$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b5c29b16-b492-33e1-863d-370c23ab71e2.roa File: b5c29b16-b492-33e1-863d-370c23ab71e2.roa (raw, json) Hash identifier: wCrng5apY5Rp+JDVjh+r9dCXxOyTepAvkr90DK96ulg= Subject key identifier: 8E:CD:29:2C:0B:A8:FC:9D:AE:77:30:B5:CB:1F:D3:D5:EB:B6:B3:71 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D71A515335D3766475C01D800 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b5c29b16-b492-33e1-863d-370c23ab71e2.roa Signing time: Thu 09 Apr 2026 01:00:23 +0000 ROA not before: Thu 09 Apr 2026 01:00:23 +0000 ROA not after: Wed 08 Jul 2026 01:00:23 +0000 asID: 13335 IP address blocks: 172.71.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:a5:15:33:5d:37:66:47:5c:01:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 9 01:00:23 2026 GMT Not After : Jul 8 01:00:23 2026 GMT Subject: CN=f4ba45f2-1ef9-4815-b960-35b8ae850a72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:87:c0:5b:97:ea:c5:1c:9b:f6:d2:d2:fd:8d: bf:03:e1:b9:c6:b9:23:46:53:c5:57:49:9b:85:0e: 37:3b:69:15:26:0e:df:95:5d:de:3e:e2:5a:d0:48: d8:b0:99:cb:89:a9:46:95:55:82:e0:a0:48:99:c1: 3b:b6:c2:d5:72:a6:0b:44:2e:59:cf:b5:48:6b:51: 5b:0b:ff:7b:9f:f4:40:75:54:49:7b:1f:d1:47:a5: c7:bd:b2:9c:1b:99:d3:58:c7:f2:16:ab:be:58:eb: 97:cb:15:f4:8c:3e:86:9d:97:70:8a:2b:14:9a:39: ff:d2:e5:a2:14:7f:7f:10:54:2f:c0:56:58:8a:f3: 78:20:d1:0c:de:29:f5:8a:a9:6a:ed:58:4c:66:a6: a3:46:6f:d2:88:0f:bd:80:25:5f:54:cd:56:6e:90: 08:19:2c:7c:0b:24:f0:61:4a:99:8c:f5:51:0f:6e: 85:1f:72:f9:f7:e0:50:ca:8e:54:5b:e3:5e:c7:54: 2a:36:8d:69:c6:33:73:fb:83:a6:94:5d:51:4f:b5: 39:90:37:da:e5:73:95:4a:a8:ab:86:ea:15:66:bd: a7:53:ff:d1:3d:78:a3:77:71:0f:01:cc:42:96:7e: 1f:06:be:32:e2:67:69:3b:2f:02:e9:f1:d5:f9:07: 3a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:CD:29:2C:0B:A8:FC:9D:AE:77:30:B5:CB:1F:D3:D5:EB:B6:B3:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b5c29b16-b492-33e1-863d-370c23ab71e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:0e:4a:b6:cb:5b:e5:d6:5f:cf:90:e6:ec:6e:83:58:e0:18: cc:6f:63:2c:a8:14:87:e7:bb:dd:1a:bd:97:bb:38:95:a2:fb: bf:71:e5:9f:30:47:cc:73:ee:55:fb:30:00:a2:2f:fe:fe:db: 92:35:04:a2:db:9f:ea:df:51:14:7f:c2:59:d4:16:32:ad:da: e0:f1:54:58:6b:66:5d:33:11:64:a6:0b:97:99:5b:2d:ac:59: 7f:17:52:6d:7f:2b:13:37:15:80:0f:a3:ca:e9:9d:01:21:13: e8:56:b9:3a:98:5a:a5:ff:8d:d4:1a:7a:e3:86:7b:f6:bf:0e: 4d:11:4c:40:72:3d:58:4c:7e:df:9d:36:fc:33:4d:8e:f6:33: 64:4b:d3:73:09:f1:99:23:ca:58:43:26:70:67:12:8b:27:95: e1:c5:ef:d3:6e:ee:01:0d:9e:b5:77:cd:b5:7b:c4:b3:3f:f4: 63:f9:90:7b:f9:14:9c:2c:1a:26:cb:6b:56:4f:98:2a:04:5e: 43:5b:a4:a2:72:d5:c5:9b:4f:b0:8b:07:f2:c7:55:8b:b7:bf: 5a:68:ca:73:36:27:cc:be:66:6c:a2:1f:71:9d:80:b0:01:29: ff:a1:6f:91:bf:f9:48:ee:b2:e8:19:6f:6f:ea:93:90:f6:41: b5:b4:21:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xpRUzXTdmR1wB2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwOTAxMDAyM1oXDTI2MDcwODAxMDAyM1owLzEtMCsGA1UEAxMk ZjRiYTQ1ZjItMWVmOS00ODE1LWI5NjAtMzViOGFlODUwYTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYfAW5fqxRyb9tLS/Y2/A+G5xrkjRlPFV0mb hQ43O2kVJg7flV3ePuJa0EjYsJnLialGlVWC4KBImcE7tsLVcqYLRC5Zz7VIa1Fb C/97n/RAdVRJex/RR6XHvbKcG5nTWMfyFqu+WOuXyxX0jD6GnZdwiisUmjn/0uWi FH9/EFQvwFZYivN4INEM3in1iqlq7VhMZqajRm/SiA+9gCVfVM1WbpAIGSx8CyTw YUqZjPVRD26FH3L59+BQyo5UW+Nex1QqNo1pxjNz+4OmlF1RT7U5kDfa5XOVSqir huoVZr2nU//RPXijd3EPAcxCln4fBr4y4mdpOy8C6fHV+Qc68QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI7NKSwLqPydrncwtcsf09XrtrNxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjVjMjliMTYtYjQ5Mi0z M2UxLTg2M2QtMzcwYzIzYWI3MWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEcCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4OSrbLW+XWX8+Q5uxug1jgGMxvYyyoFIfnu90avZe7OJWi+79x5Z8w R8xz7lX7MACiL/7+25I1BKLbn+rfURR/wlnUFjKt2uDxVFhrZl0zEWSmC5eZWy2s WX8XUm1/KxM3FYAPo8rpnQEhE+hWuTqYWqX/jdQaeuOGe/a/Dk0RTEByPVhMft+d NvwzTY72M2RL03MJ8ZkjylhDJnBnEosnleHF79Nu7gENnrV3zbV7xLM/9GP5kHv5 FJwsGibLa1ZPmCoEXkNbpKJy1cWbT7CLB/LHVYu3v1poynM2J8y+ZmyiH3GdgLAB Kf+hb5G/+UjusugZb2/qk5D2QbW0IaA= -----END CERTIFICATE-----Generated at Sat Apr 18 06:05:59 2026 by rpki-client