$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9ad474a6-fb5d-316e-9bf0-ecdff39815cb.roa File: 9ad474a6-fb5d-316e-9bf0-ecdff39815cb.roa (raw, json) Hash identifier: X+RK5jsQvQXv/W8oh6XXBYZN2HAcFm77P+/DJAXUEFI= Subject key identifier: 8D:DE:A7:5F:22:C6:5A:45:A6:0E:0A:38:65:29:C9:67:AF:33:18:17 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584C910702AD8FA4916BE5B4DA00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9ad474a6-fb5d-316e-9bf0-ecdff39815cb.roa Signing time: Sun 18 Jan 2026 14:00:39 +0000 ROA not before: Sun 18 Jan 2026 14:00:39 +0000 ROA not after: Sat 18 Apr 2026 13:00:39 +0000 asID: 13335 IP address blocks: 172.71.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:91:07:02:ad:8f:a4:91:6b:e5:b4:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jan 18 14:00:39 2026 GMT Not After : Apr 18 13:00:39 2026 GMT Subject: CN=68ca9d2e-7687-4fb3-9289-d66812bdb3fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:86:4c:23:89:a7:c5:3d:a9:04:70:df:dd:3d: a3:50:56:a9:4d:3b:4b:5c:32:dd:98:cd:48:44:9c: f8:04:43:48:a5:e2:2a:82:5f:e4:97:12:d5:56:64: 00:28:9e:f1:b7:ef:38:2f:21:aa:b8:a9:6c:9c:e3: 7e:39:19:92:f0:eb:af:8b:1f:20:2f:9e:f0:f8:e4: 33:4b:ec:e5:27:20:44:21:91:03:bf:9c:cf:80:f5: ef:93:ac:0f:9c:a6:88:62:18:01:ae:97:37:e7:05: e9:4a:1b:12:4e:07:88:6c:b8:44:40:d8:3b:a2:19: c6:f2:b6:22:3b:3d:0a:38:57:24:83:11:a8:de:b3: a6:02:a2:89:19:5a:e3:9d:b4:cd:f2:6b:8c:f6:6b: 45:a6:80:d7:2d:bc:30:bf:79:94:7a:93:9a:e2:fd: 7f:e1:98:ae:f1:d8:03:5f:09:de:49:12:71:38:43: 3e:e0:a5:e0:2b:e8:44:89:10:1c:df:78:d6:1c:de: 38:30:26:ec:3e:79:05:6c:9f:aa:1c:9d:d4:25:30: cf:37:a5:78:29:68:7e:ac:1b:d3:a5:30:b5:08:be: 08:96:72:86:46:02:86:5c:86:61:8a:86:6c:3d:38: 71:7e:63:29:4e:f7:7f:6b:17:73:50:e7:9f:e5:03: 74:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:DE:A7:5F:22:C6:5A:45:A6:0E:0A:38:65:29:C9:67:AF:33:18:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9ad474a6-fb5d-316e-9bf0-ecdff39815cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:a1:0a:d4:1a:47:9d:6b:49:8f:6f:1d:cd:62:74:39:de:4f: a2:b6:ca:e7:3a:fc:42:8b:9b:b8:58:d5:3f:b8:2d:f4:b9:d5: 37:55:52:f5:30:99:14:99:2b:cc:b3:cd:1f:ff:e9:58:c7:57: a0:75:6e:d3:5c:bd:7f:96:cf:91:9c:73:66:67:59:d0:cf:f4: 05:19:e4:e8:40:4a:a1:b5:f9:51:0e:12:7d:3c:c9:86:5b:91: 08:f1:b4:87:38:e8:4a:f2:e4:72:b4:12:0c:84:e6:f0:35:67: 3a:f4:7a:0c:01:be:6c:ee:24:59:c4:3d:2a:2b:d8:d7:07:9b: 25:37:fc:06:d0:a1:d7:90:c9:1c:e8:25:da:3d:57:6f:b5:04: 65:09:5b:03:e0:c2:ed:60:0a:d0:e0:63:be:93:43:35:0c:34: 26:d8:b6:f1:73:fd:11:4d:67:36:45:f8:dc:1b:11:11:e4:71: cc:4a:ae:1b:be:18:07:35:2e:84:be:a0:1b:ca:e2:c7:d0:ed: 67:c1:40:58:59:5b:64:7e:b9:50:86:b9:74:3e:4b:7a:71:d0: 6a:a5:a8:64:b8:15:b3:df:60:1f:18:44:7e:9e:68:44:b3:94: 91:22:8b:fc:44:d8:d6:e9:be:17:4f:8b:86:a5:1b:45:31:05: 15:af:26:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyRBwKtj6SRa+W02gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDExODE0MDAzOVoXDTI2MDQxODEzMDAzOVowLzEtMCsGA1UEAxMk NjhjYTlkMmUtNzY4Ny00ZmIzLTkyODktZDY2ODEyYmRiM2ZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIZMI4mnxT2pBHDf3T2jUFapTTtLXDLdmM1I RJz4BENIpeIqgl/klxLVVmQAKJ7xt+84LyGquKlsnON+ORmS8Ouvix8gL57w+OQz S+zlJyBEIZEDv5zPgPXvk6wPnKaIYhgBrpc35wXpShsSTgeIbLhEQNg7ohnG8rYi Oz0KOFckgxGo3rOmAqKJGVrjnbTN8muM9mtFpoDXLbwwv3mUepOa4v1/4Ziu8dgD XwneSRJxOEM+4KXgK+hEiRAc33jWHN44MCbsPnkFbJ+qHJ3UJTDPN6V4KWh+rBvT pTC1CL4IlnKGRgKGXIZhioZsPThxfmMpTvd/axdzUOef5QN0TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI3ep18ixlpFpg4KOGUpyWevMxgXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOWFkNDc0YTYtZmI1ZC0z MTZlLTliZjAtZWNkZmYzOTgxNWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKhCtQaR51rSY9vHc1idDneT6K2yuc6/EKLm7hY1T+4LfS51TdVUvUw mRSZK8yzzR//6VjHV6B1btNcvX+Wz5Gcc2ZnWdDP9AUZ5OhASqG1+VEOEn08yYZb kQjxtIc46Ery5HK0EgyE5vA1Zzr0egwBvmzuJFnEPSor2NcHmyU3/AbQodeQyRzo Jdo9V2+1BGUJWwPgwu1gCtDgY76TQzUMNCbYtvFz/RFNZzZF+NwbERHkccxKrhu+ GAc1LoS+oBvK4sfQ7WfBQFhZW2R+uVCGuXQ+S3px0GqlqGS4FbPfYB8YRH6eaESz lJEii/xE2NbpvhdPi4alG0UxBRWvJkA= -----END CERTIFICATE-----Generated at Sun Mar 1 21:03:00 2026 by rpki-client