$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b24dc92a-cc8c-3cf9-9297-c0bed1db2414.roa File: b24dc92a-cc8c-3cf9-9297-c0bed1db2414.roa (raw, json) Hash identifier: HKvlmy9zg+eRaKOiqFC7FlaY+evnm6+ip38LqZ62udA= Subject key identifier: EC:67:35:AB:A5:85:2F:79:F7:33:3E:9E:84:49:A5:8B:A8:19:F6:9C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D703FEE5EB822F06C67BF1780 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b24dc92a-cc8c-3cf9-9297-c0bed1db2414.roa Signing time: Wed 08 Apr 2026 13:00:33 +0000 ROA not before: Wed 08 Apr 2026 13:00:33 +0000 ROA not after: Tue 07 Jul 2026 13:00:33 +0000 asID: 13335 IP address blocks: 172.70.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:3f:ee:5e:b8:22:f0:6c:67:bf:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 8 13:00:33 2026 GMT Not After : Jul 7 13:00:33 2026 GMT Subject: CN=66f470a3-feed-462d-a0e5-1bb5311754eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:6d:2b:3c:e2:bd:a0:2d:89:7d:78:c3:26:84: 4f:83:e4:77:e8:24:6a:d1:1e:37:f3:c7:b2:e8:96: 9d:80:0e:c2:eb:80:23:b6:c0:e5:fd:8d:3b:60:38: 96:92:e1:ab:ff:d3:04:39:71:97:d6:56:40:9a:6e: 22:88:9f:0e:01:c8:60:d8:8a:dd:c5:c2:ea:81:99: 5d:b3:ac:15:d9:1c:2f:ae:d9:23:c6:bc:c6:f8:12: b5:b7:d3:12:0f:e0:62:9c:05:10:3f:8f:21:2b:80: 73:7f:e4:fd:ee:41:38:28:a4:92:03:d7:72:d8:2e: 76:1e:27:3b:99:1b:bb:92:51:dd:ce:73:38:e3:3b: 15:19:fd:c6:b4:b2:94:be:3e:71:f2:1a:e8:0a:44: 71:e4:52:26:ea:34:f7:5f:51:70:85:7e:0b:d7:df: 36:db:e7:a4:d4:7c:da:ca:9f:57:0a:04:85:a4:17: be:0a:da:12:fa:cd:2b:28:23:08:bb:65:6d:97:ee: 62:91:ac:e6:67:cb:3b:8c:de:a4:46:1a:e7:80:db: 9b:3f:5c:5e:32:8f:4d:10:2c:a6:46:09:78:22:f8: 13:c2:d7:1f:2b:60:a4:54:0f:ac:46:a8:63:9e:6c: 1f:8c:84:25:cd:53:65:2b:40:8b:4b:35:ef:ae:8c: 21:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:67:35:AB:A5:85:2F:79:F7:33:3E:9E:84:49:A5:8B:A8:19:F6:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b24dc92a-cc8c-3cf9-9297-c0bed1db2414.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:12:42:98:5e:6f:38:7b:79:9c:c3:b2:f8:23:25:ca:00:c5: 94:75:1b:17:2a:cc:df:8e:24:1d:75:3a:60:f3:48:28:af:d9: d7:6f:e9:75:f5:57:71:66:c3:88:69:37:86:50:e9:38:ad:61: cd:31:df:f5:d5:0c:34:d5:32:38:27:f9:c6:9f:f0:49:82:ce: d2:4e:a8:a7:c3:f5:2e:7e:30:5a:f2:b7:31:b1:cf:04:79:ff: 09:c5:b7:e6:a8:a7:a3:70:bf:74:d6:a8:ee:51:6d:56:2e:9e: 6c:88:ea:60:90:c0:98:f9:0a:19:95:9e:62:2c:d0:a1:f3:87: fd:25:8b:86:21:37:16:11:7a:5e:b9:57:c3:7e:6e:89:8e:47: a3:73:d5:0d:25:29:51:5a:ec:25:78:88:e3:ce:85:c0:b9:db: ec:53:5f:24:9b:f1:4a:f3:0e:b1:82:50:a7:5c:95:0b:62:7e: ca:03:aa:43:07:d7:3f:9c:d4:43:99:69:a7:30:f3:e4:ee:0f: 83:d1:fc:97:81:e9:2f:d6:27:a9:26:d3:1b:d4:a1:42:8b:78: 21:19:0e:5f:30:84:ba:9f:bf:6b:56:53:69:53:29:b6:cd:29: cd:d5:4b:9e:01:28:98:49:60:0b:e9:d3:a7:95:c5:a7:8c:52: 10:32:00:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1wP+5euCLwbGe/F4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk NjZmNDcwYTMtZmVlZC00NjJkLWEwZTUtMWJiNTMxMTc1NGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhW0rPOK9oC2JfXjDJoRPg+R36CRq0R4388ey 6JadgA7C64AjtsDl/Y07YDiWkuGr/9MEOXGX1lZAmm4iiJ8OAchg2IrdxcLqgZld s6wV2RwvrtkjxrzG+BK1t9MSD+BinAUQP48hK4Bzf+T97kE4KKSSA9dy2C52Hic7 mRu7klHdznM44zsVGf3GtLKUvj5x8hroCkRx5FIm6jT3X1FwhX4L19822+ek1Hza yp9XCgSFpBe+CtoS+s0rKCMIu2Vtl+5ikazmZ8s7jN6kRhrngNubP1xeMo9NECym Rgl4IvgTwtcfK2CkVA+sRqhjnmwfjIQlzVNlK0CLSzXvrowhUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOxnNaulhS959zM+noRJpYuoGfacMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjI0ZGM5MmEtY2M4Yy0z Y2Y5LTkyOTctYzBiZWQxZGIyNDE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEaiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgSQphebzh7eZzDsvgjJcoAxZR1GxcqzN+OJB11OmDzSCiv2ddv6XX1 V3Fmw4hpN4ZQ6TitYc0x3/XVDDTVMjgn+caf8EmCztJOqKfD9S5+MFrytzGxzwR5 /wnFt+aop6Nwv3TWqO5RbVYunmyI6mCQwJj5ChmVnmIs0KHzh/0li4YhNxYRel65 V8N+bomOR6Nz1Q0lKVFa7CV4iOPOhcC52+xTXySb8UrzDrGCUKdclQtifsoDqkMH 1z+c1EOZaacw8+TuD4PR/JeB6S/WJ6km0xvUoUKLeCEZDl8whLqfv2tWU2lTKbbN Kc3VS54BKJhJYAvp06eVxaeMUhAyAOA= -----END CERTIFICATE-----Generated at Fri Apr 17 19:29:22 2026 by rpki-client