$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bba62409-0d30-3c99-91d2-8eb89a254279.roa File: bba62409-0d30-3c99-91d2-8eb89a254279.roa (raw, json) Hash identifier: x5pRyA+iCfHtUTuR1dVPU6g3V1oFDlpGbarsMAf+3eU= Subject key identifier: 1A:B1:D5:6D:90:2E:6D:D7:8E:F8:CD:22:D8:46:20:61:BC:F0:11:96 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D71A51FBAA7635327A94137C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bba62409-0d30-3c99-91d2-8eb89a254279.roa Signing time: Thu 09 Apr 2026 01:00:23 +0000 ROA not before: Thu 09 Apr 2026 01:00:23 +0000 ROA not after: Wed 08 Jul 2026 01:00:23 +0000 asID: 13335 IP address blocks: 172.70.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:a5:1f:ba:a7:63:53:27:a9:41:37:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 9 01:00:23 2026 GMT Not After : Jul 8 01:00:23 2026 GMT Subject: CN=872cce6c-5624-4cac-a964-a101b46c4638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:09:af:ed:63:d2:aa:91:b6:27:86:ea:24:18: 53:4c:48:b4:d5:d5:4a:e6:7e:3f:6a:af:ce:c1:de: b5:23:ca:d2:8f:6a:c1:03:eb:57:29:92:39:39:10: c7:90:c6:1f:c2:4a:ce:2a:7a:2a:d1:8d:67:60:4a: 4c:61:79:8e:e9:be:10:1e:08:91:62:c3:50:f4:66: c5:02:75:0e:74:47:ff:36:c5:ec:c6:b8:4a:d3:6f: 35:ec:3e:26:2a:df:f6:a5:60:bf:fa:82:07:9b:06: 44:5f:b8:0f:2c:d6:b5:52:c9:40:66:09:95:e0:3e: c5:0c:4c:c0:42:78:4b:ef:dc:84:71:b2:15:41:51: d2:32:bf:3d:d0:fb:cd:4c:87:6d:5d:56:48:3b:1d: 75:38:69:86:e0:18:8e:29:00:91:fc:15:6b:9f:5b: b2:d1:10:dd:94:58:6c:13:82:75:b7:2b:4b:d2:e6: 2a:3e:cc:f4:ac:56:52:4d:49:c5:1b:3d:02:f0:5e: 10:f3:40:b1:b6:9e:ec:5d:b0:d1:53:74:5d:c4:2b: 94:1a:ae:60:ea:a6:a1:3c:05:74:c0:5d:22:ee:5c: 57:e8:55:d1:df:93:75:af:16:79:ea:2c:41:1c:8b: 01:98:0d:59:0c:06:4d:8d:ad:71:2d:02:e5:eb:67: 59:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B1:D5:6D:90:2E:6D:D7:8E:F8:CD:22:D8:46:20:61:BC:F0:11:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bba62409-0d30-3c99-91d2-8eb89a254279.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:e1:62:04:1b:a6:27:04:6e:39:60:35:33:5e:6c:f4:fa:4d: f1:65:9f:89:fa:a7:29:dd:0e:b2:da:9c:d9:e7:37:bc:a0:e0: 46:eb:a6:5c:11:ea:46:52:ee:54:1f:77:10:90:a9:49:6b:b1: e5:4e:6c:14:7b:34:2e:2b:df:a5:12:2e:94:da:04:6e:4d:c0: 40:9d:9b:ff:ed:c0:51:8b:41:4a:f8:01:4d:67:b3:bf:d5:a7: 03:56:41:5b:f4:0b:06:f5:0b:18:64:13:81:fd:b5:a5:32:41: 9a:c8:f5:69:3b:d8:56:d9:07:c9:de:d8:a1:ac:fa:f9:36:e7: dc:39:44:4a:33:6f:a9:2b:4a:73:2f:fa:b2:ba:6a:07:af:1b: 80:43:dc:b2:3c:da:82:5a:5b:d0:52:60:6f:be:49:65:3c:b4: 8a:97:bd:d2:51:28:04:e3:11:81:29:00:62:9d:27:02:af:84: a9:50:bd:3c:3d:c4:9d:1f:9e:84:ec:f1:eb:0d:56:59:a8:b0: 5b:37:75:9d:73:34:56:79:b3:b3:e0:5b:c7:0e:53:f9:dd:2f: ff:4d:f7:53:bb:09:5e:be:31:61:4f:fb:cf:46:a7:86:ec:f0: cf:7b:38:32:41:b5:c2:4a:2e:45:e4:55:95:66:6d:ab:d3:b4: 5a:1f:21:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xpR+6p2NTJ6lBN8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwOTAxMDAyM1oXDTI2MDcwODAxMDAyM1owLzEtMCsGA1UEAxMk ODcyY2NlNmMtNTYyNC00Y2FjLWE5NjQtYTEwMWI0NmM0NjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQmv7WPSqpG2J4bqJBhTTEi01dVK5n4/aq/O wd61I8rSj2rBA+tXKZI5ORDHkMYfwkrOKnoq0Y1nYEpMYXmO6b4QHgiRYsNQ9GbF AnUOdEf/NsXsxrhK02817D4mKt/2pWC/+oIHmwZEX7gPLNa1UslAZgmV4D7FDEzA QnhL79yEcbIVQVHSMr890PvNTIdtXVZIOx11OGmG4BiOKQCR/BVrn1uy0RDdlFhs E4J1tytL0uYqPsz0rFZSTUnFGz0C8F4Q80Cxtp7sXbDRU3RdxCuUGq5g6qahPAV0 wF0i7lxX6FXR35N1rxZ56ixBHIsBmA1ZDAZNja1xLQLl62dZ6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBqx1W2QLm3XjvjNIthGIGG88BGWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYmJhNjI0MDktMGQzMC0z Yzk5LTkxZDItOGViODlhMjU0Mjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKrhYgQbpicEbjlgNTNebPT6TfFln4n6pyndDrLanNnnN7yg4EbrplwR 6kZS7lQfdxCQqUlrseVObBR7NC4r36USLpTaBG5NwECdm//twFGLQUr4AU1ns7/V pwNWQVv0Cwb1CxhkE4H9taUyQZrI9Wk72FbZB8ne2KGs+vk259w5REozb6krSnMv +rK6agevG4BD3LI82oJaW9BSYG++SWU8tIqXvdJRKATjEYEpAGKdJwKvhKlQvTw9 xJ0fnoTs8esNVlmosFs3dZ1zNFZ5s7PgW8cOU/ndL/9N91O7CV6+MWFP+89Gp4bs 8M97ODJBtcJKLkXkVZVmbavTtFofIZw= -----END CERTIFICATE-----Generated at Fri Apr 17 22:49:08 2026 by rpki-client