$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/220eb0a9-5964-33b9-bbc7-c2f72035fe14.roa File: 220eb0a9-5964-33b9-bbc7-c2f72035fe14.roa (raw, json) Hash identifier: 0h3iUIK+l4/kjJ7jW+MN6tXlKpuiRiK7ClTOYV6idj8= Subject key identifier: 3C:A2:13:77:6E:AF:D6:54:02:6A:72:BD:6F:4A:32:4F:82:B2:56:2C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D300A19C1F2628546B418D240 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/220eb0a9-5964-33b9-bbc7-c2f72035fe14.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 14789 IP address blocks: 172.71.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:19:c1:f2:62:85:46:b4:18:d2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=8e3cb99f-48d4-4832-8c96-70b28c34d27b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e7:7d:9e:56:d6:fc:0b:9c:fa:9e:21:af:ae: 6c:58:9f:6e:33:8b:9e:b6:e6:76:ca:23:7d:ad:4a: 0a:75:b8:56:0d:f1:b3:c7:ab:9a:e3:c5:60:94:b0: e4:11:76:1f:1e:4f:a3:46:68:dc:ba:b9:6d:ec:59: 7a:a3:ec:86:42:56:5d:cb:78:c9:ec:07:06:ad:b6: 6e:c2:26:20:c4:29:6f:ed:c3:74:b8:a9:4d:ba:45: e9:8e:29:60:a7:2d:9d:ee:d1:7e:9c:79:3c:b3:b8: 9a:3a:4f:cf:81:62:37:c2:7e:63:4a:e4:7e:a8:c8: c2:9b:89:3c:6e:e4:70:a7:89:60:8e:b0:88:9e:b5: 54:34:c8:1d:06:7b:fd:f7:cd:db:f3:85:72:5d:7b: 54:cc:e8:93:44:cf:ed:75:03:47:4f:be:7d:16:a3: 85:ab:d6:16:b2:b8:b3:0a:7e:18:59:55:fe:b9:43: 56:42:b9:8b:dc:1a:b4:c2:ba:75:13:c2:9d:9c:d5: 0a:70:a3:9a:d3:a1:49:54:e9:c2:20:06:8a:cc:c0: 89:cb:f0:a1:0f:e6:d0:6f:c1:52:22:f2:bd:b6:88: 95:b2:57:1e:c6:8f:2a:4a:29:a8:ad:07:3b:36:e6: 03:7d:cf:43:5b:7f:ae:23:21:9a:10:08:2c:1c:0a: ef:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:A2:13:77:6E:AF:D6:54:02:6A:72:BD:6F:4A:32:4F:82:B2:56:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/220eb0a9-5964-33b9-bbc7-c2f72035fe14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:e7:6a:ce:06:b9:90:fc:76:d8:ac:cd:6a:ad:f6:01:e7:ee: 8a:29:6d:13:d0:8e:db:24:cb:ad:4d:d3:65:1f:8f:b4:83:66: 92:56:1a:cf:1c:a0:00:a8:04:d7:93:bd:fa:3c:01:6c:59:73: 8f:6d:e3:c7:f6:31:9c:cf:03:70:72:64:ef:34:67:2a:d5:75: 3e:69:13:87:6d:e7:b0:55:fc:6c:da:49:53:a9:df:92:31:8a: eb:fa:eb:ad:4e:fd:93:58:e7:2c:c8:2c:ef:57:c5:07:73:f5: d1:18:2a:65:3d:ec:0c:8f:b0:aa:d6:33:45:64:12:ec:70:0c: 58:3c:f2:45:58:87:e1:7c:0d:87:c3:0b:93:d6:23:3b:1a:6e: 49:63:0f:fd:f8:ac:b8:28:3d:d2:cf:42:9d:21:93:66:99:70: 71:93:d4:76:52:cd:0e:64:e2:bd:6c:f3:3e:58:25:2b:88:af: 7b:45:b5:0c:0d:11:9b:30:ed:f6:92:aa:d6:f0:d2:c5:73:94: b6:8e:19:5e:fd:b2:4f:8c:e2:3e:6d:e6:23:42:eb:a1:fc:43: 71:22:92:03:05:66:06:aa:62:87:2f:61:84:6e:29:f5:8f:10: 96:03:a3:98:9e:1b:8d:99:c4:52:76:11:53:b8:cd:e6:18:40: 7f:06:0c:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wChnB8mKFRrQY0kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk OGUzY2I5OWYtNDhkNC00ODMyLThjOTYtNzBiMjhjMzRkMjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+d9nlbW/Auc+p4hr65sWJ9uM4uetuZ2yiN9 rUoKdbhWDfGzx6ua48VglLDkEXYfHk+jRmjcurlt7Fl6o+yGQlZdy3jJ7AcGrbZu wiYgxClv7cN0uKlNukXpjilgpy2d7tF+nHk8s7iaOk/PgWI3wn5jSuR+qMjCm4k8 buRwp4lgjrCInrVUNMgdBnv9983b84VyXXtUzOiTRM/tdQNHT759FqOFq9YWsriz Cn4YWVX+uUNWQrmL3Bq0wrp1E8KdnNUKcKOa06FJVOnCIAaKzMCJy/ChD+bQb8FS IvK9toiVslcexo8qSimorQc7NuYDfc9DW3+uIyGaEAgsHArvBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDyiE3dur9ZUAmpyvW9KMk+CslYsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjIwZWIwYTktNTk2NC0z M2I5LWJiYzctYzJmNzIwMzVmZTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLnas4GuZD8dtiszWqt9gHn7oopbRPQjtsky61N02Ufj7SDZpJWGs8c oACoBNeTvfo8AWxZc49t48f2MZzPA3ByZO80ZyrVdT5pE4dt57BV/GzaSVOp35Ix iuv6661O/ZNY5yzILO9XxQdz9dEYKmU97AyPsKrWM0VkEuxwDFg88kVYh+F8DYfD C5PWIzsabkljD/34rLgoPdLPQp0hk2aZcHGT1HZSzQ5k4r1s8z5YJSuIr3tFtQwN EZsw7faSqtbw0sVzlLaOGV79sk+M4j5t5iNC66H8Q3EikgMFZgaqYocvYYRuKfWP EJYDo5ieG42ZxFJ2EVO4zeYYQH8GDMc= -----END CERTIFICATE-----Generated at Tue Mar 24 16:49:10 2026 by rpki-client