$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8222374e-de48-3942-9fc5-b6afdb016b1d.roa File: 8222374e-de48-3942-9fc5-b6afdb016b1d.roa (raw, json) Hash identifier: xARCpGP9L+OjbFu7nez1WGca8GMoaEtkdc5yNnRrveo= Subject key identifier: 82:BD:31:3B:58:22:7A:56:D2:01:BC:ED:D5:C8:02:86:F3:83:61:BA Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D67DFED5ADD59C62802DD0980 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8222374e-de48-3942-9fc5-b6afdb016b1d.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 13335 IP address blocks: 172.71.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:ed:5a:dd:59:c6:28:02:dd:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=72104a36-dc45-4d0e-994a-eac4512c46f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c4:f9:65:72:95:88:45:7a:8e:0f:b1:7d:53: b5:0b:ce:df:46:18:4a:55:f1:6a:ae:1a:67:10:51: 21:c3:f3:5b:45:75:ce:02:50:06:18:a3:35:78:24: ed:da:78:0d:d2:33:71:ae:b6:8a:6e:5d:86:cd:d6: 4b:19:6e:2c:59:31:40:a8:31:48:90:df:fa:40:7e: a6:b1:6c:9d:8c:b7:5a:e9:ef:26:59:68:1a:92:45: 39:0b:b6:be:9f:6e:09:1b:6a:92:49:1f:39:cf:1c: 1a:f9:ff:76:27:33:c6:5f:f4:a6:d7:51:b8:5c:e5: 14:06:89:37:37:12:43:06:d6:77:89:fb:e3:ff:3e: 23:30:00:d7:98:55:ca:1b:b1:f0:b6:dd:c3:75:b6: 5e:7c:46:47:ed:20:2b:02:40:ef:4c:36:f0:5c:71: 86:fd:a4:6f:1d:75:3a:0f:5d:4a:b0:22:2b:73:38: 65:a8:b5:f7:77:c7:c3:a6:d8:34:5d:2c:e8:67:47: 50:6d:e0:36:c9:d7:43:f5:02:e8:6d:66:b0:85:b0: 0f:98:1c:b1:76:95:e2:da:fb:1b:61:ad:a5:35:ed: 16:70:68:9b:93:98:77:6a:39:4d:ba:fa:1c:d7:a9: 1d:12:98:ce:16:db:f1:e5:32:d9:e7:af:e7:82:63: b9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:BD:31:3B:58:22:7A:56:D2:01:BC:ED:D5:C8:02:86:F3:83:61:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8222374e-de48-3942-9fc5-b6afdb016b1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:05:a5:d6:f4:3e:76:d7:e5:2e:ce:f4:6e:0b:f8:52:dd:92: 0c:53:a1:a8:ad:4c:26:86:2e:f9:74:03:ee:9f:eb:8f:c0:bc: 7b:a3:b0:e6:2f:c7:0d:1d:18:fa:6d:2c:d3:92:75:3d:a2:8a: eb:5f:2e:a6:df:86:08:6a:65:2f:5a:e5:86:ec:c9:13:58:b2: d3:0c:10:5d:5d:29:a2:19:e5:40:0d:eb:eb:bc:17:fa:51:af: 1d:49:2a:7d:a2:b3:8b:3d:3c:8b:96:07:d4:e6:28:35:aa:44: f6:7d:cc:a6:6c:17:3a:c3:31:7c:3c:3e:02:66:df:1b:fb:23: d5:64:81:2f:da:76:16:4f:88:a6:30:c9:d6:0e:c9:90:0c:ee: a4:d7:12:8d:97:70:a1:db:e4:ea:96:07:37:ee:26:ff:c1:cd: ef:31:0c:2c:29:f7:09:88:66:40:26:52:fd:c5:f5:3a:a7:7e: 35:0e:bd:8f:46:5f:a1:05:a1:b6:82:53:1e:a8:ed:9f:57:75: 20:5d:95:5e:f5:2d:c5:c9:36:ff:0f:90:a5:44:01:98:77:c9: 28:e7:37:d3:ab:e1:b4:87:19:21:31:ad:1d:5f:74:51:ad:5b: 7e:45:87:f6:fb:94:e1:e3:08:52:54:c4:0c:2c:97:2d:66:e3: 4e:d4:81:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n3+1a3VnGKALdCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk NzIxMDRhMzYtZGM0NS00ZDBlLTk5NGEtZWFjNDUxMmM0NmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucT5ZXKViEV6jg+xfVO1C87fRhhKVfFqrhpn EFEhw/NbRXXOAlAGGKM1eCTt2ngN0jNxrraKbl2GzdZLGW4sWTFAqDFIkN/6QH6m sWydjLda6e8mWWgakkU5C7a+n24JG2qSSR85zxwa+f92JzPGX/Sm11G4XOUUBok3 NxJDBtZ3ifvj/z4jMADXmFXKG7Hwtt3DdbZefEZH7SArAkDvTDbwXHGG/aRvHXU6 D11KsCIrczhlqLX3d8fDptg0XSzoZ0dQbeA2yddD9QLobWawhbAPmByxdpXi2vsb Ya2lNe0WcGibk5h3ajlNuvoc16kdEpjOFtvx5TLZ56/ngmO57QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIK9MTtYInpW0gG87dXIAobzg2G6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODIyMjM3NGUtZGU0OC0z OTQyLTlmYzUtYjZhZmRiMDE2YjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEeTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQFpdb0PnbX5S7O9G4L+FLdkgxToaitTCaGLvl0A+6f64/AvHujsOYv xw0dGPptLNOSdT2iiutfLqbfhghqZS9a5YbsyRNYstMMEF1dKaIZ5UAN6+u8F/pR rx1JKn2is4s9PIuWB9TmKDWqRPZ9zKZsFzrDMXw8PgJm3xv7I9VkgS/adhZPiKYw ydYOyZAM7qTXEo2XcKHb5OqWBzfuJv/Bze8xDCwp9wmIZkAmUv3F9TqnfjUOvY9G X6EFobaCUx6o7Z9XdSBdlV71LcXJNv8PkKVEAZh3ySjnN9Or4bSHGSExrR1fdFGt W35Fh/b7lOHjCFJUxAwsly1m407UgWw= -----END CERTIFICATE-----Generated at Fri Apr 17 18:41:22 2026 by rpki-client