$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1833506d-d663-3eeb-b5b8-3edb9e449cf4.roa File: 1833506d-d663-3eeb-b5b8-3edb9e449cf4.roa (raw, json) Hash identifier: QgmRhF6KMu/DOa+K0c30w5FnewSfcoR/vdAqEuwWabw= Subject key identifier: 48:F9:F7:38:B4:D0:11:43:40:37:F4:0E:58:D4:69:98:09:97:5F:14 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EEA876DF0338E7BA54EE6AA80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1833506d-d663-3eeb-b5b8-3edb9e449cf4.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 172.70.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:6d:f0:33:8e:7b:a5:4e:e6:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=8a74c3dc-50da-4254-ae62-52a9af5abae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:79:88:89:83:23:56:cb:ff:f8:25:21:90:2c: be:2d:a6:09:f4:b8:2f:ca:42:9a:0e:b6:fb:9c:6e: 22:12:89:76:05:de:b8:0d:31:8b:07:bc:7b:d9:92: 60:47:64:b6:f0:7f:c2:3f:cc:13:20:7b:2c:17:3b: 43:a2:a2:39:5c:96:31:c8:f9:41:e7:11:18:a5:4c: d2:e0:bf:fb:b0:17:08:cb:3f:52:1f:ad:a7:5f:4b: 23:55:d6:8f:eb:1c:05:6e:41:ae:51:fd:d3:67:16: 8e:2d:02:c5:56:dd:04:82:16:70:0d:99:a4:9c:fe: 1b:ad:93:c5:38:b1:e2:ff:81:b3:41:36:45:10:33: c7:cd:9c:e4:e3:02:af:e5:98:93:49:a3:8e:8b:f9: 19:2c:cf:59:64:a3:b6:7a:61:7f:7c:84:03:70:29: 51:4e:e5:c3:e4:81:79:da:7d:7f:c6:e7:46:d6:4c: 15:7b:89:d5:c6:b3:f2:ee:2d:f3:4d:dd:1f:68:21: 1e:6a:b4:3f:f9:3a:64:f7:c5:d9:d4:c1:1e:b3:ce: 4e:3e:84:67:c5:af:71:a9:d1:1b:f2:2c:ba:b9:13: 60:32:7a:a2:68:16:41:fc:e5:a3:77:d5:69:9f:b8: 06:ff:ba:a3:de:b3:b9:a5:17:76:81:12:b9:c5:71: 9a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:F9:F7:38:B4:D0:11:43:40:37:F4:0E:58:D4:69:98:09:97:5F:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1833506d-d663-3eeb-b5b8-3edb9e449cf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:66:86:d6:d8:d1:f4:db:9c:4a:f8:a1:de:06:55:33:ac:dc: 2e:45:31:ce:6c:20:3b:ba:dc:77:c6:d2:2b:93:70:cb:39:63: 6a:2d:e2:d6:7f:a4:7d:70:15:9f:7e:9b:3c:3e:87:c3:e7:b7: 60:e1:1b:aa:28:1d:e0:9a:04:30:88:0b:20:ba:8c:9c:6d:cb: 1f:6a:0f:49:3b:9b:3d:15:c0:62:fe:22:88:c3:6a:78:0b:10: 35:77:1e:44:17:3b:42:03:6e:27:d4:63:3a:35:ce:df:88:3c: 07:d6:63:c7:31:0e:c3:01:c3:4b:24:b5:ff:2b:f8:aa:7a:26: d7:c8:65:c0:54:9d:73:39:91:a0:20:f6:48:32:b6:8d:ec:a4: bc:d1:9c:d6:0a:56:da:87:3e:eb:24:e9:db:30:5b:6f:69:24: b1:41:0a:ab:af:f8:a6:4f:73:f2:ff:43:3e:33:18:a9:29:bd: 7d:b9:9f:3b:4d:e8:ce:84:8f:d7:41:43:80:55:6c:98:ab:91: 2e:1b:67:52:ff:03:e3:19:d8:50:39:a8:17:f6:eb:53:ca:0a: 16:fe:dc:55:73:24:37:ff:f7:d0:8c:e3:58:38:f9:8f:2a:d4: 97:7e:d2:f4:c6:6c:3d:4f:02:c4:26:f4:2b:09:8a:50:75:db: 42:87:e3:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh23wM457pU7mqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk OGE3NGMzZGMtNTBkYS00MjU0LWFlNjItNTJhOWFmNWFiYWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHmIiYMjVsv/+CUhkCy+LaYJ9LgvykKaDrb7 nG4iEol2Bd64DTGLB7x72ZJgR2S28H/CP8wTIHssFztDoqI5XJYxyPlB5xEYpUzS 4L/7sBcIyz9SH62nX0sjVdaP6xwFbkGuUf3TZxaOLQLFVt0EghZwDZmknP4brZPF OLHi/4GzQTZFEDPHzZzk4wKv5ZiTSaOOi/kZLM9ZZKO2emF/fIQDcClRTuXD5IF5 2n1/xudG1kwVe4nVxrPy7i3zTd0faCEearQ/+Tpk98XZ1MEes85OPoRnxa9xqdEb 8iy6uRNgMnqiaBZB/OWjd9Vpn7gG/7qj3rO5pRd2gRK5xXGaKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEj59zi00BFDQDf0DljUaZgJl18UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTgzMzUwNmQtZDY2My0z ZWViLWI1YjgtM2VkYjllNDQ5Y2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEatMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9mhtbY0fTbnEr4od4GVTOs3C5FMc5sIDu63HfG0iuTcMs5Y2ot4tZ/ pH1wFZ9+mzw+h8Pnt2DhG6ooHeCaBDCICyC6jJxtyx9qD0k7mz0VwGL+IojDangL EDV3HkQXO0IDbifUYzo1zt+IPAfWY8cxDsMBw0sktf8r+Kp6JtfIZcBUnXM5kaAg 9kgyto3spLzRnNYKVtqHPusk6dswW29pJLFBCquv+KZPc/L/Qz4zGKkpvX25nztN 6M6Ej9dBQ4BVbJirkS4bZ1L/A+MZ2FA5qBf261PKChb+3FVzJDf/99CM41g4+Y8q 1Jd+0vTGbD1PAsQm9CsJilB120KH47U= -----END CERTIFICATE-----Generated at Tue Sep 1 01:45:06 2026 by rpki-client