$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3a2b8961-f0db-366c-92b8-11d93bedd919.roa File: 3a2b8961-f0db-366c-92b8-11d93bedd919.roa (raw, json) Hash identifier: ZNVLatdl2ZHEouR0vTk+eHk4/67IDD4wF6j3c6wloAU= Subject key identifier: 68:62:D0:DA:9D:3E:01:A0:75:1C:48:47:8C:3C:97:4E:06:E0:4B:D8 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D71A520F0C374D07D6D020E80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3a2b8961-f0db-366c-92b8-11d93bedd919.roa Signing time: Thu 09 Apr 2026 01:00:23 +0000 ROA not before: Thu 09 Apr 2026 01:00:23 +0000 ROA not after: Wed 08 Jul 2026 01:00:23 +0000 asID: 13335 IP address blocks: 172.71.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:a5:20:f0:c3:74:d0:7d:6d:02:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 9 01:00:23 2026 GMT Not After : Jul 8 01:00:23 2026 GMT Subject: CN=ec09e1b7-980c-4989-8a1e-48343e5b09d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e4:3d:5a:03:ed:ee:8e:2b:6e:76:15:08:36: 03:32:3d:1f:28:0a:0d:4c:8e:fb:d2:56:85:30:2a: 87:58:4c:a5:92:4d:3b:ac:ec:fc:4d:2a:4a:92:b3: 37:ee:c5:6e:ef:79:59:91:eb:54:33:ae:d7:a3:4c: a7:e9:7f:d8:e6:9c:40:32:e7:8c:06:bc:1a:8e:e4: ee:ab:cc:cf:26:e8:04:84:e0:f0:88:e4:29:8e:ab: b6:d5:f1:ae:a4:1a:c6:c1:40:b7:84:b1:40:d5:d6: 57:d2:76:18:78:9b:b3:50:fe:9f:34:8a:ef:05:08: f8:f8:1c:47:b6:e4:c1:10:8d:55:8b:f4:4e:0e:ef: 70:c6:fd:f7:d8:13:dc:f0:c4:59:c7:71:3f:7d:f6: 12:70:1b:e4:89:a1:59:96:39:c8:52:12:e9:5c:54: 10:e3:93:6a:a2:88:78:b8:65:21:33:a4:f7:35:de: 8d:6c:ba:cc:d9:8f:db:5d:06:ee:99:54:f5:db:43: a2:48:11:d6:bf:2b:ef:bd:dd:10:63:2f:5d:fd:7a: 89:5a:f9:6a:be:fc:60:f1:ed:af:0b:d8:5c:38:52: 39:53:37:ff:f6:3a:f3:7d:e9:d4:1b:13:04:d7:f3: b8:05:39:93:ad:ad:5a:ad:a5:6b:05:ff:8c:52:a5: e9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:62:D0:DA:9D:3E:01:A0:75:1C:48:47:8C:3C:97:4E:06:E0:4B:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3a2b8961-f0db-366c-92b8-11d93bedd919.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:12:28:50:c2:a6:dd:71:ad:82:8a:4b:cf:93:4d:e9:8d:25: f9:e0:3d:c0:e9:1b:70:80:26:f8:89:b3:ec:2b:8a:70:09:ff: 8d:2c:41:db:d9:ff:9c:33:26:1c:a2:3e:42:04:48:54:77:e0: 69:7e:29:98:20:40:dc:7b:f8:32:6a:2e:0e:15:29:09:4b:8c: 1d:b5:b8:e0:c7:ad:a0:03:9d:c3:7d:5d:4b:71:b4:d2:fd:e3: bf:25:bc:66:29:d0:c9:0b:74:b2:f1:c5:58:a1:a8:1f:b2:84: 27:8a:a2:37:14:16:2d:fe:b7:65:d7:c9:12:b4:48:85:20:7c: 13:08:a1:fe:e8:d0:f0:b8:18:fb:4a:ea:0f:ab:a4:1c:6b:34: 6f:cb:51:39:44:c0:7e:0a:99:27:4b:7e:e4:39:fe:fa:97:b7: 14:d8:48:39:27:66:1e:90:ed:49:9f:70:98:d6:99:90:a2:a1: eb:ce:87:03:4a:a1:69:7c:9d:f0:9a:1c:3f:92:c2:3c:06:64: 6f:87:39:35:19:dd:0e:77:16:3d:2d:c0:19:4c:f1:d1:c1:e2: df:f9:d9:09:df:37:c5:a7:22:a5:a0:ee:9a:cc:0a:c8:d2:6e: 13:63:60:ab:f2:ef:1f:6e:11:5d:54:1c:f9:13:06:80:e5:85: 33:96:1f:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xpSDww3TQfW0CDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwOTAxMDAyM1oXDTI2MDcwODAxMDAyM1owLzEtMCsGA1UEAxMk ZWMwOWUxYjctOTgwYy00OTg5LThhMWUtNDgzNDNlNWIwOWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteQ9WgPt7o4rbnYVCDYDMj0fKAoNTI770laF MCqHWEylkk07rOz8TSpKkrM37sVu73lZketUM67Xo0yn6X/Y5pxAMueMBrwajuTu q8zPJugEhODwiOQpjqu21fGupBrGwUC3hLFA1dZX0nYYeJuzUP6fNIrvBQj4+BxH tuTBEI1Vi/RODu9wxv332BPc8MRZx3E/ffYScBvkiaFZljnIUhLpXFQQ45Nqooh4 uGUhM6T3Nd6NbLrM2Y/bXQbumVT120OiSBHWvyvvvd0QYy9d/XqJWvlqvvxg8e2v C9hcOFI5Uzf/9jrzfenUGxME1/O4BTmTra1araVrBf+MUqXpDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhi0NqdPgGgdRxIR4w8l04G4EvYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvM2EyYjg5NjEtZjBkYi0z NjZjLTkyYjgtMTFkOTNiZWRkOTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEdlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYSKFDCpt1xrYKKS8+TTemNJfngPcDpG3CAJviJs+wrinAJ/40sQdvZ /5wzJhyiPkIESFR34Gl+KZggQNx7+DJqLg4VKQlLjB21uODHraADncN9XUtxtNL9 478lvGYp0MkLdLLxxVihqB+yhCeKojcUFi3+t2XXyRK0SIUgfBMIof7o0PC4GPtK 6g+rpBxrNG/LUTlEwH4KmSdLfuQ5/vqXtxTYSDknZh6Q7UmfcJjWmZCioevOhwNK oWl8nfCaHD+SwjwGZG+HOTUZ3Q53Fj0twBlM8dHB4t/52QnfN8WnIqWg7prMCsjS bhNjYKvy7x9uEV1UHPkTBoDlhTOWHy0= -----END CERTIFICATE-----Generated at Fri Apr 17 02:03:41 2026 by rpki-client