$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cad82e11-bd65-357b-97b0-8c531326d16c.roa File: cad82e11-bd65-357b-97b0-8c531326d16c.roa (raw, json) Hash identifier: TJlPwZo+c0xyLjlL2MOSSKry5xpjlcNyhNCdysg6g70= Subject key identifier: C6:25:06:C1:B5:AF:63:01:FD:51:C7:13:53:F4:26:E8:78:85:BB:78 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D71A51E04A446EB62695044C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cad82e11-bd65-357b-97b0-8c531326d16c.roa Signing time: Thu 09 Apr 2026 01:00:23 +0000 ROA not before: Thu 09 Apr 2026 01:00:23 +0000 ROA not after: Wed 08 Jul 2026 01:00:23 +0000 asID: 13335 IP address blocks: 172.70.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:a5:1e:04:a4:46:eb:62:69:50:44:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 9 01:00:23 2026 GMT Not After : Jul 8 01:00:23 2026 GMT Subject: CN=aa7437f5-2c41-4e68-abab-abaeb6ab4478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:93:50:79:38:d6:de:78:62:3e:40:66:ff:9e: ba:2f:3d:f8:e8:b0:07:07:5b:bd:07:4d:0d:4f:64: 3f:f5:0b:89:2f:0f:33:65:d8:30:80:68:a9:4a:74: 45:e1:c0:27:bd:6b:3f:29:04:62:71:8d:28:98:dc: 69:38:1b:20:a5:fe:3a:5d:94:ac:a5:dd:2b:6c:f4: da:16:a3:3e:f2:55:82:57:86:4a:20:22:db:31:f0: fb:5a:66:bb:ea:2d:6d:f9:a6:ca:e6:f3:08:ab:cd: 09:e7:42:6b:bb:de:f4:3a:9d:49:f0:45:1c:38:d5: 8c:e5:80:48:04:a6:37:d6:33:ab:18:31:00:39:0a: 6d:33:89:8b:6a:ee:56:ec:5c:1d:5d:7a:d5:21:d3: 2f:c2:0d:6c:54:15:14:0e:04:c1:50:65:b1:da:6c: a2:fe:0a:87:87:43:72:3f:6b:2d:6d:46:f6:40:dd: c7:2d:f2:f1:0c:6f:ae:78:88:57:f5:53:43:c5:6e: 1b:a4:32:ba:61:46:60:27:f5:3d:3d:d6:ca:79:d8: 15:fd:b8:5d:06:87:0d:1f:1c:2f:98:14:ab:87:be: dd:83:cf:15:1f:de:91:40:13:74:d3:6b:9c:db:32: 13:35:56:f8:65:e8:c8:fa:a4:51:4d:e6:71:fb:fc: 46:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:25:06:C1:B5:AF:63:01:FD:51:C7:13:53:F4:26:E8:78:85:BB:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cad82e11-bd65-357b-97b0-8c531326d16c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:b7:72:b1:88:d1:d7:5d:56:dc:8c:a8:df:87:25:01:6d:e4: fb:94:50:66:48:48:50:4d:5c:37:46:84:3d:e5:5d:47:f2:d9: 32:2a:b9:d4:ef:27:35:37:ee:9a:bd:32:80:59:5a:1c:5e:2b: f3:72:45:51:56:28:3c:f3:ad:14:67:f5:a1:e7:9b:44:4f:28: 02:f4:b5:e0:d9:8f:f6:20:7d:7c:8e:7f:bb:91:b4:ad:75:81: 52:67:79:58:ef:7b:fe:a5:d6:a7:f9:47:80:89:ab:59:ea:fd: 95:d6:20:d8:b7:66:2d:66:94:a2:34:63:bd:40:5b:73:9a:d8: dc:97:0f:4b:c7:56:10:f9:2a:be:65:ee:76:00:1f:88:ec:82: 39:a0:0c:25:b7:1b:fe:4c:64:fd:8e:56:43:6f:3c:a4:ea:2e: 54:41:66:81:18:26:55:ed:ae:48:14:86:e1:b1:ac:19:e2:e8: aa:2c:a6:86:5b:b9:0c:a4:0e:bc:c7:33:6b:f9:d1:8b:33:73: be:5f:c5:7f:2b:0c:2c:89:04:cc:2a:bf:7f:96:af:3c:78:1c: f4:fe:99:58:9e:d3:e7:a9:55:a0:9f:e1:4d:d0:a2:9a:fd:a3: 48:26:91:12:8c:bd:7a:d1:c8:52:6b:11:f4:6c:d6:7b:76:64: a6:13:5a:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xpR4EpEbrYmlQRMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwOTAxMDAyM1oXDTI2MDcwODAxMDAyM1owLzEtMCsGA1UEAxMk YWE3NDM3ZjUtMmM0MS00ZTY4LWFiYWItYWJhZWI2YWI0NDc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5NQeTjW3nhiPkBm/566Lz346LAHB1u9B00N T2Q/9QuJLw8zZdgwgGipSnRF4cAnvWs/KQRicY0omNxpOBsgpf46XZSspd0rbPTa FqM+8lWCV4ZKICLbMfD7Wma76i1t+abK5vMIq80J50Jru970Op1J8EUcONWM5YBI BKY31jOrGDEAOQptM4mLau5W7FwdXXrVIdMvwg1sVBUUDgTBUGWx2myi/gqHh0Ny P2stbUb2QN3HLfLxDG+ueIhX9VNDxW4bpDK6YUZgJ/U9PdbKedgV/bhdBocNHxwv mBSrh77dg88VH96RQBN002uc2zITNVb4ZejI+qRRTeZx+/xGBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMYlBsG1r2MB/VHHE1P0Juh4hbt4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2FkODJlMTEtYmQ2NS0z NTdiLTk3YjAtOGM1MzEzMjZkMTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEaEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ63crGI0dddVtyMqN+HJQFt5PuUUGZISFBNXDdGhD3lXUfy2TIqudTv JzU37pq9MoBZWhxeK/NyRVFWKDzzrRRn9aHnm0RPKAL0teDZj/YgfXyOf7uRtK11 gVJneVjve/6l1qf5R4CJq1nq/ZXWINi3Zi1mlKI0Y71AW3Oa2NyXD0vHVhD5Kr5l 7nYAH4jsgjmgDCW3G/5MZP2OVkNvPKTqLlRBZoEYJlXtrkgUhuGxrBni6KospoZb uQykDrzHM2v50Yszc75fxX8rDCyJBMwqv3+Wrzx4HPT+mVie0+epVaCf4U3Qopr9 o0gmkRKMvXrRyFJrEfRs1nt2ZKYTWtE= -----END CERTIFICATE-----Generated at Fri Apr 17 19:13:04 2026 by rpki-client