$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/42994a69-182c-326f-b80c-adb381440cc9.roa File: 42994a69-182c-326f-b80c-adb381440cc9.roa (raw, json) Hash identifier: if7+He1ZysD+wr4HemhN1lXxCKHoVwh4H96oAfxCVhs= Subject key identifier: 62:CE:27:01:E1:C1:7E:F7:4F:95:16:E6:C9:79:FF:9B:3E:76:61:AE Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D71A513F9FA3F254FC7B23118 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/42994a69-182c-326f-b80c-adb381440cc9.roa Signing time: Thu 09 Apr 2026 01:00:23 +0000 ROA not before: Thu 09 Apr 2026 01:00:23 +0000 ROA not after: Wed 08 Jul 2026 01:00:23 +0000 asID: 13335 IP address blocks: 172.70.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:a5:13:f9:fa:3f:25:4f:c7:b2:31:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 9 01:00:23 2026 GMT Not After : Jul 8 01:00:23 2026 GMT Subject: CN=c9914b0d-21a6-43dc-be81-393008bd9d35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6b:c7:b5:98:b2:53:da:6e:e2:ea:41:26:ed: 8f:f0:11:80:a1:e1:36:05:f0:43:de:41:f1:b9:e0: b5:ac:a4:4f:71:fb:d9:0f:a6:e1:cb:1e:9a:48:f2: fc:5b:61:c5:3a:04:9b:90:f9:fc:3a:7b:79:d7:a9: fd:25:78:12:36:49:47:a3:17:f1:82:ad:a7:90:0c: 10:c9:57:99:18:86:09:00:e8:ed:31:1f:cb:42:af: 98:26:6a:a0:b3:f6:84:f4:ba:0a:47:d7:ac:24:a7: 4d:38:4e:d2:bd:00:20:9a:de:21:3c:62:50:3c:82: 30:a6:ee:ef:6b:35:9b:56:26:0f:8c:48:37:a0:1e: 86:0f:21:ff:49:97:91:a5:cd:44:e8:cc:39:4c:0b: ce:46:e9:1b:09:9a:3a:ed:2a:55:cf:d8:38:e8:0b: 3e:f3:3f:23:1e:8b:71:9d:8c:d9:68:4c:62:ec:b8: d8:df:22:bf:e1:3e:3a:3a:ef:ef:b8:47:6f:d9:19: 62:64:f6:17:bc:e2:a9:75:5b:fa:28:03:5b:35:27: 7b:e2:aa:f8:cc:a5:69:7c:2d:5f:7a:d4:15:ca:5b: bd:85:29:f6:28:b0:31:d0:65:90:b1:08:2c:18:b3: 63:59:49:fb:b4:1e:32:e6:3a:74:dd:8a:bc:5f:90: 3e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:CE:27:01:E1:C1:7E:F7:4F:95:16:E6:C9:79:FF:9B:3E:76:61:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/42994a69-182c-326f-b80c-adb381440cc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:85:39:65:8d:81:57:7b:00:3f:e3:23:ad:cf:b4:c0:49:f2: 9a:9d:bb:ff:db:6c:9d:c4:5c:3e:8d:0b:65:f0:bb:5d:65:e4: bf:6a:4e:08:8f:62:35:40:68:e5:37:40:4a:8d:21:15:d3:8d: f1:ea:e0:6b:ed:fe:b9:de:54:82:d8:02:2d:95:68:5e:fd:41: 1b:cc:2b:ba:8b:3f:ee:3c:2d:43:73:45:d4:93:a7:41:59:8d: a9:a0:c4:59:eb:68:ac:07:1d:93:b9:09:21:29:48:96:f1:26: 24:5e:a8:a2:4e:65:bb:d4:94:1a:2c:ec:90:90:b7:52:8b:03: 27:4b:4c:34:12:d5:31:f2:ca:14:e8:5c:81:39:eb:fb:a8:6c: a3:57:4d:b9:a5:3c:63:f9:bb:26:ab:bb:ea:05:61:21:78:c2: bc:04:77:99:63:8a:0d:fd:c2:90:9c:1c:e9:33:db:0b:ce:a8: fe:c9:3b:f1:5f:2d:82:56:53:34:f2:96:bc:92:7b:65:b0:c5: cd:df:b7:a4:6d:85:f5:2c:7d:84:5f:55:b9:88:ea:7e:70:97: 48:eb:49:79:ae:88:80:a4:6a:09:73:01:20:88:f4:74:50:ba: d4:9d:cb:6f:15:96:63:79:fa:a6:d7:fe:b2:68:a9:20:cc:a9: 08:43:a2:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xpRP5+j8lT8eyMRgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwOTAxMDAyM1oXDTI2MDcwODAxMDAyM1owLzEtMCsGA1UEAxMk Yzk5MTRiMGQtMjFhNi00M2RjLWJlODEtMzkzMDA4YmQ5ZDM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2vHtZiyU9pu4upBJu2P8BGAoeE2BfBD3kHx ueC1rKRPcfvZD6bhyx6aSPL8W2HFOgSbkPn8Ont516n9JXgSNklHoxfxgq2nkAwQ yVeZGIYJAOjtMR/LQq+YJmqgs/aE9LoKR9esJKdNOE7SvQAgmt4hPGJQPIIwpu7v azWbViYPjEg3oB6GDyH/SZeRpc1E6Mw5TAvORukbCZo67SpVz9g46As+8z8jHotx nYzZaExi7LjY3yK/4T46Ou/vuEdv2RliZPYXvOKpdVv6KANbNSd74qr4zKVpfC1f etQVylu9hSn2KLAx0GWQsQgsGLNjWUn7tB4y5jp03Yq8X5A+wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGLOJwHhwX73T5UW5sl5/5s+dmGuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDI5OTRhNjktMTgyYy0z MjZmLWI4MGMtYWRiMzgxNDQwY2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGiFOWWNgVd7AD/jI63PtMBJ8pqdu//bbJ3EXD6NC2Xwu11l5L9qTgiP YjVAaOU3QEqNIRXTjfHq4Gvt/rneVILYAi2VaF79QRvMK7qLP+48LUNzRdSTp0FZ jamgxFnraKwHHZO5CSEpSJbxJiReqKJOZbvUlBos7JCQt1KLAydLTDQS1THyyhTo XIE56/uobKNXTbmlPGP5uyaru+oFYSF4wrwEd5ljig39wpCcHOkz2wvOqP7JO/Ff LYJWUzTylrySe2Wwxc3ft6RthfUsfYRfVbmI6n5wl0jrSXmuiICkaglzASCI9HRQ utSdy28VlmN5+qbX/rJoqSDMqQhDogs= -----END CERTIFICATE-----Generated at Fri Apr 17 19:46:55 2026 by rpki-client