$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/25d792c1-b715-3a27-bacc-040c1e66113b.roa File: 25d792c1-b715-3a27-bacc-040c1e66113b.roa (raw, json) Hash identifier: vWp2ZEp8PYQv1wxcmSQyu3NqPYLTmK5YYU4y81hDSEU= Subject key identifier: 9E:74:B8:24:64:5D:BC:78:1F:01:18:4B:9B:02:93:E0:DA:C3:DB:49 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EF44CBC59E74A7410039373E8 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/25d792c1-b715-3a27-bacc-040c1e66113b.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 172.71.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:bc:59:e7:4a:74:10:03:93:73:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=01478e86-49aa-425c-87df-3aac0e645a5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7c:79:6e:25:40:82:b1:b4:1d:22:a0:bd:27: 28:ea:f4:0b:5d:55:34:bb:61:83:92:a7:b2:9a:e4: 64:c8:0e:a8:4f:37:f1:da:47:a9:78:6b:01:4d:80: 8c:7d:e9:74:2d:96:78:d5:66:65:57:8f:35:6e:bc: a0:5d:26:72:72:3d:bf:aa:bb:83:a0:89:80:e5:c8: 89:a9:c2:87:9a:ba:73:60:2c:f0:0f:7b:f4:d5:97: fe:59:62:22:27:da:f2:55:ad:83:c8:5b:df:1f:fa: 11:e9:26:d7:80:39:6e:10:79:c2:86:28:d3:45:fc: 90:5a:f2:a1:cd:6e:e9:db:06:d6:d8:11:9a:22:49: 24:63:27:d2:58:98:12:8f:c3:f5:ad:27:91:3e:c0: 36:09:5a:80:07:dd:58:1b:3a:59:53:3f:30:67:36: 17:03:0a:08:8d:f9:67:e5:e2:86:71:33:28:15:73: 69:6e:e1:db:70:d4:f9:03:6d:de:1f:e9:75:d2:31: 63:38:70:5e:d6:ad:c1:cf:44:a8:bc:c2:d2:d6:f8: 8c:ce:c0:92:87:b7:b9:4c:96:69:19:69:48:75:8a: f5:f9:ba:aa:e4:1b:42:96:81:e3:0d:8f:e4:4b:d5: 3a:9b:b3:e8:ab:9c:86:4a:ec:b1:3d:02:46:ba:0d: 2b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:74:B8:24:64:5D:BC:78:1F:01:18:4B:9B:02:93:E0:DA:C3:DB:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/25d792c1-b715-3a27-bacc-040c1e66113b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:28:d2:f3:60:e9:0f:cf:2d:2c:a9:fc:0c:f2:35:a4:66:14: 3d:37:ad:d8:cc:01:21:42:9e:59:58:71:81:ed:9b:19:4b:5b: 23:19:ba:46:df:e3:f4:30:0d:99:6d:a0:cf:3a:e3:ba:7a:33: 5b:1f:7a:5a:28:b8:e2:4e:d3:dd:c0:c3:bd:db:6d:94:5e:42: e0:17:87:9f:b1:d7:8f:fc:ac:fb:21:d3:ab:9d:42:40:49:ad: 01:6e:ea:27:a9:f7:6d:39:45:81:35:54:25:48:88:93:ca:53: 8a:77:2c:70:73:72:00:23:8d:1a:ec:ad:22:bb:6d:39:0a:65: 7a:fb:a5:06:18:5a:69:5e:b0:ef:b5:75:96:eb:8a:52:db:8a: 64:65:c2:18:4f:d2:ae:50:42:46:ea:c1:51:25:c1:c7:f0:84: 7a:00:ba:32:84:47:bf:a7:74:c8:5f:b6:63:33:8a:cd:10:95: 65:8f:31:f3:42:67:de:4e:6c:5c:73:71:c6:ff:b9:ec:f3:1c: 4f:2b:33:98:c8:8d:49:ed:53:c1:43:a6:f7:9b:78:59:fb:0d: 16:64:7d:14:f1:c6:51:ea:7c:5d:a2:84:48:72:c5:27:7f:c4: 5d:9d:70:16:85:71:a3:df:29:b4:67:63:6e:1f:d7:85:45:e2: a1:4b:7b:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TLxZ50p0EAOTc+gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk MDE0NzhlODYtNDlhYS00MjVjLTg3ZGYtM2FhYzBlNjQ1YTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHx5biVAgrG0HSKgvSco6vQLXVU0u2GDkqey muRkyA6oTzfx2kepeGsBTYCMfel0LZZ41WZlV481brygXSZycj2/qruDoImA5ciJ qcKHmrpzYCzwD3v01Zf+WWIiJ9ryVa2DyFvfH/oR6SbXgDluEHnChijTRfyQWvKh zW7p2wbW2BGaIkkkYyfSWJgSj8P1rSeRPsA2CVqAB91YGzpZUz8wZzYXAwoIjfln 5eKGcTMoFXNpbuHbcNT5A23eH+l10jFjOHBe1q3Bz0SovMLS1viMzsCSh7e5TJZp GWlIdYr1+bqq5BtCloHjDY/kS9U6m7Poq5yGSuyxPQJGug0rhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ50uCRkXbx4HwEYS5sCk+Daw9tJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjVkNzkyYzEtYjcxNS0z YTI3LWJhY2MtMDQwYzFlNjYxMTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ0o0vNg6Q/PLSyp/AzyNaRmFD03rdjMASFCnllYcYHtmxlLWyMZukbf 4/QwDZltoM8647p6M1sfeloouOJO093Aw73bbZReQuAXh5+x14/8rPsh06udQkBJ rQFu6iep9205RYE1VCVIiJPKU4p3LHBzcgAjjRrsrSK7bTkKZXr7pQYYWmlesO+1 dZbrilLbimRlwhhP0q5QQkbqwVElwcfwhHoAujKER7+ndMhftmMzis0QlWWPMfNC Z95ObFxzccb/uezzHE8rM5jIjUntU8FDpvebeFn7DRZkfRTxxlHqfF2ihEhyxSd/ xF2dcBaFcaPfKbRnY24f14VF4qFLe68= -----END CERTIFICATE-----Generated at Tue Sep 22 14:05:50 2026 by rpki-client