$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4702aa40-4077-3e55-a44b-27f1cb8e885d.roa File: 4702aa40-4077-3e55-a44b-27f1cb8e885d.roa (raw, json) Hash identifier: 8l+VJsqM3k4F6l6Gri+6oJar1s8ReNlOe4HD48Cmaqw= Subject key identifier: A1:FD:9F:49:17:42:35:BA:0E:AF:B5:C6:9E:CF:2E:B4:7E:32:62:35 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D7A053D59B5889AB80E8AA7C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4702aa40-4077-3e55-a44b-27f1cb8e885d.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 132892 IP address blocks: 172.70.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:3d:59:b5:88:9a:b8:0e:8a:a7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=0fa6e9e3-201f-453f-9830-2378d7f41204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:02:98:56:d3:81:1d:9a:e1:77:f0:e7:8a:b5: df:57:28:7e:34:87:a5:91:6b:73:64:d1:05:b9:8a: 08:a4:4d:c1:35:17:13:47:f7:47:d5:37:b6:f9:f2: 89:fb:f5:66:ff:fb:a9:10:e7:8e:94:d1:79:a0:41: 6b:fb:75:81:3b:52:68:a5:1e:bb:9e:38:cd:82:f1: be:81:3d:e5:e6:91:96:9a:0e:69:2e:9e:29:71:f4: a0:df:ef:bc:76:6d:4b:61:82:72:81:fc:23:58:d8: 53:dc:ad:0d:8e:88:e3:38:5e:bb:23:56:6e:be:c0: da:d2:6d:0d:75:e9:35:83:59:6c:3e:30:18:3d:14: ca:e0:c8:ad:1c:c0:e0:b5:15:b4:15:3c:96:18:8f: aa:05:21:8f:23:be:f0:5e:81:e7:6c:06:48:b3:55: a7:19:68:05:d2:48:0f:69:14:ad:59:ec:8c:6a:dc: 52:b7:7d:7e:99:35:23:7e:1a:bb:e4:82:9b:17:23: 04:8e:01:10:d5:69:33:61:4e:fe:9f:9b:6d:a4:a1: c6:81:10:58:0c:9e:7f:1b:73:d4:67:82:bd:17:f6: ea:9c:11:20:9e:3d:7f:61:fb:54:0e:8e:61:ca:ba: 7b:13:8f:75:3b:1a:f3:a3:d0:92:58:3f:62:8b:3b: 9d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:FD:9F:49:17:42:35:BA:0E:AF:B5:C6:9E:CF:2E:B4:7E:32:62:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4702aa40-4077-3e55-a44b-27f1cb8e885d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:68:a6:46:0b:e8:58:c3:b1:73:7d:80:47:2a:fb:90:39:29: 6a:da:36:8c:36:87:6b:3f:e5:6b:c4:6d:1a:04:14:0c:1f:91: 83:dc:8f:be:60:d0:df:e5:c8:48:b3:26:ac:1c:53:d4:6e:fa: 5c:c4:0b:b8:34:43:d6:a9:87:b1:21:8a:f4:96:b6:49:c6:fa: ed:18:c9:cf:2e:a4:fe:92:31:b1:2a:35:09:e3:5a:e8:ee:b2: f5:68:7d:da:fe:ef:40:02:4b:3d:9b:d3:9a:f9:f3:c9:1a:fb: 48:d6:5e:c0:81:af:28:58:5f:c9:6d:d0:de:5d:a5:49:3d:6e: ca:ce:bc:10:a8:03:96:6e:77:d8:cd:1a:7a:4b:b4:f3:06:c6: de:a1:12:99:43:8d:93:1b:98:6f:96:64:a5:50:ae:eb:fa:97: 56:07:5d:c9:80:3e:a8:04:c7:25:38:d5:6f:e1:cc:1f:71:3c: 29:34:ca:05:21:b0:19:3f:3f:30:67:1b:4b:51:8e:4d:09:8f: e0:fd:59:7e:14:01:dc:25:5e:e2:9d:86:6b:bc:74:e8:96:99: 19:37:c3:e5:00:57:33:91:fb:4a:e2:6d:c5:3e:84:9d:80:9e: 24:7e:a9:8d:09:98:17:c2:88:79:ca:97:94:ac:fe:7f:fa:1e: b1:e9:ee:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BT1ZtYiauA6Kp8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk MGZhNmU5ZTMtMjAxZi00NTNmLTk4MzAtMjM3OGQ3ZjQxMjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwKYVtOBHZrhd/DnirXfVyh+NIelkWtzZNEF uYoIpE3BNRcTR/dH1Te2+fKJ+/Vm//upEOeOlNF5oEFr+3WBO1JopR67njjNgvG+ gT3l5pGWmg5pLp4pcfSg3++8dm1LYYJygfwjWNhT3K0NjojjOF67I1ZuvsDa0m0N dek1g1lsPjAYPRTK4MitHMDgtRW0FTyWGI+qBSGPI77wXoHnbAZIs1WnGWgF0kgP aRStWeyMatxSt31+mTUjfhq75IKbFyMEjgEQ1WkzYU7+n5ttpKHGgRBYDJ5/G3PU Z4K9F/bqnBEgnj1/YftUDo5hyrp7E491Oxrzo9CSWD9iizudUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKH9n0kXQjW6Dq+1xp7PLrR+MmI1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDcwMmFhNDAtNDA3Ny0z ZTU1LWE0NGItMjdmMWNiOGU4ODVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrEZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZopkYL6FjDsXN9gEcq+5A5KWraNow2h2s/5WvEbRoEFAwfkYPcj75g 0N/lyEizJqwcU9Ru+lzEC7g0Q9aph7EhivSWtknG+u0Yyc8upP6SMbEqNQnjWuju svVofdr+70ACSz2b05r588ka+0jWXsCBryhYX8lt0N5dpUk9bsrOvBCoA5Zud9jN GnpLtPMGxt6hEplDjZMbmG+WZKVQruv6l1YHXcmAPqgExyU41W/hzB9xPCk0ygUh sBk/PzBnG0tRjk0Jj+D9WX4UAdwlXuKdhmu8dOiWmRk3w+UAVzOR+0ribcU+hJ2A niR+qY0JmBfCiHnKl5Ss/n/6HrHp7pc= -----END CERTIFICATE-----Generated at Fri Apr 17 17:11:16 2026 by rpki-client