$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/372505a5-ec57-3f8d-8500-b6bed4ddccf4.roa File: 372505a5-ec57-3f8d-8500-b6bed4ddccf4.roa (raw, json) Hash identifier: d8G/SG5hCUSbpWnXpJisSSpZyZjEF+ahdwb5VjMgaME= Subject key identifier: 9E:63:12:4F:CD:32:DE:F9:3D:72:32:E2:2F:B0:36:62:93:74:F7:EF Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D7A054CE88EABDFFCC01E0780 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/372505a5-ec57-3f8d-8500-b6bed4ddccf4.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 202623 IP address blocks: 172.71.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:4c:e8:8e:ab:df:fc:c0:1e:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=5a1a7b1b-adb6-4c0f-a860-2f246e70e53d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:36:d2:57:f5:68:ba:3a:f8:c1:f7:dc:a3:ec: a3:e5:41:a8:00:98:b2:39:d2:8d:63:bd:a4:7c:68: 0f:54:95:9e:4e:80:83:a4:1c:1b:d0:c1:98:7f:1b: ff:f4:ca:0d:4c:57:21:53:7c:e0:a4:eb:1e:87:f8: 0a:ea:49:96:f6:55:ae:51:a7:8c:b6:d8:83:0f:54: 4d:36:2f:a1:59:f7:1d:50:fa:3d:cb:e5:b9:5a:13: 4a:11:b0:1e:b3:20:01:8f:40:5e:0b:64:32:f6:de: c1:fc:01:0b:e9:ad:93:c9:ff:c0:9b:09:42:60:6b: a1:0c:ad:94:21:c5:0a:7d:2d:54:37:87:28:74:df: 07:12:b4:86:68:11:7d:21:c6:a0:d5:0f:5d:7a:ed: 05:90:a4:dc:b8:71:59:52:9c:bf:4a:1e:69:ba:79: 1e:60:ac:36:bd:f1:74:26:69:27:a3:94:9e:8d:42: bf:6e:0b:1a:61:ee:4c:cd:b3:56:3a:3e:8a:1c:67: 13:0c:02:1e:8d:84:1e:b9:7c:a4:d2:f2:b0:79:94: 78:53:92:1f:1c:e5:70:fa:b1:ca:18:09:7a:00:85: 5e:9a:3c:f6:6a:77:dd:13:56:ae:8c:89:c4:92:05: 18:ba:4c:13:86:82:41:17:42:af:93:1c:61:22:ca: 8c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:63:12:4F:CD:32:DE:F9:3D:72:32:E2:2F:B0:36:62:93:74:F7:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/372505a5-ec57-3f8d-8500-b6bed4ddccf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:4c:95:70:c7:53:f1:13:a0:da:5c:a7:cf:b7:e3:0a:d8:25: 8f:54:21:56:09:0f:5d:d6:95:7a:73:fe:03:d9:3f:40:e8:26: 5f:27:5e:b8:bf:08:02:c9:12:76:5a:6a:65:54:0b:26:37:7b: bd:16:83:bf:8d:12:ec:05:f7:86:95:08:c2:a4:19:dd:11:d1: e9:e3:8c:ca:06:01:72:87:23:a8:4c:42:a3:6a:d5:88:c3:ad: 72:f9:23:9a:88:65:a4:69:5a:b5:10:03:33:5a:ea:82:75:e8: 96:0e:28:c5:f3:45:13:c6:9e:65:33:8e:2d:88:b8:98:36:78: 39:d0:93:9f:21:28:dd:6a:dc:a5:16:b0:27:8c:8d:32:3d:87: eb:ba:3b:cc:06:01:14:f1:f0:fb:87:6a:2b:d2:40:fd:d2:a3: e2:2c:97:9c:1d:68:5a:68:76:7b:27:9d:47:85:cd:a1:72:07: 8c:03:9e:82:9a:3f:58:a1:86:b5:70:13:a8:ba:1f:c0:84:4e: 2a:4a:14:07:98:1b:8f:67:69:c8:e5:af:65:06:c3:e1:f6:c5: 2e:c3:b9:16:f6:f6:b9:0b:68:ad:af:ae:1a:0c:b4:fa:ca:85: f3:39:e2:1e:d6:fb:57:c6:50:2f:e5:d5:e3:3f:39:b5:52:dd: d1:c6:a5:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BUzojqvf/MAeB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk NWExYTdiMWItYWRiNi00YzBmLWE4NjAtMmYyNDZlNzBlNTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDbSV/Voujr4wffco+yj5UGoAJiyOdKNY72k fGgPVJWeToCDpBwb0MGYfxv/9MoNTFchU3zgpOseh/gK6kmW9lWuUaeMttiDD1RN Ni+hWfcdUPo9y+W5WhNKEbAesyABj0BeC2Qy9t7B/AEL6a2Tyf/AmwlCYGuhDK2U IcUKfS1UN4codN8HErSGaBF9Icag1Q9deu0FkKTcuHFZUpy/Sh5punkeYKw2vfF0 Jmkno5SejUK/bgsaYe5MzbNWOj6KHGcTDAIejYQeuXyk0vKweZR4U5IfHOVw+rHK GAl6AIVemjz2anfdE1aujInEkgUYukwThoJBF0KvkxxhIsqMzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5jEk/NMt75PXIy4i+wNmKTdPfvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzcyNTA1YTUtZWM1Ny0z ZjhkLTg1MDAtYjZiZWQ0ZGRjY2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrEcgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9MlXDHU/EToNpcp8+34wrYJY9UIVYJD13WlXpz/gPZP0DoJl8nXri/ CALJEnZaamVUCyY3e70Wg7+NEuwF94aVCMKkGd0R0enjjMoGAXKHI6hMQqNq1YjD rXL5I5qIZaRpWrUQAzNa6oJ16JYOKMXzRRPGnmUzji2IuJg2eDnQk58hKN1q3KUW sCeMjTI9h+u6O8wGARTx8PuHaivSQP3So+Isl5wdaFpodnsnnUeFzaFyB4wDnoKa P1ihhrVwE6i6H8CETipKFAeYG49nacjlr2UGw+H2xS7DuRb29rkLaK2vrhoMtPrK hfM54h7W+1fGUC/l1eM/ObVS3dHGpes= -----END CERTIFICATE-----Generated at Fri Apr 17 19:28:34 2026 by rpki-client