w+HBUyyMk3xFkCkW8FmFGqeM= -----END CERTIFICATE-----Generated at Fri Apr 17 22:46:33 2026 by rpki-client