$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d2baaa42-f7aa-3e66-a527-f7a41a923145.roa File: d2baaa42-f7aa-3e66-a527-f7a41a923145.roa (raw, json) Hash identifier: BSompq1uBcmcRbyo98XJsnA0chlpy+rQXC3Fb3S9h/4= Subject key identifier: D0:A3:AF:C6:6A:03:7D:66:25:57:B4:C7:A1:AA:86:D6:38:D9:1B:3A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D71A51DEC3BC999DA024F1840 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d2baaa42-f7aa-3e66-a527-f7a41a923145.roa Signing time: Thu 09 Apr 2026 01:00:23 +0000 ROA not before: Thu 09 Apr 2026 01:00:23 +0000 ROA not after: Wed 08 Jul 2026 01:00:23 +0000 asID: 13335 IP address blocks: 172.70.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:a5:1d:ec:3b:c9:99:da:02:4f:18:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 9 01:00:23 2026 GMT Not After : Jul 8 01:00:23 2026 GMT Subject: CN=e431c592-7efa-4de2-a982-ea4d5e9073e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:79:63:8d:e0:21:17:ae:0c:8b:8c:c8:f6:b0: 30:45:26:a6:36:2e:84:ad:72:5f:1b:c9:8d:e3:e8: 74:b8:54:96:8e:40:52:28:30:bf:c5:ec:d3:af:d4: d9:80:a6:90:9e:3d:5e:bc:2c:87:21:b1:7f:f1:56: 5f:a8:fe:bd:ea:03:2c:2a:60:e3:18:b0:81:4a:5f: c9:1d:7a:55:5d:e0:41:23:85:c9:b7:54:35:26:e2: bc:a2:82:f2:72:b2:99:25:da:54:47:ac:8f:f7:8a: a5:d2:96:f5:42:a0:8b:37:62:c6:a4:a4:12:ab:0b: 13:28:64:07:f3:71:2e:4b:bc:d2:46:65:e5:cd:d4: 23:7f:3f:72:54:b5:50:7c:ff:b2:d0:15:db:72:c8: f0:98:a8:e4:db:4f:8a:79:f8:da:22:6d:43:8e:38: 08:a6:8b:b0:9c:a2:35:fb:c8:d7:83:7f:5e:32:24: 03:ea:5f:f9:b6:c1:aa:90:88:86:ab:8b:80:53:81: 4b:02:f6:8d:8f:28:f3:eb:72:d2:7f:67:8a:60:53: 87:2f:8e:04:cf:81:68:69:df:2d:63:0c:86:05:5a: 61:f0:43:88:92:24:d9:a3:43:df:ec:ba:db:a1:93: 70:3f:93:ad:af:9d:52:d6:54:1a:2a:47:57:cd:23: 84:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A3:AF:C6:6A:03:7D:66:25:57:B4:C7:A1:AA:86:D6:38:D9:1B:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d2baaa42-f7aa-3e66-a527-f7a41a923145.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:2e:ed:eb:b2:7f:a6:aa:fd:59:90:3c:3a:c7:a8:09:0e:1f: 8a:3a:44:7a:60:3a:89:4a:cb:9d:d9:8f:68:7f:8b:cc:ba:02: 10:61:ac:90:c7:43:1d:89:ce:00:2a:1b:01:46:f3:b5:0a:fc: 09:f8:4c:88:50:87:ab:b0:07:bf:21:e8:44:c8:fd:d4:1a:77: cb:82:fe:a1:69:11:fe:25:26:10:b9:d3:98:3e:1c:97:a5:2f: 29:d4:f6:37:ff:94:fc:45:80:50:1d:ac:7c:18:d6:07:df:c6: dc:7a:b7:2b:a7:dc:ee:c0:58:72:91:8e:54:1d:47:3c:5c:cc: f9:e6:f7:6e:cc:38:f8:bf:a6:40:ee:f9:fc:11:e8:df:99:66: 05:e8:16:1c:da:03:8a:c6:ed:73:22:20:43:ba:63:88:2b:50: 7f:02:3d:ee:a6:d5:0d:af:b5:a9:ef:ba:5c:0c:aa:cb:91:9d: 54:70:bf:43:60:ae:05:88:be:b3:61:5e:68:e1:8f:19:35:da: 2c:24:80:a3:52:a7:b8:f3:c1:75:1b:f9:f5:92:29:0d:35:bb: 34:5e:4b:0b:9f:cb:bc:8f:07:26:b3:5c:6e:8b:44:1f:d2:74: aa:69:cb:69:a2:e9:16:79:c4:5b:12:44:30:94:48:74:e2:3f: e4:a4:78:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xpR3sO8mZ2gJPGEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwOTAxMDAyM1oXDTI2MDcwODAxMDAyM1owLzEtMCsGA1UEAxMk ZTQzMWM1OTItN2VmYS00ZGUyLWE5ODItZWE0ZDVlOTA3M2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXljjeAhF64Mi4zI9rAwRSamNi6ErXJfG8mN 4+h0uFSWjkBSKDC/xezTr9TZgKaQnj1evCyHIbF/8VZfqP696gMsKmDjGLCBSl/J HXpVXeBBI4XJt1Q1JuK8ooLycrKZJdpUR6yP94ql0pb1QqCLN2LGpKQSqwsTKGQH 83EuS7zSRmXlzdQjfz9yVLVQfP+y0BXbcsjwmKjk20+KefjaIm1DjjgIpouwnKI1 +8jXg39eMiQD6l/5tsGqkIiGq4uAU4FLAvaNjyjz63LSf2eKYFOHL44Ez4Foad8t YwyGBVph8EOIkiTZo0Pf7LrboZNwP5Otr51S1lQaKkdXzSOExwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNCjr8ZqA31mJVe0x6GqhtY42Rs6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDJiYWFhNDItZjdhYS0z ZTY2LWE1MjctZjdhNDFhOTIzMTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEaBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKIu7euyf6aq/VmQPDrHqAkOH4o6RHpgOolKy53Zj2h/i8y6AhBhrJDH Qx2JzgAqGwFG87UK/An4TIhQh6uwB78h6ETI/dQad8uC/qFpEf4lJhC505g+HJel LynU9jf/lPxFgFAdrHwY1gffxtx6tyun3O7AWHKRjlQdRzxczPnm927MOPi/pkDu +fwR6N+ZZgXoFhzaA4rG7XMiIEO6Y4grUH8CPe6m1Q2vtanvulwMqsuRnVRwv0Ng rgWIvrNhXmjhjxk12iwkgKNSp7jzwXUb+fWSKQ01uzReSwufy7yPByazXG6LRB/S dKppy2mi6RZ5xFsSRDCUSHTiP+SkeIs= -----END CERTIFICATE-----Generated at Sat Apr 18 03:25:49 2026 by rpki-client