$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4a049109-1909-343e-9aef-165682149a8a.roa File: 4a049109-1909-343e-9aef-165682149a8a.roa (raw, json) Hash identifier: uSEh6IvnRVDBjHZKCqA3zPV6Z21NLLnyl4dXS5OBO+o= Subject key identifier: B6:C7:AB:1B:9B:63:63:85:6E:F9:CE:03:3F:71:21:C4:1B:CF:ED:0E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EF44CC60F7BD39F0EE90F9D80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4a049109-1909-343e-9aef-165682149a8a.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 172.71.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:c6:0f:7b:d3:9f:0e:e9:0f:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=3ca4c769-616f-4d59-b047-ecf98909b7a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:66:4f:12:ae:85:f5:e7:8e:33:fb:61:4d:f8: 5d:db:c1:41:a2:25:f0:fb:05:e7:9b:26:c3:d4:7a: c9:bd:0b:ca:bc:7b:7c:23:b0:0c:d1:22:de:29:0b: 94:fb:bf:46:07:12:6e:57:84:2e:68:d4:f4:52:f9: 7d:2f:70:85:cf:2a:cc:cc:66:6b:3f:de:b6:bf:1c: 92:01:32:92:31:87:b1:7b:79:ab:83:ec:21:7e:0d: b2:c9:1e:f5:4f:3f:82:a5:23:1b:83:ed:f4:b8:e1: dc:88:99:ca:62:60:61:63:59:58:b8:83:15:78:34: 85:67:9a:c6:7b:f4:a3:41:7a:2c:40:82:f0:0a:55: 40:24:d4:32:ad:7b:68:41:cd:c9:53:5c:7b:ae:a0: 49:e0:29:1a:93:e4:3e:e0:19:b0:9e:e5:42:2e:d5: a0:29:2e:17:14:2f:9a:06:cf:99:e0:bf:3a:ab:ad: 3d:bb:c0:4f:76:66:07:a0:26:ba:a1:f6:7b:61:54: 1e:0b:96:0e:6c:a4:f0:77:39:c4:3d:35:54:5e:45: 2b:d4:51:b0:c5:c1:ec:72:d2:bf:9c:9d:da:2d:dc: f5:c2:1c:b4:55:76:04:40:5d:91:3f:10:98:f0:11: 92:39:c8:50:42:fe:7d:d4:b9:21:0e:f9:db:71:0b: c8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:C7:AB:1B:9B:63:63:85:6E:F9:CE:03:3F:71:21:C4:1B:CF:ED:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4a049109-1909-343e-9aef-165682149a8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:3c:0b:d6:02:d7:43:4a:a1:fe:74:4c:37:6f:e5:aa:ce:18: 44:0e:1b:69:11:17:76:10:39:94:8a:86:f2:d2:3f:09:dd:4b: 34:6e:1d:f8:df:8a:53:a5:c9:91:81:fd:be:3b:c2:2f:ed:e6: 1d:78:7c:96:e5:8a:e5:b6:85:2a:d9:5a:ae:b8:ca:74:17:09: fe:ef:29:80:19:34:96:51:9b:8c:5a:c6:bb:80:c1:ed:d5:7c: 21:6f:04:63:2a:5f:16:0c:ff:ae:02:1b:8c:1f:01:91:bc:ac: c1:e0:63:68:7e:d1:96:be:85:c9:53:27:6f:c4:3a:89:59:3e: a2:ae:29:bf:95:00:f2:ea:db:55:64:0b:43:37:2c:3f:f6:3c: 68:ff:a0:49:51:f4:ca:bf:bb:65:f8:86:ee:f2:6f:4c:bd:01: 67:9e:fd:d3:a2:a9:37:e5:0a:18:ad:e1:0f:e1:f5:ca:9a:7d: 75:43:28:4b:f4:4d:f4:04:c3:ab:5b:96:8c:ac:b3:f5:f6:33: e4:75:07:85:fc:85:6c:db:6b:5c:d8:9e:1c:15:a1:e4:55:17: 8e:66:10:4b:74:be:3b:de:b6:2b:82:2a:6a:5b:80:66:8f:03: 67:9c:59:85:b8:69:d3:71:10:92:8f:89:73:50:45:86:a2:4b: d4:0c:c9:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TMYPe9OfDukPnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk M2NhNGM3NjktNjE2Zi00ZDU5LWIwNDctZWNmOTg5MDliN2E3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GZPEq6F9eeOM/thTfhd28FBoiXw+wXnmybD 1HrJvQvKvHt8I7AM0SLeKQuU+79GBxJuV4QuaNT0Uvl9L3CFzyrMzGZrP962vxyS ATKSMYexe3mrg+whfg2yyR71Tz+CpSMbg+30uOHciJnKYmBhY1lYuIMVeDSFZ5rG e/SjQXosQILwClVAJNQyrXtoQc3JU1x7rqBJ4Ckak+Q+4BmwnuVCLtWgKS4XFC+a Bs+Z4L86q609u8BPdmYHoCa6ofZ7YVQeC5YObKTwdznEPTVUXkUr1FGwxcHsctK/ nJ3aLdz1why0VXYEQF2RPxCY8BGSOchQQv591LkhDvnbcQvI4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLbHqxubY2OFbvnOAz9xIcQbz+0OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNGEwNDkxMDktMTkwOS0z NDNlLTlhZWYtMTY1NjgyMTQ5YThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEf2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHs8C9YC10NKof50TDdv5arOGEQOG2kRF3YQOZSKhvLSPwndSzRuHfjf ilOlyZGB/b47wi/t5h14fJbliuW2hSrZWq64ynQXCf7vKYAZNJZRm4xaxruAwe3V fCFvBGMqXxYM/64CG4wfAZG8rMHgY2h+0Za+hclTJ2/EOolZPqKuKb+VAPLq21Vk C0M3LD/2PGj/oElR9Mq/u2X4hu7yb0y9AWee/dOiqTflChit4Q/h9cqafXVDKEv0 TfQEw6tbloyss/X2M+R1B4X8hWzba1zYnhwVoeRVF45mEEt0vjvetiuCKmpbgGaP A2ecWYW4adNxEJKPiXNQRYaiS9QMyVw= -----END CERTIFICATE-----Generated at Tue Sep 1 01:58:03 2026 by rpki-client