$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ab4f1aca-cb50-3838-be68-1b0608bf8145.roa File: ab4f1aca-cb50-3838-be68-1b0608bf8145.roa (raw, json) Hash identifier: CrG5f/QDb6S1+2MCOVb8i49sNyXZipovznDLzO0E+yI= Subject key identifier: AB:AB:E9:C0:45:E7:3B:5D:15:12:CF:8D:17:FC:E2:7D:CE:DD:D0:1B Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D71A5172B7CD0041470405EC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ab4f1aca-cb50-3838-be68-1b0608bf8145.roa Signing time: Thu 09 Apr 2026 01:00:23 +0000 ROA not before: Thu 09 Apr 2026 01:00:23 +0000 ROA not after: Wed 08 Jul 2026 01:00:23 +0000 asID: 13335 IP address blocks: 172.71.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:a5:17:2b:7c:d0:04:14:70:40:5e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 9 01:00:23 2026 GMT Not After : Jul 8 01:00:23 2026 GMT Subject: CN=96c299a8-5859-4b02-ab09-9a3b61023cb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:68:55:19:44:b0:a1:0c:7d:ec:44:8a:6f:f6: 35:4f:a1:08:0f:14:ff:76:16:30:78:5f:48:c9:66: ba:30:fd:e8:6e:dc:28:59:9d:aa:da:7d:6d:b3:be: 22:ef:d6:00:5a:c3:fc:1f:9c:bd:df:dc:75:a4:6c: 7e:f8:fd:3e:62:df:2c:f7:6d:2b:3f:6e:59:cb:fd: 96:a9:b5:4f:b2:dc:5e:fd:04:84:1c:64:e4:d4:3b: 39:de:f9:ae:59:a8:4f:27:bd:d4:87:72:83:5f:fe: 96:05:58:ee:9e:8c:8f:42:fe:f1:c9:18:ee:df:f5: e0:ac:4d:dd:94:3d:20:c6:b1:e9:06:89:7b:92:1d: 9e:72:85:f1:ee:33:5e:75:66:8f:f0:20:8d:56:07: b1:d6:64:00:14:ae:fe:2c:dd:40:3b:ca:f1:d4:8a: fa:9a:19:7f:56:b3:ac:58:15:7c:da:00:08:f6:f7: b6:c5:1a:f2:cc:02:80:c5:10:2f:5c:98:bf:98:61: bf:82:5e:45:c7:5d:b1:ab:10:30:a4:ff:00:86:21: 58:b4:11:74:b3:49:c5:e9:cd:45:d8:21:6a:b6:ee: a8:61:66:a9:df:05:7f:4e:fd:76:85:3a:6d:fe:ea: dc:80:45:d4:6b:98:cf:80:f3:7a:72:e6:e5:b4:28: f2:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:AB:E9:C0:45:E7:3B:5D:15:12:CF:8D:17:FC:E2:7D:CE:DD:D0:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ab4f1aca-cb50-3838-be68-1b0608bf8145.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:e2:c3:cf:05:a6:21:a3:f4:82:d8:71:ae:3c:ab:df:0e:81: 0f:45:f1:83:4b:0b:1d:c6:d3:06:6c:01:c9:44:a7:bd:89:91: 47:90:f9:86:83:8a:cc:5e:58:b1:c4:9e:ed:ce:11:4f:16:d2: fa:43:50:eb:53:61:36:40:b1:23:29:81:eb:dd:e4:26:84:04: 84:9e:04:d3:98:ea:9e:f8:ea:a5:39:00:11:34:80:86:2c:06: 0c:1c:27:31:c3:f3:da:b3:e8:4d:e2:c7:84:ab:bc:7c:49:bc: 08:17:7c:50:c1:28:0c:9e:3e:07:9b:01:76:a3:31:e1:f7:be: 4c:26:3a:c3:ca:dc:f6:a3:c8:6c:df:10:4e:b3:b3:55:5b:89: f9:d9:5d:09:65:b0:8a:b9:36:97:ea:93:fc:30:c8:1f:b3:17: 5e:b1:0f:15:83:07:82:3d:89:cb:76:8b:a4:57:2c:0a:cd:6d: 33:67:f7:46:d3:11:b8:0f:02:85:f3:58:65:ff:6a:1d:cb:03: 88:01:02:c5:c6:ea:98:e0:f9:2e:84:04:dc:01:aa:51:a1:1f: 13:7b:f8:a6:e2:7b:dc:10:1b:82:ef:53:f1:06:35:97:00:bd: 2f:9c:50:63:bb:0e:11:1a:da:59:76:8f:c7:27:3b:c9:17:21: 40:bd:44:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xpRcrfNAEFHBAXsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwOTAxMDAyM1oXDTI2MDcwODAxMDAyM1owLzEtMCsGA1UEAxMk OTZjMjk5YTgtNTg1OS00YjAyLWFiMDktOWEzYjYxMDIzY2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumhVGUSwoQx97ESKb/Y1T6EIDxT/dhYweF9I yWa6MP3obtwoWZ2q2n1ts74i79YAWsP8H5y939x1pGx++P0+Yt8s920rP25Zy/2W qbVPstxe/QSEHGTk1Ds53vmuWahPJ73Uh3KDX/6WBVjunoyPQv7xyRju3/XgrE3d lD0gxrHpBol7kh2ecoXx7jNedWaP8CCNVgex1mQAFK7+LN1AO8rx1Ir6mhl/VrOs WBV82gAI9ve2xRryzAKAxRAvXJi/mGG/gl5Fx12xqxAwpP8AhiFYtBF0s0nF6c1F 2CFqtu6oYWap3wV/Tv12hTpt/urcgEXUa5jPgPN6cubltCjyXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKur6cBF5ztdFRLPjRf84n3O3dAbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWI0ZjFhY2EtY2I1MC0z ODM4LWJlNjgtMWIwNjA4YmY4MTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEeeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbiw88FpiGj9ILYca48q98OgQ9F8YNLCx3G0wZsAclEp72JkUeQ+YaD isxeWLHEnu3OEU8W0vpDUOtTYTZAsSMpgevd5CaEBISeBNOY6p746qU5ABE0gIYs BgwcJzHD89qz6E3ix4SrvHxJvAgXfFDBKAyePgebAXajMeH3vkwmOsPK3PajyGzf EE6zs1VbifnZXQllsIq5Npfqk/wwyB+zF16xDxWDB4I9ict2i6RXLArNbTNn90bT EbgPAoXzWGX/ah3LA4gBAsXG6pjg+S6EBNwBqlGhHxN7+Kbie9wQG4LvU/EGNZcA vS+cUGO7DhEa2ll2j8cnO8kXIUC9RHI= -----END CERTIFICATE-----Generated at Fri Apr 17 18:31:18 2026 by rpki-client