$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e303c661-bdaf-359e-a2d9-d8a1052ef220.roa File: e303c661-bdaf-359e-a2d9-d8a1052ef220.roa (raw, json) Hash identifier: SSqeHtPvoLXdNxjowgnmNSjrJPy7lshOXTtO7xHQ0QE= Subject key identifier: 1D:9C:C7:B9:67:EE:69:A4:30:60:FC:90:C3:DD:9A:10:E1:06:04:66 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D71A5164DCA1BBED3100F1800 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e303c661-bdaf-359e-a2d9-d8a1052ef220.roa Signing time: Thu 09 Apr 2026 01:00:23 +0000 ROA not before: Thu 09 Apr 2026 01:00:23 +0000 ROA not after: Wed 08 Jul 2026 01:00:23 +0000 asID: 13335 IP address blocks: 172.71.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:a5:16:4d:ca:1b:be:d3:10:0f:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 9 01:00:23 2026 GMT Not After : Jul 8 01:00:23 2026 GMT Subject: CN=e7ae0aea-b1ee-4de9-8270-94c2a6fdf98c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1d:f2:a8:b2:d3:44:2d:9a:75:1b:cb:cd:5a: 0c:67:59:b1:b0:4e:e7:83:b0:84:8f:8f:11:c3:54: ea:30:81:24:21:67:0c:de:e2:d1:7a:f0:20:36:d5: ce:71:16:c1:21:29:e1:d8:13:45:1a:ea:cf:03:a0: 55:ab:f9:f5:a3:62:14:2f:4f:91:9a:cb:97:c7:82: a7:0d:29:39:b4:f7:56:4b:5d:3f:0f:0f:43:e6:ef: cc:85:96:8b:7c:a6:bf:fd:1b:f0:bd:a4:3b:1a:53: 2b:21:ee:d3:15:30:e0:62:c7:21:53:6e:b9:88:82: 71:9c:0e:8e:59:7d:ea:14:56:80:46:7a:a8:7d:9a: b6:6b:dd:5a:ec:d3:e1:42:88:7e:45:3b:35:3d:50: 4b:2c:43:37:42:fe:8d:d4:a8:11:31:76:c8:df:94: 7e:69:b3:49:7d:a2:f7:1f:e1:d7:2c:1f:71:60:2a: fd:93:58:a3:51:83:be:84:d1:e8:fe:54:9c:ed:f2: 70:0a:f5:f8:60:05:55:3e:ff:5f:02:1b:72:6e:8b: a5:e4:de:c1:7f:d6:80:12:4c:02:f3:c7:0c:9e:74: 0b:73:23:30:b4:42:8f:b1:e4:88:20:b5:dd:6e:92: 37:4e:69:71:ec:a4:b0:c1:81:f7:ef:5c:80:cf:14: 9b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:9C:C7:B9:67:EE:69:A4:30:60:FC:90:C3:DD:9A:10:E1:06:04:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e303c661-bdaf-359e-a2d9-d8a1052ef220.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:ff:75:d0:26:c5:7c:51:91:a5:27:c0:57:d8:fd:1a:f7:fb: d8:7b:ae:87:8a:d7:90:7c:b8:c4:dd:6e:38:e6:ca:ec:d6:c2: 14:f5:56:cd:e8:2e:38:c2:b9:e1:72:ea:34:06:29:95:44:ea: 64:81:9e:c5:20:1f:40:6f:16:89:01:e3:8d:61:50:30:0d:3b: 70:28:a1:eb:b8:64:37:5c:c7:9f:54:96:43:4e:d7:0a:ab:f9: f5:05:af:40:fa:dd:55:5b:19:2f:a6:84:9d:4d:04:35:a8:6d: f2:99:58:5c:11:f5:2f:08:76:16:52:3e:32:66:63:77:5d:27: 7d:e1:5e:d1:f8:68:6e:3a:f6:b3:31:ad:1f:3a:c9:f3:4e:d5: f9:62:b4:2c:87:31:e4:a6:bc:1d:43:b5:91:7e:35:44:0c:01: 2b:ed:9d:8d:63:36:5e:6b:0e:5b:9a:2f:12:13:4f:7f:23:14: 06:48:1a:37:c2:f2:f7:43:b6:dc:8b:f6:45:54:2f:b2:bf:21: 06:db:8e:94:85:13:05:8d:bf:54:2e:d8:0f:8c:b5:e5:70:98: 22:d0:0d:c6:22:21:58:a9:ec:73:e8:bb:95:ad:bd:35:89:1b: b0:e0:3a:03:51:39:ce:53:8e:8b:07:cd:a3:a7:4a:84:ca:5b: 55:7e:e4:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xpRZNyhu+0xAPGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwOTAxMDAyM1oXDTI2MDcwODAxMDAyM1owLzEtMCsGA1UEAxMk ZTdhZTBhZWEtYjFlZS00ZGU5LTgyNzAtOTRjMmE2ZmRmOThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtx3yqLLTRC2adRvLzVoMZ1mxsE7ng7CEj48R w1TqMIEkIWcM3uLRevAgNtXOcRbBISnh2BNFGurPA6BVq/n1o2IUL0+RmsuXx4Kn DSk5tPdWS10/Dw9D5u/MhZaLfKa//RvwvaQ7GlMrIe7TFTDgYschU265iIJxnA6O WX3qFFaARnqofZq2a91a7NPhQoh+RTs1PVBLLEM3Qv6N1KgRMXbI35R+abNJfaL3 H+HXLB9xYCr9k1ijUYO+hNHo/lSc7fJwCvX4YAVVPv9fAhtyboul5N7Bf9aAEkwC 88cMnnQLcyMwtEKPseSIILXdbpI3Tmlx7KSwwYH371yAzxSbYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB2cx7ln7mmkMGD8kMPdmhDhBgRmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZTMwM2M2NjEtYmRhZi0z NTllLWEyZDktZDhhMTA1MmVmMjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEd4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGb/ddAmxXxRkaUnwFfY/Rr3+9h7roeK15B8uMTdbjjmyuzWwhT1Vs3o LjjCueFy6jQGKZVE6mSBnsUgH0BvFokB441hUDANO3Aooeu4ZDdcx59UlkNO1wqr +fUFr0D63VVbGS+mhJ1NBDWobfKZWFwR9S8IdhZSPjJmY3ddJ33hXtH4aG469rMx rR86yfNO1flitCyHMeSmvB1DtZF+NUQMASvtnY1jNl5rDluaLxITT38jFAZIGjfC 8vdDttyL9kVUL7K/IQbbjpSFEwWNv1Qu2A+MteVwmCLQDcYiIVip7HPou5WtvTWJ G7DgOgNROc5TjosHzaOnSoTKW1V+5O4= -----END CERTIFICATE-----Generated at Fri Apr 17 15:59:35 2026 by rpki-client