$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/36a28eda-404c-3721-ad64-936664d3cc28.roa File: 36a28eda-404c-3721-ad64-936664d3cc28.roa (raw, json) Hash identifier: vrOxezSJVDCfqf1C8gBiEgjZ7NSgGgFItELedIiQkZU= Subject key identifier: BD:7A:36:22:0F:50:2D:D7:AF:7F:FB:00:05:6C:CC:61:12:F3:A0:8B Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EF44CC4B7CBCF95001A7B6780 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/36a28eda-404c-3721-ad64-936664d3cc28.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 172.71.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:c4:b7:cb:cf:95:00:1a:7b:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=19eb5c70-2167-421e-82f7-f9356df6a9e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:30:a9:8e:4b:77:6a:42:3b:6f:cb:62:91:b9: b2:c9:06:78:f7:5a:f3:4e:6a:5a:0d:02:2d:36:33: 34:ac:b8:1e:7c:bb:65:56:aa:3a:76:30:82:18:39: 4e:b5:a6:a0:23:43:83:59:0e:00:fe:93:aa:d8:a5: 7c:6b:a0:0b:bf:da:92:56:27:3d:7f:f9:d2:e4:58: a6:87:92:71:f4:2e:06:53:3f:c1:f3:a6:6e:3c:65: 5e:f3:85:5f:8f:e5:67:1d:d6:60:d7:28:38:cc:73: 0e:1d:bd:0a:c3:f5:80:19:fb:fd:07:ab:32:55:c9: 8a:8c:41:09:11:67:09:0a:87:a8:fe:7d:2f:a0:a2: a2:5c:15:6f:8f:f8:53:fb:34:25:09:6b:a1:80:76: ce:8a:2e:30:2b:03:30:66:29:9a:77:3b:b9:9f:7e: 81:d3:ec:c1:dc:43:56:15:e5:20:8e:65:cb:cd:aa: 0e:76:1b:4e:fb:30:cc:14:24:6d:94:bb:ff:04:b0: fd:b4:66:56:2d:37:21:de:20:ee:46:28:13:79:48: 1a:a2:9f:37:a2:09:67:5c:66:cc:5f:43:59:14:b4: 10:ec:05:63:a3:5e:b8:8f:31:29:06:d7:46:0d:5d: 89:50:f6:f8:69:b2:26:cd:65:02:f0:b1:d1:a1:e8: 04:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:7A:36:22:0F:50:2D:D7:AF:7F:FB:00:05:6C:CC:61:12:F3:A0:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/36a28eda-404c-3721-ad64-936664d3cc28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:12:c6:63:ec:81:f3:d5:7e:57:70:4f:e5:8b:eb:4d:e5:67: bf:4f:e0:c6:fe:75:f9:d9:5a:02:d9:36:0e:42:2a:2b:93:d5: 92:10:78:2c:1f:02:d8:fa:d5:3f:b4:ea:c2:97:75:cb:5e:b3: f2:d6:3e:13:be:e5:36:63:e6:72:3e:c0:f2:0b:67:59:e7:b1: 89:e3:3b:41:56:51:46:8f:ec:29:8c:b0:ee:40:5b:d0:b3:ee: 92:ee:27:7b:25:52:b8:e9:d1:eb:81:68:74:6f:fe:1a:38:66: 3c:41:db:9d:6a:0b:1f:d7:63:8f:2f:30:e7:6c:ab:a4:b0:75: a0:21:6a:d6:06:a8:d4:10:5f:1a:7f:0e:ea:a8:3a:ad:57:40: 00:cb:0e:3d:36:9f:41:38:eb:31:61:91:f2:88:31:9e:28:bf: 67:34:02:e0:da:06:bc:35:d2:1d:88:6c:51:9a:7a:a3:90:71: 7a:66:29:7d:2a:1b:06:ea:4a:d6:19:f4:69:58:eb:36:4f:bd: 60:f8:4e:fb:3a:f8:95:21:7c:a2:a2:03:7a:c8:74:5a:a9:f3: f8:a4:cb:b0:0b:44:69:bd:f8:2c:4a:ab:ec:90:0e:64:b5:18: 8c:45:58:17:45:c8:07:17:6b:6d:46:dc:fb:21:4f:7e:eb:23: 58:c4:66:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TMS3y8+VABp7Z4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk MTllYjVjNzAtMjE2Ny00MjFlLTgyZjctZjkzNTZkZjZhOWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTCpjkt3akI7b8tikbmyyQZ491rzTmpaDQIt NjM0rLgefLtlVqo6djCCGDlOtaagI0ODWQ4A/pOq2KV8a6ALv9qSVic9f/nS5Fim h5Jx9C4GUz/B86ZuPGVe84Vfj+VnHdZg1yg4zHMOHb0Kw/WAGfv9B6syVcmKjEEJ EWcJCoeo/n0voKKiXBVvj/hT+zQlCWuhgHbOii4wKwMwZimadzu5n36B0+zB3ENW FeUgjmXLzaoOdhtO+zDMFCRtlLv/BLD9tGZWLTch3iDuRigTeUgaop83oglnXGbM X0NZFLQQ7AVjo164jzEpBtdGDV2JUPb4abImzWUC8LHRoegEtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL16NiIPUC3Xr3/7AAVszGES86CLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzZhMjhlZGEtNDA0Yy0z NzIxLWFkNjQtOTM2NjY0ZDNjYzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEd0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMSxmPsgfPVfldwT+WL603lZ79P4Mb+dfnZWgLZNg5CKiuT1ZIQeCwf Atj61T+06sKXdctes/LWPhO+5TZj5nI+wPILZ1nnsYnjO0FWUUaP7CmMsO5AW9Cz 7pLuJ3slUrjp0euBaHRv/ho4ZjxB251qCx/XY48vMOdsq6SwdaAhatYGqNQQXxp/ DuqoOq1XQADLDj02n0E46zFhkfKIMZ4ov2c0AuDaBrw10h2IbFGaeqOQcXpmKX0q GwbqStYZ9GlY6zZPvWD4Tvs6+JUhfKKiA3rIdFqp8/iky7ALRGm9+CxKq+yQDmS1 GIxFWBdFyAcXa21G3PshT37rI1jEZgw= -----END CERTIFICATE-----Generated at Tue Sep 1 02:10:31 2026 by rpki-client