$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2e58a6dd-f3ef-3bb5-98b1-0666eedb05a6.roa File: 2e58a6dd-f3ef-3bb5-98b1-0666eedb05a6.roa (raw, json) Hash identifier: scAXlCL2QGSK3UiimlRJwtt+5IpW4yAB8XtXUVb7c+g= Subject key identifier: 4D:43:9B:60:9D:D7:E0:8E:87:68:EE:24:BA:11:8B:DF:F5:62:8A:A6 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EF44CBD1242863B3033CDC600 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2e58a6dd-f3ef-3bb5-98b1-0666eedb05a6.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 172.71.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:bd:12:42:86:3b:30:33:cd:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=99a2d3ae-c522-4ad2-9015-32cb73df256f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8d:65:86:e2:46:f7:80:f7:ab:2d:cc:ac:ed: 2f:93:e2:b7:d5:7c:5a:2f:ed:fe:2c:5c:53:94:79: ba:4b:aa:4c:c0:53:a0:d2:2b:6f:d1:d1:b8:a3:7a: 0e:4f:41:5b:7f:09:a9:a6:09:c6:ab:e5:3b:ec:98: fa:06:2e:f7:45:3b:5b:c9:3d:bb:a5:e4:69:c0:73: db:21:bc:c1:75:82:49:b7:73:9d:06:68:51:e4:79: 4b:74:bd:76:e4:f8:1f:d4:f8:a7:9c:b1:52:32:21: a0:33:63:21:23:47:ac:a1:a2:28:72:28:d0:7d:a1: 96:01:f1:98:c4:d7:48:87:49:54:9a:06:a1:76:24: ea:13:ea:b4:41:dd:4d:05:ce:ff:78:f7:5f:70:05: 31:dd:f7:00:37:37:aa:e6:13:fc:9c:6d:0a:d6:43: 4a:aa:7b:ae:04:00:9e:ec:16:b7:2d:c4:27:30:9b: 61:5f:a2:76:d9:b0:6a:46:24:de:3f:7f:9c:a8:60: ab:44:2a:bb:70:0b:a8:be:50:0f:91:2e:94:9c:c4: d1:96:24:21:51:73:4f:4f:8b:d7:1d:d8:cd:fe:69: f0:94:e2:b2:0c:f9:7e:19:da:38:fe:c3:75:61:76: ba:ee:a9:c6:cf:d1:1e:79:b5:b3:25:32:62:88:48: f1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:43:9B:60:9D:D7:E0:8E:87:68:EE:24:BA:11:8B:DF:F5:62:8A:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2e58a6dd-f3ef-3bb5-98b1-0666eedb05a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:8a:25:57:ab:3d:ec:05:b0:1a:4f:77:18:48:1d:85:da:f4: b0:74:e2:d1:16:c0:2d:ba:57:5b:2d:77:4e:eb:6d:a4:9b:62: 56:98:68:32:c0:c4:6f:d2:a9:2d:5b:83:0e:cc:a4:14:a0:a8: 27:b1:ee:4d:2b:78:fd:3c:be:df:76:51:ff:68:c8:c9:e4:77: 67:8f:45:28:79:ff:0f:c9:05:0c:c4:8f:a8:a5:a3:a1:1b:21: b4:fc:c7:fa:d3:79:18:05:24:23:24:2d:bb:cb:4d:6f:bd:01: a9:3f:de:81:3e:58:ab:11:ad:d1:db:02:63:10:4b:a8:8b:74: 12:19:7d:95:50:16:ea:dd:b2:34:f7:05:d9:bf:69:38:8e:04: 59:b0:47:20:e9:a6:d0:54:85:eb:e9:61:36:7c:a3:3e:01:1b: fe:d5:f1:72:8f:99:9d:3e:c8:11:ec:42:ab:c3:9e:bf:c3:1f: fe:b9:58:dd:20:4f:7f:ae:e5:8b:73:cc:b4:7a:be:55:1c:c5: 01:46:c0:5e:f8:3f:9f:79:01:46:c1:5d:1c:0b:22:58:59:2c: 86:b3:35:9d:83:fb:1d:09:17:4b:40:12:b9:97:92:63:a4:13: 39:46:b1:13:ed:b4:02:13:72:e1:29:cb:d3:da:99:84:a2:c4: 36:af:38:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TL0SQoY7MDPNxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk OTlhMmQzYWUtYzUyMi00YWQyLTkwMTUtMzJjYjczZGYyNTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl41lhuJG94D3qy3MrO0vk+K31XxaL+3+LFxT lHm6S6pMwFOg0itv0dG4o3oOT0FbfwmppgnGq+U77Jj6Bi73RTtbyT27peRpwHPb IbzBdYJJt3OdBmhR5HlLdL125Pgf1PinnLFSMiGgM2MhI0esoaIocijQfaGWAfGY xNdIh0lUmgahdiTqE+q0Qd1NBc7/ePdfcAUx3fcANzeq5hP8nG0K1kNKqnuuBACe 7Ba3LcQnMJthX6J22bBqRiTeP3+cqGCrRCq7cAuovlAPkS6UnMTRliQhUXNPT4vX HdjN/mnwlOKyDPl+Gdo4/sN1YXa67qnGz9EeebWzJTJiiEjxMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1Dm2Cd1+COh2juJLoRi9/1YoqmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmU1OGE2ZGQtZjNlZi0z YmI1LTk4YjEtMDY2NmVlZGIwNWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEf4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADeKJVerPewFsBpPdxhIHYXa9LB04tEWwC26V1std07rbaSbYlaYaDLA xG/SqS1bgw7MpBSgqCex7k0reP08vt92Uf9oyMnkd2ePRSh5/w/JBQzEj6ilo6Eb IbT8x/rTeRgFJCMkLbvLTW+9Aak/3oE+WKsRrdHbAmMQS6iLdBIZfZVQFurdsjT3 Bdm/aTiOBFmwRyDpptBUhevpYTZ8oz4BG/7V8XKPmZ0+yBHsQqvDnr/DH/65WN0g T3+u5YtzzLR6vlUcxQFGwF74P595AUbBXRwLIlhZLIazNZ2D+x0JF0tAErmXkmOk EzlGsRPttAITcuEpy9PamYSixDavODo= -----END CERTIFICATE-----Generated at Tue Sep 22 11:24:52 2026 by rpki-client