$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1183447b-1c9a-385e-809d-ffdc3de4fe00.roa File: 1183447b-1c9a-385e-809d-ffdc3de4fe00.roa (raw, json) Hash identifier: uTCzVxQ1BCXyZUP2sCo2IpdPm4B7+XmygEdUuvaigiU= Subject key identifier: FF:DA:D3:83:47:15:3D:E9:9E:EB:DF:72:64:82:59:CA:65:04:19:72 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EF44CC3C00A9BDB045CAED900 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1183447b-1c9a-385e-809d-ffdc3de4fe00.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 172.71.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:c3:c0:0a:9b:db:04:5c:ae:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=98a33143-93b8-4a2b-8f0e-f5b00c8873c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fe:b4:e2:2d:d2:ab:e6:1f:09:95:ec:46:d1: 6c:b5:2b:74:20:e2:32:95:c9:28:59:59:eb:8b:55: 61:a7:cf:bc:cf:bc:e3:2b:3c:5c:3d:b3:2d:da:fe: f3:c6:5f:58:b4:6c:5e:6b:e0:e1:68:6a:cb:25:3b: e4:71:74:53:d3:fe:a5:39:d2:25:6b:5f:68:00:e1: db:54:74:f4:cc:e3:8c:8f:69:f3:ed:71:b9:b0:0d: 0d:29:96:f0:bc:8e:16:38:ef:9a:88:02:55:d2:f3: bc:89:ea:87:f0:a1:04:7e:89:0d:04:70:e8:1e:85: 53:2c:3e:64:3f:77:5f:19:9a:8a:0d:a6:d0:54:ca: 64:1f:64:52:71:de:4d:d5:14:ee:d0:10:89:5b:55: 9f:18:c0:c9:a4:6c:0d:53:95:61:ab:a6:47:ba:45: 13:80:29:71:d3:94:73:65:b0:2e:83:c3:b6:3e:69: 38:28:0b:b6:03:8c:02:bc:ec:05:ed:ba:04:02:a4: e0:8e:9d:3e:43:dc:78:10:ee:95:4c:65:cc:5f:a4: 89:b6:89:4e:c0:fc:68:e5:84:9a:a8:ae:36:37:ab: a6:31:0e:73:c7:1a:47:cd:bb:aa:34:0e:91:0f:24: de:87:17:6c:0d:af:79:22:f4:6a:cd:59:90:3c:86: fb:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:DA:D3:83:47:15:3D:E9:9E:EB:DF:72:64:82:59:CA:65:04:19:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1183447b-1c9a-385e-809d-ffdc3de4fe00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:dc:96:1a:68:8f:0a:ca:11:75:d6:fa:9e:89:12:e9:9a:90: 23:58:c1:d2:d9:1a:bd:c8:ad:0a:2e:c3:71:5d:a0:1b:0f:63: cd:7e:7a:94:4b:59:f6:fa:53:ca:46:69:1f:db:7a:f0:df:60: ee:46:5a:05:b4:3b:bb:f6:2f:94:20:0f:3a:6b:7a:1f:e5:27: 65:80:b3:c6:d1:88:16:8c:8d:ce:36:33:98:6e:0b:67:79:f3: fd:bc:88:e1:6c:17:7d:75:1d:bb:a4:2c:6f:6e:60:ac:ad:df: 19:b8:78:86:ae:15:84:8c:9f:bb:a2:d3:7e:1d:ad:fd:aa:00: 52:db:f6:3e:0f:04:8e:66:04:83:d8:71:c3:8f:fa:5d:39:6c: f0:9d:75:9c:f4:9b:a9:06:3f:7a:44:cd:61:bf:6b:6e:3f:95: 22:bf:58:d9:0e:47:13:43:e6:e6:03:ec:8c:95:d4:78:d2:c9: fe:e9:63:04:db:b8:73:fd:3e:99:63:01:be:1f:ef:30:bf:f5: 8a:9c:06:0b:c9:b7:98:45:99:c4:1a:c8:93:ef:ec:3f:78:bd: aa:d3:3a:b4:54:19:23:dd:72:b2:8c:3f:de:7a:f1:07:45:c5: 48:37:c7:4e:c6:91:66:52:69:fe:53:d0:04:74:0d:df:d5:27: 49:d1:fb:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TMPACpvbBFyu2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk OThhMzMxNDMtOTNiOC00YTJiLThmMGUtZjViMDBjODg3M2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyv604i3Sq+YfCZXsRtFstSt0IOIylckoWVnr i1Vhp8+8z7zjKzxcPbMt2v7zxl9YtGxea+DhaGrLJTvkcXRT0/6lOdIla19oAOHb VHT0zOOMj2nz7XG5sA0NKZbwvI4WOO+aiAJV0vO8ieqH8KEEfokNBHDoHoVTLD5k P3dfGZqKDabQVMpkH2RScd5N1RTu0BCJW1WfGMDJpGwNU5Vhq6ZHukUTgClx05Rz ZbAug8O2Pmk4KAu2A4wCvOwF7boEAqTgjp0+Q9x4EO6VTGXMX6SJtolOwPxo5YSa qK42N6umMQ5zxxpHzbuqNA6RDyTehxdsDa95IvRqzVmQPIb7XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/a04NHFT3pnuvfcmSCWcplBBlyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTE4MzQ0N2ItMWM5YS0z ODVlLTgwOWQtZmZkYzNkZTRmZTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEcAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDclhpojwrKEXXW+p6JEumakCNYwdLZGr3IrQouw3FdoBsPY81+epRL Wfb6U8pGaR/bevDfYO5GWgW0O7v2L5QgDzpreh/lJ2WAs8bRiBaMjc42M5huC2d5 8/28iOFsF311HbukLG9uYKyt3xm4eIauFYSMn7ui034drf2qAFLb9j4PBI5mBIPY ccOP+l05bPCddZz0m6kGP3pEzWG/a24/lSK/WNkORxND5uYD7IyV1HjSyf7pYwTb uHP9PpljAb4f7zC/9YqcBgvJt5hFmcQayJPv7D94varTOrRUGSPdcrKMP9568QdF xUg3x07GkWZSaf5T0AR0Dd/VJ0nR+8w= -----END CERTIFICATE-----Generated at Tue Sep 1 02:10:33 2026 by rpki-client