$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/86f9b11a-4004-373f-9ca7-6b36b0ad8258.roa File: 86f9b11a-4004-373f-9ca7-6b36b0ad8258.roa (raw, json) Hash identifier: RtttGIoleTVy5ShVpjg3M/wPGS1FNg4KWKt4qx0c/9U= Subject key identifier: 34:8A:9B:22:08:3E:24:BD:5F:0D:16:FC:20:CC:FE:27:FA:E3:B7:BB Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D71A51F5AB3C0B623F3BC5580 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/86f9b11a-4004-373f-9ca7-6b36b0ad8258.roa Signing time: Thu 09 Apr 2026 01:00:23 +0000 ROA not before: Thu 09 Apr 2026 01:00:23 +0000 ROA not after: Wed 08 Jul 2026 01:00:23 +0000 asID: 13335 IP address blocks: 172.70.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:a5:1f:5a:b3:c0:b6:23:f3:bc:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 9 01:00:23 2026 GMT Not After : Jul 8 01:00:23 2026 GMT Subject: CN=bcd80cd2-111d-42b4-a596-0a34fe3a5947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:74:15:8b:ab:6c:64:19:ea:2e:69:1b:2d:a8: 9e:9e:7a:aa:29:ff:fc:75:30:90:4b:4e:f7:a3:b7: 22:39:3c:2f:3c:31:b0:75:d3:10:8d:f5:fe:f1:6e: ec:cc:71:66:db:e2:8a:5b:75:e9:13:7b:d6:75:15: 7d:8d:2a:a9:b9:f8:27:d2:c6:a4:2a:17:f2:af:85: e0:4f:c3:22:06:74:33:03:5e:ea:ef:12:21:fa:09: 2a:40:38:70:33:1b:0b:f0:5f:7d:54:8a:92:8b:fd: ad:cd:16:a9:ea:de:35:e7:88:0a:8e:a5:9e:6e:aa: 50:25:82:59:9e:47:91:f9:a2:5f:13:d7:73:b4:05: 48:45:7c:9e:01:b2:d7:fe:05:05:3a:b0:24:77:13: 9d:11:58:d8:16:be:75:b5:fc:a3:d6:88:a5:8a:ed: 61:c7:ac:42:2a:7b:a1:10:18:fd:2e:b9:fc:57:b6: ea:f5:e1:f0:6f:bd:47:9b:15:e1:c9:bb:a4:26:26: 8d:fe:44:6f:52:3c:98:87:70:ec:23:87:73:2e:f3: 6a:5c:94:4b:aa:7e:7c:40:1b:d3:29:45:76:87:17: e9:77:26:43:9a:b2:35:60:aa:8c:fb:b6:df:1d:14: 33:a6:e0:7a:28:0c:0b:fe:a7:09:76:68:46:95:df: cd:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:8A:9B:22:08:3E:24:BD:5F:0D:16:FC:20:CC:FE:27:FA:E3:B7:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/86f9b11a-4004-373f-9ca7-6b36b0ad8258.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:9e:a1:61:f0:76:2d:72:23:df:0e:c3:d6:19:40:f0:4e:a6: de:8a:89:da:e2:34:7d:4e:dc:92:b6:a6:56:dd:1c:b0:38:bf: 2d:58:fb:9a:24:e6:f3:c4:3d:8b:6f:1e:52:95:f3:a9:d4:e2: 19:5d:b8:7f:da:93:29:a5:5e:8f:03:25:36:8b:44:ad:ae:79: 67:1a:37:82:b3:c7:c2:83:00:22:6f:2d:17:b1:5d:1d:19:fa: f3:64:8d:79:61:46:ff:52:74:63:41:87:a5:7a:c7:1e:a9:4b: eb:af:52:62:28:12:a0:b4:b6:28:8f:88:c3:7d:ab:fe:66:a9: 6b:4f:96:a5:1f:09:da:cd:32:76:6a:fd:2a:08:49:0a:5b:ee: 1b:70:f6:65:88:04:a6:b0:3e:b0:be:cc:9d:28:e2:d7:09:0d: fe:66:9c:78:08:f3:84:c9:65:bf:e2:be:c1:fc:e8:d0:f9:bf: 9e:f0:a1:02:c5:dd:1d:39:fd:8d:61:38:5a:6f:56:0d:fa:f4: 6a:38:23:7c:27:b3:e9:8a:57:1d:35:d0:a6:f9:ed:5c:54:e0: ab:e2:b9:cf:71:a7:aa:a9:a4:0b:fe:a6:b6:d1:dd:71:00:9a: 6b:93:66:26:ae:bf:57:42:2a:1d:73:7b:97:16:1f:92:84:e4: da:dc:1e:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xpR9as8C2I/O8VYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwOTAxMDAyM1oXDTI2MDcwODAxMDAyM1owLzEtMCsGA1UEAxMk YmNkODBjZDItMTExZC00MmI0LWE1OTYtMGEzNGZlM2E1OTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonQVi6tsZBnqLmkbLaiennqqKf/8dTCQS073 o7ciOTwvPDGwddMQjfX+8W7szHFm2+KKW3XpE3vWdRV9jSqpufgn0sakKhfyr4Xg T8MiBnQzA17q7xIh+gkqQDhwMxsL8F99VIqSi/2tzRap6t4154gKjqWebqpQJYJZ nkeR+aJfE9dztAVIRXyeAbLX/gUFOrAkdxOdEVjYFr51tfyj1oiliu1hx6xCKnuh EBj9Lrn8V7bq9eHwb71HmxXhybukJiaN/kRvUjyYh3DsI4dzLvNqXJRLqn58QBvT KUV2hxfpdyZDmrI1YKqM+7bfHRQzpuB6KAwL/qcJdmhGld/NYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDSKmyIIPiS9Xw0W/CDM/if647e7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODZmOWIxMWEtNDAwNC0z NzNmLTljYTctNmIzNmIwYWQ4MjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOeoWHwdi1yI98Ow9YZQPBOpt6KidriNH1O3JK2plbdHLA4vy1Y+5ok 5vPEPYtvHlKV86nU4hlduH/akymlXo8DJTaLRK2ueWcaN4Kzx8KDACJvLRexXR0Z +vNkjXlhRv9SdGNBh6V6xx6pS+uvUmIoEqC0tiiPiMN9q/5mqWtPlqUfCdrNMnZq /SoISQpb7htw9mWIBKawPrC+zJ0o4tcJDf5mnHgI84TJZb/ivsH86ND5v57woQLF 3R05/Y1hOFpvVg369Go4I3wns+mKVx010Kb57VxU4Kviuc9xp6qppAv+prbR3XEA mmuTZiauv1dCKh1ze5cWH5KE5NrcHjY= -----END CERTIFICATE-----Generated at Fri Apr 17 01:57:40 2026 by rpki-client