$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2c5bc852-5a36-3b63-9420-58962a95c3e3.roa File: 2c5bc852-5a36-3b63-9420-58962a95c3e3.roa (raw, json) Hash identifier: Z70MDFrsSxsQOHXmtkrAqUg0TgbdvcljQTvsIDpI2Pg= Subject key identifier: 19:0F:95:C1:9B:6E:9E:FC:50:2A:8A:B1:78:DA:4B:6F:EE:FA:ED:E7 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D71A51497BB7DD0D4A51BD3C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2c5bc852-5a36-3b63-9420-58962a95c3e3.roa Signing time: Thu 09 Apr 2026 01:00:23 +0000 ROA not before: Thu 09 Apr 2026 01:00:23 +0000 ROA not after: Wed 08 Jul 2026 01:00:23 +0000 asID: 13335 IP address blocks: 172.70.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:a5:14:97:bb:7d:d0:d4:a5:1b:d3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 9 01:00:23 2026 GMT Not After : Jul 8 01:00:23 2026 GMT Subject: CN=a58d4219-0bd2-42d1-867f-ce847f01764d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5c:36:cb:bf:f8:42:60:e8:86:2d:a2:b2:ae: 30:ba:71:95:2a:bc:92:71:a7:23:79:c6:35:94:60: 70:15:84:86:80:32:a7:d6:49:09:e0:a1:1d:81:e6: 1e:67:4f:48:83:9c:7b:06:c0:5c:d5:fc:5b:08:56: 4c:7a:d3:0b:a5:ab:36:6d:63:8e:43:b6:b7:0f:6b: e4:a3:f1:7b:f2:dd:81:50:6b:08:f3:bd:65:83:dd: e5:53:a6:71:fb:7f:4c:18:cd:45:88:3f:18:80:df: 02:db:b0:72:81:04:13:35:be:bc:10:34:b4:38:8d: 02:01:75:4c:80:19:b0:58:a2:58:1f:0a:4c:e0:b5: b8:b1:0d:5b:bb:96:e9:c1:7c:03:34:ca:9e:c5:4a: b7:cd:c7:e8:a5:cd:06:f8:86:d2:a2:4c:7f:9b:d3: 8c:cb:e3:de:17:ae:dc:0c:91:a5:e2:4d:0d:2b:b7: ad:23:6c:e1:6f:09:22:05:92:3d:34:07:30:2b:cd: 25:4f:49:44:c2:11:8a:39:65:9d:5f:01:1e:90:ff: 3d:ff:16:dd:1b:6c:ca:58:5a:17:e8:ef:b8:9e:4b: e0:1f:0c:be:25:12:e1:e4:f1:05:d4:f0:95:bf:1c: 60:61:33:fa:a1:48:bb:2c:f8:9a:bc:71:a7:ea:e7: 6a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:0F:95:C1:9B:6E:9E:FC:50:2A:8A:B1:78:DA:4B:6F:EE:FA:ED:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2c5bc852-5a36-3b63-9420-58962a95c3e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:20:8f:7b:84:51:e5:cd:f8:49:99:ba:a8:d8:df:ae:82:0a: d5:f2:35:76:21:65:79:f5:6b:65:1f:da:19:df:9c:56:8e:83: 66:97:48:40:e9:a5:13:52:6d:0d:ab:c8:1c:4d:d5:83:b6:73: 9c:18:e7:87:ba:0b:fe:6a:8e:83:7a:3c:78:65:95:ba:eb:bd: fe:71:ac:ae:3a:ba:51:79:6b:c4:7e:55:6d:0e:b9:fe:35:bb: ab:fc:c3:8d:e1:72:48:80:8b:3f:35:59:10:b0:28:24:f3:4b: ff:5f:f4:d9:06:75:8f:0b:35:7d:f9:3a:41:99:cb:9f:87:73: 61:ee:29:ac:bf:ca:0c:f8:ed:27:53:2f:52:79:03:fa:98:9d: e2:66:25:95:16:5a:8b:f4:0c:f3:05:db:ee:20:58:22:21:e0: d4:93:47:e4:fc:de:08:74:e0:81:e0:33:e7:0d:fc:a7:87:5f: ef:91:b3:de:17:97:43:53:8d:e0:55:db:72:82:90:26:09:20: 6e:f6:ed:3e:29:54:ee:55:5d:d8:d3:91:65:61:57:ea:2c:10: 02:ad:ba:82:3f:97:99:84:c5:6e:32:8c:54:e1:21:3e:41:30: 51:a2:d3:98:c5:09:01:91:f1:57:62:74:e4:05:bd:bb:98:71: 84:4e:dc:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xpRSXu33Q1KUb08AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwOTAxMDAyM1oXDTI2MDcwODAxMDAyM1owLzEtMCsGA1UEAxMk YTU4ZDQyMTktMGJkMi00MmQxLTg2N2YtY2U4NDdmMDE3NjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFw2y7/4QmDohi2isq4wunGVKryScacjecY1 lGBwFYSGgDKn1kkJ4KEdgeYeZ09Ig5x7BsBc1fxbCFZMetMLpas2bWOOQ7a3D2vk o/F78t2BUGsI871lg93lU6Zx+39MGM1FiD8YgN8C27BygQQTNb68EDS0OI0CAXVM gBmwWKJYHwpM4LW4sQ1bu5bpwXwDNMqexUq3zcfopc0G+IbSokx/m9OMy+PeF67c DJGl4k0NK7etI2zhbwkiBZI9NAcwK80lT0lEwhGKOWWdXwEekP89/xbdG2zKWFoX 6O+4nkvgHwy+JRLh5PEF1PCVvxxgYTP6oUi7LPiavHGn6udqbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBkPlcGbbp78UCqKsXjaS2/u+u3nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmM1YmM4NTItNWEzNi0z YjYzLTk0MjAtNTg5NjJhOTVjM2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIgj3uEUeXN+EmZuqjY366CCtXyNXYhZXn1a2Uf2hnfnFaOg2aXSEDp pRNSbQ2ryBxN1YO2c5wY54e6C/5qjoN6PHhllbrrvf5xrK46ulF5a8R+VW0Ouf41 u6v8w43hckiAiz81WRCwKCTzS/9f9NkGdY8LNX35OkGZy5+Hc2HuKay/ygz47SdT L1J5A/qYneJmJZUWWov0DPMF2+4gWCIh4NSTR+T83gh04IHgM+cN/KeHX++Rs94X l0NTjeBV23KCkCYJIG727T4pVO5VXdjTkWVhV+osEAKtuoI/l5mExW4yjFThIT5B MFGi05jFCQGR8VdidOQFvbuYcYRO3AI= -----END CERTIFICATE-----Generated at Sat Apr 18 06:05:57 2026 by rpki-client