$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c3b48fbb-0a32-34ba-9d91-b2eb7337344e.roa File: c3b48fbb-0a32-34ba-9d91-b2eb7337344e.roa (raw, json) Hash identifier: dsX01BtQNHPHdyMhiIgdJ2X0Z/xKB4KRJlXxgBORfgE= Subject key identifier: 0F:72:B9:22:E4:E6:4A:A5:04:C0:9F:FF:D3:25:A5:20:F1:D3:CF:CD Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D71A51FE94B8657EEC6640880 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c3b48fbb-0a32-34ba-9d91-b2eb7337344e.roa Signing time: Thu 09 Apr 2026 01:00:23 +0000 ROA not before: Thu 09 Apr 2026 01:00:23 +0000 ROA not after: Wed 08 Jul 2026 01:00:23 +0000 asID: 13335 IP address blocks: 172.70.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:a5:1f:e9:4b:86:57:ee:c6:64:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 9 01:00:23 2026 GMT Not After : Jul 8 01:00:23 2026 GMT Subject: CN=85a31e29-8468-4cae-8a46-e04c3b71b62d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d7:3f:63:df:eb:ed:5c:2e:09:82:ea:8e:22: d3:8b:08:78:54:44:0e:d2:ab:2a:d2:e7:a7:c0:1c: a2:a6:8c:86:fa:1a:bf:43:6c:34:49:4b:62:da:2e: e8:cc:2a:31:c9:cf:f9:65:db:8f:fa:dd:dc:85:4c: eb:29:cd:ac:92:fd:7e:ef:2b:af:c7:bf:c2:66:14: f2:a3:ef:f3:24:a1:d8:63:4e:16:31:05:0a:70:78: 30:ac:6e:03:1d:e8:83:33:5c:4d:25:c3:4e:ea:a1: fb:eb:bb:b5:08:a0:19:02:71:ad:c2:41:d7:68:24: 97:77:64:25:95:29:09:aa:23:c5:26:16:13:37:00: a1:16:d8:44:41:0a:27:66:4a:ea:e3:4b:81:43:14: 05:d5:68:29:a0:d0:f8:86:4c:67:ac:d9:d9:7b:71: 1c:0a:b4:06:17:b8:fa:b8:3b:d0:5d:ff:55:6e:4b: 58:ec:45:6f:5b:1f:b9:b8:7e:17:e3:ce:e3:08:c4: 3e:39:03:4c:15:d6:bb:e0:17:f2:9c:5a:f4:e7:78: c2:84:d5:0e:a7:87:80:93:4d:91:f7:3a:e9:4d:c0: 03:39:07:ce:3b:bf:00:31:9b:f3:67:1c:88:e6:60: 0a:7e:bc:73:dd:aa:93:1c:64:29:88:3b:37:1a:11: 68:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:72:B9:22:E4:E6:4A:A5:04:C0:9F:FF:D3:25:A5:20:F1:D3:CF:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c3b48fbb-0a32-34ba-9d91-b2eb7337344e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:4e:d7:19:46:4d:50:53:f0:ad:e5:67:ca:6e:cd:21:82:52: d1:d8:7c:40:72:2b:c1:c9:73:7f:b5:76:5d:a5:7f:37:ac:1d: 36:b4:f5:39:77:7d:a5:67:38:70:47:6f:78:3e:2c:13:59:97: 3a:23:bc:f3:08:26:b4:4f:0a:20:e6:a7:78:30:f7:ac:72:88: 1e:1a:a8:d8:ec:7b:cb:c2:87:50:fa:90:ee:33:d0:27:d5:b0: 93:fa:fe:8c:5f:27:24:e9:a9:50:52:7f:67:bf:82:a2:fc:6e: c0:81:19:83:9c:6c:cb:0d:89:1f:e5:b8:94:ae:b1:b0:19:ad: 27:ae:b5:d9:f2:0f:02:97:4a:54:1e:87:aa:6a:55:67:52:f1: 6c:dc:f7:2e:29:c4:3f:82:8a:fd:3c:00:16:e1:e3:c7:23:e2: d9:3e:74:d7:ff:e3:bf:f9:2e:9f:6d:22:d2:6f:b6:d0:1b:a9: b0:db:c4:ee:ff:f4:67:b0:dd:da:34:ea:06:ed:e1:ae:0b:34: 80:0b:9c:22:03:41:be:ea:ee:d8:dc:bf:d2:e0:ca:9e:5e:2c: 30:6d:25:33:a9:20:f7:f1:dd:50:fa:79:db:87:86:0e:3a:e8: fa:6e:7b:d3:7b:ed:4a:a0:d7:e9:ec:07:9e:dc:dd:16:73:98: 8f:e2:8d:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xpR/pS4ZX7sZkCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwOTAxMDAyM1oXDTI2MDcwODAxMDAyM1owLzEtMCsGA1UEAxMk ODVhMzFlMjktODQ2OC00Y2FlLThhNDYtZTA0YzNiNzFiNjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9c/Y9/r7VwuCYLqjiLTiwh4VEQO0qsq0uen wByipoyG+hq/Q2w0SUti2i7ozCoxyc/5ZduP+t3chUzrKc2skv1+7yuvx7/CZhTy o+/zJKHYY04WMQUKcHgwrG4DHeiDM1xNJcNO6qH767u1CKAZAnGtwkHXaCSXd2Ql lSkJqiPFJhYTNwChFthEQQonZkrq40uBQxQF1WgpoND4hkxnrNnZe3EcCrQGF7j6 uDvQXf9VbktY7EVvWx+5uH4X487jCMQ+OQNMFda74BfynFr053jChNUOp4eAk02R 9zrpTcADOQfOO78AMZvzZxyI5mAKfrxz3aqTHGQpiDs3GhFonQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA9yuSLk5kqlBMCf/9MlpSDx08/NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzNiNDhmYmItMGEzMi0z NGJhLTlkOTEtYjJlYjczMzczNDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARO1xlGTVBT8K3lZ8puzSGCUtHYfEByK8HJc3+1dl2lfzesHTa09Tl3 faVnOHBHb3g+LBNZlzojvPMIJrRPCiDmp3gw96xyiB4aqNjse8vCh1D6kO4z0CfV sJP6/oxfJyTpqVBSf2e/gqL8bsCBGYOcbMsNiR/luJSusbAZrSeutdnyDwKXSlQe h6pqVWdS8Wzc9y4pxD+Civ08ABbh48cj4tk+dNf/47/5Lp9tItJvttAbqbDbxO7/ 9Gew3do06gbt4a4LNIALnCIDQb7q7tjcv9Lgyp5eLDBtJTOpIPfx3VD6eduHhg46 6Ppue9N77Uqg1+nsB57c3RZzmI/ijWc= -----END CERTIFICATE-----Generated at Fri Apr 17 17:10:08 2026 by rpki-client