$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ec0cfaf1-9dff-3bf0-b85f-e0db0d6771e0.roa File: ec0cfaf1-9dff-3bf0-b85f-e0db0d6771e0.roa (raw, json) Hash identifier: BBWuqYOHr8XqyeYJRDmDt4ev1/wUH1XUVMQ/yyJvszU= Subject key identifier: D4:B9:75:CA:96:23:8B:5B:0F:59:73:AA:1E:E2:27:10:46:38:CB:1C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D71A521C4B06B3E6ACDCAE260 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ec0cfaf1-9dff-3bf0-b85f-e0db0d6771e0.roa Signing time: Thu 09 Apr 2026 01:00:23 +0000 ROA not before: Thu 09 Apr 2026 01:00:23 +0000 ROA not after: Wed 08 Jul 2026 01:00:23 +0000 asID: 13335 IP address blocks: 172.71.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:a5:21:c4:b0:6b:3e:6a:cd:ca:e2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 9 01:00:23 2026 GMT Not After : Jul 8 01:00:23 2026 GMT Subject: CN=ab759128-e64e-43f2-8263-156addd5ec50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fc:f3:34:e9:eb:c7:79:6a:30:c0:b8:78:88: 63:9f:ff:55:cf:5d:51:18:16:a4:f7:b7:da:ee:a0: 79:f3:f1:72:66:9b:6a:1e:65:b5:ef:ba:d9:19:45: d6:32:84:31:73:94:27:db:14:1d:9c:19:42:bd:32: 07:b0:dc:98:19:9c:cd:d9:cd:cf:44:5b:67:73:13: 42:bc:5a:07:16:7e:3e:3d:c3:02:ca:5d:69:40:ee: 08:4a:c9:06:f3:dc:0e:f0:e6:b8:2f:6d:8e:c1:c4: 9b:4a:ae:45:a0:95:8f:ab:32:c3:80:e0:36:54:82: 01:57:a1:17:78:00:d1:7b:5e:4c:0d:36:4c:90:33: be:3d:37:a1:49:b5:4e:5c:52:e5:86:bf:2b:6e:9f: 12:e7:9c:1e:de:d5:7e:4e:75:91:c1:8f:fe:a2:ed: 18:3d:ef:19:d9:47:90:3d:4e:d4:ef:a2:2e:4d:2f: 4e:02:cb:28:71:94:75:db:9d:0d:a4:a2:a8:74:79: 6d:d1:da:5f:1d:2e:89:8e:37:4a:05:42:dd:41:fc: ec:e5:6e:e1:e7:10:76:38:f0:4c:23:d7:5a:c9:a1: b6:ac:32:4a:76:9c:81:96:90:1d:7f:da:9e:b4:2a: 8e:51:2b:e3:e5:35:95:d1:a5:41:b9:76:34:2b:1b: 81:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B9:75:CA:96:23:8B:5B:0F:59:73:AA:1E:E2:27:10:46:38:CB:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ec0cfaf1-9dff-3bf0-b85f-e0db0d6771e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:f6:9f:8b:da:55:f0:52:b9:ba:6f:c5:c9:69:07:3b:30:4c: e7:ad:3e:ab:b7:70:e8:f7:67:73:87:3a:6e:1b:f0:4a:83:d0: 8a:c7:f8:23:3f:fe:2f:85:18:e3:19:9c:99:fb:cf:38:d9:a4: de:f7:2d:79:bc:79:2a:86:a5:8d:2d:1e:e9:77:97:14:08:ac: e0:8f:ea:90:27:5f:a4:a6:7e:eb:b4:df:45:17:33:cd:19:c9: d7:b8:80:65:62:2d:fd:26:07:31:54:2d:39:8b:f1:f5:16:7e: 2c:5e:b0:1c:01:e6:19:fd:05:8c:ca:56:5d:c4:44:16:93:82: 77:ea:98:18:d4:db:bd:a5:5e:f6:5d:60:d0:0a:59:fb:18:bc: c2:8e:55:c9:b8:3e:5d:6d:0b:47:8b:3c:da:e8:c6:f5:1e:00: 29:b7:71:09:97:53:69:ac:c3:81:e9:13:e5:4e:82:04:6c:98: 56:ba:3b:56:61:fa:e5:c6:b2:1c:5e:13:63:8a:2d:94:a6:07: c9:8d:92:c3:9d:88:6e:04:95:b6:72:ca:80:b9:0e:16:07:64: 78:4a:1d:aa:50:e2:98:53:36:b1:e2:a2:37:2a:79:eb:dd:d4: 17:f1:de:94:6a:ee:3c:aa:55:86:9e:8e:59:3e:3c:b7:52:cf: 2d:5a:c5:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xpSHEsGs+as3K4mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwOTAxMDAyM1oXDTI2MDcwODAxMDAyM1owLzEtMCsGA1UEAxMk YWI3NTkxMjgtZTY0ZS00M2YyLTgyNjMtMTU2YWRkZDVlYzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfzzNOnrx3lqMMC4eIhjn/9Vz11RGBak97fa 7qB58/FyZptqHmW177rZGUXWMoQxc5Qn2xQdnBlCvTIHsNyYGZzN2c3PRFtncxNC vFoHFn4+PcMCyl1pQO4ISskG89wO8Oa4L22OwcSbSq5FoJWPqzLDgOA2VIIBV6EX eADRe15MDTZMkDO+PTehSbVOXFLlhr8rbp8S55we3tV+TnWRwY/+ou0YPe8Z2UeQ PU7U76IuTS9OAssocZR1250NpKKodHlt0dpfHS6JjjdKBULdQfzs5W7h5xB2OPBM I9dayaG2rDJKdpyBlpAdf9qetCqOUSvj5TWV0aVBuXY0KxuB0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNS5dcqWI4tbD1lzqh7iJxBGOMscMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZWMwY2ZhZjEtOWRmZi0z YmYwLWI4NWYtZTBkYjBkNjc3MWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMD2n4vaVfBSubpvxclpBzswTOetPqu3cOj3Z3OHOm4b8EqD0IrH+CM/ /i+FGOMZnJn7zzjZpN73LXm8eSqGpY0tHul3lxQIrOCP6pAnX6Smfuu030UXM80Z yde4gGViLf0mBzFULTmL8fUWfixesBwB5hn9BYzKVl3ERBaTgnfqmBjU272lXvZd YNAKWfsYvMKOVcm4Pl1tC0eLPNroxvUeACm3cQmXU2msw4HpE+VOggRsmFa6O1Zh +uXGshxeE2OKLZSmB8mNksOdiG4ElbZyyoC5DhYHZHhKHapQ4phTNrHiojcqeevd 1Bfx3pRq7jyqVYaejlk+PLdSzy1axaE= -----END CERTIFICATE-----Generated at Fri Apr 17 03:42:45 2026 by rpki-client