$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/023c2728-c60b-35c6-bebd-293d9fa56f1a.roa File: 023c2728-c60b-35c6-bebd-293d9fa56f1a.roa (raw, json) Hash identifier: rXLd6jHG5CCWM3o4xUZ+IyFV7udgIWulkchvFiwAnqY= Subject key identifier: C6:01:E7:5E:44:F4:CF:C1:B1:A6:04:1B:A7:7F:FD:20:8E:98:2B:52 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EF44CB88E79F48B6DAA64A500 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/023c2728-c60b-35c6-bebd-293d9fa56f1a.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 172.70.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:b8:8e:79:f4:8b:6d:aa:64:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=11fb090c-20ce-4cef-ad7d-12dc4d4c674c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b5:69:e3:73:ec:11:56:87:aa:7b:3c:7c:12: c3:7a:5f:d8:85:eb:be:02:28:49:61:c3:cb:ae:38: a7:5c:e9:fe:36:ea:ce:ef:97:8c:15:47:13:63:30: 89:45:37:66:3c:7a:d1:7e:fd:9e:e7:2e:62:df:f4: 70:6b:a1:3c:a9:d5:93:15:ed:b1:f1:c5:38:e7:c0: 65:33:2e:df:f6:94:7b:6f:f8:3d:a9:5e:01:50:b3: a2:3e:db:6c:14:a4:70:97:9b:27:78:93:bd:1a:d0: 5b:45:1f:fe:9c:7c:0c:b4:dd:a8:e3:da:c4:99:3b: 64:be:bb:8d:51:48:5a:56:5a:fb:9e:7d:16:5a:cd: f6:7f:eb:cb:ad:bc:82:ad:c5:d6:cd:ed:8a:b2:5e: 93:50:d5:3d:39:7a:df:a6:75:91:ce:c8:4b:f9:a4: ab:89:52:11:82:be:5c:06:61:29:ce:35:86:3b:70: 2c:0e:2a:72:59:23:7f:3a:20:67:62:f5:b2:77:74: d7:11:94:54:75:99:7e:ff:33:bf:02:c8:1d:76:c2: 70:ea:3f:ad:aa:10:df:b4:70:de:ad:a2:33:f7:02: 12:34:30:24:50:f7:ef:ae:ca:42:fd:35:94:05:1b: c6:09:0c:d5:23:f9:8c:6a:84:2f:c8:b7:85:41:22: 6e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:01:E7:5E:44:F4:CF:C1:B1:A6:04:1B:A7:7F:FD:20:8E:98:2B:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/023c2728-c60b-35c6-bebd-293d9fa56f1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:50:26:24:09:0e:36:3f:80:7d:5e:ca:2a:de:ff:6b:94:8f: af:2c:24:38:8c:72:1c:b2:cf:be:6c:19:b1:79:89:7e:87:66: 68:28:9a:2e:92:1e:52:b6:50:14:fe:b5:57:f5:42:14:02:f1: d7:3b:d5:b6:5d:8d:1b:8c:3c:52:fb:b3:51:2f:7f:ef:93:25: ee:0b:e3:6e:9c:2d:87:ee:e7:1b:c2:27:0f:07:9d:15:4e:c0: 89:7d:f0:48:f4:44:73:e2:8d:52:fa:25:db:3c:7f:e1:d9:b0: 36:8b:9f:5b:5b:35:54:61:80:d2:15:a4:46:a6:c3:ca:b9:6f: 72:5b:a8:7f:ec:5c:a0:a8:b5:b8:c4:2e:36:48:bd:1c:15:b8: 20:bc:c0:a4:1d:0c:51:f9:3a:9f:a1:bd:05:e3:56:21:ec:09: 02:18:89:9f:1d:d9:44:67:07:42:11:9c:99:80:86:c2:ad:09: 77:6c:b8:42:7a:f3:b9:f8:2f:9d:ff:7d:e3:8e:e1:53:34:29: ee:ea:d0:c1:7e:7e:28:ea:be:9b:e2:a2:e6:78:e7:53:bc:9c: 05:4d:5b:18:1f:16:e9:7c:83:3e:63:22:10:4d:fc:05:38:88: bd:16:bd:b1:34:ef:9e:3a:e5:45:ae:7c:ce:dc:78:f4:47:e5: 59:2d:e3:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TLiOefSLbapkpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk MTFmYjA5MGMtMjBjZS00Y2VmLWFkN2QtMTJkYzRkNGM2NzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLVp43PsEVaHqns8fBLDel/Yheu+AihJYcPL rjinXOn+NurO75eMFUcTYzCJRTdmPHrRfv2e5y5i3/Rwa6E8qdWTFe2x8cU458Bl My7f9pR7b/g9qV4BULOiPttsFKRwl5sneJO9GtBbRR/+nHwMtN2o49rEmTtkvruN UUhaVlr7nn0WWs32f+vLrbyCrcXWze2Ksl6TUNU9OXrfpnWRzshL+aSriVIRgr5c BmEpzjWGO3AsDipyWSN/OiBnYvWyd3TXEZRUdZl+/zO/AsgddsJw6j+tqhDftHDe raIz9wISNDAkUPfvrspC/TWUBRvGCQzVI/mMaoQvyLeFQSJuGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMYB515E9M/BsaYEG6d//SCOmCtSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDIzYzI3MjgtYzYwYi0z NWM2LWJlYmQtMjkzZDlmYTU2ZjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNQJiQJDjY/gH1eyire/2uUj68sJDiMchyyz75sGbF5iX6HZmgomi6S HlK2UBT+tVf1QhQC8dc71bZdjRuMPFL7s1Evf++TJe4L426cLYfu5xvCJw8HnRVO wIl98Ej0RHPijVL6Jds8f+HZsDaLn1tbNVRhgNIVpEamw8q5b3JbqH/sXKCotbjE LjZIvRwVuCC8wKQdDFH5Op+hvQXjViHsCQIYiZ8d2URnB0IRnJmAhsKtCXdsuEJ6 87n4L53/feOO4VM0Ke7q0MF+fijqvpviouZ451O8nAVNWxgfFul8gz5jIhBN/AU4 iL0WvbE075465UWufM7cePRH5Vkt4ws= -----END CERTIFICATE-----Generated at Tue Sep 22 17:43:26 2026 by rpki-client