$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/397f8335-5fa7-3136-8047-047c74ac1a86.roa File: 397f8335-5fa7-3136-8047-047c74ac1a86.roa (raw, json) Hash identifier: DZVBJbA9YJZ2CwNe+TDE0/GkpB5IEXQUxC3wfVtGGL0= Subject key identifier: 34:7F:68:25:C6:BD:32:E1:4F:DE:80:9D:B8:EB:29:8D:F6:41:21:33 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D33326FA34C00ECA56A310F00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/397f8335-5fa7-3136-8047-047c74ac1a86.roa Signing time: Tue 17 Mar 2026 16:09:25 +0000 ROA not before: Tue 17 Mar 2026 16:09:25 +0000 ROA not after: Mon 15 Jun 2026 16:09:25 +0000 asID: 14789 IP address blocks: 172.71.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:33:32:6f:a3:4c:00:ec:a5:6a:31:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 17 16:09:25 2026 GMT Not After : Jun 15 16:09:25 2026 GMT Subject: CN=f1d9a885-90ca-4d57-b9a4-14547984f87c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:42:fd:80:ff:02:56:3a:fc:b6:32:64:8c:8e: d9:a7:57:78:c8:c7:fd:6d:69:8a:d6:e2:18:1d:63: 73:49:9b:5d:6b:2d:71:7a:86:44:38:f9:1d:eb:96: 74:c9:2f:af:05:52:00:01:44:48:eb:f8:58:df:d7: b1:c4:a0:8a:d9:e5:f8:e0:b7:0a:e9:87:95:20:58: 0d:6b:f2:a2:05:62:8c:e2:f7:44:d2:d9:bf:d5:7a: 1a:05:69:2b:10:6f:2b:ca:90:46:9c:78:5d:c9:63: dd:59:af:93:06:2f:df:58:a6:60:ae:9b:c6:eb:ee: 7b:22:53:bf:cc:34:f6:50:64:00:c1:40:a3:ef:0c: 94:97:f4:64:41:21:55:60:ec:bd:6b:71:a2:28:a3: 40:38:fc:4f:a3:f0:ee:89:df:dd:57:48:7c:2a:73: 36:c0:f6:06:ac:62:96:a9:a5:d1:ae:2f:1b:04:8f: 40:7d:d1:33:f1:c1:96:1e:bb:6c:1d:5e:41:ca:ba: 54:ad:88:bd:db:30:3e:41:4e:1e:83:4a:ae:aa:e6: 9c:51:b6:7f:46:04:90:b3:d3:c5:e1:f5:db:f7:54: 6a:ce:9b:46:9f:96:e1:91:45:34:f5:f1:03:9c:95: aa:a1:24:fa:ec:d6:6c:46:89:57:f1:21:97:41:52: 22:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:7F:68:25:C6:BD:32:E1:4F:DE:80:9D:B8:EB:29:8D:F6:41:21:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/397f8335-5fa7-3136-8047-047c74ac1a86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:2f:91:15:7f:43:95:d5:f7:6b:f2:8c:ed:21:e6:ff:08:33: 2b:01:c4:1a:a7:1d:26:b6:8f:bd:3f:5a:a1:7b:1c:10:81:c9: a4:ff:a3:21:6f:02:b7:36:a7:45:e8:52:28:7a:5d:e6:35:5c: d4:04:a0:ff:b9:28:a0:90:4c:cc:a6:aa:02:3e:e2:3e:39:7b: 1d:c0:01:3f:1e:e7:c9:27:47:aa:d7:ab:66:9c:58:f2:ec:7f: 74:fa:e3:48:a5:ed:b1:fa:5e:a4:cf:e3:42:f0:eb:e4:58:41: 80:92:fc:91:99:81:39:a3:4c:84:7c:bf:2c:23:10:07:78:01: bf:9b:fc:39:e8:b8:9e:45:73:5c:e7:f5:10:77:64:a8:3a:8b: 33:c5:23:e2:ca:cf:06:4d:81:28:9b:70:ad:84:d2:90:bb:34: d0:75:bc:88:da:c1:4b:56:e3:cd:9f:84:c0:0b:66:4e:f7:5c: 97:2a:81:6f:11:51:75:92:3c:b2:e6:48:de:ec:44:2b:5e:c1: f5:e9:f1:d8:c8:9f:22:8f:b9:ff:de:36:1c:e4:da:40:01:bf: eb:ca:a6:07:b7:1a:2b:72:b5:c4:6e:9b:51:6a:a8:ee:17:af: 29:51:04:9b:8a:6e:a5:13:db:fb:9b:5f:79:dc:db:f2:a0:56: 9e:d8:bb:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0zMm+jTADspWoxDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDMxNzE2MDkyNVoXDTI2MDYxNTE2MDkyNVowLzEtMCsGA1UEAxMk ZjFkOWE4ODUtOTBjYS00ZDU3LWI5YTQtMTQ1NDc5ODRmODdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEL9gP8CVjr8tjJkjI7Zp1d4yMf9bWmK1uIY HWNzSZtday1xeoZEOPkd65Z0yS+vBVIAAURI6/hY39exxKCK2eX44LcK6YeVIFgN a/KiBWKM4vdE0tm/1XoaBWkrEG8rypBGnHhdyWPdWa+TBi/fWKZgrpvG6+57IlO/ zDT2UGQAwUCj7wyUl/RkQSFVYOy9a3GiKKNAOPxPo/Duid/dV0h8KnM2wPYGrGKW qaXRri8bBI9AfdEz8cGWHrtsHV5ByrpUrYi92zA+QU4eg0ququacUbZ/RgSQs9PF 4fXb91RqzptGn5bhkUU09fEDnJWqoST67NZsRolX8SGXQVIifwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDR/aCXGvTLhT96AnbjrKY32QSEzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzk3ZjgzMzUtNWZhNy0z MTM2LTgwNDctMDQ3Yzc0YWMxYTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEeiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIvkRV/Q5XV92vyjO0h5v8IMysBxBqnHSa2j70/WqF7HBCByaT/oyFv Arc2p0XoUih6XeY1XNQEoP+5KKCQTMymqgI+4j45ex3AAT8e58knR6rXq2acWPLs f3T640il7bH6XqTP40Lw6+RYQYCS/JGZgTmjTIR8vywjEAd4Ab+b/DnouJ5Fc1zn 9RB3ZKg6izPFI+LKzwZNgSibcK2E0pC7NNB1vIjawUtW482fhMALZk73XJcqgW8R UXWSPLLmSN7sRCtewfXp8djInyKPuf/eNhzk2kABv+vKpge3GitytcRum1FqqO4X rylRBJuKbqUT2/ubX3nc2/KgVp7Yu1I= -----END CERTIFICATE-----Generated at Tue Mar 24 16:46:47 2026 by rpki-client