$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2220ec3c-56f8-35f2-aafe-8ccbc45b0eda.roa File: 2220ec3c-56f8-35f2-aafe-8ccbc45b0eda.roa (raw, json) Hash identifier: MUO2zA8NWxQ3chY6g8C/tN+yrF/7oEXotHLUo6LZ2M0= Subject key identifier: B3:6D:AB:D4:7B:BC:A9:35:72:BC:77:12:08:B0:B3:D0:3C:C7:09:DB Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EF2E77CFD92DAD873AE019500 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2220ec3c-56f8-35f2-aafe-8ccbc45b0eda.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 172.70.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:7c:fd:92:da:d8:73:ae:01:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=ee6ca5c7-1748-4a5e-9226-54af282ec57e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:52:0b:11:f5:5c:d0:03:7d:3b:ab:f4:03:57: 6e:d4:80:a7:e2:1b:8b:c1:76:71:d6:0c:93:ea:3f: f9:94:21:63:1d:9a:c5:55:21:2d:ee:d1:fa:a0:05: d3:17:1a:ac:18:a5:15:d9:75:f9:ab:d8:01:ba:2f: 50:91:dd:5a:86:42:4d:40:cd:41:5a:0a:e3:0c:af: c7:82:b1:4a:d7:a0:41:91:c8:78:9a:9f:d0:18:d4: c5:a0:20:cf:b1:41:1e:af:61:63:8c:18:16:fe:1a: c7:cb:c6:11:8e:18:48:d4:74:46:30:0f:d1:dc:70: 87:c3:cd:e9:a7:be:c2:ca:71:44:af:42:cb:9b:44: eb:6d:a9:c5:22:62:76:dd:62:cb:d3:ae:fa:4a:7c: 6f:a3:db:07:5f:6c:b1:a2:3d:a6:51:5e:30:eb:9e: 7c:26:80:e7:84:50:ae:8b:b5:dd:24:01:1b:13:ea: 15:64:fa:c2:f5:65:c0:8e:63:84:1e:65:23:e8:65: 38:f8:34:16:c0:f3:65:fb:fc:e2:d5:e8:44:56:8c: dd:7d:3e:80:70:eb:80:01:47:8b:d9:0b:51:fb:bc: 14:ab:83:3f:c9:ff:88:e3:d5:4b:b3:1f:aa:f9:5c: 3f:65:09:5d:e1:51:40:89:ec:b7:7f:6b:19:ca:b5: 7d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:6D:AB:D4:7B:BC:A9:35:72:BC:77:12:08:B0:B3:D0:3C:C7:09:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2220ec3c-56f8-35f2-aafe-8ccbc45b0eda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:f3:34:94:71:29:69:b6:5e:0b:82:1d:6c:ee:85:1a:f0:dc: 70:96:bd:ac:68:a5:b0:16:e4:3a:d5:f4:54:85:1f:c1:e9:36: 11:59:34:3f:12:94:6a:3c:4c:c0:00:b9:80:14:67:57:6d:26: 73:90:6b:8f:a0:31:99:29:97:cc:72:06:02:1d:77:b6:f0:79: 9a:39:2b:48:c4:1b:81:94:1e:06:60:2c:40:94:35:68:ad:c5: d2:34:5d:69:ed:0a:44:7f:c7:bb:d4:df:6e:22:b3:41:f2:73: 99:c0:0e:e2:3c:b9:e3:d3:94:d8:3f:32:eb:16:8a:1d:ed:81: 58:59:4e:5e:e4:e6:1c:13:7a:69:61:aa:3b:64:24:6b:31:84: b4:ea:e8:ac:71:30:f7:a8:f3:5c:10:2f:2c:78:e3:c9:1e:31: 81:81:e1:34:ea:62:4e:b1:87:c6:da:0b:05:59:d3:2b:fe:af: f4:41:aa:80:57:5f:16:4f:da:a6:c7:f8:35:cf:73:17:c1:ab: 7e:31:9f:4f:8f:ed:c6:2e:d2:9a:d5:02:c8:3c:e6:fa:08:c8: 00:c9:a6:d3:a5:f0:26:7a:fa:15:3b:03:be:b9:29:83:d2:97: 7f:91:04:11:6a:ba:d8:86:d4:64:8e:70:3d:95:18:e9:87:dc: a4:33:8c:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y53z9ktrYc64BlQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk ZWU2Y2E1YzctMTc0OC00YTVlLTkyMjYtNTRhZjI4MmVjNTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFILEfVc0AN9O6v0A1du1ICn4huLwXZx1gyT 6j/5lCFjHZrFVSEt7tH6oAXTFxqsGKUV2XX5q9gBui9Qkd1ahkJNQM1BWgrjDK/H grFK16BBkch4mp/QGNTFoCDPsUEer2FjjBgW/hrHy8YRjhhI1HRGMA/R3HCHw83p p77CynFEr0LLm0TrbanFImJ23WLL0676Snxvo9sHX2yxoj2mUV4w6558JoDnhFCu i7XdJAEbE+oVZPrC9WXAjmOEHmUj6GU4+DQWwPNl+/zi1ehEVozdfT6AcOuAAUeL 2QtR+7wUq4M/yf+I49VLsx+q+Vw/ZQld4VFAiey3f2sZyrV9XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLNtq9R7vKk1crx3Egiws9A8xwnbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjIyMGVjM2MtNTZmOC0z NWYyLWFhZmUtOGNjYmM0NWIwZWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEZrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALHzNJRxKWm2XguCHWzuhRrw3HCWvaxopbAW5DrV9FSFH8HpNhFZND8S lGo8TMAAuYAUZ1dtJnOQa4+gMZkpl8xyBgIdd7bweZo5K0jEG4GUHgZgLECUNWit xdI0XWntCkR/x7vU324is0Hyc5nADuI8uePTlNg/MusWih3tgVhZTl7k5hwTemlh qjtkJGsxhLTq6KxxMPeo81wQLyx448keMYGB4TTqYk6xh8baCwVZ0yv+r/RBqoBX XxZP2qbH+DXPcxfBq34xn0+P7cYu0prVAsg85voIyADJptOl8CZ6+hU7A765KYPS l3+RBBFqutiG1GSOcD2VGOmH3KQzjHU= -----END CERTIFICATE-----Generated at Tue Sep 22 07:07:52 2026 by rpki-client