$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5d968880-cce8-3543-9222-a7808328b2d4.roa File: 5d968880-cce8-3543-9222-a7808328b2d4.roa (raw, json) Hash identifier: CY8QqZr0jFT+BJ0rQPPBpCzaD9+v+QG6j9njeNfevfo= Subject key identifier: E2:76:6B:5D:31:6E:0E:59:5B:F3:32:14:00:C4:2E:27:05:FA:0C:69 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D9B34EB7E9CCC1DAB19532F80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5d968880-cce8-3543-9222-a7808328b2d4.roa Signing time: Thu 23 Apr 2026 22:18:30 +0000 ROA not before: Thu 23 Apr 2026 22:18:30 +0000 ROA not after: Wed 22 Jul 2026 22:18:30 +0000 asID: 14789 IP address blocks: 172.71.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9b:34:eb:7e:9c:cc:1d:ab:19:53:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 23 22:18:30 2026 GMT Not After : Jul 22 22:18:30 2026 GMT Subject: CN=7ecc9466-3a06-4535-8718-7bfd63f4639b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cb:05:ed:00:d0:69:3a:24:a5:6c:f1:7a:92: 6f:11:10:10:da:ab:5e:5f:84:94:8c:27:8b:d7:47: 51:67:2e:1e:e8:24:f0:95:16:e0:32:f9:50:64:a3: 5d:f5:4e:59:71:6c:3c:87:4f:6e:ea:db:1e:8a:f4: 77:61:98:01:63:00:ad:20:18:e4:c1:8b:54:b8:3b: c4:e8:99:6f:cc:12:4e:26:fa:a6:7a:87:d5:54:e3: 33:42:59:7e:89:18:de:7e:60:52:bd:9a:ff:6a:9f: 93:15:7e:f8:a6:10:4b:18:cc:69:ea:f6:03:99:3e: e5:3d:8b:9a:cc:04:c3:3d:28:56:a6:95:62:69:db: db:94:fd:7f:a3:31:43:b1:13:35:6c:da:93:6c:8c: 57:fd:98:3a:9b:17:5f:fa:6a:26:6d:9c:10:ed:47: f2:3e:a9:74:1e:e6:fc:77:48:50:1d:30:e2:22:c1: 06:b1:f3:5e:35:6a:ce:8c:4b:63:eb:ce:78:f9:55: 09:97:76:eb:e4:e8:f9:68:47:2f:43:39:54:b5:a7: 67:f6:35:a4:48:f5:9d:a2:94:07:48:af:f4:51:ee: 18:f4:a9:90:48:5e:0d:35:68:4b:ca:2e:4f:1f:02: 36:02:7e:31:57:0a:b6:6e:84:70:fb:fb:37:74:ff: 67:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:76:6B:5D:31:6E:0E:59:5B:F3:32:14:00:C4:2E:27:05:FA:0C:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5d968880-cce8-3543-9222-a7808328b2d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:f4:d6:81:84:43:55:0a:80:4b:18:4b:6b:ca:b3:03:ca:33: 7d:8a:16:f2:1f:13:49:26:e8:1a:ac:1a:49:07:a0:ab:77:e8: 7e:19:04:96:ef:0b:e0:b4:43:fa:cc:19:7d:a1:5c:ed:6b:c3: 9a:35:06:6a:6e:04:79:c7:98:78:14:9f:4b:d5:96:ed:51:d3: ae:04:86:08:1b:98:4e:ce:97:7d:56:03:bb:bd:42:4b:f9:51: b5:b1:31:76:eb:d0:b2:a6:73:fe:5e:8f:9e:dc:10:f3:e7:cf: 45:c3:a9:3c:3b:fe:d1:d6:1d:03:fc:4f:78:8f:fd:61:46:0f: 66:4e:21:b1:56:d6:ef:3a:39:63:62:c6:9e:28:5d:df:58:78: 57:d2:b0:d6:46:19:29:e1:7d:ba:b7:33:e7:b1:38:4c:aa:b8: 5d:c3:27:0c:03:93:51:3c:55:b9:02:9f:68:8a:bb:78:e0:db: e4:12:01:ff:7c:22:f7:b7:52:89:48:1c:9a:db:d0:31:de:45: a8:cf:c1:06:5a:65:0e:0f:d1:62:6d:14:0d:9a:56:13:16:83: 96:93:36:98:02:44:5b:83:f0:24:dd:1c:1e:d3:0f:d5:f0:92: 79:50:92:77:89:75:75:ad:d1:20:be:c1:d3:95:7b:86:87:2a: ff:6c:57:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2bNOt+nMwdqxlTL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQyMzIyMTgzMFoXDTI2MDcyMjIyMTgzMFowLzEtMCsGA1UEAxMk N2VjYzk0NjYtM2EwNi00NTM1LTg3MTgtN2JmZDYzZjQ2MzliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0csF7QDQaTokpWzxepJvERAQ2qteX4SUjCeL 10dRZy4e6CTwlRbgMvlQZKNd9U5ZcWw8h09u6tseivR3YZgBYwCtIBjkwYtUuDvE 6JlvzBJOJvqmeofVVOMzQll+iRjefmBSvZr/ap+TFX74phBLGMxp6vYDmT7lPYua zATDPShWppViadvblP1/ozFDsRM1bNqTbIxX/Zg6mxdf+mombZwQ7UfyPql0Hub8 d0hQHTDiIsEGsfNeNWrOjEtj6854+VUJl3br5Oj5aEcvQzlUtadn9jWkSPWdopQH SK/0Ue4Y9KmQSF4NNWhLyi5PHwI2An4xVwq2boRw+/s3dP9nKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOJ2a10xbg5ZW/MyFADELicF+gxpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWQ5Njg4ODAtY2NlOC0z NTQzLTkyMjItYTc4MDgzMjhiMmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEcMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABn01oGEQ1UKgEsYS2vKswPKM32KFvIfE0km6BqsGkkHoKt36H4ZBJbv C+C0Q/rMGX2hXO1rw5o1BmpuBHnHmHgUn0vVlu1R064EhggbmE7Ol31WA7u9Qkv5 UbWxMXbr0LKmc/5ej57cEPPnz0XDqTw7/tHWHQP8T3iP/WFGD2ZOIbFW1u86OWNi xp4oXd9YeFfSsNZGGSnhfbq3M+exOEyquF3DJwwDk1E8VbkCn2iKu3jg2+QSAf98 Ive3UolIHJrb0DHeRajPwQZaZQ4P0WJtFA2aVhMWg5aTNpgCRFuD8CTdHB7TD9Xw knlQkneJdXWt0SC+wdOVe4aHKv9sV34= -----END CERTIFICATE-----Generated at Sat May 9 06:09:55 2026 by rpki-client