$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3cfb4327-c1af-38ef-a7bd-3ab254363cba.roa File: 3cfb4327-c1af-38ef-a7bd-3ab254363cba.roa (raw, json) Hash identifier: HvNmBL1AQtbQZRBPdJyJpMhW32DtjfDLaqIRljfzfOM= Subject key identifier: 7F:F3:D5:E4:2F:A7:A3:71:66:FC:00:FD:98:64:93:93:1A:CA:D5:0E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D71A5171DF6DCE10AB5B33A00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3cfb4327-c1af-38ef-a7bd-3ab254363cba.roa Signing time: Thu 09 Apr 2026 01:00:23 +0000 ROA not before: Thu 09 Apr 2026 01:00:23 +0000 ROA not after: Wed 08 Jul 2026 01:00:23 +0000 asID: 13335 IP address blocks: 172.71.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:a5:17:1d:f6:dc:e1:0a:b5:b3:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 9 01:00:23 2026 GMT Not After : Jul 8 01:00:23 2026 GMT Subject: CN=d41beda4-ffd1-4ce1-8ca4-3578db07c06b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6c:d9:11:be:4c:bc:4b:2c:3e:40:2f:a1:20: 21:6e:4d:78:64:84:84:c6:d6:88:95:ee:fc:f6:66: bb:3c:9f:b2:e8:bf:f2:2f:09:4d:5c:e0:58:b3:02: 07:5b:f9:20:55:01:a1:41:a0:fe:dc:c7:fa:3b:85: 97:32:2d:9d:20:f9:77:3a:02:3d:d0:7f:92:fd:fc: 39:ab:71:c4:d4:05:b4:6d:6d:9d:03:4d:a1:89:f1: 5f:85:0c:4c:79:bb:ea:67:7e:63:35:ec:1e:03:e2: ea:b7:9a:b2:e2:f4:a7:8a:5b:39:89:d0:18:77:e9: 7a:ee:c0:a5:87:92:46:6e:0d:a2:e4:b5:e4:60:74: d7:e3:2c:1a:63:d8:f6:1e:84:55:34:b0:1b:79:47: cf:fb:c7:79:9a:cc:75:23:58:8d:2d:3e:33:08:a7: ba:a3:db:2c:fc:d9:69:70:c4:10:36:ef:11:6c:01: f7:91:6d:4d:32:af:3b:02:23:13:cd:c6:66:40:ae: 3a:6c:0c:bc:50:45:cd:8b:65:16:0a:d3:2c:73:68: 94:23:23:69:63:78:79:98:7e:f0:b7:0e:d5:00:44: 14:d2:f3:eb:c3:ac:34:70:4c:ed:3b:49:ef:69:5e: 1e:9e:fe:5c:d8:b4:2e:15:1f:97:80:00:14:89:f4: 2a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:F3:D5:E4:2F:A7:A3:71:66:FC:00:FD:98:64:93:93:1A:CA:D5:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3cfb4327-c1af-38ef-a7bd-3ab254363cba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:21:2c:4c:cd:59:e2:5e:46:35:57:8d:f7:56:d2:e6:cd:32: e2:ae:d2:4d:6d:36:67:5b:6a:36:a9:a9:02:34:c6:cd:d3:4b: 17:08:af:d4:36:96:3b:35:df:29:fe:e6:07:37:0c:0a:02:a9: 20:7f:36:a2:91:ca:8c:9f:7f:7d:22:6c:0c:41:f8:17:f0:bb: ad:bd:12:b5:80:62:f5:12:91:6c:e0:26:e3:55:b8:df:46:ce: 98:23:72:eb:c8:68:94:2d:56:ad:7b:25:db:f7:b7:69:cf:77: 2a:80:43:d6:4c:75:e0:93:63:0e:15:f5:37:34:6f:85:56:17: 82:a6:0d:97:39:f0:73:36:3d:f6:1b:a8:df:76:a9:f1:b8:c7: 1b:44:01:7a:92:e9:4a:34:87:bc:69:03:a0:b1:68:23:77:d3: ea:ce:a2:cd:14:f3:e3:c2:e0:62:5e:12:12:28:09:00:ab:ec: 3a:e7:db:29:bc:6c:e3:c9:b2:0c:e2:e0:67:bb:8b:39:30:03: dc:ae:b5:1e:c8:c2:da:81:45:11:e9:89:63:8f:84:7c:90:57: c1:08:a5:e4:5c:c6:27:81:1a:39:9c:27:7f:c1:c4:4c:b6:36: d6:ef:35:43:95:7b:c2:4f:d8:c9:6d:de:7d:66:eb:41:98:a3: 3d:d2:cc:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xpRcd9tzhCrWzOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwOTAxMDAyM1oXDTI2MDcwODAxMDAyM1owLzEtMCsGA1UEAxMk ZDQxYmVkYTQtZmZkMS00Y2UxLThjYTQtMzU3OGRiMDdjMDZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2zZEb5MvEssPkAvoSAhbk14ZISExtaIle78 9ma7PJ+y6L/yLwlNXOBYswIHW/kgVQGhQaD+3Mf6O4WXMi2dIPl3OgI90H+S/fw5 q3HE1AW0bW2dA02hifFfhQxMebvqZ35jNeweA+Lqt5qy4vSnils5idAYd+l67sCl h5JGbg2i5LXkYHTX4ywaY9j2HoRVNLAbeUfP+8d5msx1I1iNLT4zCKe6o9ss/Nlp cMQQNu8RbAH3kW1NMq87AiMTzcZmQK46bAy8UEXNi2UWCtMsc2iUIyNpY3h5mH7w tw7VAEQU0vPrw6w0cEztO0nvaV4env5c2LQuFR+XgAAUifQq2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH/z1eQvp6NxZvwA/Zhkk5MaytUOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvM2NmYjQzMjctYzFhZi0z OGVmLWE3YmQtM2FiMjU0MzYzY2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEecMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK8hLEzNWeJeRjVXjfdW0ubNMuKu0k1tNmdbajapqQI0xs3TSxcIr9Q2 ljs13yn+5gc3DAoCqSB/NqKRyoyff30ibAxB+Bfwu629ErWAYvUSkWzgJuNVuN9G zpgjcuvIaJQtVq17Jdv3t2nPdyqAQ9ZMdeCTYw4V9Tc0b4VWF4KmDZc58HM2PfYb qN92qfG4xxtEAXqS6Uo0h7xpA6CxaCN30+rOos0U8+PC4GJeEhIoCQCr7Drn2ym8 bOPJsgzi4Ge7izkwA9yutR7IwtqBRRHpiWOPhHyQV8EIpeRcxieBGjmcJ3/BxEy2 NtbvNUOVe8JP2Mlt3n1m60GYoz3SzPE= -----END CERTIFICATE-----Generated at Fri Apr 17 16:51:49 2026 by rpki-client