$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/17e14022-9140-30b5-81c2-8605314c7b35.roa File: 17e14022-9140-30b5-81c2-8605314c7b35.roa (raw, json) Hash identifier: mGV3V4/iaFi2/xuLZ37LkQ3Zz1bMuGSgnOsyhRFDyFA= Subject key identifier: A7:3E:15:2B:40:35:E5:07:81:D0:2F:72:52:95:49:C6:4E:C3:BF:1F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EF44CC45F693C6382BFA27B40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/17e14022-9140-30b5-81c2-8605314c7b35.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 172.71.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:c4:5f:69:3c:63:82:bf:a2:7b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=d202de00-d4c1-4612-9c8d-e8974e385215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:70:cf:8b:46:f8:5c:46:f1:b3:33:53:50:d7: 15:7c:94:b3:a4:6b:32:37:76:26:7c:51:0e:cf:d9: 8e:3f:99:48:f4:83:c9:45:57:2f:e6:f0:50:d9:81: 53:dc:04:1d:66:6f:23:01:5d:7e:a6:62:81:75:2e: 9f:81:12:cf:ca:7a:fd:40:0a:1b:c5:8c:d3:b0:1d: 75:6e:99:b1:47:74:63:9a:41:cb:b2:db:48:bd:1d: 76:aa:da:33:af:f9:44:56:2e:99:dd:2b:38:ee:ba: 07:4b:3d:41:20:18:77:64:d9:4c:af:fc:ce:16:a2: 75:6a:cb:0a:36:76:3c:b2:3b:4e:28:47:97:bb:8f: 5f:01:87:43:e6:f1:04:c6:70:52:56:5e:cb:35:6c: 52:e9:de:69:78:2d:19:8a:5f:81:e7:50:5d:d6:79: 8c:50:06:8a:66:54:02:2b:d1:8c:8c:75:14:26:da: ab:1a:e5:bf:a4:f9:6d:a2:76:f9:db:88:a0:f1:c5: b3:28:f6:33:70:bb:7b:60:35:69:cb:c6:01:8d:b6: 7c:da:b9:66:e1:3e:00:e5:e3:81:d6:db:17:9d:1f: 9c:bb:83:41:af:20:e1:ce:05:8d:4e:8e:9b:16:af: 3a:f7:9e:08:11:af:9e:de:7b:40:cd:ad:b3:28:cb: 04:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:3E:15:2B:40:35:E5:07:81:D0:2F:72:52:95:49:C6:4E:C3:BF:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/17e14022-9140-30b5-81c2-8605314c7b35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:44:b4:0b:b4:8e:ea:bf:7e:20:5f:6d:e8:70:47:46:9b:18: 3d:48:cc:2c:8b:30:12:42:6d:5a:81:f5:1a:74:c7:53:2c:0f: cf:8e:57:e5:1f:4f:50:eb:de:6d:87:bf:26:64:af:3e:f2:39: 22:93:8f:b2:f9:5c:39:37:62:2d:fe:05:24:6f:32:c0:5e:30: 76:b9:aa:9c:bb:e7:97:1c:22:d9:4a:92:0a:7f:e3:93:62:5a: c0:6b:9f:8d:97:da:19:0c:c6:3e:b6:73:ff:8b:ff:79:03:7d: 2d:6e:94:fd:3d:6e:8a:99:77:4a:98:3f:5d:8b:c3:d8:90:de: b8:8d:24:fb:30:9e:29:8c:6f:8a:dd:0b:7c:6d:33:66:f4:3d: e4:fa:93:fe:03:b1:7e:d6:45:32:1f:9b:37:36:01:33:26:b3: 5e:8f:5c:6d:27:63:71:35:f2:cc:3c:15:fe:dd:e2:df:03:bf: 7b:db:27:bd:38:d6:ac:71:1d:db:47:0c:99:bc:3b:f8:cd:26: de:ad:74:af:4a:15:4b:05:53:31:fe:28:7d:39:5b:9d:29:f6: 46:0b:fc:04:28:71:41:dc:7a:6c:62:9e:7f:5f:1c:86:3a:1b: ee:7a:3b:68:ec:5c:53:97:5f:e1:6e:a3:c0:1e:4a:03:32:90: 24:13:8a:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TMRfaTxjgr+ie0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk ZDIwMmRlMDAtZDRjMS00NjEyLTljOGQtZTg5NzRlMzg1MjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3DPi0b4XEbxszNTUNcVfJSzpGsyN3YmfFEO z9mOP5lI9IPJRVcv5vBQ2YFT3AQdZm8jAV1+pmKBdS6fgRLPynr9QAobxYzTsB11 bpmxR3RjmkHLsttIvR12qtozr/lEVi6Z3Ss47roHSz1BIBh3ZNlMr/zOFqJ1assK NnY8sjtOKEeXu49fAYdD5vEExnBSVl7LNWxS6d5peC0Zil+B51Bd1nmMUAaKZlQC K9GMjHUUJtqrGuW/pPltonb524ig8cWzKPYzcLt7YDVpy8YBjbZ82rlm4T4A5eOB 1tsXnR+cu4NBryDhzgWNTo6bFq86954IEa+e3ntAza2zKMsE3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKc+FStANeUHgdAvclKVScZOw78fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTdlMTQwMjItOTE0MC0z MGI1LTgxYzItODYwNTMxNGM3YjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEdYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxEtAu0juq/fiBfbehwR0abGD1IzCyLMBJCbVqB9Rp0x1MsD8+OV+Uf T1Dr3m2HvyZkrz7yOSKTj7L5XDk3Yi3+BSRvMsBeMHa5qpy755ccItlKkgp/45Ni WsBrn42X2hkMxj62c/+L/3kDfS1ulP09boqZd0qYP12Lw9iQ3riNJPswnimMb4rd C3xtM2b0PeT6k/4DsX7WRTIfmzc2ATMms16PXG0nY3E18sw8Ff7d4t8Dv3vbJ704 1qxxHdtHDJm8O/jNJt6tdK9KFUsFUzH+KH05W50p9kYL/AQocUHcemxinn9fHIY6 G+56O2jsXFOXX+Fuo8AeSgMykCQTitg= -----END CERTIFICATE-----Generated at Sun Sep 27 00:59:18 2026 by rpki-client