$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bdd425fd-07b4-38b3-b93b-19ab62fc0b0a.roa File: bdd425fd-07b4-38b3-b93b-19ab62fc0b0a.roa (raw, json) Hash identifier: S77D4A+F82SGQGorS9p0RHbhcjzuQkABktxQhEgpiuQ= Subject key identifier: 60:76:29:C9:42:77:2F:DA:21:05:97:6C:10:E5:F6:20:B4:C7:40:71 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D71A515EA922C886A033674C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bdd425fd-07b4-38b3-b93b-19ab62fc0b0a.roa Signing time: Thu 09 Apr 2026 01:00:23 +0000 ROA not before: Thu 09 Apr 2026 01:00:23 +0000 ROA not after: Wed 08 Jul 2026 01:00:23 +0000 asID: 13335 IP address blocks: 172.71.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:a5:15:ea:92:2c:88:6a:03:36:74:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 9 01:00:23 2026 GMT Not After : Jul 8 01:00:23 2026 GMT Subject: CN=97cf72a1-0470-4b26-a399-4767dd62c1cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:40:fa:4e:2d:ca:86:33:5d:fc:86:84:98:2d: 37:52:46:37:7e:dd:c6:7d:64:9b:d2:19:11:d2:51: 29:11:48:fc:d7:1f:d6:64:8e:e4:04:f4:4b:05:cf: e2:0e:93:b7:10:17:5e:a3:44:8b:5f:58:46:c6:c5: 2a:c7:dd:e6:85:76:15:47:07:af:0a:0f:10:5a:2e: 7a:87:75:cb:df:0a:a4:3f:52:68:d4:2b:75:5a:22: 98:ae:2a:55:4b:db:77:1e:4f:aa:dc:62:05:06:eb: 12:99:15:82:a1:b4:d6:26:d8:fa:17:6f:fb:6d:d3: 66:45:08:29:ee:d6:6c:98:82:b1:2b:63:55:a9:b6: d3:92:ce:53:95:cf:56:e6:90:be:f0:f5:c1:0c:76: 5e:e3:b4:cb:32:56:30:b4:42:e1:77:ae:63:74:b3: 4a:24:77:99:df:55:71:77:b6:c8:a2:3d:58:ca:44: ec:55:39:12:a5:9d:74:c3:ae:06:74:65:0d:b8:38: ca:3b:c9:32:75:8c:0b:b6:1b:d5:a5:b3:cf:df:32: 94:65:58:b9:bd:19:28:e2:74:21:54:d1:0a:2f:92: 4e:f1:e2:5d:e4:5f:bd:04:8c:07:ab:cb:b8:90:01: b8:67:e2:17:f3:16:72:3d:1a:61:94:f9:d3:e4:e7: 0f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:76:29:C9:42:77:2F:DA:21:05:97:6C:10:E5:F6:20:B4:C7:40:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bdd425fd-07b4-38b3-b93b-19ab62fc0b0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:62:a8:d7:f7:85:5c:50:16:12:52:14:a0:be:b9:d7:b8:cd: e5:41:39:67:62:e6:7e:f5:7e:4b:79:8d:14:d3:57:8f:e3:48: af:2a:2a:a5:68:2a:88:fc:64:d2:c0:34:fd:0e:f8:5c:ea:fe: b4:fb:19:ee:6a:12:91:31:ec:8a:72:e2:0f:f3:d5:f0:68:1e: 52:16:a3:8b:d0:da:04:15:be:f4:7d:3f:c4:fa:45:c7:d5:18: 9f:d7:b6:8f:76:32:7a:ae:b5:2b:cd:45:3f:7f:fa:0a:6d:2b: f8:b6:5c:74:16:ac:9a:8f:e2:2d:fc:c1:41:bf:c4:a0:f3:39: d0:8e:38:1d:97:b5:88:d2:6b:bc:5c:e3:00:cc:6c:55:3b:53: 96:5b:ca:fd:c1:62:b8:a0:5b:a4:fb:86:58:52:b4:75:e7:e4: cf:b6:c6:3b:2f:b9:16:85:15:44:bb:39:a1:71:7a:3a:18:12: d0:ff:d7:0b:ab:ab:bb:e3:f6:f0:af:3f:0f:5a:f5:58:83:6a: f3:46:63:c0:4a:99:d1:6a:1e:8a:f8:c2:e3:e5:03:92:01:fd: 1a:bd:79:03:55:b8:db:07:53:31:0d:13:93:22:b6:45:d4:2c: f8:1f:b8:65:9b:35:3b:76:bf:c4:f1:2f:60:b5:d6:ed:09:69: 58:ad:3f:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xpRXqkiyIagM2dMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwOTAxMDAyM1oXDTI2MDcwODAxMDAyM1owLzEtMCsGA1UEAxMk OTdjZjcyYTEtMDQ3MC00YjI2LWEzOTktNDc2N2RkNjJjMWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0D6Ti3KhjNd/IaEmC03UkY3ft3GfWSb0hkR 0lEpEUj81x/WZI7kBPRLBc/iDpO3EBdeo0SLX1hGxsUqx93mhXYVRwevCg8QWi56 h3XL3wqkP1Jo1Ct1WiKYripVS9t3Hk+q3GIFBusSmRWCobTWJtj6F2/7bdNmRQgp 7tZsmIKxK2NVqbbTks5Tlc9W5pC+8PXBDHZe47TLMlYwtELhd65jdLNKJHeZ31Vx d7bIoj1YykTsVTkSpZ10w64GdGUNuDjKO8kydYwLthvVpbPP3zKUZVi5vRko4nQh VNEKL5JO8eJd5F+9BIwHq8u4kAG4Z+IX8xZyPRphlPnT5OcPIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGB2KclCdy/aIQWXbBDl9iC0x0BxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYmRkNDI1ZmQtMDdiNC0z OGIzLWI5M2ItMTlhYjYyZmMwYjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEdZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZiqNf3hVxQFhJSFKC+ude4zeVBOWdi5n71fkt5jRTTV4/jSK8qKqVo Koj8ZNLANP0O+Fzq/rT7Ge5qEpEx7Ipy4g/z1fBoHlIWo4vQ2gQVvvR9P8T6RcfV GJ/Xto92MnqutSvNRT9/+gptK/i2XHQWrJqP4i38wUG/xKDzOdCOOB2XtYjSa7xc 4wDMbFU7U5Zbyv3BYrigW6T7hlhStHXn5M+2xjsvuRaFFUS7OaFxejoYEtD/1wur q7vj9vCvPw9a9ViDavNGY8BKmdFqHor4wuPlA5IB/Rq9eQNVuNsHUzENE5MitkXU LPgfuGWbNTt2v8TxL2C11u0JaVitP/I= -----END CERTIFICATE-----Generated at Fri Apr 17 16:09:12 2026 by rpki-client