$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eb9c9955-2742-37c2-abee-ce50eda1bddd.roa File: eb9c9955-2742-37c2-abee-ce50eda1bddd.roa (raw, json) Hash identifier: 8rHfG2NDvMfPDMgKOk7rVmIPvnHgG5LK/zllSQw2gE4= Subject key identifier: 0D:1D:52:F6:3A:06:AC:1D:3D:60:57:8C:4F:5D:45:09:E5:D6:B7:20 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D703FF374D60A8DE6DAF01B80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eb9c9955-2742-37c2-abee-ce50eda1bddd.roa Signing time: Wed 08 Apr 2026 13:00:33 +0000 ROA not before: Wed 08 Apr 2026 13:00:33 +0000 ROA not after: Tue 07 Jul 2026 13:00:33 +0000 asID: 13335 IP address blocks: 172.70.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:3f:f3:74:d6:0a:8d:e6:da:f0:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 8 13:00:33 2026 GMT Not After : Jul 7 13:00:33 2026 GMT Subject: CN=3c4b8384-882f-43cf-a9ca-aa666597c615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:74:3d:a5:3a:71:70:2b:d5:fe:37:d6:86:6e: db:dc:0f:2e:33:46:1d:c9:3e:43:4f:ed:5b:bc:bc: 5d:7f:1e:c5:12:fc:03:4e:b6:c2:b9:14:2f:c2:57: fc:c4:04:a9:6e:8f:d6:2a:af:2f:d6:fb:1c:7a:8d: 8d:c3:7d:29:67:87:54:ab:17:05:c9:63:e0:4e:dc: 18:99:8e:21:b7:9a:a0:bd:09:35:98:0c:c8:8a:c9: 4e:ef:ab:35:b2:a4:fb:97:db:a0:ec:f3:ec:18:11: e6:1a:22:c9:d0:60:0a:ca:77:c8:75:16:e1:73:b5: 74:3a:fc:47:d2:b3:5c:af:c5:d3:0e:0e:0e:e5:9f: dd:ad:94:1b:e8:bd:48:71:28:36:cf:45:20:b4:07: f5:54:cd:f2:c8:36:22:14:82:bf:59:0b:af:6f:61: b3:34:ff:b1:c4:1f:0d:db:a4:b0:15:a5:fc:83:0a: cc:1b:a0:33:b2:16:16:d2:8a:f2:e3:b4:8c:e5:e6: f4:91:fc:d8:13:e6:68:f0:f9:9c:c0:9e:90:a3:21: 87:d5:2d:08:a7:ea:6b:db:5b:96:db:2b:f1:57:cd: 0b:cd:06:72:57:94:67:f8:ff:d2:40:37:22:73:d5: e3:05:23:d7:fd:12:e4:df:41:9a:33:30:03:e2:0a: 87:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:1D:52:F6:3A:06:AC:1D:3D:60:57:8C:4F:5D:45:09:E5:D6:B7:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eb9c9955-2742-37c2-abee-ce50eda1bddd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:d5:3b:47:cd:98:f7:ad:9b:e5:4f:8b:e6:76:cd:c4:5c:51: 00:1f:16:bf:bf:b9:52:c0:3c:27:7a:2e:6d:12:f0:0c:11:e1: b0:fd:09:15:c1:1e:1a:70:2e:0e:4e:cf:25:c3:b1:5a:f0:c9: 11:b6:64:ae:13:64:01:dd:bc:e7:14:35:19:9e:78:10:f2:b9: f9:38:18:28:af:bd:6c:40:b5:8e:f7:2e:31:80:54:4f:c0:46: 4a:c5:d6:8d:83:c4:05:be:99:21:92:43:4a:9e:4c:09:bf:d4: 09:ff:e6:5c:63:ff:a8:08:86:bd:13:81:14:e7:8d:52:d1:cd: 8b:a1:07:e2:55:0f:f6:66:36:02:86:66:1a:69:0e:25:40:31: a0:0b:62:d5:d8:1a:c6:6e:9f:9b:c9:d9:14:61:22:a2:a8:65: d3:11:2b:cc:75:c3:78:a1:e9:61:75:b9:9a:09:72:b2:a0:8f: ff:18:c9:08:21:18:1f:0d:da:32:24:3f:fd:07:8b:2a:ad:53: ab:2a:47:9f:d8:10:cf:cc:76:a9:6e:f8:30:4e:37:4d:61:d9: 5a:05:e7:2f:46:7c:4b:51:88:0f:cb:86:d1:80:1a:d5:d7:63: 39:f5:59:3e:a8:a7:b7:06:52:2a:da:e5:ea:6d:1e:d2:eb:7b: da:c3:a6:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1wP/N01gqN5trwG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk M2M0YjgzODQtODgyZi00M2NmLWE5Y2EtYWE2NjY1OTdjNjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHQ9pTpxcCvV/jfWhm7b3A8uM0YdyT5DT+1b vLxdfx7FEvwDTrbCuRQvwlf8xASpbo/WKq8v1vsceo2Nw30pZ4dUqxcFyWPgTtwY mY4ht5qgvQk1mAzIislO76s1sqT7l9ug7PPsGBHmGiLJ0GAKynfIdRbhc7V0OvxH 0rNcr8XTDg4O5Z/drZQb6L1IcSg2z0UgtAf1VM3yyDYiFIK/WQuvb2GzNP+xxB8N 26SwFaX8gwrMG6AzshYW0ory47SM5eb0kfzYE+Zo8PmcwJ6QoyGH1S0Ip+pr21uW 2yvxV80LzQZyV5Rn+P/SQDcic9XjBSPX/RLk30GaMzAD4gqHKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA0dUvY6BqwdPWBXjE9dRQnl1rcgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZWI5Yzk5NTUtMjc0Mi0z N2MyLWFiZWUtY2U1MGVkYTFiZGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEZjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnVO0fNmPetm+VPi+Z2zcRcUQAfFr+/uVLAPCd6Lm0S8AwR4bD9CRXB HhpwLg5OzyXDsVrwyRG2ZK4TZAHdvOcUNRmeeBDyufk4GCivvWxAtY73LjGAVE/A RkrF1o2DxAW+mSGSQ0qeTAm/1An/5lxj/6gIhr0TgRTnjVLRzYuhB+JVD/ZmNgKG ZhppDiVAMaALYtXYGsZun5vJ2RRhIqKoZdMRK8x1w3ih6WF1uZoJcrKgj/8YyQgh GB8N2jIkP/0HiyqtU6sqR5/YEM/Mdqlu+DBON01h2VoF5y9GfEtRiA/LhtGAGtXX Yzn1WT6op7cGUira5eptHtLre9rDpo8= -----END CERTIFICATE-----Generated at Fri Apr 17 17:56:24 2026 by rpki-client