$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/49b2bb17-952b-3ff6-92fb-d9195fa2b66e.roa File: 49b2bb17-952b-3ff6-92fb-d9195fa2b66e.roa (raw, json) Hash identifier: JgPwtlknztpjLVpWXB+yUTGRdNq1hyTflt9/IlJFn1c= Subject key identifier: 15:6D:0F:A2:4E:D6:CA:DA:F1:83:8D:57:2C:F7:97:F3:74:D4:A2:6C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D71A51F41C0AEF69728C41E00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/49b2bb17-952b-3ff6-92fb-d9195fa2b66e.roa Signing time: Thu 09 Apr 2026 01:00:23 +0000 ROA not before: Thu 09 Apr 2026 01:00:23 +0000 ROA not after: Wed 08 Jul 2026 01:00:23 +0000 asID: 13335 IP address blocks: 172.70.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:a5:1f:41:c0:ae:f6:97:28:c4:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 9 01:00:23 2026 GMT Not After : Jul 8 01:00:23 2026 GMT Subject: CN=9de7cf28-fa93-4e5b-b74a-2e80aa07c0a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ee:0e:5f:0e:0c:46:11:c6:16:0a:75:92:d8: 1d:c6:2a:b4:32:79:53:f9:da:2b:6a:c9:38:cd:d6: 3f:38:30:08:70:4d:36:c4:60:8c:a2:ef:ed:e1:4e: 6f:ba:83:ae:7a:11:00:fe:cf:fc:a4:c5:2d:83:35: 76:1f:5b:7a:58:d7:05:5b:df:c7:67:0e:51:c6:5c: b8:e6:3e:b6:eb:71:98:e1:ad:d6:93:f2:24:ef:c1: 1c:d5:67:d7:37:b2:77:b6:ad:d4:71:27:e8:0c:ea: f4:42:ea:8a:fe:ea:56:16:f6:85:37:23:50:f5:6f: eb:54:9b:78:8b:29:c9:d3:66:6d:6b:bd:82:3a:ce: 75:9e:08:f7:0e:0b:19:66:9b:a3:60:13:86:1e:a4: 89:2a:bb:c9:ec:dc:4b:ab:5c:0e:08:5e:2a:50:26: ca:59:02:e5:3f:4b:28:f9:31:d7:c6:e4:c1:69:5e: e8:a8:f8:ce:3a:d9:21:06:8d:81:79:fe:4f:a2:9c: 78:9b:dd:55:87:88:99:98:b6:bb:4e:db:ff:7a:fa: 0e:36:11:8e:db:b7:a8:e3:eb:19:73:6d:10:ef:a2: e8:13:9b:88:7b:5e:fb:be:d5:f4:be:28:75:d7:75: 77:30:2c:84:e5:f4:38:fd:2f:78:65:d2:01:0d:b7: 40:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:6D:0F:A2:4E:D6:CA:DA:F1:83:8D:57:2C:F7:97:F3:74:D4:A2:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/49b2bb17-952b-3ff6-92fb-d9195fa2b66e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:ac:31:ec:0d:a3:8f:32:24:e0:b1:24:78:3b:c7:a6:f7:58: 05:25:cc:bd:b4:aa:1b:8b:2e:02:74:31:22:4e:b1:11:37:32: 98:e4:3c:5b:c1:b2:c7:b5:e0:0a:58:06:8c:6e:db:77:b7:a9: c2:f1:ff:5d:3f:d9:dd:29:a0:05:60:30:47:e2:b7:c1:ad:84: 78:f7:39:cf:01:0a:b1:08:82:27:9e:91:d7:a4:f2:a3:b7:f6: bc:68:8c:d0:c7:bd:02:69:cf:d7:e3:7b:14:b7:54:76:9e:de: 0d:11:97:59:28:c4:78:45:1e:da:a7:2f:6b:f1:30:bb:a5:12: a4:aa:2f:2c:d0:61:c4:ce:f9:76:19:b5:cc:6a:d0:15:15:4c: bf:be:e6:4d:b4:80:28:6f:96:59:86:41:23:67:9b:fc:09:08: 2e:20:37:1b:fc:ae:9c:14:56:32:89:0b:ba:63:60:01:9a:27: ce:cf:bf:cb:fd:fb:58:e1:20:14:f3:91:54:69:00:fa:f5:4f: 14:00:9d:be:d1:2e:f5:83:c2:d1:87:d9:e8:7f:47:04:2d:fa: fd:25:97:67:fe:95:1b:fb:bd:ca:89:82:61:5f:5a:dd:5f:7f: ad:37:98:d1:a5:e0:53:30:d5:8f:d7:d9:8e:2a:f0:6d:89:32: fe:21:ea:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xpR9BwK72lyjEHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwOTAxMDAyM1oXDTI2MDcwODAxMDAyM1owLzEtMCsGA1UEAxMk OWRlN2NmMjgtZmE5My00ZTViLWI3NGEtMmU4MGFhMDdjMGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAju4OXw4MRhHGFgp1ktgdxiq0MnlT+dorask4 zdY/ODAIcE02xGCMou/t4U5vuoOuehEA/s/8pMUtgzV2H1t6WNcFW9/HZw5Rxly4 5j6263GY4a3Wk/Ik78Ec1WfXN7J3tq3UcSfoDOr0QuqK/upWFvaFNyNQ9W/rVJt4 iynJ02Zta72COs51ngj3DgsZZpujYBOGHqSJKrvJ7NxLq1wOCF4qUCbKWQLlP0so +THXxuTBaV7oqPjOOtkhBo2Bef5Popx4m91Vh4iZmLa7Ttv/evoONhGO27eo4+sZ c20Q76LoE5uIe177vtX0vih113V3MCyE5fQ4/S94ZdIBDbdAtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBVtD6JO1sra8YONVyz3l/N01KJsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDliMmJiMTctOTUyYi0z ZmY2LTkyZmItZDkxOTVmYTJiNjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSsMewNo48yJOCxJHg7x6b3WAUlzL20qhuLLgJ0MSJOsRE3MpjkPFvB sse14ApYBoxu23e3qcLx/10/2d0poAVgMEfit8GthHj3Oc8BCrEIgieekdek8qO3 9rxojNDHvQJpz9fjexS3VHae3g0Rl1koxHhFHtqnL2vxMLulEqSqLyzQYcTO+XYZ tcxq0BUVTL++5k20gChvllmGQSNnm/wJCC4gNxv8rpwUVjKJC7pjYAGaJ87Pv8v9 +1jhIBTzkVRpAPr1TxQAnb7RLvWDwtGH2eh/RwQt+v0ll2f+lRv7vcqJgmFfWt1f f603mNGl4FMw1Y/X2Y4q8G2JMv4h6iw= -----END CERTIFICATE-----Generated at Fri Apr 17 13:25:03 2026 by rpki-client