$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3704f71e-de46-3936-8afa-b59640d69979.roa File: 3704f71e-de46-3936-8afa-b59640d69979.roa (raw, json) Hash identifier: BsObLjl3YTx4dTOIfxzqpRhjEh+BGEFwTSSUyBGQm+I= Subject key identifier: F0:99:82:5A:4C:6D:7C:05:E7:CE:88:16:CD:29:23:79:14:07:BF:23 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EEA876DCE9740F284B6BEB000 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3704f71e-de46-3936-8afa-b59640d69979.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 172.70.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:6d:ce:97:40:f2:84:b6:be:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=29ccf1e7-f145-4e44-a82c-fae80559d8ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6b:ce:25:aa:4e:e1:b3:fd:f0:1c:82:80:fc: 76:78:e3:e8:24:0b:88:f6:8a:74:88:96:f7:d6:bc: a8:0b:e2:90:8f:9f:1d:67:d0:49:0f:0a:25:de:25: 0f:15:4a:93:f5:8a:d2:0b:92:c3:82:81:a8:fc:3a: 1c:33:8c:80:4c:8d:a4:f1:a2:9b:3f:08:61:4c:9b: c3:7f:54:df:dd:52:56:6e:0e:9a:18:e0:18:70:e9: 20:98:fc:bc:8a:dd:e0:7a:91:62:8c:ec:90:f0:4a: 64:6a:f9:bc:79:ac:22:15:35:47:6e:1e:8c:bd:ac: 7c:d7:e4:0e:21:18:22:26:d2:d8:c6:5e:5b:81:88: 61:a0:37:a0:84:88:8c:d3:7e:40:ef:53:fb:c8:26: bf:3d:9c:b2:f0:41:1f:e9:3c:85:95:f5:c3:d4:27: 6e:a9:a7:b4:fd:36:8d:b4:1b:d2:2c:08:c8:72:89: 22:ae:09:13:08:fb:c7:7d:c1:9c:61:a3:ec:5b:4f: 33:8c:8d:68:0c:64:cc:34:e2:d5:c2:54:e6:f5:fd: 5f:c5:e8:1b:71:59:86:ac:ea:bb:cf:f2:89:07:5c: 30:87:5d:d3:53:1e:07:09:c5:f7:72:17:6c:d5:9c: fb:38:1c:57:9a:bc:8e:d4:26:d6:c2:5d:d6:c5:63: c9:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:99:82:5A:4C:6D:7C:05:E7:CE:88:16:CD:29:23:79:14:07:BF:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3704f71e-de46-3936-8afa-b59640d69979.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:5b:45:f6:37:9c:f1:10:b2:ed:c5:b0:41:04:9b:de:1d:df: 00:17:4a:ec:c5:6f:20:a1:03:a2:e8:e7:2c:9d:af:a6:22:6a: 20:4b:6b:d0:b2:25:2a:25:d7:8a:30:8d:14:66:ef:10:20:10: c5:3c:db:7b:6b:1a:ff:79:aa:e1:a7:af:a6:35:4e:30:cb:0b: 26:4f:47:a2:e1:26:d8:a5:cc:54:8d:dd:c1:8f:db:73:f2:d5: c6:ef:1d:8d:89:26:d3:0e:da:80:45:68:b9:b1:f8:ff:82:b7: 7d:ac:9d:58:2a:87:22:07:93:ff:9a:b3:a9:fa:53:0b:e2:77: ce:40:c6:d9:6d:49:fd:7a:f2:dd:c1:66:7f:a2:31:e9:00:7a: 9e:44:25:bf:af:a3:57:2f:8f:ea:f1:a4:be:21:02:4e:e2:e3: 06:2c:e0:c5:51:a0:27:86:25:ee:d3:c9:95:13:ce:0f:4e:9c: 5d:26:13:81:a8:a5:e0:d1:40:81:63:bf:d6:7f:38:f0:6d:95: 32:af:49:be:47:c5:c1:07:4a:4e:12:3c:7f:ae:7a:2e:94:4c: f7:87:7a:01:e5:61:34:e7:e6:93:61:55:c6:80:ad:d3:43:de: 75:89:38:03:3f:ab:a8:c5:fb:fb:e9:fb:1a:89:db:25:8b:81: c7:03:b0:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh23Ol0DyhLa+sAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk MjljY2YxZTctZjE0NS00ZTQ0LWE4MmMtZmFlODA1NTlkOGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2vOJapO4bP98ByCgPx2eOPoJAuI9op0iJb3 1ryoC+KQj58dZ9BJDwol3iUPFUqT9YrSC5LDgoGo/DocM4yATI2k8aKbPwhhTJvD f1Tf3VJWbg6aGOAYcOkgmPy8it3gepFijOyQ8Epkavm8eawiFTVHbh6Mvax81+QO IRgiJtLYxl5bgYhhoDeghIiM035A71P7yCa/PZyy8EEf6TyFlfXD1Cduqae0/TaN tBvSLAjIcokirgkTCPvHfcGcYaPsW08zjI1oDGTMNOLVwlTm9f1fxegbcVmGrOq7 z/KJB1wwh13TUx4HCcX3chds1Zz7OBxXmryO1CbWwl3WxWPJhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPCZglpMbXwF586IFs0pI3kUB78jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzcwNGY3MWUtZGU0Ni0z OTM2LThhZmEtYjU5NjQwZDY5OTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEYrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAItbRfY3nPEQsu3FsEEEm94d3wAXSuzFbyChA6Lo5yydr6YiaiBLa9Cy JSol14owjRRm7xAgEMU823trGv95quGnr6Y1TjDLCyZPR6LhJtilzFSN3cGP23Py 1cbvHY2JJtMO2oBFaLmx+P+Ct32snVgqhyIHk/+as6n6Uwvid85AxtltSf168t3B Zn+iMekAep5EJb+vo1cvj+rxpL4hAk7i4wYs4MVRoCeGJe7TyZUTzg9OnF0mE4Go peDRQIFjv9Z/OPBtlTKvSb5HxcEHSk4SPH+uei6UTPeHegHlYTTn5pNhVcaArdND 3nWJOAM/q6jF+/vp+xqJ2yWLgccDsEU= -----END CERTIFICATE-----Generated at Sat Sep 26 11:46:01 2026 by rpki-client