$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/07008b7a-798c-3192-98ef-3d4f54c8e0f9.roa File: 07008b7a-798c-3192-98ef-3d4f54c8e0f9.roa (raw, json) Hash identifier: TOEr7r+AUNxpfWnOvG9MDNyOHDMYqBDKr08x7ir7L34= Subject key identifier: 77:6F:A7:C3:2A:F7:95:6E:C8:BB:B8:91:70:BF:1B:C4:82:28:60:AA Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EF44CBA4364C70236DB5CD668 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/07008b7a-798c-3192-98ef-3d4f54c8e0f9.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 172.71.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:ba:43:64:c7:02:36:db:5c:d6:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=a3e7fb19-2006-49d0-8430-75c5b076d206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:6e:46:7e:54:51:97:3c:b4:86:d5:03:3d:c5: bb:6f:b9:dd:0d:88:b1:1c:21:56:62:c9:90:75:fd: 72:4f:44:fe:0a:cd:6a:95:8a:0b:af:7f:9f:8a:59: 0f:ec:a6:44:56:16:11:74:11:ef:d7:a4:04:a5:5a: 42:50:2d:a8:89:26:1b:8a:b1:4a:93:67:ec:a9:1e: 2e:76:ee:fa:c6:61:6b:f6:b5:3b:b9:35:23:76:30: 56:b3:93:e8:6a:2e:2f:9e:51:cd:bd:d4:0c:e5:2b: 4d:32:6e:18:e6:aa:bf:42:49:f1:90:7a:75:03:96: fe:46:7b:40:84:62:17:c9:82:43:8f:c4:34:21:7d: b7:7b:27:fa:e6:0e:40:09:24:74:f4:27:c1:50:27: 5a:97:c7:f2:95:9f:4d:8f:35:0c:0d:6c:78:a4:6d: d1:bf:51:a6:a0:79:ce:80:ab:cd:72:2b:05:8b:4a: a9:33:a5:d6:54:55:f8:51:5a:3d:79:96:d5:11:ac: c3:b5:93:58:6b:b7:5c:d3:f9:06:04:d9:d1:9a:5a: 49:07:7b:ef:8c:8e:83:bb:33:81:3b:56:76:e5:6a: 65:ce:29:ea:84:90:49:06:8b:79:3e:3e:70:38:5c: 59:1e:4a:f9:e6:a1:1a:78:d1:fe:72:b8:05:32:a0: 7b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:6F:A7:C3:2A:F7:95:6E:C8:BB:B8:91:70:BF:1B:C4:82:28:60:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/07008b7a-798c-3192-98ef-3d4f54c8e0f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:ec:c0:be:06:6a:75:b3:83:5b:0a:79:10:82:9b:28:cd:2a: ae:d2:51:38:e0:80:27:12:85:d2:7f:22:68:25:ea:35:15:5c: a7:d4:0a:75:27:fc:18:a3:32:54:f6:61:77:16:cd:ca:01:6f: c9:6a:98:71:94:7d:b9:fe:16:0b:2c:c2:84:e6:5b:4a:5c:44: 39:d7:a4:2d:d4:b5:a3:65:e5:57:94:99:9c:ca:f6:25:f3:7f: 78:d8:39:d3:1f:8d:38:61:53:09:68:b5:b0:3e:a1:44:b8:fd: 6e:cd:39:5c:3d:86:e7:b7:b5:81:4f:b0:b8:e4:1f:40:e8:b0: 98:e7:45:93:e2:9c:4c:25:ec:14:6e:23:cd:77:d7:19:68:e2: 21:46:43:13:4b:9a:33:da:e5:53:e4:0c:c1:b3:e1:89:1b:2b: d3:60:77:d9:c9:74:7e:21:f0:d5:2d:c0:d8:19:21:3d:1d:04: 25:19:67:b1:98:f0:19:37:33:b9:7a:e7:fa:00:1e:eb:8e:1a: d1:f0:96:b3:d1:1b:06:fb:de:b2:0c:0c:28:fb:43:09:93:96: c6:8c:63:9c:6f:de:30:c2:c6:bb:f6:8e:27:05:37:56:cd:b9: 14:83:09:73:05:04:71:35:dd:e3:76:00:32:3d:7e:14:e3:fd: da:a7:24:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TLpDZMcCNttc1mgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk YTNlN2ZiMTktMjAwNi00OWQwLTg0MzAtNzVjNWIwNzZkMjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl25GflRRlzy0htUDPcW7b7ndDYixHCFWYsmQ df1yT0T+Cs1qlYoLr3+filkP7KZEVhYRdBHv16QEpVpCUC2oiSYbirFKk2fsqR4u du76xmFr9rU7uTUjdjBWs5Poai4vnlHNvdQM5StNMm4Y5qq/QknxkHp1A5b+RntA hGIXyYJDj8Q0IX23eyf65g5ACSR09CfBUCdal8fylZ9NjzUMDWx4pG3Rv1GmoHnO gKvNcisFi0qpM6XWVFX4UVo9eZbVEazDtZNYa7dc0/kGBNnRmlpJB3vvjI6DuzOB O1Z25WplzinqhJBJBot5Pj5wOFxZHkr55qEaeNH+crgFMqB7RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHdvp8Mq95VuyLu4kXC/G8SCKGCqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDcwMDhiN2EtNzk4Yy0z MTkyLTk4ZWYtM2Q0ZjU0YzhlMGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEcYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfswL4GanWzg1sKeRCCmyjNKq7SUTjggCcShdJ/Imgl6jUVXKfUCnUn /BijMlT2YXcWzcoBb8lqmHGUfbn+FgsswoTmW0pcRDnXpC3UtaNl5VeUmZzK9iXz f3jYOdMfjThhUwlotbA+oUS4/W7NOVw9hue3tYFPsLjkH0DosJjnRZPinEwl7BRu I8131xlo4iFGQxNLmjPa5VPkDMGz4YkbK9Ngd9nJdH4h8NUtwNgZIT0dBCUZZ7GY 8Bk3M7l65/oAHuuOGtHwlrPRGwb73rIMDCj7QwmTlsaMY5xv3jDCxrv2jicFN1bN uRSDCXMFBHE13eN2ADI9fhTj/dqnJPM= -----END CERTIFICATE-----Generated at Tue Sep 22 10:45:21 2026 by rpki-client