$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cad706ae-b7dd-3f7c-8794-f5ff4e7509a2.roa File: cad706ae-b7dd-3f7c-8794-f5ff4e7509a2.roa (raw, json) Hash identifier: 0Wi98V+HgILasVCLpXT5QrNCcejfOFvRvHPFTwU6G4s= Subject key identifier: FF:08:05:44:7D:74:AF:A4:AD:4E:08:EE:63:25:CE:AC:9E:BD:2D:88 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584C910701F76B714E5719DCAB00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cad706ae-b7dd-3f7c-8794-f5ff4e7509a2.roa Signing time: Sun 18 Jan 2026 14:00:39 +0000 ROA not before: Sun 18 Jan 2026 14:00:39 +0000 ROA not after: Sat 18 Apr 2026 13:00:39 +0000 asID: 13335 IP address blocks: 172.71.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:91:07:01:f7:6b:71:4e:57:19:dc:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jan 18 14:00:39 2026 GMT Not After : Apr 18 13:00:39 2026 GMT Subject: CN=21d993e1-7f37-490d-bf39-98b0e8805641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c1:a9:46:2d:5b:62:bb:ef:1c:50:05:48:cc: e5:e0:c8:79:98:90:f1:bd:51:f1:ed:36:48:d4:41: a9:9d:af:27:6b:c0:42:68:32:cd:95:ec:e3:df:6c: 00:86:c0:e1:8f:27:0a:51:f4:bb:ee:b4:82:bb:92: 91:fb:ec:10:1b:a1:4a:74:95:8a:1c:8f:be:89:89: e4:39:79:5d:0a:9d:f6:bf:94:36:21:90:c7:e6:01: dc:4d:37:21:dd:55:b8:04:35:e5:6a:be:4f:3d:32: 93:5c:b8:50:ff:80:01:80:4e:dc:5d:59:8e:de:c6: 80:90:75:a0:66:3b:e0:d2:37:0b:e4:2c:2a:e2:c8: 36:16:b8:77:89:24:6a:ef:56:8a:2f:da:7e:22:05: 43:f9:16:75:4d:bd:69:f9:64:b1:fa:81:a0:f8:5f: 63:10:61:ed:dc:03:95:29:8e:68:52:1a:9b:1c:88: 30:15:23:51:fa:a2:fe:ba:d0:ab:d3:4e:25:f4:e5: b6:ad:44:1f:37:0a:46:7d:cc:80:32:9f:2f:70:ec: 4b:d9:f8:db:0b:84:72:15:0f:4e:3c:69:32:27:8a: 03:12:a4:30:50:50:1d:39:cf:4c:95:0c:ab:cd:94: bd:01:9a:12:b8:b3:78:21:f3:c4:2b:4b:a9:84:93: 6b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:08:05:44:7D:74:AF:A4:AD:4E:08:EE:63:25:CE:AC:9E:BD:2D:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cad706ae-b7dd-3f7c-8794-f5ff4e7509a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:3d:e2:19:c3:20:2e:06:2b:64:ee:e8:3f:c7:b2:e9:14:42: 88:0d:a7:90:fe:eb:c1:e6:15:33:ad:b4:6c:53:ac:cc:2e:73: 3d:96:af:ad:96:36:00:17:d5:36:97:76:13:74:9c:fa:17:50: 19:4c:7f:f6:7c:a4:50:94:1c:65:47:e2:65:c7:45:b6:d0:c2: bc:38:e9:2b:63:57:c0:9a:ce:3f:e4:78:de:90:02:c2:53:9a: 8a:a0:d1:49:8a:cf:07:32:3c:ca:a4:67:3e:28:d3:40:14:47: b1:48:3b:fe:1d:c5:4f:f8:31:73:6a:e4:51:8c:8b:a5:cc:5c: d9:a2:0c:09:5d:77:c1:2b:6b:e1:62:35:a9:14:26:37:91:6d: cf:6d:5b:2c:88:cc:29:94:bc:52:42:cc:32:14:14:6c:eb:59: aa:1c:b3:ca:5e:ff:e1:4f:64:80:de:12:42:cf:da:5d:34:93: 81:db:1d:5c:01:e7:5d:dc:67:6e:43:0b:90:ba:a6:a3:52:7d: f6:b1:c4:46:c5:fd:e0:8f:13:1c:8e:31:92:20:50:7d:5c:d9: d8:e1:2e:5b:2c:d5:7f:b3:b9:da:f9:5c:3b:47:a4:37:d8:f6: e0:a2:58:c7:22:a6:ea:26:10:8b:77:d0:c6:3a:af:69:cf:91: ad:dd:22:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyRBwH3a3FOVxncqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDExODE0MDAzOVoXDTI2MDQxODEzMDAzOVowLzEtMCsGA1UEAxMk MjFkOTkzZTEtN2YzNy00OTBkLWJmMzktOThiMGU4ODA1NjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8GpRi1bYrvvHFAFSMzl4Mh5mJDxvVHx7TZI 1EGpna8na8BCaDLNlezj32wAhsDhjycKUfS77rSCu5KR++wQG6FKdJWKHI++iYnk OXldCp32v5Q2IZDH5gHcTTch3VW4BDXlar5PPTKTXLhQ/4ABgE7cXVmO3saAkHWg Zjvg0jcL5Cwq4sg2Frh3iSRq71aKL9p+IgVD+RZ1Tb1p+WSx+oGg+F9jEGHt3AOV KY5oUhqbHIgwFSNR+qL+utCr004l9OW2rUQfNwpGfcyAMp8vcOxL2fjbC4RyFQ9O PGkyJ4oDEqQwUFAdOc9MlQyrzZS9AZoSuLN4IfPEK0uphJNrpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP8IBUR9dK+krU4I7mMlzqyevS2IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2FkNzA2YWUtYjdkZC0z ZjdjLTg3OTQtZjVmZjRlNzUwOWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL894hnDIC4GK2Tu6D/HsukUQogNp5D+68HmFTOttGxTrMwucz2Wr62W NgAX1TaXdhN0nPoXUBlMf/Z8pFCUHGVH4mXHRbbQwrw46StjV8Cazj/keN6QAsJT moqg0UmKzwcyPMqkZz4o00AUR7FIO/4dxU/4MXNq5FGMi6XMXNmiDAldd8Era+Fi NakUJjeRbc9tWyyIzCmUvFJCzDIUFGzrWaocs8pe/+FPZIDeEkLP2l00k4HbHVwB 513cZ25DC5C6pqNSffaxxEbF/eCPExyOMZIgUH1c2djhLlss1X+zudr5XDtHpDfY 9uCiWMcipuomEIt30MY6r2nPka3dIlg= -----END CERTIFICATE-----Generated at Mon Mar 2 11:24:34 2026 by rpki-client