$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f401d20b-b849-33ad-af73-dd3bd8f91b11.roa File: f401d20b-b849-33ad-af73-dd3bd8f91b11.roa (raw, json) Hash identifier: KqqDCpu0BtccbheqvE4n7cCoEHeTqzH8EnDB9eq87/4= Subject key identifier: 36:57:BA:F8:D3:6F:59:3A:0D:78:19:0D:0B:CC:F8:67:ED:39:70:5F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D703FF2E1EA7F87ECEB587780 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f401d20b-b849-33ad-af73-dd3bd8f91b11.roa Signing time: Wed 08 Apr 2026 13:00:33 +0000 ROA not before: Wed 08 Apr 2026 13:00:33 +0000 ROA not after: Tue 07 Jul 2026 13:00:33 +0000 asID: 13335 IP address blocks: 172.70.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:3f:f2:e1:ea:7f:87:ec:eb:58:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 8 13:00:33 2026 GMT Not After : Jul 7 13:00:33 2026 GMT Subject: CN=8e387703-d22f-40e4-853f-2a4f7677622d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b6:5b:fb:5f:78:f6:27:e6:b1:8b:0c:09:9c: 52:0c:1f:c0:a0:67:32:9e:c5:a2:0e:06:ae:cc:b6: 29:cd:7d:d2:f0:81:d4:1a:6d:ff:6e:73:c9:63:a9: 42:d0:96:29:14:e8:21:9d:91:f8:f4:47:30:6e:cf: 05:a0:78:85:7b:17:14:74:f6:a1:4e:ff:45:20:65: cf:64:df:d7:17:c4:0e:f2:68:c0:8f:1f:36:a9:28: c6:51:b0:a6:ee:d2:7d:95:32:46:fc:5d:65:92:61: 0a:30:4d:fb:f1:01:ce:0c:21:f4:e2:65:a2:66:e8: bf:62:a8:63:9d:a4:e1:60:a0:4e:1d:86:a4:06:52: c1:48:24:4d:34:79:9b:52:7a:c7:d3:4b:38:31:09: 9e:cd:ba:99:1b:08:a0:72:7d:1c:7d:49:33:8b:dc: 2a:c1:b4:96:dc:dc:95:c9:c8:10:12:6d:42:08:1d: 1b:97:2e:a1:e0:a0:20:81:f1:88:25:81:23:8f:e8: a3:31:93:b0:0b:73:3d:6b:d4:85:d8:e4:3f:63:f5: af:18:40:79:bd:fe:d7:f8:78:1e:e8:f8:bb:dc:e0: a8:94:50:e1:d0:47:72:f2:b2:be:2c:94:83:44:f9: 15:bc:b6:31:81:25:0a:12:d6:58:84:af:25:3a:b4: 05:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:57:BA:F8:D3:6F:59:3A:0D:78:19:0D:0B:CC:F8:67:ED:39:70:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f401d20b-b849-33ad-af73-dd3bd8f91b11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:68:b9:25:c2:ba:14:0f:94:17:e4:15:b9:a4:a0:76:c2:6f: ff:d3:0a:15:cf:27:6a:45:bb:b4:0f:57:df:28:bd:4a:48:01: 20:a2:96:6d:49:67:c1:a3:8d:ca:1d:b4:b3:60:10:c5:9f:17: dd:89:b8:f7:e2:7a:af:bf:1e:e0:e0:83:2b:7f:6f:6b:a9:27: fa:51:3c:4a:f5:fe:6d:ba:fa:e6:cb:8e:0d:eb:a2:20:a0:87: bb:32:14:22:2b:63:de:77:14:dc:6d:92:c4:4e:25:c7:bc:b9: dd:cc:e8:b0:88:98:21:92:50:77:18:33:e9:2e:ad:4f:2b:45: 29:a2:4f:af:4c:00:d3:27:9a:03:7d:60:cc:16:de:24:15:f4: d0:5b:69:21:bb:41:4c:92:96:63:6d:4a:2e:0e:19:4a:99:ce: 6f:c0:19:51:53:f0:50:10:37:e6:00:44:29:74:0e:7b:0e:20: 7d:cc:fc:cd:07:c4:4b:45:b6:eb:af:55:d5:a5:79:bd:64:57: 64:c3:1c:bc:b0:a3:75:a7:23:fb:14:5d:aa:b3:a9:25:62:93: c8:ee:ff:de:33:db:a9:3c:44:f3:53:fb:80:62:52:60:74:d1: 6f:88:53:07:c0:3e:08:72:54:9b:3f:cb:09:0c:d0:6e:2a:2a: 87:43:71:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1wP/Lh6n+H7OtYd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk OGUzODc3MDMtZDIyZi00MGU0LTg1M2YtMmE0Zjc2Nzc2MjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbZb+1949ifmsYsMCZxSDB/AoGcynsWiDgau zLYpzX3S8IHUGm3/bnPJY6lC0JYpFOghnZH49Ecwbs8FoHiFexcUdPahTv9FIGXP ZN/XF8QO8mjAjx82qSjGUbCm7tJ9lTJG/F1lkmEKME378QHODCH04mWiZui/Yqhj naThYKBOHYakBlLBSCRNNHmbUnrH00s4MQmezbqZGwigcn0cfUkzi9wqwbSW3NyV ycgQEm1CCB0bly6h4KAggfGIJYEjj+ijMZOwC3M9a9SF2OQ/Y/WvGEB5vf7X+Hge 6Pi73OColFDh0Edy8rK+LJSDRPkVvLYxgSUKEtZYhK8lOrQFlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZXuvjTb1k6DXgZDQvM+GftOXBfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjQwMWQyMGItYjg0OS0z M2FkLWFmNzMtZGQzYmQ4ZjkxYjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEajMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZouSXCuhQPlBfkFbmkoHbCb//TChXPJ2pFu7QPV98ovUpIASCilm1J Z8GjjcodtLNgEMWfF92JuPfieq+/HuDggyt/b2upJ/pRPEr1/m26+ubLjg3roiCg h7syFCIrY953FNxtksROJce8ud3M6LCImCGSUHcYM+kurU8rRSmiT69MANMnmgN9 YMwW3iQV9NBbaSG7QUySlmNtSi4OGUqZzm/AGVFT8FAQN+YARCl0DnsOIH3M/M0H xEtFtuuvVdWleb1kV2TDHLywo3WnI/sUXaqzqSVik8ju/94z26k8RPNT+4BiUmB0 0W+IUwfAPghyVJs/ywkM0G4qKodDcc8= -----END CERTIFICATE-----Generated at Fri Apr 17 18:40:23 2026 by rpki-client