$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2e58a6dd-f3ef-3bb5-98b1-0666eedb05a6.roa File: 2e58a6dd-f3ef-3bb5-98b1-0666eedb05a6.roa (raw, json) Hash identifier: TQTWieKm0wc2HZXM/kK93uuxBS6ab8RN6Ky7oZ+aEaA= Subject key identifier: 30:35:5C:57:8E:25:F6:4D:C1:45:88:A5:5F:E6:77:D0:68:1C:6E:2C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D71A518CF0FE1276F12780D40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2e58a6dd-f3ef-3bb5-98b1-0666eedb05a6.roa Signing time: Thu 09 Apr 2026 01:00:23 +0000 ROA not before: Thu 09 Apr 2026 01:00:23 +0000 ROA not after: Wed 08 Jul 2026 01:00:23 +0000 asID: 13335 IP address blocks: 172.71.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:a5:18:cf:0f:e1:27:6f:12:78:0d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 9 01:00:23 2026 GMT Not After : Jul 8 01:00:23 2026 GMT Subject: CN=6f3c1b1d-a63b-49d1-8a3e-16f4ef1e33fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d1:01:2f:05:61:d9:5c:0e:33:1b:33:c4:c9: f5:15:f5:de:47:98:92:c5:49:b5:c9:dc:08:83:5b: 50:85:19:05:6e:1a:77:29:5b:b2:2f:47:3d:c5:30: 9a:cf:a5:5b:cc:04:92:78:b2:c6:8b:2a:5c:7e:13: 32:33:8e:ed:b2:17:90:8f:8c:da:15:51:d6:58:fa: ef:c5:b7:28:b1:4a:39:92:6e:ab:6d:eb:d1:6a:7c: b6:30:50:7d:01:f3:58:4d:95:93:95:f1:61:82:21: 39:9f:11:eb:5b:91:05:81:4e:ef:24:54:01:a4:b5: 8d:0c:47:11:4f:71:0d:f9:68:42:f1:19:1e:4f:cf: 5c:d3:c4:1e:e6:15:0a:f0:cf:a8:02:1a:d6:78:8e: ac:f2:68:48:f3:78:3d:bc:fd:30:59:98:e4:41:0f: cb:61:f6:91:a3:b3:50:0d:21:0e:60:33:be:75:a8: f9:bd:d9:f5:b8:ba:b5:f2:25:36:21:70:1d:6e:72: f9:06:54:c2:0c:9e:be:39:89:6c:01:ef:d1:f8:a1: b8:5f:27:40:b5:9b:9f:6e:17:df:df:e1:74:0a:36: 07:00:37:0a:51:d1:6b:1b:77:86:92:87:87:2f:ff: 7d:42:49:c8:8b:8b:9e:35:3b:30:97:68:c1:16:e7: 29:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:35:5C:57:8E:25:F6:4D:C1:45:88:A5:5F:E6:77:D0:68:1C:6E:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2e58a6dd-f3ef-3bb5-98b1-0666eedb05a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:b9:95:7c:3a:ed:9b:c0:43:ec:36:75:e9:11:70:4b:72:ab: 48:c6:78:9e:1a:80:dd:c4:ff:50:60:75:ee:94:48:af:a9:03: d6:bc:e4:28:7c:ce:72:e5:a2:27:7d:f2:c6:fd:de:63:95:89: 55:b3:ab:d0:3b:0a:f0:37:61:36:56:be:3e:f1:a3:32:9a:9e: af:ab:b7:07:fe:a4:88:75:ce:fb:d8:92:ec:6e:ef:73:97:f6: 82:8d:19:d3:e8:b2:c0:e4:ac:cf:77:2c:bd:4a:20:f4:09:d0: 25:24:7d:0f:0b:ab:84:e2:4d:69:9a:1e:82:03:50:7d:b4:f3: 64:dd:13:e7:64:46:7e:51:13:98:9f:4e:d4:d4:af:f8:ac:12: 86:6b:8d:ac:7b:25:66:b5:b7:6b:b1:3c:29:de:3a:65:5f:00: cb:6d:4c:e6:75:79:3d:a4:d2:43:ae:c1:24:f8:0e:cf:05:19: 29:e1:cd:86:e6:2e:62:ab:d0:5d:12:f2:07:ef:5a:a4:18:7d: d1:1e:09:bc:bb:b2:85:d8:50:f0:ce:67:72:f4:68:e8:e2:c7: 2a:c3:bf:c2:4d:71:51:78:3f:11:0c:d3:5d:c2:00:a7:10:08: bb:62:63:70:73:35:3e:e4:f9:7c:28:ba:73:e5:82:a9:15:a4: 5b:f8:bd:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xpRjPD+EnbxJ4DUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwOTAxMDAyM1oXDTI2MDcwODAxMDAyM1owLzEtMCsGA1UEAxMk NmYzYzFiMWQtYTYzYi00OWQxLThhM2UtMTZmNGVmMWUzM2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9EBLwVh2VwOMxszxMn1FfXeR5iSxUm1ydwI g1tQhRkFbhp3KVuyL0c9xTCaz6VbzASSeLLGiypcfhMyM47tsheQj4zaFVHWWPrv xbcosUo5km6rbevRany2MFB9AfNYTZWTlfFhgiE5nxHrW5EFgU7vJFQBpLWNDEcR T3EN+WhC8RkeT89c08Qe5hUK8M+oAhrWeI6s8mhI83g9vP0wWZjkQQ/LYfaRo7NQ DSEOYDO+daj5vdn1uLq18iU2IXAdbnL5BlTCDJ6+OYlsAe/R+KG4XydAtZufbhff 3+F0CjYHADcKUdFrG3eGkoeHL/99QknIi4ueNTswl2jBFucptQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDA1XFeOJfZNwUWIpV/md9BoHG4sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmU1OGE2ZGQtZjNlZi0z YmI1LTk4YjEtMDY2NmVlZGIwNWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEf4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ25lXw67ZvAQ+w2dekRcEtyq0jGeJ4agN3E/1Bgde6USK+pA9a85Ch8 znLloid98sb93mOViVWzq9A7CvA3YTZWvj7xozKanq+rtwf+pIh1zvvYkuxu73OX 9oKNGdPossDkrM93LL1KIPQJ0CUkfQ8Lq4TiTWmaHoIDUH2082TdE+dkRn5RE5if TtTUr/isEoZrjax7JWa1t2uxPCneOmVfAMttTOZ1eT2k0kOuwST4Ds8FGSnhzYbm LmKr0F0S8gfvWqQYfdEeCby7soXYUPDOZ3L0aOjixyrDv8JNcVF4PxEM013CAKcQ CLtiY3BzNT7k+XwounPlgqkVpFv4vaE= -----END CERTIFICATE-----Generated at Fri Apr 17 20:33:56 2026 by rpki-client