$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b5c5effb-7664-3b9e-aad6-47d39f4943b4.roa File: b5c5effb-7664-3b9e-aad6-47d39f4943b4.roa (raw, json) Hash identifier: vtkhl1ag9rT3wK8k8Bo1gy09rs8F1nGIP1wteOTEPeA= Subject key identifier: B7:59:B1:19:D6:DC:59:80:B7:86:DF:1B:FE:0C:95:29:BA:EF:AD:F3 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D71A52138483AF219E8D894D0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b5c5effb-7664-3b9e-aad6-47d39f4943b4.roa Signing time: Thu 09 Apr 2026 01:00:23 +0000 ROA not before: Thu 09 Apr 2026 01:00:23 +0000 ROA not after: Wed 08 Jul 2026 01:00:23 +0000 asID: 13335 IP address blocks: 172.71.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:a5:21:38:48:3a:f2:19:e8:d8:94:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 9 01:00:23 2026 GMT Not After : Jul 8 01:00:23 2026 GMT Subject: CN=a67aeae5-7f8a-43a2-aefe-1d4909e07d2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a4:24:07:ca:78:b9:af:8b:e9:2d:68:e1:f8: 75:b5:25:a2:bc:5e:37:e6:55:c0:d4:48:c5:e3:ea: 14:2e:a2:bf:49:7f:36:a9:4a:f8:e3:9d:8c:18:c3: 93:d4:72:a9:53:48:ec:9a:71:7b:df:43:e8:5d:e0: b2:99:d7:48:09:75:49:d1:b9:ec:35:56:bf:ba:7f: be:f1:2a:21:b7:99:95:09:70:c1:45:8a:2a:b0:9c: 0f:44:09:f0:c6:2c:f6:8f:a7:28:f2:39:b5:df:cb: 0d:e5:9f:d4:09:57:1a:16:a0:bb:b5:a7:ec:2a:7a: 34:f1:bc:87:1b:64:73:50:25:83:12:9c:9a:63:bf: 92:fb:42:e4:de:50:92:46:a9:b5:17:2a:9c:02:a9: cd:69:09:24:ed:f1:e8:a8:bf:85:6d:71:af:15:b2: 00:cb:3a:33:92:e4:6d:dd:e1:b9:93:b6:1a:5b:60: 92:64:81:c0:c2:9c:e8:2a:70:5b:94:29:c7:9d:85: 13:fe:6b:1f:06:1a:ae:ef:a4:b9:97:18:09:07:c7: 6a:ac:01:6e:96:d3:f1:9b:48:df:0b:06:ee:a3:0e: 7e:47:ce:b6:1c:d0:f2:27:a2:2e:f3:62:07:5f:12: ca:b3:e7:85:9e:77:fa:ff:12:8f:e1:1a:cb:7a:1d: fd:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:59:B1:19:D6:DC:59:80:B7:86:DF:1B:FE:0C:95:29:BA:EF:AD:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b5c5effb-7664-3b9e-aad6-47d39f4943b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:d2:38:71:32:a5:4b:51:34:3f:19:1b:ec:09:5d:e6:f0:a2: 08:0a:98:d5:bf:6a:0c:0f:0d:09:e2:02:6b:d4:bd:23:cb:4a: 29:96:74:1a:85:aa:d3:c6:9c:39:da:48:e1:25:1e:6c:19:a1: 19:fe:7d:8f:d4:2e:99:9d:02:bd:35:b8:ec:50:8b:78:d8:9c: f6:0e:a3:c9:68:47:37:3c:29:97:ed:da:b3:b2:b1:fd:05:2d: 97:2c:84:d5:c9:ff:0d:99:ed:08:74:39:2c:4a:38:52:e8:a9: 30:d5:e5:0d:e9:40:6f:4d:a4:8e:88:e5:a0:a2:43:e0:e6:95: ea:c6:41:2c:ee:e2:da:df:cf:ac:2b:a3:81:ff:bc:44:8c:4a: 6b:c2:74:40:8d:1f:ba:9c:29:5f:f6:38:32:ec:01:e1:47:ca: e7:f5:8a:bd:9b:bf:49:8f:8e:80:0f:5f:f1:ec:8b:be:64:43: 1d:10:1e:fc:db:1b:7b:ef:a7:c2:8b:f9:d6:07:7e:e9:bf:a9: 62:3c:da:d0:bb:4f:be:79:60:fc:d8:55:e4:34:e6:64:ac:a3: 1a:4f:46:35:3d:db:57:fd:23:3e:18:a0:9b:de:fc:2c:3b:8e: 7a:c9:bf:62:7a:40:d0:34:26:1e:34:3c:34:69:d0:d8:de:93: 77:75:b8:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xpSE4SDryGejYlNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwOTAxMDAyM1oXDTI2MDcwODAxMDAyM1owLzEtMCsGA1UEAxMk YTY3YWVhZTUtN2Y4YS00M2EyLWFlZmUtMWQ0OTA5ZTA3ZDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0aQkB8p4ua+L6S1o4fh1tSWivF435lXA1EjF 4+oULqK/SX82qUr4452MGMOT1HKpU0jsmnF730PoXeCymddICXVJ0bnsNVa/un++ 8Soht5mVCXDBRYoqsJwPRAnwxiz2j6co8jm138sN5Z/UCVcaFqC7tafsKno08byH G2RzUCWDEpyaY7+S+0Lk3lCSRqm1FyqcAqnNaQkk7fHoqL+FbXGvFbIAyzozkuRt 3eG5k7YaW2CSZIHAwpzoKnBblCnHnYUT/msfBhqu76S5lxgJB8dqrAFultPxm0jf Cwbuow5+R862HNDyJ6Iu82IHXxLKs+eFnnf6/xKP4RrLeh39DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLdZsRnW3FmAt4bfG/4MlSm6763zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjVjNWVmZmItNzY2NC0z YjllLWFhZDYtNDdkMzlmNDk0M2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEd+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjSOHEypUtRND8ZG+wJXebwoggKmNW/agwPDQniAmvUvSPLSimWdBqF qtPGnDnaSOElHmwZoRn+fY/ULpmdAr01uOxQi3jYnPYOo8loRzc8KZft2rOysf0F LZcshNXJ/w2Z7Qh0OSxKOFLoqTDV5Q3pQG9NpI6I5aCiQ+DmlerGQSzu4trfz6wr o4H/vESMSmvCdECNH7qcKV/2ODLsAeFHyuf1ir2bv0mPjoAPX/Hsi75kQx0QHvzb G3vvp8KL+dYHfum/qWI82tC7T755YPzYVeQ05mSsoxpPRjU921f9Iz4YoJve/Cw7 jnrJv2J6QNA0Jh40PDRp0Njek3d1uMI= -----END CERTIFICATE-----Generated at Fri Apr 17 19:27:55 2026 by rpki-client