$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/107d19f7-1ace-3d52-afa1-f47225a02ca7.roa File: 107d19f7-1ace-3d52-afa1-f47225a02ca7.roa (raw, json) Hash identifier: bWs7sojhCE9Ge4gzV3mLOuxiFV7Px5MRsksGhCVfQrY= Subject key identifier: 49:F4:F8:AA:47:98:74:0C:ED:C4:FA:C2:18:E0:78:C7:FD:AD:1D:97 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EF44CC177170DEFC71D1E7800 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/107d19f7-1ace-3d52-afa1-f47225a02ca7.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 172.70.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:c1:77:17:0d:ef:c7:1d:1e:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=8a21c0eb-5015-4af8-8db9-8bc46a9f8f91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:8f:ac:60:b7:01:9e:c2:d6:84:3f:b2:7c:0b: ad:7b:83:e9:04:3e:1e:e7:c4:91:93:56:80:1c:81: b1:3b:b6:c5:7c:ba:00:6e:68:56:1d:2f:e5:8d:9a: cf:b3:17:d0:55:fd:ed:8e:66:96:a4:76:67:bf:49: d1:34:37:7f:79:d0:6a:2c:11:42:fb:05:e3:90:cd: e1:f2:5c:7a:7c:b3:c1:93:c5:26:bb:78:74:76:e2: 92:45:61:ba:aa:3d:c0:1f:b3:c6:90:08:96:94:e2: 4f:6f:90:4c:df:59:47:31:05:b6:45:e1:bb:87:73: 9a:b1:96:42:18:cb:aa:c0:7e:70:a8:5c:0c:0e:93: ef:40:9b:ee:f5:f1:d2:53:6e:32:90:23:cb:bd:7e: 2a:d1:77:33:e3:96:0a:6a:ff:56:b4:d9:7c:07:86: fa:b0:3c:c3:36:df:f1:23:6e:0a:b2:da:1b:8d:d7: b5:18:3e:77:2a:99:c9:5c:0f:4f:26:8f:9c:8c:cb: a9:ab:55:e3:2c:98:70:57:91:d7:4f:f9:30:1c:5a: 04:7d:df:9b:ac:0b:be:f9:62:94:fd:c5:52:48:b2: 46:a6:ba:39:b5:58:b7:98:6a:3b:b0:fb:0a:f0:9e: d9:bc:07:43:4d:88:aa:0e:b3:7a:3b:64:b7:47:02: 35:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:F4:F8:AA:47:98:74:0C:ED:C4:FA:C2:18:E0:78:C7:FD:AD:1D:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/107d19f7-1ace-3d52-afa1-f47225a02ca7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:b9:ef:eb:d4:8c:18:99:f5:5a:0f:e9:7a:e3:b5:00:d2:76: c9:27:76:b9:ca:cf:e7:6a:d7:0d:1f:87:f5:94:1e:c7:cb:43: 06:03:ec:fd:cd:ef:ab:2c:3c:66:d8:f9:c4:74:48:a9:17:06: c1:32:a2:ef:9c:a5:0b:20:4a:db:3a:3b:3e:15:ab:7f:da:49: 16:0e:a5:54:72:cf:db:e7:71:e9:10:4a:5b:ac:64:b9:47:e7: 8e:56:26:d8:0d:24:0d:7b:1e:7e:bc:f3:02:e7:23:b5:02:3b: b0:b3:55:df:44:85:30:91:c9:d1:5b:65:19:7e:15:f4:f5:ba: 96:ed:57:70:16:28:5f:50:ef:3a:7e:b1:e7:d9:02:48:8c:93: a5:cb:f3:01:1b:7f:bf:c2:2c:50:85:3d:5a:21:71:ab:0e:61: 57:7a:b8:bd:45:89:43:d8:5f:c1:91:43:29:87:e2:f1:6e:1e: cb:eb:c5:f6:a7:3f:cc:c4:e4:46:f2:1d:42:4c:4f:d6:e2:69: 27:d5:6f:ed:89:f6:b6:aa:f4:69:30:d3:5e:55:d6:18:26:2c: 70:b4:e3:a0:92:3f:ae:d6:e4:7c:4e:aa:f8:fc:17:43:bd:0f: 98:09:74:f9:11:3c:e9:bb:cd:a5:20:49:1f:b8:f5:08:76:d9: 76:ec:c3:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TMF3Fw3vxx0eeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk OGEyMWMwZWItNTAxNS00YWY4LThkYjktOGJjNDZhOWY4ZjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Y+sYLcBnsLWhD+yfAute4PpBD4e58SRk1aA HIGxO7bFfLoAbmhWHS/ljZrPsxfQVf3tjmaWpHZnv0nRNDd/edBqLBFC+wXjkM3h 8lx6fLPBk8Umu3h0duKSRWG6qj3AH7PGkAiWlOJPb5BM31lHMQW2ReG7h3OasZZC GMuqwH5wqFwMDpPvQJvu9fHSU24ykCPLvX4q0Xcz45YKav9WtNl8B4b6sDzDNt/x I24Kstobjde1GD53KpnJXA9PJo+cjMupq1XjLJhwV5HXT/kwHFoEfd+brAu++WKU /cVSSLJGpro5tVi3mGo7sPsK8J7ZvAdDTYiqDrN6O2S3RwI1tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEn0+KpHmHQM7cT6whjgeMf9rR2XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTA3ZDE5ZjctMWFjZS0z ZDUyLWFmYTEtZjQ3MjI1YTAyY2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEZ5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMO57+vUjBiZ9VoP6XrjtQDSdskndrnKz+dq1w0fh/WUHsfLQwYD7P3N 76ssPGbY+cR0SKkXBsEyou+cpQsgSts6Oz4Vq3/aSRYOpVRyz9vncekQSlusZLlH 545WJtgNJA17Hn688wLnI7UCO7CzVd9EhTCRydFbZRl+FfT1upbtV3AWKF9Q7zp+ sefZAkiMk6XL8wEbf7/CLFCFPVohcasOYVd6uL1FiUPYX8GRQymH4vFuHsvrxfan P8zE5EbyHUJMT9biaSfVb+2J9raq9Gkw015V1hgmLHC046CSP67W5HxOqvj8F0O9 D5gJdPkRPOm7zaUgSR+49Qh22Xbsw9A= -----END CERTIFICATE-----Generated at Tue Sep 22 14:13:35 2026 by rpki-client