$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7c26d0f5-4fc9-3ead-a78e-7d70875da1a0.roa File: 7c26d0f5-4fc9-3ead-a78e-7d70875da1a0.roa (raw, json) Hash identifier: 0w+E074W0gyjHPL3626eHuWb+l2BgHNU4llDRubPTdI= Subject key identifier: B8:31:C2:FE:87:FE:C3:7A:16:D1:49:C5:99:14:E1:17:78:56:15:A0 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D71A515DE132CBA31AC2F3A88 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7c26d0f5-4fc9-3ead-a78e-7d70875da1a0.roa Signing time: Thu 09 Apr 2026 01:00:23 +0000 ROA not before: Thu 09 Apr 2026 01:00:23 +0000 ROA not after: Wed 08 Jul 2026 01:00:23 +0000 asID: 13335 IP address blocks: 172.71.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:a5:15:de:13:2c:ba:31:ac:2f:3a:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 9 01:00:23 2026 GMT Not After : Jul 8 01:00:23 2026 GMT Subject: CN=3848e042-5762-4a0f-8c60-6f7096e0d917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1c:83:bb:1c:8a:9e:b3:ad:36:1e:86:02:70: 92:b9:0e:0f:9c:4e:61:c9:d6:d1:1e:14:96:af:ea: b2:2c:fd:70:40:a5:9c:93:05:a2:bb:47:38:14:8f: 74:cd:07:e8:43:66:24:67:31:42:55:74:87:b2:d1: be:27:3d:e8:07:e0:a2:98:1a:59:eb:00:d9:5b:e7: 7e:07:35:e9:e7:1a:d7:4e:3b:68:bf:0b:7e:61:3e: e6:7c:ef:24:d5:4a:6a:99:0f:29:09:44:a7:0a:78: 0b:b1:f2:b1:e4:8f:ca:fe:d2:64:89:d6:f9:d8:b6: a4:49:16:7c:20:b1:6b:ce:9a:ff:24:c6:94:ec:df: bf:a8:62:9c:83:46:a4:de:b9:bf:03:22:23:92:bc: de:b8:3c:bc:1d:07:30:c4:df:d3:43:d4:be:cb:18: be:75:56:e3:5b:38:39:42:84:b5:6d:d2:c1:46:10: 5a:d6:31:9c:28:6a:a4:ac:1c:0a:a2:c9:e9:c8:f8: fe:92:4d:2d:18:87:ab:7e:77:3a:42:0c:b7:ac:d9: a9:5a:40:92:ed:dc:21:09:b7:dd:84:17:45:36:cf: d2:55:3a:23:81:87:5b:00:a6:f0:d0:4e:a1:79:83: fd:81:84:8c:1e:50:c5:b8:01:b3:7e:06:bb:d5:33: 95:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:31:C2:FE:87:FE:C3:7A:16:D1:49:C5:99:14:E1:17:78:56:15:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7c26d0f5-4fc9-3ead-a78e-7d70875da1a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:5d:11:c9:eb:d8:9b:d6:07:19:b6:db:d0:50:d7:d1:1c:3d: 49:d1:04:15:c9:8e:9f:8d:e4:f3:ef:b4:23:34:97:14:19:b3: 88:a9:7a:33:43:c8:ac:9d:ec:b8:c6:22:d9:4d:7a:7c:e7:43: ff:f8:b6:29:9b:8b:db:7e:30:e1:71:2e:8a:8c:71:15:1e:cb: c8:82:c1:5d:c0:cf:f6:31:68:20:cd:fe:91:ba:db:d0:df:5b: a7:e9:b2:79:b9:ac:a9:d4:c0:28:cb:49:23:52:f6:4c:23:ba: 62:d4:94:38:4b:76:fc:f4:7f:46:b8:2f:e8:f9:28:9f:b1:9c: 89:d8:a8:6c:4a:88:64:d7:2e:bd:67:a8:a0:ab:75:94:5c:ad: 63:f8:cd:6d:5b:85:e9:0b:60:3d:54:f3:f7:29:c3:0c:7b:98: 1d:e5:16:a5:68:82:8b:68:a2:52:b1:78:f0:c8:74:ed:29:65: c9:5b:3e:b8:79:42:eb:cd:f8:cf:64:be:65:31:07:03:c1:3a: bd:08:14:da:00:99:a7:cd:f4:4c:f1:1b:69:1c:bb:fc:6a:84: 6c:be:88:d8:7f:ba:12:af:fe:a8:d5:f1:ec:02:99:d8:30:27: eb:20:79:da:77:92:e1:c8:fc:0a:00:b7:95:91:7f:f9:6b:2a: be:ce:5e:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xpRXeEyy6MawvOogwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwOTAxMDAyM1oXDTI2MDcwODAxMDAyM1owLzEtMCsGA1UEAxMk Mzg0OGUwNDItNTc2Mi00YTBmLThjNjAtNmY3MDk2ZTBkOTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxyDuxyKnrOtNh6GAnCSuQ4PnE5hydbRHhSW r+qyLP1wQKWckwWiu0c4FI90zQfoQ2YkZzFCVXSHstG+Jz3oB+CimBpZ6wDZW+d+ BzXp5xrXTjtovwt+YT7mfO8k1UpqmQ8pCUSnCngLsfKx5I/K/tJkidb52LakSRZ8 ILFrzpr/JMaU7N+/qGKcg0ak3rm/AyIjkrzeuDy8HQcwxN/TQ9S+yxi+dVbjWzg5 QoS1bdLBRhBa1jGcKGqkrBwKosnpyPj+kk0tGIerfnc6Qgy3rNmpWkCS7dwhCbfd hBdFNs/SVTojgYdbAKbw0E6heYP9gYSMHlDFuAGzfga71TOVgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLgxwv6H/sN6FtFJxZkU4Rd4VhWgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvN2MyNmQwZjUtNGZjOS0z ZWFkLWE3OGUtN2Q3MDg3NWRhMWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEdWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtdEcnr2JvWBxm229BQ19EcPUnRBBXJjp+N5PPvtCM0lxQZs4ipejND yKyd7LjGItlNenznQ//4timbi9t+MOFxLoqMcRUey8iCwV3Az/YxaCDN/pG629Df W6fpsnm5rKnUwCjLSSNS9kwjumLUlDhLdvz0f0a4L+j5KJ+xnInYqGxKiGTXLr1n qKCrdZRcrWP4zW1bhekLYD1U8/cpwwx7mB3lFqVogotoolKxePDIdO0pZclbPrh5 QuvN+M9kvmUxBwPBOr0IFNoAmafN9EzxG2kcu/xqhGy+iNh/uhKv/qjV8ewCmdgw J+sgedp3kuHI/AoAt5WRf/lrKr7OXjs= -----END CERTIFICATE-----Generated at Fri Apr 17 15:42:05 2026 by rpki-client