$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a4d24589-120f-3342-a970-7f75ed378e81.roa File: a4d24589-120f-3342-a970-7f75ed378e81.roa (raw, json) Hash identifier: sFs4MOiucAI5tujBBPltfxw0y+WXRERxMkkX8pipsKE= Subject key identifier: B6:34:96:03:04:71:45:11:C4:E5:23:A6:B9:51:C6:91:13:B4:FA:DB Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D71A5144A35F89ABCE705B8F0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a4d24589-120f-3342-a970-7f75ed378e81.roa Signing time: Thu 09 Apr 2026 01:00:23 +0000 ROA not before: Thu 09 Apr 2026 01:00:23 +0000 ROA not after: Wed 08 Jul 2026 01:00:23 +0000 asID: 13335 IP address blocks: 172.70.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:a5:14:4a:35:f8:9a:bc:e7:05:b8:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 9 01:00:23 2026 GMT Not After : Jul 8 01:00:23 2026 GMT Subject: CN=47b01029-f678-46b7-8185-78cc1b07ade6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:90:c2:61:aa:d6:64:4f:17:6e:d7:46:13:59: dd:76:32:6b:29:35:b0:59:1b:43:01:9c:aa:ab:3a: 88:6b:49:9a:94:cb:dd:6c:38:69:da:83:94:72:24: 78:a8:3a:dd:60:a7:66:f5:28:fc:b9:c0:bc:57:4d: 57:82:c6:26:23:34:82:d1:d5:00:32:86:be:f6:37: ed:ee:d5:a1:40:eb:00:ec:94:8a:13:8a:0b:8f:7e: b0:a7:c6:33:35:97:7e:cd:fa:04:b0:59:dc:ac:6d: e0:cb:ea:df:19:a1:07:f6:56:36:d3:cd:6d:59:3e: a9:ed:25:31:41:b7:9b:3a:8c:0c:bb:ad:03:be:73: 8d:51:f8:a0:7f:78:48:ae:e8:7a:b4:ff:66:6d:58: a4:67:ae:fc:a9:9d:e1:da:36:ed:ae:04:20:ea:8a: 8b:bf:4d:47:04:de:b0:2f:b9:d6:15:46:eb:1c:ea: cc:08:11:8d:15:c7:bb:d2:60:f4:9b:b5:d1:15:3b: ef:48:f5:73:76:1a:39:1d:25:9c:2d:31:53:2b:84: 25:13:db:4f:94:4c:77:74:13:e0:80:41:91:53:23: de:aa:ba:ab:94:3b:64:43:82:eb:48:d3:e8:51:5f: e5:21:c9:50:fe:06:82:a4:1e:69:e8:1c:72:66:b8: fe:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:34:96:03:04:71:45:11:C4:E5:23:A6:B9:51:C6:91:13:B4:FA:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a4d24589-120f-3342-a970-7f75ed378e81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:7a:72:18:57:24:f4:d0:dd:50:06:a9:e5:f3:e6:82:0d:c2: 58:e5:6b:7c:ab:a5:38:5f:b2:79:db:55:b5:67:06:c8:6f:18: bf:e4:03:c4:6a:62:bb:86:b6:07:01:ef:29:32:c0:46:61:a1: b1:94:9c:c9:56:7a:0f:2b:d4:69:31:0f:1f:b0:40:5d:c5:27: 92:e6:08:0b:84:8d:d7:72:a7:55:f1:75:51:01:f1:8a:e5:c2: 2b:d8:e2:84:a8:92:8b:3d:3c:eb:dd:f0:b0:aa:63:63:47:67: 04:c4:16:f2:4e:13:bf:8b:e9:db:19:60:dc:95:0a:02:cd:d4: ee:b7:0b:79:6e:49:67:0d:97:9a:dd:20:6e:b4:9d:e4:af:ff: ed:98:a1:a0:59:11:08:fe:45:b5:ee:79:45:52:29:0d:1f:59: 37:83:3e:e2:8a:11:23:b3:32:b6:c5:19:c8:58:63:92:69:19: c2:89:99:65:be:ba:0c:2f:29:fd:00:57:3d:f9:ee:3b:8f:e2: 83:c2:86:a7:46:e6:b1:8f:43:bb:76:ad:34:52:4e:80:3e:17: 09:4b:04:ed:3f:57:10:21:8a:5d:56:4a:22:04:00:cb:6c:a0: 9f:c9:b9:db:e1:4f:c2:5a:4c:0c:b6:62:9b:25:91:5a:88:b3: 7a:0b:9e:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xpRRKNfiavOcFuPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwOTAxMDAyM1oXDTI2MDcwODAxMDAyM1owLzEtMCsGA1UEAxMk NDdiMDEwMjktZjY3OC00NmI3LTgxODUtNzhjYzFiMDdhZGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJDCYarWZE8XbtdGE1nddjJrKTWwWRtDAZyq qzqIa0malMvdbDhp2oOUciR4qDrdYKdm9Sj8ucC8V01XgsYmIzSC0dUAMoa+9jft 7tWhQOsA7JSKE4oLj36wp8YzNZd+zfoEsFncrG3gy+rfGaEH9lY2081tWT6p7SUx QbebOowMu60DvnONUfigf3hIruh6tP9mbVikZ678qZ3h2jbtrgQg6oqLv01HBN6w L7nWFUbrHOrMCBGNFce70mD0m7XRFTvvSPVzdho5HSWcLTFTK4QlE9tPlEx3dBPg gEGRUyPeqrqrlDtkQ4LrSNPoUV/lIclQ/gaCpB5p6BxyZrj+HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLY0lgMEcUURxOUjprlRxpETtPrbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTRkMjQ1ODktMTIwZi0z MzQyLWE5NzAtN2Y3NWVkMzc4ZTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALZ6chhXJPTQ3VAGqeXz5oINwljla3yrpThfsnnbVbVnBshvGL/kA8Rq YruGtgcB7ykywEZhobGUnMlWeg8r1GkxDx+wQF3FJ5LmCAuEjddyp1XxdVEB8Yrl wivY4oSokos9POvd8LCqY2NHZwTEFvJOE7+L6dsZYNyVCgLN1O63C3luSWcNl5rd IG60neSv/+2YoaBZEQj+RbXueUVSKQ0fWTeDPuKKESOzMrbFGchYY5JpGcKJmWW+ ugwvKf0AVz357juP4oPChqdG5rGPQ7t2rTRSToA+FwlLBO0/VxAhil1WSiIEAMts oJ/JudvhT8JaTAy2YpslkVqIs3oLnmc= -----END CERTIFICATE-----Generated at Sat Apr 18 03:08:26 2026 by rpki-client