$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2a239ea6-1a97-325b-84e1-2586ab9385f2.roa File: 2a239ea6-1a97-325b-84e1-2586ab9385f2.roa (raw, json) Hash identifier: WBaYbUwDqMp0hfQJ8BVxuqALipNP5f0eovRrrMxSNwY= Subject key identifier: A8:55:54:D8:4E:A7:54:58:1D:56:17:D3:00:D3:62:43:DC:E8:D2:E3 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EF44CC5254235D00D4A9C7780 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2a239ea6-1a97-325b-84e1-2586ab9385f2.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 172.71.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:c5:25:42:35:d0:0d:4a:9c:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=8885904e-30cd-4057-b2d9-94cac21b9235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ba:5b:ed:06:8c:c9:1c:e3:47:e1:75:c7:59: c4:07:3f:39:05:7a:b5:16:2d:c1:2f:cf:7a:dc:a5: 23:d1:ce:7e:73:1c:94:cc:97:1d:d5:a3:21:5f:de: 01:3d:37:c2:7f:f2:c9:5b:d6:63:1e:00:ec:1a:8e: 39:9d:e0:80:5f:24:42:4d:c3:25:02:40:84:8e:e6: 77:cb:f6:0b:89:30:54:13:6f:4e:da:5b:93:ec:33: 3f:1a:40:5f:8e:0e:40:d5:96:f1:3c:e5:2d:fe:a7: 1b:1c:2b:27:b9:ff:5c:9e:24:ae:ae:b9:1d:01:a6: f6:46:9b:ab:42:d2:ed:08:ff:35:dd:25:d1:16:e9: 77:22:f0:44:9c:d3:ad:84:f7:6a:4d:ee:86:50:c1: c2:ad:f4:bd:1b:e7:6c:a4:6c:9b:41:bf:ca:ca:9d: 19:84:f0:97:fb:eb:55:7b:be:33:40:bc:11:67:7a: bc:07:da:ec:a5:19:8b:e9:cb:ce:a9:16:82:02:c7: dd:a4:28:87:5f:fa:72:bb:96:d5:7f:8e:5a:5b:87: a0:29:3a:b2:2f:f9:2c:52:39:ea:ca:e0:4c:7d:24: eb:44:f1:db:81:8f:e0:57:91:92:5a:de:27:ce:95: c8:22:f1:9c:da:da:14:ef:78:4a:4f:85:1e:a5:a0: 18:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:55:54:D8:4E:A7:54:58:1D:56:17:D3:00:D3:62:43:DC:E8:D2:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2a239ea6-1a97-325b-84e1-2586ab9385f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:ed:10:dc:a4:9b:9d:0e:e0:d0:50:ee:f4:5e:5e:be:f5:31: 11:c0:78:db:9d:31:0e:e7:61:f1:80:e5:e8:ed:bf:1a:cd:44: be:f8:29:6c:90:3b:12:89:fa:aa:d6:98:d5:cc:ce:fb:8f:23: 71:25:0d:cb:04:79:ac:c8:16:3a:f4:5c:8a:d2:9f:d2:cc:7e: 47:de:5d:ca:84:79:6f:e7:a1:42:47:99:be:0e:6d:ad:47:03: 31:1f:83:bc:b2:dd:79:12:32:ba:c5:04:c9:ff:8b:9a:59:a6: 4d:07:b7:3c:e8:a7:a1:6a:1c:c9:87:de:11:fa:27:a4:15:0c: 28:ac:5a:e5:47:0c:02:6d:96:1a:31:05:e8:98:ce:26:50:e2: 29:22:81:dc:21:bc:70:d9:5c:05:11:81:0a:58:d1:ed:88:ac: e1:8f:5f:e3:00:ce:0e:b7:bf:0b:f8:43:02:3f:24:74:16:46: 5b:4b:a1:0b:ba:77:52:2f:4e:18:4f:1c:13:63:c8:c6:95:64: a3:fd:8d:d1:4d:36:f2:85:3a:95:c4:22:1f:de:b3:1c:9c:ec: 93:d0:ff:b1:c2:df:33:94:dd:a5:f4:97:50:15:d0:50:45:36: 04:9b:5e:d4:a4:52:2a:0f:ed:c2:22:ee:b2:88:ff:e6:37:ed: 89:d6:aa:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TMUlQjXQDUqcd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk ODg4NTkwNGUtMzBjZC00MDU3LWIyZDktOTRjYWMyMWI5MjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbpb7QaMyRzjR+F1x1nEBz85BXq1Fi3BL896 3KUj0c5+cxyUzJcd1aMhX94BPTfCf/LJW9ZjHgDsGo45neCAXyRCTcMlAkCEjuZ3 y/YLiTBUE29O2luT7DM/GkBfjg5A1ZbxPOUt/qcbHCsnuf9cniSurrkdAab2Rpur QtLtCP813SXRFul3IvBEnNOthPdqTe6GUMHCrfS9G+dspGybQb/Kyp0ZhPCX++tV e74zQLwRZ3q8B9rspRmL6cvOqRaCAsfdpCiHX/pyu5bVf45aW4egKTqyL/ksUjnq yuBMfSTrRPHbgY/gV5GSWt4nzpXIIvGc2toU73hKT4UepaAYhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKhVVNhOp1RYHVYX0wDTYkPc6NLjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmEyMzllYTYtMWE5Ny0z MjViLTg0ZTEtMjU4NmFiOTM4NWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEedMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjtENykm50O4NBQ7vReXr71MRHAeNudMQ7nYfGA5ejtvxrNRL74KWyQ OxKJ+qrWmNXMzvuPI3ElDcsEeazIFjr0XIrSn9LMfkfeXcqEeW/noUJHmb4Oba1H AzEfg7yy3XkSMrrFBMn/i5pZpk0Htzzop6FqHMmH3hH6J6QVDCisWuVHDAJtlhox BeiYziZQ4ikigdwhvHDZXAURgQpY0e2IrOGPX+MAzg63vwv4QwI/JHQWRltLoQu6 d1IvThhPHBNjyMaVZKP9jdFNNvKFOpXEIh/esxyc7JPQ/7HC3zOU3aX0l1AV0FBF NgSbXtSkUioP7cIi7rKI/+Y37YnWqrg= -----END CERTIFICATE-----Generated at Tue Sep 1 02:10:24 2026 by rpki-client