$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8b34ebd-35dd-36dc-b665-03b097fe2512.roa File: b8b34ebd-35dd-36dc-b665-03b097fe2512.roa (raw, json) Hash identifier: 6nS6iHbwJcUBCsS44E/bxhxG4ZZJLl85hwUwi9LVqaE= Subject key identifier: 19:57:94:64:88:82:25:56:E7:73:5B:34:61:59:9F:24:EE:D8:5E:89 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D7A054D59DD8D8765F973F980 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8b34ebd-35dd-36dc-b665-03b097fe2512.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 395747 IP address blocks: 172.71.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:4d:59:dd:8d:87:65:f9:73:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=3c2cc44b-c824-496d-96db-0fa7e32378ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b5:dc:62:ca:5a:82:65:ff:de:34:6f:93:e8: e5:a2:e7:e9:c4:ac:13:b5:3c:50:ca:7a:9b:f4:63: 1d:7c:79:aa:eb:fa:9d:74:b1:3b:ee:9a:76:f0:52: a0:81:61:4e:d4:6b:2a:40:95:75:c6:3c:d3:b9:1e: 67:c1:d2:60:15:7b:2f:72:65:87:36:57:6f:76:96: 4c:20:7f:a6:34:1d:7f:77:a6:97:3c:07:d8:72:03: bf:9b:83:63:aa:0f:6f:b0:e6:ba:b7:07:03:12:17: 3e:b6:94:05:7c:04:79:f4:01:82:48:5b:e5:10:3b: 63:4e:cd:dd:92:14:9d:8c:4d:ff:c3:d0:e3:af:21: 14:74:7b:65:cb:65:81:9c:9c:44:75:e1:25:c0:4b: f7:50:ac:21:78:51:32:a8:fe:21:5f:b1:b8:5a:74: 40:df:b5:29:b7:78:bd:f3:e4:80:8f:a9:93:10:da: ea:bf:fc:2b:85:4e:46:b8:f3:27:d5:87:8c:d8:8e: 03:45:53:e0:da:09:16:85:65:4c:68:fa:a3:b9:e9: 38:0f:92:aa:9e:b1:bd:bd:98:11:6f:44:52:50:81: 91:56:5d:62:79:78:1f:87:3d:66:9e:2b:90:06:20: d3:de:bc:08:b5:40:d0:f8:9c:bf:95:6b:88:6f:84: 6e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:57:94:64:88:82:25:56:E7:73:5B:34:61:59:9F:24:EE:D8:5E:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8b34ebd-35dd-36dc-b665-03b097fe2512.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:b9:36:33:b5:af:aa:ec:0a:1c:4a:f9:13:74:4c:74:9a:91: 2e:8c:d8:3f:e9:ea:12:4b:fc:4c:00:fc:a1:54:60:c0:5b:6f: 70:0e:d2:30:c1:5b:29:36:ac:25:61:16:6a:4f:cf:f4:d5:0a: 55:d0:69:bb:86:56:f5:67:39:6d:f1:07:bb:25:fb:a2:e9:14: da:2a:59:59:08:49:24:34:5c:a3:41:63:d4:65:98:70:96:d4: 75:de:97:61:08:6b:9f:7c:69:c1:e8:2d:2c:26:c1:17:3c:94: da:28:08:58:e0:58:47:55:16:8b:7e:1f:9c:d6:33:b9:7e:50: 0e:52:e4:d6:f7:57:29:36:35:0a:20:1e:07:46:b7:a7:7f:10: 70:31:09:b2:97:69:bc:3f:ea:42:05:d9:6c:82:00:a8:84:34: 64:79:8c:16:20:4e:ef:c4:65:83:98:c0:98:30:47:9e:86:0a: 03:26:b2:25:00:be:11:75:67:d7:39:92:60:c8:aa:99:c9:1d: f7:26:86:fb:0b:21:91:27:65:25:79:1c:56:5a:0a:d9:5c:b4: 7b:3b:9a:73:c8:b0:2a:3b:7e:d2:6a:db:d3:95:c4:98:ff:0f: fa:2c:14:d9:96:45:65:ff:aa:d0:49:98:9c:c2:ec:dc:12:86: 59:df:4e:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BU1Z3Y2HZflz+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk M2MyY2M0NGItYzgyNC00OTZkLTk2ZGItMGZhN2UzMjM3OGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bXcYspagmX/3jRvk+jloufpxKwTtTxQynqb 9GMdfHmq6/qddLE77pp28FKggWFO1GsqQJV1xjzTuR5nwdJgFXsvcmWHNldvdpZM IH+mNB1/d6aXPAfYcgO/m4Njqg9vsOa6twcDEhc+tpQFfAR59AGCSFvlEDtjTs3d khSdjE3/w9DjryEUdHtly2WBnJxEdeElwEv3UKwheFEyqP4hX7G4WnRA37Upt3i9 8+SAj6mTENrqv/wrhU5GuPMn1YeM2I4DRVPg2gkWhWVMaPqjuek4D5KqnrG9vZgR b0RSUIGRVl1ieXgfhz1mniuQBiDT3rwItUDQ+Jy/lWuIb4RuYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBlXlGSIgiVW53NbNGFZnyTu2F6JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjhiMzRlYmQtMzVkZC0z NmRjLWI2NjUtMDNiMDk3ZmUyNTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEcTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACy5NjO1r6rsChxK+RN0THSakS6M2D/p6hJL/EwA/KFUYMBbb3AO0jDB Wyk2rCVhFmpPz/TVClXQabuGVvVnOW3xB7sl+6LpFNoqWVkISSQ0XKNBY9RlmHCW 1HXel2EIa598acHoLSwmwRc8lNooCFjgWEdVFot+H5zWM7l+UA5S5Nb3Vyk2NQog HgdGt6d/EHAxCbKXabw/6kIF2WyCAKiENGR5jBYgTu/EZYOYwJgwR56GCgMmsiUA vhF1Z9c5kmDIqpnJHfcmhvsLIZEnZSV5HFZaCtlctHs7mnPIsCo7ftJq29OVxJj/ D/osFNmWRWX/qtBJmJzC7NwShlnfTiI= -----END CERTIFICATE-----Generated at Fri Apr 17 19:04:22 2026 by rpki-client