$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/989ed1da-fab1-3722-9282-e7f27fbb75ca.roa File: 989ed1da-fab1-3722-9282-e7f27fbb75ca.roa (raw, json) Hash identifier: 8xQXmtQtDclcY7MRHVf7wjCUXe9XpAHA2n+CMpSk4PA= Subject key identifier: 51:7B:3C:69:B9:DA:8A:72:28:0C:4A:80:AA:DF:67:2E:A0:0C:A8:83 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D71A51598303C540A9D1DB000 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/989ed1da-fab1-3722-9282-e7f27fbb75ca.roa Signing time: Thu 09 Apr 2026 01:00:23 +0000 ROA not before: Thu 09 Apr 2026 01:00:23 +0000 ROA not after: Wed 08 Jul 2026 01:00:23 +0000 asID: 13335 IP address blocks: 172.71.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:a5:15:98:30:3c:54:0a:9d:1d:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 9 01:00:23 2026 GMT Not After : Jul 8 01:00:23 2026 GMT Subject: CN=382087c2-e92d-4a6b-9f51-a2595ab7abd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9c:a7:a1:2f:34:3d:43:58:56:4f:b3:f8:59: 93:3c:b3:1e:ba:45:90:e4:97:65:30:c6:33:a1:51: df:dd:78:58:d0:ea:ee:27:d5:30:af:89:2b:0a:77: 2b:8b:35:44:40:bb:2f:a2:cc:98:7b:9b:a0:af:5e: b1:a2:a9:e7:54:06:62:91:5a:8f:7b:d8:12:23:89: 6b:fd:7f:9c:ef:ea:c0:3c:7a:df:26:23:91:26:32: 27:56:aa:0b:ec:08:e3:d5:0c:8e:ec:52:5a:74:1c: 8c:79:98:84:da:3b:5d:56:61:f7:a6:fd:2f:31:01: 74:ed:c2:fb:0b:73:66:0d:b5:d3:3e:b2:44:8a:d7: 48:29:86:e2:ed:bf:ef:e6:c2:13:a1:2b:f1:26:05: c0:3c:85:45:78:9e:43:35:d0:d2:63:9e:9f:05:77: d0:3e:db:10:f2:7d:94:b2:55:a3:5d:86:04:2e:e1: 6d:3b:f3:21:3f:4f:44:e3:45:94:08:78:45:56:29: 0c:75:10:34:98:82:a5:de:f7:b4:05:eb:cd:7a:70: c4:71:be:d6:55:ed:52:b5:e6:83:44:bd:12:22:6c: 4c:af:72:21:18:11:e7:7e:3f:2a:bd:c6:de:e2:70: df:d6:8d:09:9d:20:2a:1d:3b:03:fd:6d:91:7e:ce: 63:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:7B:3C:69:B9:DA:8A:72:28:0C:4A:80:AA:DF:67:2E:A0:0C:A8:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/989ed1da-fab1-3722-9282-e7f27fbb75ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:1d:2e:7f:fc:15:88:15:55:3b:87:2c:44:26:18:96:2f:96: 89:63:da:31:9f:ba:f7:fc:53:2a:52:32:3d:82:21:bb:15:39: ca:b4:b7:86:a2:16:2d:4d:3c:d8:f9:5d:ea:fe:7b:8b:9a:40: 4b:10:ba:90:0f:d7:1b:42:e9:2f:e3:63:12:99:d8:fa:aa:b2: d8:c2:fc:b0:eb:45:4f:5d:05:be:eb:30:57:ef:ea:8c:f8:fa: 86:da:fb:aa:91:29:4a:b4:f3:f4:ce:40:33:3b:d3:b1:50:d6: 9a:eb:42:ae:82:87:8d:c0:bc:4e:c5:ee:26:d3:28:f1:63:3f: 29:2e:60:92:15:08:24:a1:1d:82:4e:8d:3a:ff:64:04:05:ce: 78:55:3c:f0:a4:58:43:82:8e:16:dd:8e:d6:24:75:8e:bb:66: e8:99:61:c3:2d:80:61:ca:86:52:58:33:2f:b7:46:25:85:4a: a7:8a:bb:6c:42:4a:1e:72:35:7c:8b:3d:83:2e:ea:f2:ec:2b: 99:ff:f5:90:23:2d:94:74:4b:8b:ef:60:df:bf:55:d6:97:ec: a2:bc:25:6a:4b:68:7f:93:5b:56:25:0f:09:0d:98:cf:e5:2e: b5:98:9a:dc:ee:aa:36:b1:e4:e8:03:7b:2b:9e:71:ea:62:02: 95:b2:71:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xpRWYMDxUCp0dsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwOTAxMDAyM1oXDTI2MDcwODAxMDAyM1owLzEtMCsGA1UEAxMk MzgyMDg3YzItZTkyZC00YTZiLTlmNTEtYTI1OTVhYjdhYmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZynoS80PUNYVk+z+FmTPLMeukWQ5JdlMMYz oVHf3XhY0OruJ9Uwr4krCncrizVEQLsvosyYe5ugr16xoqnnVAZikVqPe9gSI4lr /X+c7+rAPHrfJiORJjInVqoL7Ajj1QyO7FJadByMeZiE2jtdVmH3pv0vMQF07cL7 C3NmDbXTPrJEitdIKYbi7b/v5sIToSvxJgXAPIVFeJ5DNdDSY56fBXfQPtsQ8n2U slWjXYYELuFtO/MhP09E40WUCHhFVikMdRA0mIKl3ve0BevNenDEcb7WVe1SteaD RL0SImxMr3IhGBHnfj8qvcbe4nDf1o0JnSAqHTsD/W2Rfs5jEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFF7PGm52opyKAxKgKrfZy6gDKiDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTg5ZWQxZGEtZmFiMS0z NzIyLTkyODItZTdmMjdmYmI3NWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEccMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMdLn/8FYgVVTuHLEQmGJYvlolj2jGfuvf8UypSMj2CIbsVOcq0t4ai Fi1NPNj5Xer+e4uaQEsQupAP1xtC6S/jYxKZ2PqqstjC/LDrRU9dBb7rMFfv6oz4 +oba+6qRKUq08/TOQDM707FQ1prrQq6Ch43AvE7F7ibTKPFjPykuYJIVCCShHYJO jTr/ZAQFznhVPPCkWEOCjhbdjtYkdY67ZuiZYcMtgGHKhlJYMy+3RiWFSqeKu2xC Sh5yNXyLPYMu6vLsK5n/9ZAjLZR0S4vvYN+/VdaX7KK8JWpLaH+TW1YlDwkNmM/l LrWYmtzuqjax5OgDeyuecepiApWycVs= -----END CERTIFICATE-----Generated at Fri Apr 17 12:05:35 2026 by rpki-client