$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2cd16ca4-a110-334b-9064-b9697368ca32.roa File: 2cd16ca4-a110-334b-9064-b9697368ca32.roa (raw, json) Hash identifier: fR12405+xQ4hivwG+tBGb+rQ/nVqTFJyPIQX23Kzm0s= Subject key identifier: ED:B7:D8:F1:25:9C:11:8C:2D:F8:95:21:8D:B3:31:79:1A:57:4D:3D Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EF44CC2D773B0328AA64C05E0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2cd16ca4-a110-334b-9064-b9697368ca32.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 172.70.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:c2:d7:73:b0:32:8a:a6:4c:05:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=e5154d28-6da5-48bc-9a4e-2512d1a27091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:72:77:b9:7b:c4:3b:55:b6:dc:c0:99:34:cd: fa:b2:66:52:ed:1e:c1:ae:1d:9a:6c:7d:af:6b:75: ba:15:c6:ac:5b:8f:7d:a5:3b:c4:28:70:7e:81:01: 66:4f:cc:ff:7e:5e:fe:38:39:93:71:00:da:11:85: 80:29:d9:e0:a9:a6:d1:ba:7a:7c:07:33:1b:41:41: 05:26:26:be:8a:0f:7c:61:bc:29:66:f1:23:1a:6e: d9:ad:ff:1f:7b:5e:f3:cd:b3:47:f4:f8:1a:26:4c: 8f:2d:42:8e:1e:ec:d1:a3:81:ac:11:9b:32:a2:d6: 36:15:d9:41:d9:4d:e9:5a:ca:be:13:9b:7a:bc:19: 33:31:2f:fa:d2:75:57:c8:de:47:9d:bc:c8:6d:e3: 2b:27:59:c8:9c:06:48:c8:3e:ed:fd:0d:f8:7f:21: 18:61:7c:d5:16:3d:e6:60:cf:80:a0:a5:ed:c6:0e: 1b:2c:7a:15:a7:25:ca:40:48:6b:26:9a:43:dc:ad: f0:7d:69:a2:19:2d:95:bd:66:4c:0f:8c:ff:84:f6: 06:0d:50:fe:a4:da:1c:76:f3:39:1d:e0:ae:90:aa: 2d:f9:38:4a:d8:c4:38:ed:4a:d9:25:eb:24:f1:dd: 74:f7:c1:c7:b2:6f:be:7f:c4:60:22:59:0b:e3:36: 16:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:B7:D8:F1:25:9C:11:8C:2D:F8:95:21:8D:B3:31:79:1A:57:4D:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2cd16ca4-a110-334b-9064-b9697368ca32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:de:f8:03:f4:f5:f4:e7:2a:ff:22:95:df:da:d9:d9:c5:d9: 23:1d:fa:0b:bc:f8:99:f0:b3:fc:32:12:af:a7:06:90:67:14: 05:42:74:63:d9:53:83:0d:e1:c0:30:1e:fa:c0:83:22:9f:25: f2:8e:50:43:e9:e6:03:53:b2:81:d9:2c:f6:3b:d9:5c:f1:f6: f4:39:c0:d9:44:2d:f8:89:a5:ad:82:ff:4e:f4:ff:04:82:73: 8e:94:1e:16:66:80:53:6d:1e:36:e1:17:3f:98:9d:09:d7:6f: 53:d4:5d:5f:31:50:c9:8a:21:8c:d3:5a:76:5a:8c:ee:70:d1: ae:20:11:62:75:d6:59:09:8c:8b:2e:02:4c:e3:c6:2e:f1:21: fa:f4:d8:b5:60:0f:44:d3:5d:26:b1:34:f0:21:ac:31:7a:2f: e5:57:70:0a:6f:17:48:63:5e:57:c9:a8:d6:8b:ce:95:7e:cf: 74:79:3a:aa:27:f0:6b:95:21:cd:ea:93:b4:c7:f1:d5:f2:90: ad:12:eb:38:7d:96:69:97:21:32:15:b7:e8:87:24:cb:82:d3: 1a:c4:d3:f5:0b:30:af:72:b5:3a:d9:99:fe:e6:8e:e2:f5:f3: f8:d4:7c:d4:e8:d2:6d:6c:87:12:b7:a6:b3:7e:ce:9e:ec:20: 71:93:15:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TMLXc7AyiqZMBeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk ZTUxNTRkMjgtNmRhNS00OGJjLTlhNGUtMjUxMmQxYTI3MDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHJ3uXvEO1W23MCZNM36smZS7R7Brh2abH2v a3W6FcasW499pTvEKHB+gQFmT8z/fl7+ODmTcQDaEYWAKdngqabRunp8BzMbQUEF Jia+ig98YbwpZvEjGm7Zrf8fe17zzbNH9PgaJkyPLUKOHuzRo4GsEZsyotY2FdlB 2U3pWsq+E5t6vBkzMS/60nVXyN5HnbzIbeMrJ1nInAZIyD7t/Q34fyEYYXzVFj3m YM+AoKXtxg4bLHoVpyXKQEhrJppD3K3wfWmiGS2VvWZMD4z/hPYGDVD+pNocdvM5 HeCukKot+ThK2MQ47UrZJesk8d1098HHsm++f8RgIlkL4zYW8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO232PElnBGMLfiVIY2zMXkaV009MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmNkMTZjYTQtYTExMC0z MzRiLTkwNjQtYjk2OTczNjhjYTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/e+AP09fTnKv8ild/a2dnF2SMd+gu8+Jnws/wyEq+nBpBnFAVCdGPZ U4MN4cAwHvrAgyKfJfKOUEPp5gNTsoHZLPY72Vzx9vQ5wNlELfiJpa2C/070/wSC c46UHhZmgFNtHjbhFz+YnQnXb1PUXV8xUMmKIYzTWnZajO5w0a4gEWJ11lkJjIsu Akzjxi7xIfr02LVgD0TTXSaxNPAhrDF6L+VXcApvF0hjXlfJqNaLzpV+z3R5Oqon 8GuVIc3qk7TH8dXykK0S6zh9lmmXITIVt+iHJMuC0xrE0/ULMK9ytTrZmf7mjuL1 8/jUfNTo0m1shxK3prN+zp7sIHGTFQ8= -----END CERTIFICATE-----Generated at Tue Sep 1 02:36:17 2026 by rpki-client