$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/38c48ef1-9ffd-3804-a807-2f8543ef3a35.roa File: 38c48ef1-9ffd-3804-a807-2f8543ef3a35.roa (raw, json) Hash identifier: 2Ax742b+Hf+6uz9djrfaZdR5cT09+nK4O/WlSXDv82Q= Subject key identifier: 6D:48:29:CA:28:13:76:2D:1B:5E:B2:27:5A:9E:53:BD:4B:E3:2D:BD Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EF44CBA059A61252D281D6BE0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/38c48ef1-9ffd-3804-a807-2f8543ef3a35.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 172.71.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:ba:05:9a:61:25:2d:28:1d:6b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=3b26f891-56e0-40ca-8396-8d05f66656d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7d:c4:d7:c9:1d:59:67:4e:77:ae:52:44:e6: 6a:8c:8c:23:1b:26:7b:e9:71:71:a5:d0:7a:46:cd: bb:e6:11:76:d9:8d:69:89:5e:a3:6e:c6:3f:93:f5: 2c:7d:49:40:6e:53:7d:2f:13:70:c7:4c:7f:5b:9c: c6:cb:70:0c:34:60:98:01:e4:26:2f:ba:55:23:b8: ee:28:35:b5:17:6a:50:38:9b:b8:a4:c2:a1:c8:cf: 82:ca:40:06:79:b8:0e:64:0b:bc:4c:64:73:94:aa: 71:56:46:29:29:32:4d:5c:6f:7a:37:35:f5:7b:75: b6:54:b0:d9:70:54:9b:48:0b:31:09:47:47:d2:bb: 0a:b5:bf:25:9d:4f:31:16:e0:f5:b1:8d:5b:8c:5e: 61:6c:3f:e8:e5:5d:05:98:c9:a4:95:47:ab:3f:14: e7:1b:69:88:e8:b3:c5:81:36:e6:a9:77:32:e2:bb: 04:24:7f:87:29:c9:f5:e6:61:9c:28:3e:7f:a2:9e: a8:e9:f3:6e:dc:37:4c:cb:23:6b:a4:dc:f1:62:50: c0:b9:0d:d7:9a:32:3a:2b:86:3a:63:95:60:a6:ee: 4a:74:a4:e8:94:57:63:bd:6e:aa:0b:91:c5:24:6b: ef:b0:98:c7:eb:59:f6:41:7e:96:ad:42:ca:70:ac: fb:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:48:29:CA:28:13:76:2D:1B:5E:B2:27:5A:9E:53:BD:4B:E3:2D:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/38c48ef1-9ffd-3804-a807-2f8543ef3a35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:16:01:57:84:40:41:c1:65:2d:2e:a1:d3:00:72:d2:0e:f3: 24:ad:fb:60:21:de:30:34:ab:4e:c7:85:d9:14:25:0c:ad:8f: 0d:02:0f:de:7e:13:57:cd:49:e1:57:c1:50:da:b8:3d:e9:16: c7:98:df:db:05:5c:10:82:1f:67:f7:91:ff:df:c5:c4:0c:f7: e3:fd:f1:46:3c:92:ca:d1:e5:90:9a:b3:aa:9c:45:2e:b5:39: 92:c1:98:9b:19:28:8b:92:23:63:95:c5:0c:48:bf:43:a2:96: 14:4e:da:67:c1:2e:69:63:24:0c:6f:ad:d3:1d:1b:33:7a:68: eb:d7:75:39:e2:87:65:44:98:d9:e7:a9:03:f8:0f:68:81:b1: 4f:eb:e2:7c:83:2a:19:df:0b:18:c8:0b:bd:a3:c9:f4:90:a5: 27:6f:7b:16:cc:69:0a:8d:1e:de:f8:7a:10:77:be:5a:2f:50: 40:26:cf:4e:94:6d:ec:4a:0c:63:75:15:12:65:97:8f:84:ee: e3:cc:a7:8e:43:69:d7:50:3f:98:cc:6e:fc:a8:63:fe:a5:2a: 88:d5:ed:0d:3d:da:0e:f9:a6:29:bb:b9:c6:8c:c4:06:db:72: e4:91:84:7a:cf:b5:f7:2a:b0:78:8d:99:9c:6b:e4:be:24:8a: 3e:20:93:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TLoFmmElLSgda+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk M2IyNmY4OTEtNTZlMC00MGNhLTgzOTYtOGQwNWY2NjY1NmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtn3E18kdWWdOd65SROZqjIwjGyZ76XFxpdB6 Rs275hF22Y1piV6jbsY/k/UsfUlAblN9LxNwx0x/W5zGy3AMNGCYAeQmL7pVI7ju KDW1F2pQOJu4pMKhyM+CykAGebgOZAu8TGRzlKpxVkYpKTJNXG96NzX1e3W2VLDZ cFSbSAsxCUdH0rsKtb8lnU8xFuD1sY1bjF5hbD/o5V0FmMmklUerPxTnG2mI6LPF gTbmqXcy4rsEJH+HKcn15mGcKD5/op6o6fNu3DdMyyNrpNzxYlDAuQ3XmjI6K4Y6 Y5Vgpu5KdKTolFdjvW6qC5HFJGvvsJjH61n2QX6WrULKcKz70wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG1IKcooE3YtG16yJ1qeU71L4y29MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzhjNDhlZjEtOWZmZC0z ODA0LWE4MDctMmY4NTQzZWYzYTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEcEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUWAVeEQEHBZS0uodMActIO8ySt+2Ah3jA0q07HhdkUJQytjw0CD95+ E1fNSeFXwVDauD3pFseY39sFXBCCH2f3kf/fxcQM9+P98UY8ksrR5ZCas6qcRS61 OZLBmJsZKIuSI2OVxQxIv0OilhRO2mfBLmljJAxvrdMdGzN6aOvXdTnih2VEmNnn qQP4D2iBsU/r4nyDKhnfCxjIC72jyfSQpSdvexbMaQqNHt74ehB3vlovUEAmz06U bexKDGN1FRJll4+E7uPMp45DaddQP5jMbvyoY/6lKojV7Q092g75pim7ucaMxAbb cuSRhHrPtfcqsHiNmZxr5L4kij4gk+4= -----END CERTIFICATE-----Generated at Tue Sep 1 02:10:28 2026 by rpki-client