$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cab9fa92-3d96-386a-992f-f364a09af8b3.roa File: cab9fa92-3d96-386a-992f-f364a09af8b3.roa (raw, json) Hash identifier: jg/wIQi68UlRBbxm8yb0nllyi/xKd+TjlDsvL5N4460= Subject key identifier: 59:FE:74:E2:FE:F0:7E:1C:56:C1:31:A5:D1:C1:16:91:09:8D:63:B6 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D71A51249F864CE27588C2B80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cab9fa92-3d96-386a-992f-f364a09af8b3.roa Signing time: Thu 09 Apr 2026 01:00:23 +0000 ROA not before: Thu 09 Apr 2026 01:00:23 +0000 ROA not after: Wed 08 Jul 2026 01:00:23 +0000 asID: 13335 IP address blocks: 172.70.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:a5:12:49:f8:64:ce:27:58:8c:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 9 01:00:23 2026 GMT Not After : Jul 8 01:00:23 2026 GMT Subject: CN=408b2f41-312e-4d20-9b99-8d2d7579b88f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:95:85:f4:2a:ce:3e:b3:50:26:7e:86:f3:28: 62:5b:ef:e2:de:22:b3:80:54:51:bf:43:cd:3d:b3: 12:d0:62:6c:f7:06:01:dd:2d:49:2e:ba:aa:0c:60: 8a:b1:20:f2:6f:ac:db:f7:ff:b7:72:26:ef:6c:d2: d7:18:22:58:75:ca:87:10:67:18:79:ac:17:7c:d6: 15:07:ba:2c:f2:73:c9:4f:94:c7:e4:b6:4f:83:be: f8:ea:98:98:4b:ae:31:5d:33:60:f8:9d:31:ba:2e: 6d:06:79:80:64:92:aa:7f:57:57:f5:1c:fc:51:cf: ff:eb:2f:56:c6:52:ee:68:f5:65:4f:72:55:53:5d: 08:24:a1:85:09:11:8f:88:83:f6:26:ac:33:c3:05: fd:08:68:fb:9a:ca:d5:b0:87:0b:0d:66:41:54:ec: 0f:5e:bd:17:bc:bd:1a:0c:cb:0d:3e:67:fb:05:0d: 14:c6:d6:54:74:68:c0:9f:f1:75:14:53:e5:17:d8: a5:5a:9e:9d:bb:e8:8b:20:af:f9:01:b2:db:da:ed: 97:81:a4:75:fc:c1:f2:f6:58:39:b7:19:98:5d:53: e1:f5:fd:1f:f8:10:29:42:f0:6b:21:4a:3f:54:47: f0:bd:44:66:4e:76:ce:83:09:bc:8a:9e:b9:17:75: 1d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:FE:74:E2:FE:F0:7E:1C:56:C1:31:A5:D1:C1:16:91:09:8D:63:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cab9fa92-3d96-386a-992f-f364a09af8b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:ab:c9:73:8b:09:b5:7b:20:2e:89:c3:f0:29:b1:0b:e5:e9: 7f:8c:f0:83:87:49:e5:17:fc:7f:8e:e0:a1:95:66:6f:53:6b: 01:fa:d3:e8:a1:a1:0a:bc:51:33:39:6c:8e:51:32:ba:e9:d2: 3e:35:19:da:41:6a:d8:53:27:aa:70:ef:d9:60:19:fd:09:0d: 6b:56:5f:ff:a2:b2:5f:50:17:dd:55:65:93:f4:d5:1c:8a:ed: d6:79:63:58:fa:96:17:d7:c9:7d:29:d8:e1:ec:9f:67:82:44: 25:c1:d8:8e:f8:af:a0:ea:eb:56:59:ab:f7:35:52:90:ce:57: b3:7a:51:d4:5e:c5:6a:8a:25:41:69:62:e2:e8:6f:13:a0:c3: 40:3a:fb:a1:a5:30:5d:5c:49:99:2b:ac:68:ab:cb:67:67:2c: f2:a2:54:f6:ce:ee:72:7b:de:9c:ab:72:3e:6f:d2:e9:22:53: 6b:13:27:98:b4:1b:27:1c:87:9a:38:8c:d9:28:02:67:c5:14: 54:3a:91:4a:bb:47:e6:ea:37:45:69:b2:e1:ec:bb:8a:92:9a: 4a:53:0d:c1:4d:9a:4d:e6:c0:81:60:a8:8f:91:0c:69:ed:a0: ce:05:94:04:64:0a:2d:22:9a:f3:0c:bb:39:c3:2c:50:b5:c1: 2f:5c:0b:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xpRJJ+GTOJ1iMK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwOTAxMDAyM1oXDTI2MDcwODAxMDAyM1owLzEtMCsGA1UEAxMk NDA4YjJmNDEtMzEyZS00ZDIwLTliOTktOGQyZDc1NzliODhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipWF9CrOPrNQJn6G8yhiW+/i3iKzgFRRv0PN PbMS0GJs9wYB3S1JLrqqDGCKsSDyb6zb9/+3cibvbNLXGCJYdcqHEGcYeawXfNYV B7os8nPJT5TH5LZPg7746piYS64xXTNg+J0xui5tBnmAZJKqf1dX9Rz8Uc//6y9W xlLuaPVlT3JVU10IJKGFCRGPiIP2JqwzwwX9CGj7msrVsIcLDWZBVOwPXr0XvL0a DMsNPmf7BQ0UxtZUdGjAn/F1FFPlF9ilWp6du+iLIK/5AbLb2u2XgaR1/MHy9lg5 txmYXVPh9f0f+BApQvBrIUo/VEfwvURmTnbOgwm8ip65F3Ud5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFn+dOL+8H4cVsExpdHBFpEJjWO2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2FiOWZhOTItM2Q5Ni0z ODZhLTk5MmYtZjM2NGEwOWFmOGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEZ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL6ryXOLCbV7IC6Jw/ApsQvl6X+M8IOHSeUX/H+O4KGVZm9TawH60+ih oQq8UTM5bI5RMrrp0j41GdpBathTJ6pw79lgGf0JDWtWX/+isl9QF91VZZP01RyK 7dZ5Y1j6lhfXyX0p2OHsn2eCRCXB2I74r6Dq61ZZq/c1UpDOV7N6UdRexWqKJUFp YuLobxOgw0A6+6GlMF1cSZkrrGiry2dnLPKiVPbO7nJ73pyrcj5v0ukiU2sTJ5i0 Gycch5o4jNkoAmfFFFQ6kUq7R+bqN0VpsuHsu4qSmkpTDcFNmk3mwIFgqI+RDGnt oM4FlARkCi0imvMMuznDLFC1wS9cC4c= -----END CERTIFICATE-----Generated at Fri Apr 17 01:58:54 2026 by rpki-client