$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b3c20a39-6575-362e-a112-d4aa121461f5.roa File: b3c20a39-6575-362e-a112-d4aa121461f5.roa (raw, json) Hash identifier: Zu21m4m2GZ1/J1jxTvmv2GNeqbIT82xh2DiWudz9znE= Subject key identifier: F4:3F:83:4C:0F:42:B3:A6:0B:22:28:FB:7C:CA:38:D1:5C:DE:03:B3 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D67DFF525CDE57E155671E880 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b3c20a39-6575-362e-a112-d4aa121461f5.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 13335 IP address blocks: 172.70.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:f5:25:cd:e5:7e:15:56:71:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=a34aafec-ec7f-427d-88e5-b3b548dc56e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:64:a9:db:3a:3a:b9:e4:df:0d:08:ea:bf:31: b5:ae:0f:38:30:b2:5f:25:28:70:6c:66:b3:3b:63: 55:2a:04:ff:4f:8d:49:81:87:0a:1f:24:72:c3:17: 17:ce:20:3e:d3:50:58:62:6d:5f:e4:ca:5d:e0:dc: ad:e3:4a:29:28:ca:a5:8f:76:b8:b0:64:62:1f:70: f9:1a:08:22:e9:44:06:31:21:6c:6e:81:1e:08:30: cb:0a:64:d1:ac:a9:3f:6c:db:82:7b:9c:26:f0:64: 13:63:e0:73:85:b2:79:6a:d5:58:4a:09:d4:0d:ca: bd:15:8e:bb:89:69:91:2c:3f:fd:49:79:ef:78:e1: a4:c1:30:6f:9e:79:52:5b:7a:46:0f:3c:fe:b8:fe: 86:ea:1d:4e:ea:61:be:bf:84:d3:93:82:95:ad:6e: e7:6b:3f:ee:ce:c0:4a:92:65:3f:77:78:9c:a9:fe: 61:e4:2e:80:9a:c7:73:36:87:ce:ff:d6:38:05:72: 6a:fa:ba:2e:f6:1c:af:ed:c2:55:57:24:96:23:d7: 56:cb:60:8a:ae:f1:ff:d8:5d:68:f6:91:5a:9e:79: 0f:14:08:b8:6b:72:ca:7a:78:4d:53:fa:18:0f:99: b0:32:26:96:34:7f:3b:df:89:10:e2:71:fe:51:f3: ad:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:3F:83:4C:0F:42:B3:A6:0B:22:28:FB:7C:CA:38:D1:5C:DE:03:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b3c20a39-6575-362e-a112-d4aa121461f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:46:86:e9:91:82:a7:49:3e:61:73:dc:f8:11:64:68:68:7e: 57:de:43:5b:73:07:65:cf:ea:2f:b7:88:7e:f7:70:67:d7:c3: f1:a6:26:d9:eb:b1:4f:56:7e:3b:08:91:51:b2:7d:67:ea:b2: 75:30:6a:07:53:d9:02:6a:de:5f:9a:a6:7a:ce:9b:09:fc:4c: 4c:08:f2:e4:7e:1e:04:a4:e6:38:c4:fc:e6:48:7e:b7:3e:ae: 6f:1c:c7:fc:4d:1f:e1:24:1c:c4:da:5a:57:d6:f2:8a:a6:81: 6d:67:2b:d0:8a:5f:63:0a:d3:3d:13:b2:49:71:ce:b2:da:75: 6f:51:65:57:a9:1c:64:b5:7c:d7:fa:61:90:83:af:48:28:90: e3:78:20:8f:cb:b2:40:8d:2c:1a:6a:eb:87:24:50:fc:0c:d4: 17:54:d7:27:4e:89:e7:2d:73:e0:6b:84:a6:3a:2b:15:e5:70: 09:a2:c6:5a:67:5e:d7:6a:cb:e6:41:93:e0:88:bb:0a:d1:0c: 13:70:b7:c3:90:eb:17:c1:67:e5:ae:88:c2:61:c4:4b:e2:df: b5:97:bb:b1:cb:a1:86:d8:94:9e:d7:7d:20:4f:14:bc:af:2b: e6:88:d4:cd:d1:5d:1a:b8:bb:2d:70:07:7f:61:fc:64:9e:82: e5:4a:62:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n3/UlzeV+FVZx6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk YTM0YWFmZWMtZWM3Zi00MjdkLTg4ZTUtYjNiNTQ4ZGM1NmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmSp2zo6ueTfDQjqvzG1rg84MLJfJShwbGaz O2NVKgT/T41JgYcKHyRywxcXziA+01BYYm1f5Mpd4Nyt40opKMqlj3a4sGRiH3D5 Gggi6UQGMSFsboEeCDDLCmTRrKk/bNuCe5wm8GQTY+BzhbJ5atVYSgnUDcq9FY67 iWmRLD/9SXnveOGkwTBvnnlSW3pGDzz+uP6G6h1O6mG+v4TTk4KVrW7naz/uzsBK kmU/d3icqf5h5C6AmsdzNofO/9Y4BXJq+rou9hyv7cJVVySWI9dWy2CKrvH/2F1o 9pFannkPFAi4a3LKenhNU/oYD5mwMiaWNH8734kQ4nH+UfOtxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQ/g0wPQrOmCyIo+3zKONFc3gOzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjNjMjBhMzktNjU3NS0z NjJlLWExMTItZDRhYTEyMTQ2MWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEY6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5GhumRgqdJPmFz3PgRZGhoflfeQ1tzB2XP6i+3iH73cGfXw/GmJtnr sU9WfjsIkVGyfWfqsnUwagdT2QJq3l+apnrOmwn8TEwI8uR+HgSk5jjE/OZIfrc+ rm8cx/xNH+EkHMTaWlfW8oqmgW1nK9CKX2MK0z0TsklxzrLadW9RZVepHGS1fNf6 YZCDr0gokON4II/LskCNLBpq64ckUPwM1BdU1ydOiectc+BrhKY6KxXlcAmixlpn Xtdqy+ZBk+CIuwrRDBNwt8OQ6xfBZ+WuiMJhxEvi37WXu7HLoYbYlJ7XfSBPFLyv K+aI1M3RXRq4uy1wB39h/GSeguVKYtE= -----END CERTIFICATE-----Generated at Fri Apr 17 18:32:54 2026 by rpki-client