$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7e3b1648-798c-3fb6-b348-2693d0f82407.roa File: 7e3b1648-798c-3fb6-b348-2693d0f82407.roa (raw, json) Hash identifier: uAQKCRli+C5H8ej232uSgc0Rlz3HezqY1RkK6+oNdNY= Subject key identifier: C7:B9:75:40:01:E8:54:55:BD:DD:A2:37:91:EB:D2:9C:50:27:5D:FB Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D27F2FA2A81C83CDD0A6B2A80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7e3b1648-798c-3fb6-b348-2693d0f82407.roa Signing time: Fri 13 Mar 2026 15:27:40 +0000 ROA not before: Fri 13 Mar 2026 15:27:40 +0000 ROA not after: Thu 11 Jun 2026 15:27:40 +0000 asID: 14789 IP address blocks: 172.71.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:f2:fa:2a:81:c8:3c:dd:0a:6b:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 13 15:27:40 2026 GMT Not After : Jun 11 15:27:40 2026 GMT Subject: CN=4596f24e-3146-45f3-a6cb-9f5e83cd2983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f9:1f:bf:7f:44:8a:c8:dc:db:23:6c:dc:34: d1:e7:96:ce:c0:55:23:db:c4:21:c7:92:e1:e3:e2: 86:f9:53:5b:ee:9e:70:52:c9:ce:25:be:a6:b5:59: 51:e4:43:e3:2c:28:42:8c:22:d0:c1:1c:cb:99:9a: b1:ed:d3:85:d1:49:a1:54:0c:5c:97:47:8f:5b:e5: be:35:18:d7:62:68:c8:ad:4d:19:a4:48:64:2f:d2: 8b:79:3d:0f:68:53:e3:56:d2:75:2a:05:f7:66:24: 0d:86:78:4b:09:ae:60:23:35:30:e8:2f:bd:85:85: 64:7e:83:4e:68:a9:a6:d8:b8:ad:07:ed:03:5c:5b: 1a:ce:66:85:89:80:01:6b:ac:6d:51:81:4a:e8:16: ec:41:67:ca:4c:37:5a:77:18:48:61:42:eb:0b:2c: 61:65:03:0c:6c:cc:77:4c:b4:02:40:f8:85:a5:0a: a1:3d:71:b3:05:a8:4a:80:4b:1c:e4:c9:33:54:c5: 22:0c:4e:e4:22:77:b1:19:9f:03:ea:11:df:a1:c5: f8:d6:98:16:56:d7:e4:c3:f1:40:fa:8f:e8:8c:9f: 22:5c:4b:84:91:fd:c3:4f:f6:32:ff:ca:00:37:5f: ab:94:5f:52:9f:ce:8d:5f:48:f8:6b:30:cb:ed:27: e9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:B9:75:40:01:E8:54:55:BD:DD:A2:37:91:EB:D2:9C:50:27:5D:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7e3b1648-798c-3fb6-b348-2693d0f82407.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:44:ab:b1:26:f6:88:ce:68:69:e8:cc:dd:f2:d4:4a:f8:cb: f9:42:ed:9c:b0:ff:cc:7d:84:1e:48:c3:42:83:8f:39:e2:0d: 3e:cb:7d:38:01:ae:93:84:2e:d7:98:d8:4f:20:a2:8e:e2:ab: 73:12:5d:9a:df:d9:7c:cb:9d:c9:5f:a1:d8:f0:64:60:8a:ba: ed:97:46:ed:6a:81:b0:b1:a5:14:fd:ba:ae:e6:49:bf:13:03: fc:0a:27:5e:2c:45:7e:62:bd:2c:5d:d5:de:8e:37:3f:46:22: 9c:4d:09:59:e0:de:83:33:04:90:3c:33:7b:66:5c:b4:ef:e8: d2:d4:cb:55:8c:22:d0:0e:af:4f:01:9a:6b:22:4a:ee:04:4b: ac:0a:bf:fe:65:3b:17:2d:ce:bd:63:ec:70:a1:8c:2a:0d:d1: 05:a2:75:56:39:ec:87:76:a8:2d:c4:18:94:af:df:55:ae:f5: aa:26:c7:eb:5c:ac:24:c7:1f:54:49:9b:9e:71:a7:1b:35:0a: 04:6b:54:a2:a2:66:84:7b:3e:b3:e5:c2:95:60:75:de:3d:19: 51:4d:e0:49:39:77:52:4f:1b:4a:f5:50:4d:a6:2a:39:98:18: 4f:4f:fd:69:37:3a:ed:fb:d2:c1:41:fc:e2:88:39:04:b4:54: 7c:b7:64:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0n8voqgcg83QprKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDMxMzE1Mjc0MFoXDTI2MDYxMTE1Mjc0MFowLzEtMCsGA1UEAxMk NDU5NmYyNGUtMzE0Ni00NWYzLWE2Y2ItOWY1ZTgzY2QyOTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPkfv39Eisjc2yNs3DTR55bOwFUj28Qhx5Lh 4+KG+VNb7p5wUsnOJb6mtVlR5EPjLChCjCLQwRzLmZqx7dOF0UmhVAxcl0ePW+W+ NRjXYmjIrU0ZpEhkL9KLeT0PaFPjVtJ1KgX3ZiQNhnhLCa5gIzUw6C+9hYVkfoNO aKmm2LitB+0DXFsazmaFiYABa6xtUYFK6BbsQWfKTDdadxhIYULrCyxhZQMMbMx3 TLQCQPiFpQqhPXGzBahKgEsc5MkzVMUiDE7kInexGZ8D6hHfocX41pgWVtfkw/FA +o/ojJ8iXEuEkf3DT/Yy/8oAN1+rlF9Sn86NX0j4azDL7SfpHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMe5dUAB6FRVvd2iN5Hr0pxQJ137MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvN2UzYjE2NDgtNzk4Yy0z ZmI2LWIzNDgtMjY5M2QwZjgyNDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEflMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK5Eq7Em9ojOaGnozN3y1Er4y/lC7Zyw/8x9hB5Iw0KDjzniDT7LfTgB rpOELteY2E8goo7iq3MSXZrf2XzLnclfodjwZGCKuu2XRu1qgbCxpRT9uq7mSb8T A/wKJ14sRX5ivSxd1d6ONz9GIpxNCVng3oMzBJA8M3tmXLTv6NLUy1WMItAOr08B mmsiSu4ES6wKv/5lOxctzr1j7HChjCoN0QWidVY57Id2qC3EGJSv31Wu9aomx+tc rCTHH1RJm55xpxs1CgRrVKKiZoR7PrPlwpVgdd49GVFN4Ek5d1JPG0r1UE2mKjmY GE9P/Wk3Ou370sFB/OKIOQS0VHy3ZH0= -----END CERTIFICATE-----Generated at Tue Mar 24 16:46:46 2026 by rpki-client