$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2df24873-17e8-3e43-9caa-e65a220bd335.roa File: 2df24873-17e8-3e43-9caa-e65a220bd335.roa (raw, json) Hash identifier: PI8H0QHJ4eizlZBcyCeawwcdBcc7eQ/4idiyq2yBAo0= Subject key identifier: 35:B3:95:FB:FA:CE:03:B6:6D:7D:19:CE:8B:A1:2A:51:17:18:1D:C0 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D71A5139E6243496E938F5B40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2df24873-17e8-3e43-9caa-e65a220bd335.roa Signing time: Thu 09 Apr 2026 01:00:23 +0000 ROA not before: Thu 09 Apr 2026 01:00:23 +0000 ROA not after: Wed 08 Jul 2026 01:00:23 +0000 asID: 13335 IP address blocks: 172.70.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:a5:13:9e:62:43:49:6e:93:8f:5b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 9 01:00:23 2026 GMT Not After : Jul 8 01:00:23 2026 GMT Subject: CN=cb468e25-7d29-43ae-bda2-fc32e58a3462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:8f:b7:45:9d:71:c3:29:52:63:a1:bd:f4:21: 2f:1a:65:2a:2b:a1:25:ce:07:f7:fe:b7:63:d0:49: f5:8b:2c:0d:66:f4:00:d0:84:f2:ef:65:b2:3d:2b: e2:0c:6b:85:c3:d8:86:3e:32:41:c1:bb:82:1c:0e: 30:2e:36:e6:94:66:3c:14:49:43:fe:48:c8:9d:09: 84:78:7c:c4:4b:1d:28:d0:51:a0:af:65:ec:3e:1f: 16:56:08:61:2c:51:f1:75:d4:f7:e3:97:af:21:6c: b4:61:00:87:56:a4:a7:31:f8:16:39:df:9b:8a:fa: d1:96:0e:e7:19:5f:c2:54:62:d3:43:7c:50:59:71: 2e:3e:19:ef:05:4c:0c:03:b0:ca:d5:65:9b:20:04: 61:1f:1b:23:d7:09:5e:ea:1b:78:8e:90:a4:d1:67: 54:91:73:a0:7e:e9:2d:82:43:c9:fd:ee:67:20:0a: 08:60:ad:3b:c1:a6:62:29:22:68:bc:65:b5:0a:00: 32:ea:1a:e3:20:55:19:1e:04:98:a1:c9:66:80:78: 72:ff:77:4d:43:92:01:3d:e0:85:26:db:5d:d6:0d: 49:93:64:a1:c2:05:de:f3:35:db:6b:93:e0:35:fa: 14:c6:94:b7:61:a8:4b:02:15:17:89:24:83:60:9c: b5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:B3:95:FB:FA:CE:03:B6:6D:7D:19:CE:8B:A1:2A:51:17:18:1D:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2df24873-17e8-3e43-9caa-e65a220bd335.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:3c:f1:e1:a1:f3:b6:98:92:91:1e:de:f4:fd:22:7e:95:ac: 05:75:00:bd:8c:f0:6d:74:3c:30:ec:95:2a:f7:b7:5d:c8:d4: e9:50:ee:7f:35:02:5c:cb:d6:f5:1a:0b:0e:a6:e7:07:7d:4f: 5c:db:dd:3d:6b:c8:78:30:45:c1:aa:c1:e4:92:c7:75:5a:74: ce:80:9b:16:e8:af:56:05:44:07:7b:9a:3a:4a:f7:5f:7e:a4: 1b:cd:bf:08:92:d6:f2:b6:99:2c:a3:83:53:15:70:9b:4f:16: 69:87:91:67:01:86:ea:d3:18:f1:a7:1a:c9:ea:b4:b8:42:39: 51:42:99:bc:b3:a4:90:d6:dc:e1:c0:70:97:82:a9:09:bc:07: 20:89:e5:41:7e:19:4b:93:75:3e:39:2a:d5:dd:46:c7:c2:70: 32:20:2a:82:4d:e2:a8:92:2d:a5:b5:6d:d3:92:a3:b1:71:19: 56:11:14:31:20:62:5d:e5:dc:ca:68:0e:4b:b4:c8:3e:67:3e: 6a:2c:16:35:99:46:2b:de:41:af:96:a0:a7:c2:5c:e2:37:b2: 90:2b:4b:2e:50:f3:f0:b7:9b:c0:21:6e:20:51:ca:4f:f3:a5: 5d:0f:8d:17:f0:a8:3a:40:4f:9b:d9:86:f4:7b:5c:1d:25:03: 5d:24:86:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xpROeYkNJbpOPW0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwOTAxMDAyM1oXDTI2MDcwODAxMDAyM1owLzEtMCsGA1UEAxMk Y2I0NjhlMjUtN2QyOS00M2FlLWJkYTItZmMzMmU1OGEzNDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA74+3RZ1xwylSY6G99CEvGmUqK6Elzgf3/rdj 0En1iywNZvQA0ITy72WyPSviDGuFw9iGPjJBwbuCHA4wLjbmlGY8FElD/kjInQmE eHzESx0o0FGgr2XsPh8WVghhLFHxddT345evIWy0YQCHVqSnMfgWOd+bivrRlg7n GV/CVGLTQ3xQWXEuPhnvBUwMA7DK1WWbIARhHxsj1wle6ht4jpCk0WdUkXOgfukt gkPJ/e5nIAoIYK07waZiKSJovGW1CgAy6hrjIFUZHgSYoclmgHhy/3dNQ5IBPeCF Jttd1g1Jk2ShwgXe8zXba5PgNfoUxpS3YahLAhUXiSSDYJy1VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWzlfv6zgO2bX0ZzouhKlEXGB3AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmRmMjQ4NzMtMTdlOC0z ZTQzLTljYWEtZTY1YTIyMGJkMzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF488eGh87aYkpEe3vT9In6VrAV1AL2M8G10PDDslSr3t13I1OlQ7n81 AlzL1vUaCw6m5wd9T1zb3T1ryHgwRcGqweSSx3VadM6Amxbor1YFRAd7mjpK919+ pBvNvwiS1vK2mSyjg1MVcJtPFmmHkWcBhurTGPGnGsnqtLhCOVFCmbyzpJDW3OHA cJeCqQm8ByCJ5UF+GUuTdT45KtXdRsfCcDIgKoJN4qiSLaW1bdOSo7FxGVYRFDEg Yl3l3MpoDku0yD5nPmosFjWZRiveQa+WoKfCXOI3spArSy5Q8/C3m8AhbiBRyk/z pV0PjRfwqDpAT5vZhvR7XB0lA10khgg= -----END CERTIFICATE-----Generated at Fri Apr 17 01:34:49 2026 by rpki-client